This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/RjFS94paAjWz-3G0y1dI22n5TrQ.roa File: RjFS94paAjWz-3G0y1dI22n5TrQ.roa (raw, json) Hash identifier: JlGMnpLyU9SIKXBkIF00C5OEytENmKH+q58a58QV1CI= Subject key identifier: 46:31:52:F7:8A:5A:02:35:B3:FB:71:B4:CB:57:48:DB:69:F9:4E:B4 Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 019A9D1B847E95081DF6DE3D871E25D660C8 Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/RjFS94paAjWz-3G0y1dI22n5TrQ.roa Signing time: Wed 19 Nov 2025 17:13:37 +0000 ROA not before: Wed 19 Nov 2025 17:13:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 5.102.116.0/22 maxlen: 24 5.102.120.0/22 maxlen: 24 82.163.64.0/22 maxlen: 24 82.163.168.0/22 maxlen: 24 82.163.224.0/22 maxlen: 24 185.86.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9d:1b:84:7e:95:08:1d:f6:de:3d:87:1e:25:d6:60:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Nov 19 17:13:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=463152f78a5a0235b3fb71b4cb5748db69f94eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:67:f2:3b:dd:a6:d6:53:e8:8c:46:73:e6:af: 9a:02:ba:25:fc:c1:0d:d5:03:68:57:d2:2e:6e:6a: 75:23:86:1e:68:41:1a:11:47:c0:75:6c:4b:78:7e: bb:4b:93:62:f6:46:f8:2d:b2:5d:b9:ab:55:90:58: 24:ce:dc:c7:6e:df:98:8b:4d:4f:f8:99:07:8f:5b: 47:96:e4:75:8b:3d:ee:d2:0c:cb:32:14:b7:6e:49: ac:c4:08:76:fd:59:42:b6:f5:91:50:db:25:bd:9a: aa:5a:a5:80:a0:29:3c:2e:42:22:f7:5e:11:d2:56: 8f:88:a6:21:fb:ad:c7:4d:70:50:e9:f0:91:1b:6b: 5f:9f:5d:86:8a:85:60:62:97:17:ad:76:70:da:b0: 17:9c:58:e7:cb:5c:4c:2c:cc:11:e1:43:4c:73:67: 2c:e9:10:cd:d2:57:08:80:1e:60:e3:e3:a1:c7:f6: d0:9c:f0:3b:f7:74:c9:5b:99:c4:74:3c:fa:25:f3: 78:98:0e:01:6b:7d:e0:b7:bc:08:43:a6:08:8d:81: 40:be:2a:fe:55:b9:9f:23:cd:90:9d:52:61:6b:40: ec:63:c6:8c:83:51:d6:82:e8:9d:e7:48:40:38:3c: d7:d1:34:76:8b:15:ca:bd:8d:7c:be:9c:c0:d0:b1: ef:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:31:52:F7:8A:5A:02:35:B3:FB:71:B4:CB:57:48:DB:69:F9:4E:B4 X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/RjFS94paAjWz-3G0y1dI22n5TrQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.102.116.0-5.102.123.255 82.163.64.0/22 82.163.168.0/22 82.163.224.0/22 185.86.140.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:39:05:4a:90:4b:75:5a:e4:48:f8:1d:b5:d3:b0:b0:5f:d4: b8:e8:34:dd:79:9e:88:81:eb:b3:46:e4:1a:30:8f:dc:ec:30: 77:13:4d:c2:54:80:0d:11:c6:2a:64:d3:f5:af:89:05:83:f3: 5b:eb:7d:fa:a6:1c:5e:6a:a6:a9:b5:a8:de:19:38:d6:5b:c7: e7:62:db:2f:5c:0c:3e:c6:e8:86:b1:db:d8:2f:46:56:29:9f: 9f:b5:a4:d7:51:1b:c1:b1:98:12:c6:33:bf:45:61:0a:e6:3a: d3:e6:3c:d8:08:77:07:57:7c:f7:13:0f:91:c9:8f:81:e0:da: 91:3f:4d:fd:66:1b:9b:26:22:6b:29:47:6e:1e:af:09:20:1f: d8:d2:ec:7c:77:48:6a:55:1e:2d:80:0f:7a:54:2f:9d:4c:60: 04:d2:b8:c1:cf:32:e9:7c:7f:f8:3b:0f:a5:66:b0:1f:39:0c: 9e:82:66:df:f0:64:ce:ac:68:f6:bd:f7:5a:f9:11:d3:d8:97: 3e:c0:c5:ab:28:f0:ff:63:43:0a:91:74:4a:4c:77:dd:a2:2a: 58:f9:af:cc:08:4d:c0:a3:a0:82:c2:11:33:33:b3:80:8e:cb: de:cb:db:08:fe:89:17:bd:39:77:95:1c:12:24:ae:f0:92:81: 58:77:42:20 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZqdG4R+lQgd9t49hx4l1mDIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjUxMTE5MTcxMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjMxNTJmNzhhNWEwMjM1YjNmYjcxYjRjYjU3NDhkYjY5Zjk0ZWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWfyO92m1lPojEZz5q+aArol/MEN 1QNoV9Iubmp1I4YeaEEaEUfAdWxLeH67S5Ni9kb4LbJduatVkFgkztzHbt+Yi01P +JkHj1tHluR1iz3u0gzLMhS3bkmsxAh2/VlCtvWRUNslvZqqWqWAoCk8LkIi914R 0laPiKYh+63HTXBQ6fCRG2tfn12GioVgYpcXrXZw2rAXnFjny1xMLMwR4UNMc2cs 6RDN0lcIgB5g4+Ohx/bQnPA793TJW5nEdDz6JfN4mA4Ba33gt7wIQ6YIjYFAvir+ VbmfI82QnVJha0DsY8aMg1HWguid50hAODzX0TR2ixXKvY18vpzA0LHvtQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFEYxUveKWgI1s/txtMtXSNtp+U60MB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEvUmpGUzk0cGFBald6LTNHMHkxZEkyMm41VHJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBAIFZnQD BAIFZngDBAJSo0ADBAJSo6gDBAJSo+ADBAG5VowwDQYJKoZIhvcNAQELBQADggEB AEo5BUqQS3Va5Ej4HbXTsLBf1LjoNN15noiB67NG5Bowj9zsMHcTTcJUgA0Rxipk 0/WviQWD81vrffqmHF5qpqm1qN4ZONZbx+di2y9cDD7G6Iax29gvRlYpn5+1pNdR G8GxmBLGM79FYQrmOtPmPNgIdwdXfPcTD5HJj4Hg2pE/Tf1mG5smImspR24erwkg H9jS7Hx3SGpVHi2AD3pUL51MYATSuMHPMul8f/g7D6VmsB85DJ6CZt/wZM6saPa9 91r5EdPYlz7Axaso8P9jQwqRdEpMd92iKlj5r8wITcCjoILCETMzs4COy97L2wj+ iRe9OXeVHBIkrvCSgVh3QiA= -----END CERTIFICATE-----Generated at Sat Dec 6 21:11:12 2025 by rpki-client