This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/85ZDkvV27zsU289hhfeicqRz7YM.roa File: 85ZDkvV27zsU289hhfeicqRz7YM.roa (raw, json) Hash identifier: hs3/n5aTK0O/XxDmOasr9J/rMA/LRYR01VvTuYyNK84= Subject key identifier: F3:96:43:92:F5:76:EF:3B:14:DB:CF:61:85:F7:A2:72:A4:73:ED:83 Certificate issuer: /CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29 Certificate serial: 019ABF2F3CDE644B3ADC615981C991639452 Authority key identifier: F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/85ZDkvV27zsU289hhfeicqRz7YM.roa Signing time: Wed 26 Nov 2025 08:02:15 +0000 ROA not before: Wed 26 Nov 2025 08:02:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212136 IP address blocks: 5.172.178.0/24 maxlen: 24 5.181.12.0/24 maxlen: 24 81.22.46.0/24 maxlen: 24 81.22.47.0/24 maxlen: 24 91.214.116.0/24 maxlen: 24 176.56.32.0/24 maxlen: 24 176.111.174.0/24 maxlen: 24 185.122.204.0/24 maxlen: 24 185.228.248.0/24 maxlen: 24 185.247.187.0/24 maxlen: 24 194.31.9.0/24 maxlen: 24 213.232.254.0/24 maxlen: 24 2a10:aa80::/30 maxlen: 30 2a10:aa84::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:2f:3c:de:64:4b:3a:dc:61:59:81:c9:91:63:94:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29 Validity Not Before: Nov 26 08:02:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f3964392f576ef3b14dbcf6185f7a272a473ed83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cc:28:86:99:d6:af:02:d5:5b:4a:90:a2:09: 7e:49:58:70:6d:a9:57:2f:88:de:4d:9d:46:c5:c4: 27:a1:73:65:ba:ed:5d:45:21:35:44:d3:17:f8:72: 10:23:b9:70:66:80:da:36:b9:e5:7d:d6:cd:e2:49: 6c:d2:64:63:8c:ad:13:1c:fc:18:74:c3:5f:47:be: 99:a9:10:0c:99:58:67:32:7c:66:5c:35:f3:c4:4c: c6:aa:63:60:d0:15:ef:af:a6:44:1a:e3:7a:b5:55: 5c:72:e6:5a:e6:fc:fd:17:e7:78:b0:8e:da:2f:10: c7:4d:9f:b3:d7:7f:42:27:ca:99:92:3a:0f:85:d3: 5f:42:45:19:3e:80:39:89:a9:03:94:d0:5c:b5:6d: f6:e1:bb:49:ed:93:f4:21:eb:24:8c:24:25:29:69: ce:5f:4a:06:b7:be:a7:7d:69:c5:0c:b2:5b:59:12: b9:a1:ad:da:20:e1:b4:53:29:4b:01:44:29:cb:10: 6b:c6:e0:cf:b3:49:47:cf:d3:51:27:c6:ce:99:1d: f2:08:2f:39:9b:94:d4:aa:80:05:7c:9d:4e:ac:b3: 0b:61:fb:eb:9c:67:c5:60:6a:12:2e:35:e2:8a:b8: a6:40:df:a6:50:b0:a4:98:f4:77:c5:92:d2:d1:88: a2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:96:43:92:F5:76:EF:3B:14:DB:CF:61:85:F7:A2:72:A4:73:ED:83 X509v3 Authority Key Identifier: keyid:F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/85ZDkvV27zsU289hhfeicqRz7YM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.172.178.0/24 5.181.12.0/24 81.22.46.0/23 91.214.116.0/24 176.56.32.0/24 176.111.174.0/24 185.122.204.0/24 185.228.248.0/24 185.247.187.0/24 194.31.9.0/24 213.232.254.0/24 IPv6: 2a10:aa80::/29 Signature Algorithm: sha256WithRSAEncryption 14:c2:da:2a:01:f0:19:b2:85:17:32:1a:de:b3:c5:af:da:9f: bc:61:70:84:ec:ed:33:2c:ec:57:6c:0e:f4:a9:ac:4f:37:7b: 6a:e5:26:da:f4:f9:21:d5:46:7a:e7:52:95:d9:9d:c0:06:0d: 5e:08:cd:60:4f:77:a1:b5:cd:95:2d:83:1b:af:2f:8a:43:65: f0:4f:1b:ae:5a:91:7b:90:91:35:32:70:ac:12:20:59:d6:07: 0c:36:8d:3b:cc:01:8a:49:3a:a3:f0:85:75:be:8a:36:be:19: 4d:22:3c:02:18:99:f0:cd:c9:ee:12:d4:2b:bb:c6:3b:06:14: ac:00:80:44:83:74:b1:08:a1:25:79:b5:b7:89:d8:f6:e9:2a: 4e:ce:84:d3:9d:d2:6f:35:13:d0:46:33:31:af:bc:3e:db:7a: 10:6b:ce:f6:8c:2b:a7:36:f9:4f:35:f0:f1:1c:c4:29:f0:41: db:72:d8:b2:c6:22:5b:83:2e:4a:85:5c:08:0d:75:60:35:d5: 3d:7d:10:b1:b5:59:b6:48:0f:21:17:fc:7b:59:56:eb:8a:83: ff:a3:66:1d:0d:1f:a4:24:79:ed:24:66:13:c0:60:34:b7:c1: 55:b2:0b:2e:ed:7a:cc:fc:92:c6:ac:03:1e:83:8e:31:de:0f: da:47:91:76 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISAZq/LzzeZEs63GFZgcmRY5RSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YzZiN2RkNTE3NWJlOGRiN2EwNTIyZjdkNGU0MWM1YzQy YzZiMjkwHhcNMjUxMTI2MDgwMjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzk2NDM5MmY1NzZlZjNiMTRkYmNmNjE4NWY3YTI3MmE0NzNlZDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8wohpnWrwLVW0qQogl+SVhwbalX L4jeTZ1GxcQnoXNluu1dRSE1RNMX+HIQI7lwZoDaNrnlfdbN4kls0mRjjK0THPwY dMNfR76ZqRAMmVhnMnxmXDXzxEzGqmNg0BXvr6ZEGuN6tVVccuZa5vz9F+d4sI7a LxDHTZ+z139CJ8qZkjoPhdNfQkUZPoA5iakDlNBctW324btJ7ZP0IeskjCQlKWnO X0oGt76nfWnFDLJbWRK5oa3aIOG0UylLAUQpyxBrxuDPs0lHz9NRJ8bOmR3yCC85 m5TUqoAFfJ1OrLMLYfvrnGfFYGoSLjXiirimQN+mULCkmPR3xZLS0YiiHwIDAQAB o4ICVDCCAlAwHQYDVR0OBBYEFPOWQ5L1du87FNvPYYX3onKkc+2DMB8GA1UdIwQY MBaAFPTGt91Rdb6Nt6BSL31OQcXELGspMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU1hMzNWRjF2bzIzb0ZJdmZVNUJ4Y1FzYXlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNWY3MTQtNDcyYy00ODU2LWFhNGIt OWIyMWI2ZjY2NzlhLzEvODVaRGt2VjI3enNVMjg5aGhmZWljcVJ6N1lNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9jNWY3MTQtNDcyYy00ODU2LWFhNGItOWIyMWI2ZjY2Nzlh LzEvOU1hMzNWRjF2bzIzb0ZJdmZVNUJ4Y1FzYXlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQABayyAwQA BbUMAwQBURYuAwQAW9Z0AwQAsDggAwQAsG+uAwQAuXrMAwQAueT4AwQAufe7AwQA wh8JAwQA1ej+MA0EAgACMAcDBQMqEKqAMA0GCSqGSIb3DQEBCwUAA4IBAQAUwtoq AfAZsoUXMhres8Wv2p+8YXCE7O0zLOxXbA70qaxPN3tq5Sba9Pkh1UZ651KV2Z3A Bg1eCM1gT3ehtc2VLYMbry+KQ2XwTxuuWpF7kJE1MnCsEiBZ1gcMNo07zAGKSTqj 8IV1voo2vhlNIjwCGJnwzcnuEtQru8Y7BhSsAIBEg3SxCKElebW3idj26SpOzoTT ndJvNRPQRjMxr7w+23oQa872jCunNvlPNfDxHMQp8EHbctiyxiJbgy5KhVwIDXVg NdU9fRCxtVm2SA8hF/x7WVbrioP/o2YdDR+kJHntJGYTwGA0t8FVsgsu7XrM/JLG rAMeg44x3g/aR5F2 -----END CERTIFICATE-----Generated at Sat Dec 6 11:34:49 2025 by rpki-client