This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/5zZrYH8O7nis-dqO-PSgPArwkbc.roa File: 5zZrYH8O7nis-dqO-PSgPArwkbc.roa (raw, json) Hash identifier: NdSLJTn0jtPND2RXMSjaEnJSSngo79NubRaezRYDprc= Subject key identifier: E7:36:6B:60:7F:0E:EE:78:AC:F9:DA:8E:F8:F4:A0:3C:0A:F0:91:B7 Certificate issuer: /CN=a088b0547f09fe9224050d70a523da5bedbe0738 Certificate serial: 019A9BD76C200E7505DC48B49BA1202724D7 Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/5zZrYH8O7nis-dqO-PSgPArwkbc.roa Signing time: Wed 19 Nov 2025 11:19:37 +0000 ROA not before: Wed 19 Nov 2025 11:19:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215413 IP address blocks: 37.230.138.0/24 maxlen: 24 45.85.60.0/22 maxlen: 24 45.143.196.0/24 maxlen: 24 45.143.197.0/24 maxlen: 24 45.143.198.0/24 maxlen: 24 45.143.199.0/24 maxlen: 24 81.16.176.0/24 maxlen: 24 81.16.177.0/24 maxlen: 24 91.208.92.0/24 maxlen: 24 185.83.152.0/24 maxlen: 24 185.83.153.0/24 maxlen: 24 185.83.154.0/24 maxlen: 24 185.83.155.0/24 maxlen: 24 185.206.148.0/24 maxlen: 24 185.206.149.0/24 maxlen: 24 185.206.150.0/24 maxlen: 24 185.206.151.0/24 maxlen: 24 188.64.33.0/24 maxlen: 24 194.164.96.0/24 maxlen: 24 194.213.3.0/24 maxlen: 24 213.170.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:d7:6c:20:0e:75:05:dc:48:b4:9b:a1:20:27:24:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738 Validity Not Before: Nov 19 11:19:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e7366b607f0eee78acf9da8ef8f4a03c0af091b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:14:69:eb:9a:95:16:79:b8:75:1a:3a:33:93: f9:68:3e:24:56:05:75:75:98:bb:02:4a:63:41:7a: bb:7c:f0:c9:10:32:99:a1:a3:08:48:cb:24:81:36: ff:26:2c:8c:6d:42:63:f3:b5:ed:3c:1f:cf:23:86: 71:7b:2d:ee:15:d6:cf:23:e2:30:86:e1:27:e2:e7: 80:d4:0a:24:63:ef:e4:a9:76:3e:a6:0d:77:d3:09: 17:79:25:59:63:9c:fe:fa:a9:f8:73:49:e4:6f:55: 1d:be:ae:ae:4c:cc:70:aa:8d:3b:de:5f:ed:ab:fd: fa:64:f9:27:4b:61:9e:92:b4:a9:d9:85:ed:5b:b6: 82:58:e3:d1:4b:4e:a5:0f:a0:0d:38:38:0b:a0:f4: af:ad:9f:56:f3:f8:3e:95:f9:db:f1:a1:0d:49:11: 9f:14:43:60:49:6a:b9:76:86:87:b5:15:93:9f:ce: 82:a2:86:e0:a0:7f:19:e1:cd:40:62:c1:27:36:6d: 80:31:3a:7a:1a:ae:73:64:f2:d5:55:06:e5:8a:19: 4d:09:f9:0c:7e:80:a3:9a:38:29:fd:d6:b8:15:c2: 81:90:9d:f0:84:24:3c:d2:d8:cf:b1:4f:38:7b:57: 12:d3:24:72:4b:14:bd:2b:a0:81:4a:e8:25:72:53: 1b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:36:6B:60:7F:0E:EE:78:AC:F9:DA:8E:F8:F4:A0:3C:0A:F0:91:B7 X509v3 Authority Key Identifier: keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/5zZrYH8O7nis-dqO-PSgPArwkbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.138.0/24 45.85.60.0/22 45.143.196.0/22 81.16.176.0/23 91.208.92.0/24 185.83.152.0/22 185.206.148.0/22 188.64.33.0/24 194.164.96.0/24 194.213.3.0/24 213.170.135.0/24 Signature Algorithm: sha256WithRSAEncryption a2:34:5f:a8:59:7c:df:5f:53:15:90:78:af:d5:ba:08:7b:91: 39:0b:62:91:18:2d:6c:03:b6:2e:70:0e:7c:cf:dc:d2:71:b9: 07:68:37:4b:7f:82:a2:0f:81:3a:4e:72:be:31:3b:80:83:a7: 8e:a0:e3:80:b9:9b:9d:76:ca:00:84:95:0f:da:52:e5:ce:49: ea:c8:c9:e9:ae:55:1a:85:16:ac:0d:af:ef:19:d8:0e:31:d1: 8a:2d:fd:0f:98:7f:7d:ca:e8:68:cd:3c:cc:8b:bf:0b:47:0d: 1e:21:d1:96:03:62:8e:81:cf:d7:fb:6f:94:99:6f:bd:aa:6a: da:f3:0d:a8:4a:c2:b9:a3:c8:03:cb:dd:b6:52:13:ae:77:6f: 98:45:01:51:be:0a:35:9d:5d:8f:e4:88:48:2c:22:fa:b7:d3: 0a:b7:6a:71:4b:28:46:55:b3:62:ee:b2:24:08:8a:b7:e6:ce: 74:f2:6b:cc:bf:06:a8:e9:fa:6d:b5:b7:69:91:64:eb:f1:f0: 3b:f2:e5:c7:f0:51:2c:70:c1:a3:50:ad:f8:d8:4f:c0:6e:53: fe:61:64:5f:31:ea:23:02:5a:66:97:a2:c0:25:76:91:46:af: 8c:a5:a2:6f:ac:cb:f5:02:cd:fa:6c:c4:fa:63:ef:8e:2e:cf: 5d:86:26:e4 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZqb12wgDnUF3Ei0m6EgJyTXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwODhiMDU0N2YwOWZlOTIyNDA1MGQ3MGE1MjNkYTViZWRi ZTA3MzgwHhcNMjUxMTE5MTExOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzM2NmI2MDdmMGVlZTc4YWNmOWRhOGVmOGY0YTAzYzBhZjA5MWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxRp65qVFnm4dRo6M5P5aD4kVgV1 dZi7AkpjQXq7fPDJEDKZoaMISMskgTb/JiyMbUJj87XtPB/PI4Zxey3uFdbPI+Iw huEn4ueA1AokY+/kqXY+pg130wkXeSVZY5z++qn4c0nkb1Udvq6uTMxwqo073l/t q/36ZPknS2GekrSp2YXtW7aCWOPRS06lD6ANODgLoPSvrZ9W8/g+lfnb8aENSRGf FENgSWq5doaHtRWTn86CoobgoH8Z4c1AYsEnNm2AMTp6Gq5zZPLVVQblihlNCfkM foCjmjgp/da4FcKBkJ3whCQ80tjPsU84e1cS0yRySxS9K6CBSuglclMbkwIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFOc2a2B/Du54rPnajvj0oDwK8JG3MB8GA1UdIwQY MBaAFKCIsFR/Cf6SJAUNcKUj2lvtvgc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMt ZGY4MmZhODk3MzI2LzEvNXpacllIOE83bmlzLWRxTy1QU2dQQXJ3a2JjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMtZGY4MmZhODk3MzI2 LzEvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAJeaKAwQC LVU8AwQCLY/EAwQBURCwAwQAW9BcAwQCuVOYAwQCuc6UAwQAvEAhAwQAwqRgAwQA wtUDAwQA1aqHMA0GCSqGSIb3DQEBCwUAA4IBAQCiNF+oWXzfX1MVkHiv1boIe5E5 C2KRGC1sA7YucA58z9zScbkHaDdLf4KiD4E6TnK+MTuAg6eOoOOAuZuddsoAhJUP 2lLlzknqyMnprlUahRasDa/vGdgOMdGKLf0PmH99yuhozTzMi78LRw0eIdGWA2KO gc/X+2+UmW+9qmra8w2oSsK5o8gDy922UhOud2+YRQFRvgo1nV2P5IhILCL6t9MK t2pxSyhGVbNi7rIkCIq35s508mvMvwao6fpttbdpkWTr8fA78uXH8FEscMGjUK34 2E/AblP+YWRfMeojAlpml6LAJXaRRq+MpaJvrMv1As36bMT6Y++OLs9dhibk -----END CERTIFICATE-----Generated at Sat Dec 6 19:58:57 2025 by rpki-client