This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/CcUGGJ0q890w20Dwur-E0JX_IFA.roa File: CcUGGJ0q890w20Dwur-E0JX_IFA.roa (raw, json) Hash identifier: pzbw/eSZwYj99oiYEKp9OWnuAPOe6A5SqgzuvD1PZvc= Subject key identifier: 09:C5:06:18:9D:2A:F3:DD:30:DB:40:F0:BA:BF:84:D0:95:FF:20:50 Certificate issuer: /CN=9821e37eab6ef6326933e5fa3748d07d83026db0 Certificate serial: 019A9BB58CF511EC03B5A5874413BF10647C Authority key identifier: 98:21:E3:7E:AB:6E:F6:32:69:33:E5:FA:37:48:D0:7D:83:02:6D:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/CcUGGJ0q890w20Dwur-E0JX_IFA.roa Signing time: Wed 19 Nov 2025 10:42:37 +0000 ROA not before: Wed 19 Nov 2025 10:42:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35370 IP address blocks: 78.152.64.0/19 maxlen: 24 78.152.64.0/21 maxlen: 21 78.152.68.0/24 maxlen: 24 78.152.72.0/21 maxlen: 21 78.152.80.0/21 maxlen: 21 78.152.88.0/21 maxlen: 24 78.152.88.0/22 maxlen: 22 78.152.92.0/22 maxlen: 22 78.152.95.0/24 maxlen: 24 87.243.128.0/18 maxlen: 18 87.243.128.0/22 maxlen: 22 87.243.132.0/22 maxlen: 22 87.243.136.0/22 maxlen: 22 87.243.140.0/22 maxlen: 22 87.243.144.0/23 maxlen: 23 87.243.144.0/24 maxlen: 24 87.243.145.0/24 maxlen: 24 87.243.146.0/23 maxlen: 23 87.243.148.0/23 maxlen: 23 87.243.150.0/23 maxlen: 23 87.243.152.0/22 maxlen: 22 87.243.154.0/24 maxlen: 24 87.243.156.0/23 maxlen: 23 87.243.156.0/24 maxlen: 24 87.243.157.0/24 maxlen: 24 87.243.158.0/23 maxlen: 23 87.243.158.0/24 maxlen: 24 87.243.160.0/22 maxlen: 22 87.243.160.0/23 maxlen: 23 87.243.164.0/22 maxlen: 22 87.243.168.0/23 maxlen: 23 87.243.171.0/24 maxlen: 24 87.243.172.0/22 maxlen: 22 87.243.177.0/24 maxlen: 24 87.243.178.0/24 maxlen: 24 87.243.180.0/22 maxlen: 22 87.243.184.0/21 maxlen: 21 87.243.184.0/24 maxlen: 24 2a0b:9e00::/29 maxlen: 29 2a0b:9e00::/32 maxlen: 32 2a0b:9e01::/32 maxlen: 32 2a0b:9e02::/32 maxlen: 32 2a0b:9e03::/32 maxlen: 32 2a0b:9e04::/32 maxlen: 32 2a0b:9e05::/32 maxlen: 32 2a0b:9e06::/32 maxlen: 32 2a0b:9e07::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:b5:8c:f5:11:ec:03:b5:a5:87:44:13:bf:10:64:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9821e37eab6ef6326933e5fa3748d07d83026db0 Validity Not Before: Nov 19 10:42:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=09c506189d2af3dd30db40f0babf84d095ff2050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:40:f5:63:66:dd:b9:a7:4d:b9:50:c9:24:5e: 18:b5:dc:7d:ed:07:a5:78:87:66:94:79:a8:ac:17: e2:10:68:06:f4:d3:2f:41:ef:5e:78:50:a1:be:3d: 4d:d1:83:2f:01:8a:f7:f9:fc:bb:39:e7:d8:64:d5: ce:02:c6:c3:09:29:a4:2a:af:ac:44:9a:98:f5:a6: 61:ad:45:3b:ff:6d:03:88:13:70:c9:d4:a2:1f:85: 4e:df:af:29:c4:6a:12:8c:cd:51:b5:12:8e:25:d7: e1:2e:ab:00:73:ff:d5:30:a0:4a:ad:82:b2:fb:0c: 65:e0:90:7a:bd:81:c8:7a:37:97:47:db:79:bf:ae: e3:97:d7:4b:ca:54:18:00:17:ec:b0:8f:2e:57:be: f8:43:6f:e2:07:7b:97:33:bb:c4:5e:4f:95:14:1d: 70:56:99:51:ca:4e:ee:00:95:01:d9:87:85:d7:2a: 36:79:a7:0f:52:d5:b4:06:42:c1:57:65:96:de:f0: 2a:92:10:3a:bd:99:c2:e6:2e:55:64:20:08:98:0f: 04:5a:cf:5b:23:ab:6f:0e:4d:82:54:b4:62:55:d7: b6:dd:b3:04:51:55:4e:db:1e:04:e7:5f:9a:2d:da: a6:23:c3:0c:3a:5c:6d:ef:d9:78:a8:e8:66:92:94: 9b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C5:06:18:9D:2A:F3:DD:30:DB:40:F0:BA:BF:84:D0:95:FF:20:50 X509v3 Authority Key Identifier: keyid:98:21:E3:7E:AB:6E:F6:32:69:33:E5:FA:37:48:D0:7D:83:02:6D:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/CcUGGJ0q890w20Dwur-E0JX_IFA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.152.64.0/19 87.243.128.0/18 IPv6: 2a0b:9e00::/29 Signature Algorithm: sha256WithRSAEncryption 6f:96:74:81:cb:df:1b:5d:ae:22:35:47:5f:0c:0d:7f:ba:b8: d4:86:73:da:16:c8:b8:f5:46:7f:76:9c:89:0a:cf:49:2a:f8: 79:e9:85:04:ac:ef:3d:38:f6:91:e9:e9:0d:1f:0d:0e:dd:1c: 55:c1:76:46:90:6f:d6:2a:2b:1a:cc:4b:01:84:d2:fe:bc:63: 2f:a5:b8:9d:6a:4c:fd:3b:ff:73:a4:28:f6:aa:cc:c8:83:5f: e0:15:80:7e:64:66:99:ef:72:95:70:c5:74:58:e1:f5:a8:17: e6:54:85:cd:26:32:41:02:8e:de:ce:bd:a9:32:c3:b3:69:f1: f5:8d:d2:ed:07:f5:9d:ca:4e:96:27:da:be:98:6a:96:a1:ec: 32:ff:02:cb:57:2d:3e:aa:89:15:8e:57:2f:58:f8:36:81:0f: 42:07:f7:bb:fc:78:cf:8c:7b:53:e6:a1:c7:ed:c7:9e:d1:62: cd:7d:87:88:d9:c1:c0:91:35:72:08:26:2b:f6:f2:b4:c0:e5: d5:39:8e:14:1f:52:de:6c:27:99:ad:2d:59:78:68:ca:31:02: f5:46:a9:b9:af:f5:33:30:68:1d:02:36:1b:3d:d7:c4:7c:4b: 82:03:fd:fe:d4:3d:df:52:d7:7e:d6:28:0f:8b:17:c9:97:94: 52:a8:f3:ab -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZqbtYz1EewDtaWHRBO/EGR8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MjFlMzdlYWI2ZWY2MzI2OTMzZTVmYTM3NDhkMDdkODMw MjZkYjAwHhcNMjUxMTE5MTA0MjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWM1MDYxODlkMmFmM2RkMzBkYjQwZjBiYWJmODRkMDk1ZmYyMDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUD1Y2bduadNuVDJJF4Ytdx97Qel eIdmlHmorBfiEGgG9NMvQe9eeFChvj1N0YMvAYr3+fy7OefYZNXOAsbDCSmkKq+s RJqY9aZhrUU7/20DiBNwydSiH4VO368pxGoSjM1RtRKOJdfhLqsAc//VMKBKrYKy +wxl4JB6vYHIejeXR9t5v67jl9dLylQYABfssI8uV774Q2/iB3uXM7vEXk+VFB1w VplRyk7uAJUB2YeF1yo2eacPUtW0BkLBV2WW3vAqkhA6vZnC5i5VZCAImA8EWs9b I6tvDk2CVLRiVde23bMEUVVO2x4E51+aLdqmI8MMOlxt79l4qOhmkpSbtQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAnFBhidKvPdMNtA8Lq/hNCV/yBQMB8GA1UdIwQY MBaAFJgh436rbvYyaTPl+jdI0H2DAm2wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUNIamZxdHU5akpwTS1YNk4walFmWU1DYmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jMTVkZGItZTFlZi00MzA4LTk4OGQt YWVmYTc1N2UwYzM4LzEvQ2NVR0dKMHE4OTB3MjBEd3VyLUUwSlhfSUZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jMTVkZGItZTFlZi00MzA4LTk4OGQtYWVmYTc1N2UwYzM4 LzEvbUNIamZxdHU5akpwTS1YNk4walFmWU1DYmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFTphAAwQG V/OAMA0EAgACMAcDBQMqC54AMA0GCSqGSIb3DQEBCwUAA4IBAQBvlnSBy98bXa4i NUdfDA1/urjUhnPaFsi49UZ/dpyJCs9JKvh56YUErO89OPaR6ekNHw0O3RxVwXZG kG/WKisazEsBhNL+vGMvpbidakz9O/9zpCj2qszIg1/gFYB+ZGaZ73KVcMV0WOH1 qBfmVIXNJjJBAo7ezr2pMsOzafH1jdLtB/Wdyk6WJ9q+mGqWoewy/wLLVy0+qokV jlcvWPg2gQ9CB/e7/HjPjHtT5qHH7cee0WLNfYeI2cHAkTVyCCYr9vK0wOXVOY4U H1LebCeZrS1ZeGjKMQL1Rqm5r/UzMGgdAjYbPdfEfEuCA/3+1D3fUtd+1igPixfJ l5RSqPOr -----END CERTIFICATE-----Generated at Sat Dec 6 18:22:16 2025 by rpki-client