This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/H0csw70tg1YLoA3vUUu_9FfpWeo.roa File: H0csw70tg1YLoA3vUUu_9FfpWeo.roa (raw, json) Hash identifier: 96mhdkJC387WSq+UOyuqsQUoHOrBk60wXsPffHfNcYE= Subject key identifier: 1F:47:2C:C3:BD:2D:83:56:0B:A0:0D:EF:51:4B:BF:F4:57:E9:59:EA Certificate issuer: /CN=4735e807d349d31564f9fd546138e3598e2007ce Certificate serial: 019ADA2B64C080E3513144B519B2C475211F Authority key identifier: 47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/H0csw70tg1YLoA3vUUu_9FfpWeo.roa Signing time: Mon 01 Dec 2025 13:47:48 +0000 ROA not before: Mon 01 Dec 2025 13:47:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8767 IP address blocks: 5.182.88.0/22 maxlen: 24 45.66.28.0/22 maxlen: 24 45.84.24.0/22 maxlen: 24 93.88.16.0/22 maxlen: 24 185.47.44.0/22 maxlen: 24 185.68.156.0/22 maxlen: 24 185.110.32.0/22 maxlen: 24 193.168.248.0/22 maxlen: 24 195.72.44.0/22 maxlen: 22 213.170.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:2b:64:c0:80:e3:51:31:44:b5:19:b2:c4:75:21:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4735e807d349d31564f9fd546138e3598e2007ce Validity Not Before: Dec 1 13:47:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1f472cc3bd2d83560ba00def514bbff457e959ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c1:70:f7:e7:1a:ea:27:83:08:2e:10:4f:df: c9:08:f3:dd:a9:aa:2f:64:ef:ae:70:ad:74:d0:d5: 37:78:81:e5:de:21:a8:97:da:b2:48:32:89:04:38: 8a:34:aa:27:66:a5:02:d4:83:13:af:ef:4a:ff:a2: 7a:cb:85:f5:0a:13:c7:d9:a4:1a:d0:29:40:1c:1f: f6:98:61:e3:36:0d:d0:4a:70:5c:db:0d:82:4c:e8: d3:ad:8b:c7:1b:d0:67:d5:db:26:72:88:93:bd:42: 4a:75:50:ae:8f:8c:8b:f1:e1:a2:1e:8e:08:fb:81: ac:e7:41:10:af:e9:93:ed:b8:02:89:84:da:91:27: e6:20:ae:6a:ec:b0:77:d7:78:be:67:fb:3c:d0:fd: 07:79:85:01:b4:5b:cf:34:43:7c:80:d4:0a:2c:7f: 45:bf:c2:27:20:b7:10:0c:fb:f9:be:19:fb:02:b1: cd:ee:d4:5e:45:55:25:8a:84:09:fb:33:56:37:ec: 00:f9:f5:cf:cf:fa:f6:66:0b:b9:3b:5a:fd:76:8c: 36:bc:f9:14:7c:eb:7e:be:92:ef:8a:ba:da:ef:3d: 80:d2:a8:dd:7e:7a:2c:c6:08:81:93:85:9d:19:22: 05:98:86:a9:8d:59:4f:19:ba:f4:6c:0f:35:5d:20: 4c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:47:2C:C3:BD:2D:83:56:0B:A0:0D:EF:51:4B:BF:F4:57:E9:59:EA X509v3 Authority Key Identifier: keyid:47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/H0csw70tg1YLoA3vUUu_9FfpWeo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.88.0/22 45.66.28.0/22 45.84.24.0/22 93.88.16.0/22 185.47.44.0/22 185.68.156.0/22 185.110.32.0/22 193.168.248.0/22 195.72.44.0/22 213.170.216.0/22 Signature Algorithm: sha256WithRSAEncryption 58:9a:26:68:83:09:63:7c:ff:af:4a:6b:56:32:0a:e7:c9:ae: bd:84:ff:48:52:68:0d:f5:14:aa:c8:95:e7:fa:06:c3:ba:05: 2f:d4:1a:57:c4:c3:55:3b:99:65:38:4d:56:3d:5d:5d:90:7a: 2a:91:bb:b6:ef:47:9d:9b:5c:77:b4:77:97:e4:0d:47:87:45: 05:bc:22:43:3f:ba:37:85:5c:17:ce:73:e8:f3:26:0d:53:62: c0:fb:59:46:44:a4:84:67:e1:86:9b:37:21:9d:c8:fd:29:20: 24:ff:c3:f1:46:4a:c6:dc:99:21:5f:22:9b:16:f6:a6:85:c6: 4d:95:1f:3e:35:c9:c6:3d:aa:16:c0:23:10:80:fb:61:da:d1: 0a:09:f5:f0:bc:d8:b2:ef:fe:9b:ba:59:f8:88:77:3b:99:ea: b9:61:2c:bb:70:fb:f9:73:c5:ee:05:98:64:7a:7a:e1:63:bc: 42:b3:9d:ec:dc:aa:78:19:fc:e0:04:91:d9:80:4b:88:9c:4d: 1b:11:d5:29:39:0d:6e:78:06:71:c1:f6:3c:6d:e7:8e:2d:25: de:31:3a:0f:b3:09:b0:ff:3f:f8:4f:65:1f:e9:8c:22:c1:a7: 58:45:ed:a9:f9:52:68:1f:e2:35:e6:4f:e3:37:62:9a:35:bd: 0e:c1:f8:c4 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZraK2TAgONRMUS1GbLEdSEfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MzVlODA3ZDM0OWQzMTU2NGY5ZmQ1NDYxMzhlMzU5OGUy MDA3Y2UwHhcNMjUxMjAxMTM0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjQ3MmNjM2JkMmQ4MzU2MGJhMDBkZWY1MTRiYmZmNDU3ZTk1OWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMFw9+ca6ieDCC4QT9/JCPPdqaov ZO+ucK100NU3eIHl3iGol9qySDKJBDiKNKonZqUC1IMTr+9K/6J6y4X1ChPH2aQa 0ClAHB/2mGHjNg3QSnBc2w2CTOjTrYvHG9Bn1dsmcoiTvUJKdVCuj4yL8eGiHo4I +4Gs50EQr+mT7bgCiYTakSfmIK5q7LB313i+Z/s80P0HeYUBtFvPNEN8gNQKLH9F v8InILcQDPv5vhn7ArHN7tReRVUlioQJ+zNWN+wA+fXPz/r2Zgu5O1r9dow2vPkU fOt+vpLvirra7z2A0qjdfnosxgiBk4WdGSIFmIapjVlPGbr0bA81XSBMrQIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFB9HLMO9LYNWC6AN71FLv/RX6VnqMB8GA1UdIwQY MBaAFEc16AfTSdMVZPn9VGE441mOIAfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnpYb0I5TkoweFZrLWYxVVlUampXWTRnQjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS81ZTEzODAtOWRjNi00NjkxLTg2YjUt NWIxYjVkOTk0MGMxLzEvSDBjc3c3MHRnMVlMb0EzdlVVdV85RmZwV2VvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS81ZTEzODAtOWRjNi00NjkxLTg2YjUtNWIxYjVkOTk0MGMx LzEvUnpYb0I5TkoweFZrLWYxVVlUampXWTRnQjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQCBbZYAwQC LUIcAwQCLVQYAwQCXVgQAwQCuS8sAwQCuUScAwQCuW4gAwQCwaj4AwQCw0gsAwQC 1arYMA0GCSqGSIb3DQEBCwUAA4IBAQBYmiZogwljfP+vSmtWMgrnya69hP9IUmgN 9RSqyJXn+gbDugUv1BpXxMNVO5llOE1WPV1dkHoqkbu270edm1x3tHeX5A1Hh0UF vCJDP7o3hVwXznPo8yYNU2LA+1lGRKSEZ+GGmzchncj9KSAk/8PxRkrG3JkhXyKb FvamhcZNlR8+NcnGPaoWwCMQgPth2tEKCfXwvNiy7/6buln4iHc7meq5YSy7cPv5 c8XuBZhkenrhY7xCs53s3Kp4GfzgBJHZgEuInE0bEdUpOQ1ueAZxwfY8beeOLSXe MToPswmw/z/4T2Uf6YwiwadYRe2p+VJoH+I15k/jN2KaNb0OwfjE -----END CERTIFICATE-----Generated at Sat Dec 6 17:47:34 2025 by rpki-client