This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0t8O5fg1Ycbbc11AptBXKz8zo30.roa File: 0t8O5fg1Ycbbc11AptBXKz8zo30.roa (raw, json) Hash identifier: I6wB2R0RuuJIFFD2Q/4TtNXW1MxeFWyONoHibXaEdaA= Subject key identifier: D2:DF:0E:E5:F8:35:61:C6:DB:73:5D:40:A6:D0:57:2B:3F:33:A3:7D Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e Certificate serial: 019A920E8A54207BB981F6731C8761FEE267 Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0t8O5fg1Ycbbc11AptBXKz8zo30.roa Signing time: Mon 17 Nov 2025 13:43:37 +0000 ROA not before: Mon 17 Nov 2025 13:43:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197540 IP address blocks: 152.53.0.0/16 maxlen: 24 152.53.5.0/24 maxlen: 24 152.53.7.0/24 maxlen: 24 152.53.12.0/22 maxlen: 24 152.53.16.0/22 maxlen: 24 152.53.20.0/22 maxlen: 24 152.53.32.0/22 maxlen: 24 152.53.42.0/24 maxlen: 24 152.53.42.0/27 maxlen: 27 152.53.42.64/28 maxlen: 28 152.53.43.0/24 maxlen: 24 152.53.43.64/27 maxlen: 27 152.53.44.0/22 maxlen: 24 152.53.48.0/22 maxlen: 22 152.53.60.0/24 maxlen: 24 152.53.61.0/24 maxlen: 24 152.53.64.0/22 maxlen: 24 152.53.84.0/22 maxlen: 22 152.53.92.0/22 maxlen: 22 152.53.100.0/22 maxlen: 22 152.53.104.0/22 maxlen: 22 152.53.108.0/22 maxlen: 22 152.53.112.0/22 maxlen: 22 152.53.116.0/22 maxlen: 22 152.53.124.0/22 maxlen: 22 152.53.128.0/20 maxlen: 22 152.53.144.0/22 maxlen: 22 152.53.148.0/22 maxlen: 22 152.53.152.0/22 maxlen: 22 152.53.160.0/22 maxlen: 22 152.53.172.0/22 maxlen: 22 152.53.176.0/22 maxlen: 22 152.53.180.0/22 maxlen: 22 152.53.184.0/22 maxlen: 24 152.53.188.0/22 maxlen: 22 152.53.196.0/22 maxlen: 22 152.53.200.0/24 maxlen: 24 152.53.202.0/24 maxlen: 24 152.53.204.0/22 maxlen: 22 152.53.224.0/22 maxlen: 22 152.53.228.0/22 maxlen: 22 152.53.236.0/22 maxlen: 22 152.53.244.0/22 maxlen: 22 152.53.248.0/22 maxlen: 22 152.53.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:92:0e:8a:54:20:7b:b9:81:f6:73:1c:87:61:fe:e2:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e Validity Not Before: Nov 17 13:43:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d2df0ee5f83561c6db735d40a6d0572b3f33a37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d5:e0:d5:aa:f0:e8:b7:46:b0:5a:04:0b:b8: 64:74:5b:d6:bb:9b:ab:65:51:e7:75:60:b2:17:fb: 9f:cf:c6:65:e1:a3:d5:d4:17:c5:f7:51:32:e3:1d: a8:42:3c:22:1f:cf:f2:92:fc:dd:63:3d:01:1f:5a: 0d:eb:76:93:39:05:24:cd:8f:c0:10:26:f8:38:60: 36:2e:41:5b:73:54:81:20:76:e9:dc:cd:ae:3f:b6: a0:ba:37:5d:dc:33:fe:ed:87:ae:bf:62:d7:b9:34: 40:3a:49:77:5c:01:eb:42:3f:08:80:83:a6:f7:8b: d0:52:6b:cb:19:3e:f8:6a:37:a5:d9:dd:a3:da:c5: c5:d3:b5:a3:67:9b:9b:c5:3e:9e:80:29:2e:17:40: 08:2f:eb:9d:75:58:9e:62:aa:c4:4e:cd:25:60:53: a3:92:2d:34:df:4a:75:5d:12:84:24:1b:00:42:7f: 18:2a:f4:59:c1:a0:e4:15:6a:26:27:9b:8f:d3:03: 3a:f1:8c:f6:ae:84:76:0b:10:8b:ec:eb:89:b5:65: 7a:04:a6:bb:a6:e2:8d:ba:68:9f:2b:62:81:fc:c5: 06:47:d6:d5:fa:e3:74:89:82:bf:eb:90:33:07:84: 7e:92:8e:16:68:d4:87:43:84:91:41:e5:84:96:c0: 72:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DF:0E:E5:F8:35:61:C6:DB:73:5D:40:A6:D0:57:2B:3F:33:A3:7D X509v3 Authority Key Identifier: keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0t8O5fg1Ycbbc11AptBXKz8zo30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.53.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6a:f1:b3:c3:d3:bc:f1:31:67:6a:75:90:c6:3b:b3:fe:69:b9: 2b:88:9d:0c:dc:db:39:0b:7e:8c:19:43:78:3e:4d:08:e4:1c: 0f:9e:2c:5b:94:71:f7:15:25:3c:6e:88:81:de:fd:ee:db:9b: 44:db:5f:d6:1d:89:5d:1b:8f:6b:d1:52:10:bb:7a:87:01:bc: d7:59:de:16:9d:7a:a5:8b:d6:ae:2f:bc:3f:dc:27:52:2b:8b: a6:59:2f:18:12:13:a3:4c:58:35:e0:d5:8d:4e:8f:70:73:a0: 71:e8:a1:c8:e2:7e:58:03:09:94:77:aa:37:dc:4b:f8:92:a7: 8c:59:64:75:eb:ae:7e:48:b8:d6:67:67:f7:6e:7d:31:a6:ff: 6c:31:78:5a:8b:05:66:35:3f:b2:79:ed:c9:a3:e5:cc:eb:e2: 74:3f:42:38:f3:72:85:4b:a7:b5:3f:eb:62:e3:26:3c:09:4f: d5:6a:4a:4d:80:d9:1a:30:7c:33:81:4c:bd:13:21:30:a3:7c: 71:41:17:d4:0d:8b:c6:2a:c2:5a:27:2f:43:3a:a8:fe:b0:5b: b0:d0:f9:86:9a:32:52:d8:bc:66:ba:7f:fb:2e:74:20:14:23: b7:01:5d:64:92:c9:a8:f6:3a:16:19:24:75:be:16:f0:e1:e9: 7a:a0:17:28 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZqSDopUIHu5gfZzHIdh/uJnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMGIzN2I2ZjRiNDQ1NjQ1ZTY5OTNhOWM1ZWM2MDg0OTI0 MjVmMGUwHhcNMjUxMTE3MTM0MzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmRmMGVlNWY4MzU2MWM2ZGI3MzVkNDBhNmQwNTcyYjNmMzNhMzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotXg1arw6LdGsFoEC7hkdFvWu5ur ZVHndWCyF/ufz8Zl4aPV1BfF91Ey4x2oQjwiH8/ykvzdYz0BH1oN63aTOQUkzY/A ECb4OGA2LkFbc1SBIHbp3M2uP7agujdd3DP+7Yeuv2LXuTRAOkl3XAHrQj8IgIOm 94vQUmvLGT74ajel2d2j2sXF07WjZ5ubxT6egCkuF0AIL+uddVieYqrETs0lYFOj ki0030p1XRKEJBsAQn8YKvRZwaDkFWomJ5uP0wM68Yz2roR2CxCL7OuJtWV6BKa7 puKNumifK2KB/MUGR9bV+uN0iYK/65AzB4R+ko4WaNSHQ4SRQeWElsBy+wIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFNLfDuX4NWHG23NdQKbQVys/M6N9MB8GA1UdIwQY MBaAFNALN7b0tEVkXmmTqcXsYISSQl8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEt N2RiNjg2OGQ4NDc0LzEvMHQ4TzVmZzFZY2JiYzExQXB0QlhLejh6bzMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEtN2RiNjg2OGQ4NDc0 LzEvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmDUwDQYJ KoZIhvcNAQELBQADggEBAGrxs8PTvPExZ2p1kMY7s/5puSuInQzc2zkLfowZQ3g+ TQjkHA+eLFuUcfcVJTxuiIHe/e7bm0TbX9YdiV0bj2vRUhC7eocBvNdZ3hadeqWL 1q4vvD/cJ1Iri6ZZLxgSE6NMWDXg1Y1Oj3BzoHHoocjiflgDCZR3qjfcS/iSp4xZ ZHXrrn5IuNZnZ/dufTGm/2wxeFqLBWY1P7J57cmj5czr4nQ/QjjzcoVLp7U/62Lj JjwJT9VqSk2A2RowfDOBTL0TITCjfHFBF9QNi8YqwlonL0M6qP6wW7DQ+YaaMlLY vGa6f/sudCAUI7cBXWSSyaj2OhYZJHW+FvDh6XqgFyg= -----END CERTIFICATE-----Generated at Sat Dec 6 19:44:28 2025 by rpki-client