This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/bMytERGSk3ewRXjdRwQ8PVzQZds.roa File: bMytERGSk3ewRXjdRwQ8PVzQZds.roa (raw, json) Hash identifier: WmkPP4JnnJ8rEGqM+pvvK2bc+N+mTYoH1ooAlYHNyas= Subject key identifier: 6C:CC:AD:11:11:92:93:77:B0:45:78:DD:47:04:3C:3D:5C:D0:65:DB Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Certificate serial: 019A52F0C8C2B95C40D9528E64D598C84A47 Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/bMytERGSk3ewRXjdRwQ8PVzQZds.roa Signing time: Wed 05 Nov 2025 07:35:03 +0000 ROA not before: Wed 05 Nov 2025 07:35:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41368 IP address blocks: 5.34.128.0/19 maxlen: 24 5.183.184.0/22 maxlen: 24 89.29.128.0/20 maxlen: 20 89.29.129.0/24 maxlen: 24 89.29.132.0/24 maxlen: 24 89.29.133.0/24 maxlen: 24 89.29.135.0/24 maxlen: 24 89.29.144.0/21 maxlen: 21 89.29.149.0/24 maxlen: 24 89.29.150.0/24 maxlen: 24 89.29.151.0/24 maxlen: 24 89.29.152.0/22 maxlen: 22 89.29.155.0/24 maxlen: 24 89.29.156.0/24 maxlen: 24 89.29.157.0/24 maxlen: 24 89.29.158.0/24 maxlen: 24 89.29.159.0/24 maxlen: 24 89.29.232.0/22 maxlen: 22 89.29.233.0/24 maxlen: 24 89.29.234.0/24 maxlen: 24 89.29.236.0/22 maxlen: 22 89.29.254.0/24 maxlen: 24 176.57.104.0/22 maxlen: 22 176.57.108.0/22 maxlen: 22 176.57.108.0/24 maxlen: 24 176.57.110.0/23 maxlen: 23 185.40.37.0/24 maxlen: 24 185.40.38.0/23 maxlen: 24 185.64.243.0/24 maxlen: 24 185.74.240.0/22 maxlen: 24 185.93.80.0/22 maxlen: 24 185.123.56.0/22 maxlen: 24 185.145.40.0/22 maxlen: 24 185.214.136.0/22 maxlen: 24 185.214.138.0/24 maxlen: 24 188.92.124.0/22 maxlen: 24 193.56.164.0/22 maxlen: 24 212.119.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:52:f0:c8:c2:b9:5c:40:d9:52:8e:64:d5:98:c8:4a:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Validity Not Before: Nov 5 07:35:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6cccad1111929377b04578dd47043c3d5cd065db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:51:52:b3:88:fb:51:d1:6b:c1:c4:cf:dc:50: 15:ce:f6:4b:a2:fa:d4:5b:b4:cf:ea:0c:87:36:e8: dd:da:4d:a2:ee:78:a4:f4:96:4b:f1:43:5d:b4:c2: 7f:c3:5f:6a:93:fd:a6:e3:ab:c8:b0:86:9e:5f:c4: 6e:4c:69:05:9f:83:49:53:2c:fc:1e:1c:50:fe:0b: 02:53:86:ce:5b:b5:05:28:3e:a9:be:3b:42:29:11: 20:b5:96:f9:0b:e2:53:e2:98:9d:40:b4:33:12:44: ec:df:8a:db:36:c1:a2:91:c4:9e:ef:50:73:4c:dc: 55:d6:1d:00:fc:bb:ef:7e:c9:57:12:ff:60:e1:4a: 92:f4:75:6d:8f:f2:58:8e:96:d7:fc:a9:bb:8b:53: 57:12:82:5a:c4:ae:35:4a:42:8a:5f:dc:22:29:74: 85:6f:35:22:2c:df:26:12:45:59:7a:8b:25:c3:47: b6:3b:4d:3f:42:5b:ca:44:9d:b2:f2:27:eb:3b:42: b3:a7:4d:74:10:6c:92:24:1f:89:d6:3c:61:69:dc: 19:65:1c:bc:c9:84:05:ff:ef:44:5a:ad:a8:f8:76: 9c:e0:58:7a:4f:79:db:55:70:ca:70:7e:ff:70:67: 0a:50:dc:1c:29:f4:e1:6d:d3:9e:ff:3b:72:72:a5: 5a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CC:AD:11:11:92:93:77:B0:45:78:DD:47:04:3C:3D:5C:D0:65:DB X509v3 Authority Key Identifier: keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/bMytERGSk3ewRXjdRwQ8PVzQZds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.34.128.0/19 5.183.184.0/22 89.29.128.0/19 89.29.232.0/21 89.29.254.0/24 176.57.104.0/21 185.40.37.0-185.40.39.255 185.64.243.0/24 185.74.240.0/22 185.93.80.0/22 185.123.56.0/22 185.145.40.0/22 185.214.136.0/22 188.92.124.0/22 193.56.164.0/22 212.119.52.0/22 Signature Algorithm: sha256WithRSAEncryption 27:ed:39:00:7f:39:bc:e5:e7:de:0f:e0:c5:2e:4f:5b:f7:df: 16:bd:47:73:4a:77:69:ca:ee:67:2b:47:23:eb:c8:c9:4d:85: 71:e7:b6:4d:61:04:c9:89:30:88:59:33:ad:a7:8d:05:0e:c8: c0:f6:53:f8:9f:1c:f8:da:0d:f6:93:6b:1f:79:38:55:7a:c2: 83:98:68:d4:95:d4:52:92:52:29:4b:52:0c:7d:10:2f:9d:f3: a5:24:f2:32:0c:26:2a:8c:d8:12:58:09:1b:5b:dd:2a:ab:f0: bf:b8:27:78:f8:62:79:19:c1:fe:b2:a3:e8:aa:c4:af:f9:10: ed:fe:01:fd:18:ec:41:74:4f:bf:56:6b:11:3a:3e:bc:aa:05: 63:7f:92:a8:5d:ab:74:48:b4:9f:7e:12:ec:60:b4:89:31:2a: d7:06:fe:c4:3d:52:ff:a4:27:35:f1:7b:ba:81:6b:83:a4:b8: bb:a1:3f:cc:83:e5:30:df:fd:a7:ae:71:9f:85:f1:f2:f2:6b: ed:8d:1e:01:4e:49:4b:78:4c:59:0b:59:90:d5:12:db:97:cc: cd:fa:f0:a9:18:29:86:2d:b0:e4:2e:71:6b:a5:a9:18:13:ff: 7e:33:44:ae:e6:08:d3:0d:1e:54:b4:2c:13:0a:d8:4d:ab:64: 8e:81:f6:ee -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgISAZpS8MjCuVxA2VKOZNWYyEpHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTM5YjBjZWQzOGQ3NWNjNjNlZDUwZDZlNWNlNzJiYmI1 YjRiMTAwHhcNMjUxMTA1MDczNTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2NjYWQxMTExOTI5Mzc3YjA0NTc4ZGQ0NzA0M2MzZDVjZDA2NWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1FSs4j7UdFrwcTP3FAVzvZLovrU W7TP6gyHNujd2k2i7nik9JZL8UNdtMJ/w19qk/2m46vIsIaeX8RuTGkFn4NJUyz8 HhxQ/gsCU4bOW7UFKD6pvjtCKREgtZb5C+JT4pidQLQzEkTs34rbNsGikcSe71Bz TNxV1h0A/LvvfslXEv9g4UqS9HVtj/JYjpbX/Km7i1NXEoJaxK41SkKKX9wiKXSF bzUiLN8mEkVZeoslw0e2O00/QlvKRJ2y8ifrO0Kzp010EGySJB+J1jxhadwZZRy8 yYQF/+9EWq2o+Hac4Fh6T3nbVXDKcH7/cGcKUNwcKfThbdOe/ztycqVa+wIDAQAB o4ICbDCCAmgwHQYDVR0OBBYEFGzMrRERkpN3sEV43UcEPD1c0GXbMB8GA1UdIwQY MBaAFFqTmwztONdcxj7VDW5c5yu7W0sQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgt ZDYwYjNiNmNjYTZlLzEvYk15dEVSR1NrM2V3UlhqZFJ3UThQVnpRWmRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgtZDYwYjNiNmNjYTZl LzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwbgQCAAEwaAMEBQUigAME AgW3uAMEBVkdgAMEA1kd6AMEAFkd/gMEA7A5aDAMAwQAuSglAwQDuSggAwQAuUDz AwQCuUrwAwQCuV1QAwQCuXs4AwQCuZEoAwQCudaIAwQCvFx8AwQCwTikAwQC1Hc0 MA0GCSqGSIb3DQEBCwUAA4IBAQAn7TkAfzm85efeD+DFLk9b998WvUdzSndpyu5n K0cj68jJTYVx57ZNYQTJiTCIWTOtp40FDsjA9lP4nxz42g32k2sfeThVesKDmGjU ldRSklIpS1IMfRAvnfOlJPIyDCYqjNgSWAkbW90qq/C/uCd4+GJ5GcH+sqPoqsSv +RDt/gH9GOxBdE+/VmsROj68qgVjf5KoXat0SLSffhLsYLSJMSrXBv7EPVL/pCc1 8Xu6gWuDpLi7oT/Mg+Uw3/2nrnGfhfHy8mvtjR4BTklLeExZC1mQ1RLbl8zN+vCp GCmGLbDkLnFrpakYE/9+M0Su5gjTDR5UtCwTCthNq2SOgfbu -----END CERTIFICATE-----Generated at Sat Dec 6 23:18:43 2025 by rpki-client