This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/J9A57ywFh8i4qBexCOCj1MaZXCw.roa File: J9A57ywFh8i4qBexCOCj1MaZXCw.roa (raw, json) Hash identifier: g9qGmokLfV87xI5mRPA4oZJkdfwEGJMfoUIer/zb0UQ= Subject key identifier: 27:D0:39:EF:2C:05:87:C8:B8:A8:17:B1:08:E0:A3:D4:C6:99:5C:2C Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417 Certificate serial: 019AE8D6491EF5B8EAE040F9A5B269195400 Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/J9A57ywFh8i4qBexCOCj1MaZXCw.roa Signing time: Thu 04 Dec 2025 10:09:08 +0000 ROA not before: Thu 04 Dec 2025 10:09:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 2856 IP address blocks: 5.80.0.0/15 maxlen: 15 5.81.0.0/16 maxlen: 16 31.48.0.0/13 maxlen: 13 51.14.0.0/16 maxlen: 16 62.6.0.0/16 maxlen: 16 62.7.0.0/16 maxlen: 16 62.172.0.0/16 maxlen: 16 81.128.0.0/11 maxlen: 11 81.128.0.0/12 maxlen: 12 86.128.0.0/10 maxlen: 10 86.128.0.0/11 maxlen: 11 86.128.0.0/12 maxlen: 12 109.144.0.0/12 maxlen: 12 185.93.168.0/22 maxlen: 22 192.12.73.0/24 maxlen: 24 193.37.160.0/20 maxlen: 20 194.72.0.0/14 maxlen: 14 194.79.48.0/22 maxlen: 22 195.99.0.0/16 maxlen: 16 195.171.0.0/16 maxlen: 16 212.82.0.0/19 maxlen: 19 212.140.0.0/16 maxlen: 16 213.1.0.0/16 maxlen: 16 213.120.0.0/14 maxlen: 14 217.32.0.0/12 maxlen: 12 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:d6:49:1e:f5:b8:ea:e0:40:f9:a5:b2:69:19:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417 Validity Not Before: Dec 4 10:09:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=27d039ef2c0587c8b8a817b108e0a3d4c6995c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:a4:f5:2d:73:0b:59:70:b3:76:27:28:fd:52: f0:1b:16:f5:c9:e9:82:cb:d4:76:2b:9e:ab:c1:0d: cb:8c:27:34:a0:1e:13:68:b0:86:45:41:3e:a9:e0: db:88:cf:fc:03:d1:06:07:5f:f7:d0:a3:75:5c:20: 81:e0:af:84:df:c6:ef:d6:4e:3c:6f:78:b3:7b:18: 3e:3d:0c:85:64:12:b0:0b:75:d2:bc:2d:3b:11:3c: e4:7c:e2:40:0c:b1:e9:6f:e4:e0:04:b8:1a:d4:bf: c8:c0:11:b8:bf:1a:7c:ae:fd:4c:2c:50:46:fc:e6: 21:8f:c7:24:7b:49:1a:c1:95:99:6b:74:a9:75:91: 4e:b8:ad:fc:17:a2:06:f7:ce:c3:24:ee:ba:4d:c4: 2d:6e:3a:10:db:56:c1:65:cb:d4:ca:68:68:55:fa: fa:71:6c:6b:92:35:22:10:82:ac:53:ba:f7:55:67: be:0f:92:c8:da:62:9c:5b:a5:41:6a:6b:c8:c5:a8: 2b:e1:08:ee:50:27:fc:e4:3e:1d:96:8a:22:c6:b8: 41:89:a5:e1:9a:32:eb:76:21:d4:0b:c0:10:61:d4: 0d:90:e4:20:69:7e:6e:1d:7a:21:09:8e:4f:9a:e3: 2c:6d:1e:f2:1c:5c:98:34:41:17:8c:6e:67:47:09: 14:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D0:39:EF:2C:05:87:C8:B8:A8:17:B1:08:E0:A3:D4:C6:99:5C:2C X509v3 Authority Key Identifier: keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/J9A57ywFh8i4qBexCOCj1MaZXCw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.80.0.0/15 31.48.0.0/13 51.14.0.0/16 62.6.0.0/15 62.172.0.0/16 81.128.0.0/11 86.128.0.0/10 109.144.0.0/12 185.93.168.0/22 192.12.73.0/24 193.37.160.0/20 194.72.0.0/14 194.79.48.0/22 195.99.0.0/16 195.171.0.0/16 212.82.0.0/19 212.140.0.0/16 213.1.0.0/16 213.120.0.0/14 217.32.0.0/12 Signature Algorithm: sha256WithRSAEncryption 08:dc:e5:ea:05:e5:63:48:4d:4f:b9:e8:4f:0b:a4:7b:37:d0: 4f:58:07:43:52:72:c5:01:11:cd:5a:f6:9d:87:c2:ef:99:f8: 74:97:de:4a:7b:f3:81:93:ad:c6:30:f6:5a:26:47:0b:6c:a2: 2f:ca:a8:80:59:d7:bd:3d:42:a5:e0:07:ff:36:89:b0:85:21: 63:82:e7:66:fb:c7:60:64:21:a7:11:47:d7:1d:f5:37:80:5e: e9:66:9a:09:fc:59:b4:38:e4:ce:3c:ad:71:48:48:16:d8:ab: 48:c6:cd:07:36:61:d5:01:58:23:cf:23:71:e4:88:0d:ad:98: 89:3a:bc:33:b6:f6:e8:72:c3:63:c7:9e:d4:2a:c4:ff:63:1d: e7:77:1f:ae:8e:62:93:9f:8b:4c:02:bf:2d:f6:6a:b9:62:54: 38:8f:31:f1:25:bd:f5:d1:6a:ed:51:1b:a1:8b:65:6e:38:c4: 09:16:33:ae:42:35:74:b2:c2:10:51:d5:5c:51:70:19:1c:66: e1:eb:57:78:11:83:52:eb:a3:ce:a3:11:4f:c1:50:27:1a:74: 36:9b:d0:77:50:7d:e8:f9:33:3d:7c:c3:e3:77:77:41:94:5d: 04:36:14:e5:b6:1e:f5:c6:71:85:77:01:37:d1:81:56:7f:ce: 71:e1:3d:c6 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgISAZro1kke9bjq4ED5pbJpGVQAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZDZlMTYxZGNmYjdiNzI3NzUxNDlkNDM1Yjc5YmE5ZDU2 ZDE0MTcwHhcNMjUxMjA0MTAwOTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2QwMzllZjJjMDU4N2M4YjhhODE3YjEwOGUwYTNkNGM2OTk1YzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9qT1LXMLWXCzdico/VLwGxb1yemC y9R2K56rwQ3LjCc0oB4TaLCGRUE+qeDbiM/8A9EGB1/30KN1XCCB4K+E38bv1k48 b3izexg+PQyFZBKwC3XSvC07ETzkfOJADLHpb+TgBLga1L/IwBG4vxp8rv1MLFBG /OYhj8cke0kawZWZa3SpdZFOuK38F6IG987DJO66TcQtbjoQ21bBZcvUymhoVfr6 cWxrkjUiEIKsU7r3VWe+D5LI2mKcW6VBamvIxagr4QjuUCf85D4dlooixrhBiaXh mjLrdiHUC8AQYdQNkOQgaX5uHXohCY5PmuMsbR7yHFyYNEEXjG5nRwkU5wIDAQAB o4ICbTCCAmkwHQYDVR0OBBYEFCfQOe8sBYfIuKgXsQjgo9TGmVwsMB8GA1UdIwQY MBaAFM/W4WHc+3tyd1FJ1DW3m6nVbRQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84NTIxNDAtYTI3Zi00NDliLWI1ZmYt MjIzNzQyZWU0Mzc1LzEvSjlBNTd5d0ZoOGk0cUJleENPQ2oxTWFaWEN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS84NTIxNDAtYTI3Zi00NDliLWI1ZmYtMjIzNzQyZWU0Mzc1 LzEvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwbwQCAAEwaQMDAQVQAwMD HzADAwAzDgMDAT4GAwMAPqwDAwVRgAMDBlaAAwMEbZADBAK5XagDBADADEkDBATB JaADAwLCSAMEAsJPMAMDAMNjAwMAw6sDBAXUUgADAwDUjAMDANUBAwMC1XgDAwTZ IDANBgkqhkiG9w0BAQsFAAOCAQEACNzl6gXlY0hNT7noTwukezfQT1gHQ1JyxQER zVr2nYfC75n4dJfeSnvzgZOtxjD2WiZHC2yiL8qogFnXvT1CpeAH/zaJsIUhY4Ln ZvvHYGQhpxFH1x31N4Be6WaaCfxZtDjkzjytcUhIFtirSMbNBzZh1QFYI88jceSI Da2YiTq8M7b26HLDY8ee1CrE/2Md53cfro5ik5+LTAK/LfZquWJUOI8x8SW99dFq 7VEboYtlbjjECRYzrkI1dLLCEFHVXFFwGRxm4etXeBGDUuujzqMRT8FQJxp0NpvQ d1B96PkzPXzD43d3QZRdBDYU5bYe9cZxhXcBN9GBVn/OceE9xg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:41:30 2025 by rpki-client