This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/sYNq23EbdC4t0IdwpQDOgH5L4bA.roa File: sYNq23EbdC4t0IdwpQDOgH5L4bA.roa (raw, json) Hash identifier: 0lkFdLqNWcSIUxzZEBi9m/kq7AF/EimUAe9h4IymUms= Subject key identifier: B1:83:6A:DB:71:1B:74:2E:2D:D0:87:70:A5:00:CE:80:7E:4B:E1:B0 Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e Certificate serial: 019AEFCFE2712DE67EAF35F07DCD69DF0191 Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/sYNq23EbdC4t0IdwpQDOgH5L4bA.roa Signing time: Fri 05 Dec 2025 18:39:29 +0000 ROA not before: Fri 05 Dec 2025 18:39:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21100 IP address blocks: 5.34.180.0/23 maxlen: 23 46.28.65.0/24 maxlen: 24 46.28.66.0/24 maxlen: 24 46.28.68.0/24 maxlen: 24 46.28.69.0/24 maxlen: 24 82.118.16.0/24 maxlen: 24 82.118.19.0/24 maxlen: 24 185.14.28.0/22 maxlen: 22 195.123.216.0/21 maxlen: 21 217.12.200.0/23 maxlen: 23 217.12.208.0/23 maxlen: 23 217.12.218.0/24 maxlen: 24 217.12.219.0/24 maxlen: 24 217.12.220.0/24 maxlen: 24 2a02:27a9::/32 maxlen: 32 2a02:27ab::/32 maxlen: 32 2a02:27ae::/32 maxlen: 32 2a02:27af::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:cf:e2:71:2d:e6:7e:af:35:f0:7d:cd:69:df:01:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e Validity Not Before: Dec 5 18:39:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b1836adb711b742e2dd08770a500ce807e4be1b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ba:56:7f:10:84:d8:9a:9b:87:33:69:df:fb: 8a:e3:34:fe:8f:03:0a:e9:c9:7b:7f:26:28:d6:0d: 92:34:e9:33:5f:e4:5a:bd:fb:bb:91:bb:05:f1:ce: a2:3e:03:c8:4b:1d:d7:80:78:13:5c:a2:3e:eb:ed: 09:ad:c0:45:44:61:f4:45:d1:35:48:02:ec:68:4c: c8:98:e8:64:85:29:7b:df:26:7d:02:55:a0:06:f7: d9:7e:a3:4f:bf:5f:0d:66:08:99:7f:33:31:03:4a: 45:75:7b:f5:af:67:e8:56:72:eb:4c:d6:fa:d4:53: cc:01:d1:8f:9c:22:d8:62:e3:ba:d8:f7:65:52:0b: fc:d9:d5:ff:2e:35:c4:27:ed:fd:46:04:a3:37:37: 40:10:40:5d:d7:6d:a2:a9:dc:d9:62:22:4b:0c:94: f1:7d:dd:26:78:d0:c6:d4:b7:57:62:6f:fa:d7:39: 61:db:38:e2:5c:1b:9e:33:32:a5:ba:93:54:f8:8f: fd:5c:0a:bc:2a:82:08:25:5c:7b:b1:78:af:c8:56: 33:d9:2e:06:ed:c5:92:90:26:b3:27:c7:2b:6f:83: a8:66:16:09:7b:f4:f7:6e:7a:96:eb:4b:46:e9:2a: a7:46:ab:b8:b0:b2:25:08:7b:34:44:a5:3f:39:60: a2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:83:6A:DB:71:1B:74:2E:2D:D0:87:70:A5:00:CE:80:7E:4B:E1:B0 X509v3 Authority Key Identifier: keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/sYNq23EbdC4t0IdwpQDOgH5L4bA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.34.180.0/23 46.28.65.0-46.28.66.255 46.28.68.0/23 82.118.16.0/24 82.118.19.0/24 185.14.28.0/22 195.123.216.0/21 217.12.200.0/23 217.12.208.0/23 217.12.218.0-217.12.220.255 IPv6: 2a02:27a9::/32 2a02:27ab::/32 2a02:27ae::/31 Signature Algorithm: sha256WithRSAEncryption 6d:72:b6:84:03:56:47:c8:cf:8a:28:a8:b2:ce:ef:72:b9:27: d5:4f:a7:d7:48:39:1d:c2:9b:97:d6:48:c0:ab:87:72:02:2f: b2:bf:4d:e8:f0:90:c1:3d:a7:f3:54:86:b5:34:e0:6d:69:25: 7f:a4:33:2c:db:5f:8b:2d:77:b1:45:1f:01:62:07:32:f5:39: 5a:86:2c:47:eb:c2:39:6a:99:86:52:af:be:14:d5:32:fd:c8: 85:1b:d6:71:b2:5a:3e:86:51:68:e2:34:18:f1:2d:69:49:5c: 18:bd:02:e5:34:c9:29:89:74:63:ef:cf:88:96:28:5b:5a:e7: c2:c1:d8:f1:00:a6:67:ee:8f:4d:ea:ed:97:72:97:ed:78:c8: 5d:f8:08:61:f0:16:90:9f:09:b9:15:63:70:2d:8d:97:a9:21: 2a:fe:ef:be:af:9c:3b:3e:ef:59:58:b3:d1:c5:01:67:92:49: af:4b:e4:45:5b:72:b9:ab:d8:7f:94:d1:41:f4:71:9c:68:bb: bb:0a:07:b7:db:de:3f:4f:66:2e:1a:95:98:56:84:f7:2f:99: 8f:fe:8c:cd:42:66:2c:6a:78:09:ff:60:ff:68:15:e0:17:2b: 0c:22:93:21:28:b8:88:86:16:c5:82:02:a1:a0:28:58:d0:3c: 0e:8c:5f:84 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgISAZrvz+JxLeZ+rzXwfc1p3wGRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZDk4ZThmZWM2ODA3NzVhMTU3MjY2ZTBjNmI3OGIxNDFh MzRmNWUwHhcNMjUxMjA1MTgzOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTgzNmFkYjcxMWI3NDJlMmRkMDg3NzBhNTAwY2U4MDdlNGJlMWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7pWfxCE2JqbhzNp3/uK4zT+jwMK 6cl7fyYo1g2SNOkzX+Ravfu7kbsF8c6iPgPISx3XgHgTXKI+6+0JrcBFRGH0RdE1 SALsaEzImOhkhSl73yZ9AlWgBvfZfqNPv18NZgiZfzMxA0pFdXv1r2foVnLrTNb6 1FPMAdGPnCLYYuO62PdlUgv82dX/LjXEJ+39RgSjNzdAEEBd122iqdzZYiJLDJTx fd0meNDG1LdXYm/61zlh2zjiXBueMzKlupNU+I/9XAq8KoIIJVx7sXivyFYz2S4G 7cWSkCazJ8crb4OoZhYJe/T3bnqW60tG6SqnRqu4sLIlCHs0RKU/OWCiOwIDAQAB o4ICbTCCAmkwHQYDVR0OBBYEFLGDattxG3QuLdCHcKUAzoB+S+GwMB8GA1UdIwQY MBaAFJTZjo/saAd1oVcmbgxreLFBo09eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzkt ODdkMTdkZjc0YzdlLzEvc1lOcTIzRWJkQzR0MElkd3BRRE9nSDVMNGJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzktODdkMTdkZjc0Yzdl LzEvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwUgQCAAEwTAMEAQUitDAM AwQALhxBAwQALhxCAwQBLhxEAwQAUnYQAwQAUnYTAwQCuQ4cAwQDw3vYAwQB2QzI AwQB2QzQMAwDBAHZDNoDBADZDNwwGwQCAAIwFQMFACoCJ6kDBQAqAierAwUBKgIn rjANBgkqhkiG9w0BAQsFAAOCAQEAbXK2hANWR8jPiiioss7vcrkn1U+n10g5HcKb l9ZIwKuHcgIvsr9N6PCQwT2n81SGtTTgbWklf6QzLNtfiy13sUUfAWIHMvU5WoYs R+vCOWqZhlKvvhTVMv3IhRvWcbJaPoZRaOI0GPEtaUlcGL0C5TTJKYl0Y+/PiJYo W1rnwsHY8QCmZ+6PTertl3KX7XjIXfgIYfAWkJ8JuRVjcC2Nl6khKv7vvq+cOz7v WViz0cUBZ5JJr0vkRVtyuavYf5TRQfRxnGi7uwoHt9veP09mLhqVmFaE9y+Zj/6M zUJmLGp4Cf9g/2gV4BcrDCKTISi4iIYWxYICoaAoWNA8DoxfhA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:16 2025 by rpki-client