This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/LOmlB_bYvUhvImzOEpyfmmb13tA.roa File: LOmlB_bYvUhvImzOEpyfmmb13tA.roa (raw, json) Hash identifier: HMIbD2TeO88jNncglQPQEr9MPZGx95F03Z4iEkE8RIQ= Subject key identifier: 2C:E9:A5:07:F6:D8:BD:48:6F:22:6C:CE:12:9C:9F:9A:66:F5:DE:D0 Certificate issuer: /CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8 Certificate serial: 019A7CDA602F99997277015934D72D811E9B Authority key identifier: EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/LOmlB_bYvUhvImzOEpyfmmb13tA.roa Signing time: Thu 13 Nov 2025 10:54:37 +0000 ROA not before: Thu 13 Nov 2025 10:54:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8860 IP address blocks: 5.182.21.0/24 maxlen: 24 5.182.23.0/24 maxlen: 24 2a0e:b800::/32 maxlen: 48 2a0e:b800:dddd::/48 maxlen: 48 2a0e:b801::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7c:da:60:2f:99:99:72:77:01:59:34:d7:2d:81:1e:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8 Validity Not Before: Nov 13 10:54:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2ce9a507f6d8bd486f226cce129c9f9a66f5ded0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6b:37:91:01:99:4e:86:74:a3:fa:30:60:ac: 61:3e:63:38:99:92:58:5d:9c:f6:ab:89:44:3b:6d: 8d:8c:5e:2d:7c:4e:21:92:31:3c:86:e6:a8:d5:b0: 63:03:77:fd:3b:56:33:c2:96:f6:ff:37:f1:f4:e8: 09:56:bf:34:2b:88:c9:b0:0f:fe:0e:8b:20:9e:e6: 40:95:9e:64:b5:af:5f:9c:db:f7:b4:50:38:44:6e: e6:cd:3c:51:67:28:3a:96:8b:55:d3:ef:1d:39:0b: bd:f6:db:b9:4f:cf:f9:2a:a0:c3:8d:32:06:24:bb: 4f:01:3b:aa:38:25:59:78:45:72:3c:b2:ad:7a:cc: d0:e1:37:9e:4d:9a:4f:6e:44:6e:91:2c:e1:81:19: cb:8d:cd:99:70:52:19:e8:9b:21:b7:5d:6e:4c:f8: 1f:3a:46:6d:be:10:c7:e6:4e:8f:d1:f1:3a:d8:db: 8c:4a:cf:f6:76:e1:31:83:61:c5:71:30:e8:50:b1: 86:f0:bb:c0:8e:25:00:0d:64:40:36:7f:67:b7:12: 1c:22:56:b2:17:ba:9f:5c:69:94:c1:76:0c:11:b8: ef:ce:63:c3:72:15:e9:e2:c3:9c:49:3b:93:bb:b0: da:a1:75:60:17:5b:62:e5:8b:f9:4e:cb:1e:ca:76: df:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E9:A5:07:F6:D8:BD:48:6F:22:6C:CE:12:9C:9F:9A:66:F5:DE:D0 X509v3 Authority Key Identifier: keyid:EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/LOmlB_bYvUhvImzOEpyfmmb13tA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.21.0/24 5.182.23.0/24 IPv6: 2a0e:b800::/31 Signature Algorithm: sha256WithRSAEncryption 47:ce:19:de:fa:1c:64:ba:70:83:81:ec:51:b6:36:c4:d5:7b: a2:90:75:8a:ca:6e:a0:b7:fd:e7:94:d1:a6:09:2b:ed:7a:74: 5f:3f:81:88:bf:12:a7:11:b1:32:a7:bc:cc:10:29:e7:27:85: 4a:81:5d:c8:16:28:fe:8c:d3:d6:75:91:14:2d:5a:46:1c:21: 87:94:ae:c4:cc:67:be:17:77:84:50:df:c1:81:20:0a:a8:a4: 84:c4:26:32:e4:09:c6:d8:80:db:06:4a:3b:5d:83:01:c0:b0: e2:b3:35:01:88:4f:79:3c:79:cd:4e:7e:c8:06:ec:e4:c0:06: db:4a:f7:52:af:5e:df:e1:57:6a:e7:f9:80:0f:3d:8e:7c:68: 43:fb:68:64:0d:ca:a2:b3:93:6f:f1:83:d5:58:15:f7:d2:37: 26:bf:07:e1:01:a8:d7:fe:fb:e5:9a:08:08:9e:96:d1:82:e4: 45:e4:a1:9b:fa:a8:b1:65:bb:b4:0d:f2:48:77:cb:1f:cf:a2: 9f:7d:33:2f:4a:d7:9b:2f:fb:e5:ae:27:e6:ec:10:7b:9c:0a: 23:d0:8a:43:f0:a2:fc:93:b3:07:a1:5a:4f:7c:3f:6d:a4:f1: 00:32:58:7d:7e:44:3b:1b:65:a8:e1:d7:4a:21:f7:1e:fa:0a: a0:6c:15:28 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZp82mAvmZlydwFZNNctgR6bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmOWQ3NjNiNDllMDI0YTdiNmExOWVhZjdkZmI5ODkxMWE5 Yzk0YzgwHhcNMjUxMTEzMTA1NDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2U5YTUwN2Y2ZDhiZDQ4NmYyMjZjY2UxMjljOWY5YTY2ZjVkZWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGs3kQGZToZ0o/owYKxhPmM4mZJY XZz2q4lEO22NjF4tfE4hkjE8huao1bBjA3f9O1Yzwpb2/zfx9OgJVr80K4jJsA/+ DosgnuZAlZ5kta9fnNv3tFA4RG7mzTxRZyg6lotV0+8dOQu99tu5T8/5KqDDjTIG JLtPATuqOCVZeEVyPLKteszQ4TeeTZpPbkRukSzhgRnLjc2ZcFIZ6Jsht11uTPgf OkZtvhDH5k6P0fE62NuMSs/2duExg2HFcTDoULGG8LvAjiUADWRANn9ntxIcIlay F7qfXGmUwXYMEbjvzmPDchXp4sOcSTuTu7DaoXVgF1ti5Yv5Tsseynbf1QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCzppQf22L1IbyJszhKcn5pm9d7QMB8GA1UdIwQY MBaAFO+ddjtJ4CSntqGer337mJEanJTIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzUxMk8wbmdKS2Uyb1o2dmZmdVlrUnFjbE1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS81OWNmOGUtZGM2Ny00M2ZiLWJkMzct MDg3MGU2NTk2NDViLzEvTE9tbEJfYll2VWh2SW16T0VweWZtbWIxM3RBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS81OWNmOGUtZGM2Ny00M2ZiLWJkMzctMDg3MGU2NTk2NDVi LzEvNzUxMk8wbmdKS2Uyb1o2dmZmdVlrUnFjbE1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQABbYVAwQA BbYXMA0EAgACMAcDBQEqDrgAMA0GCSqGSIb3DQEBCwUAA4IBAQBHzhne+hxkunCD gexRtjbE1XuikHWKym6gt/3nlNGmCSvtenRfP4GIvxKnEbEyp7zMECnnJ4VKgV3I Fij+jNPWdZEULVpGHCGHlK7EzGe+F3eEUN/BgSAKqKSExCYy5AnG2IDbBko7XYMB wLDiszUBiE95PHnNTn7IBuzkwAbbSvdSr17f4Vdq5/mADz2OfGhD+2hkDcqis5Nv 8YPVWBX30jcmvwfhAajX/vvlmggInpbRguRF5KGb+qixZbu0DfJId8sfz6KffTMv StebL/vlrifm7BB7nAoj0IpD8KL8k7MHoVpPfD9tpPEAMlh9fkQ7G2Wo4ddKIfce +gqgbBUo -----END CERTIFICATE-----Generated at Sun Dec 7 07:33:37 2025 by rpki-client