This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/oWnKEFNDYJlrUghHRhUXP1kVdCc.roa File: oWnKEFNDYJlrUghHRhUXP1kVdCc.roa (raw, json) Hash identifier: nEmPj67OGh6UydVBXMGywfERqcOnY+HpJE/FVl2nhVw= Subject key identifier: A1:69:CA:10:53:43:60:99:6B:52:08:47:46:15:17:3F:59:15:74:27 Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Certificate serial: 019A7F1C140B2DCFA7C77461B9715A2AD59E Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/oWnKEFNDYJlrUghHRhUXP1kVdCc.roa Signing time: Thu 13 Nov 2025 21:25:37 +0000 ROA not before: Thu 13 Nov 2025 21:25:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213301 IP address blocks: 5.255.57.0/24 maxlen: 24 5.255.61.0/24 maxlen: 24 5.255.62.0/23 maxlen: 23 23.252.66.0/23 maxlen: 23 23.252.68.0/24 maxlen: 24 23.252.71.0/24 maxlen: 24 23.252.75.0/24 maxlen: 24 23.252.76.0/24 maxlen: 24 23.252.79.0/24 maxlen: 24 91.92.112.0/23 maxlen: 23 107.150.162.0/23 maxlen: 23 107.150.171.0/24 maxlen: 24 107.150.175.0/24 maxlen: 24 107.150.177.0/24 maxlen: 24 162.222.88.0/23 maxlen: 23 162.222.90.0/24 maxlen: 24 167.160.4.0/24 maxlen: 24 167.160.11.0/24 maxlen: 24 167.160.27.0/24 maxlen: 24 176.126.101.0/24 maxlen: 24 185.4.224.0/23 maxlen: 23 185.252.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7f:1c:14:0b:2d:cf:a7:c7:74:61:b9:71:5a:2a:d5:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Validity Not Before: Nov 13 21:25:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a169ca10534360996b5208474615173f59157427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c5:31:0a:d4:a7:80:4d:87:a1:65:75:dd:13: cf:df:76:65:85:5f:79:cd:a6:2d:e0:32:f8:ae:92: 6f:07:71:e0:df:ff:ce:b7:8e:e0:1f:1d:7c:8b:f3: 68:28:92:e5:be:1a:75:d9:7b:a6:47:1a:76:3d:e7: 61:0c:4f:90:58:ad:03:24:00:0b:36:7f:c2:5f:d3: 86:e4:cf:4b:c3:d1:27:09:17:dc:e2:4a:6a:a7:02: 95:11:df:c2:6d:bd:d3:84:6c:cf:f4:68:62:8b:76: c1:4c:d7:d8:8e:bd:43:89:02:ba:bc:80:74:79:22: 71:ff:cb:e9:32:e8:04:a2:77:63:53:1e:f6:4a:5d: 03:5e:f5:39:ba:75:13:28:e9:a4:54:e6:3b:9e:c5: 32:34:19:ce:c3:48:1c:29:be:8a:1a:60:75:2a:b8: 00:92:4a:ea:ca:c0:cc:ec:0d:79:ae:94:4d:e3:ad: 35:89:24:3f:02:21:c2:ed:70:e9:a8:9a:98:21:6b: 90:f6:18:16:1a:cf:d7:16:5f:86:46:50:f4:85:a1: 0c:3e:6e:7a:44:fb:da:52:25:6a:b9:08:42:32:58: 3d:30:ff:8e:4e:aa:65:69:39:3e:46:fc:4b:6d:c2: a1:27:9e:4d:9a:44:77:e6:af:a6:4e:20:79:c7:cf: 13:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:69:CA:10:53:43:60:99:6B:52:08:47:46:15:17:3F:59:15:74:27 X509v3 Authority Key Identifier: keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/oWnKEFNDYJlrUghHRhUXP1kVdCc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.255.57.0/24 5.255.61.0-5.255.63.255 23.252.66.0-23.252.68.255 23.252.71.0/24 23.252.75.0-23.252.76.255 23.252.79.0/24 91.92.112.0/23 107.150.162.0/23 107.150.171.0/24 107.150.175.0/24 107.150.177.0/24 162.222.88.0-162.222.90.255 167.160.4.0/24 167.160.11.0/24 167.160.27.0/24 176.126.101.0/24 185.4.224.0/23 185.252.210.0/24 Signature Algorithm: sha256WithRSAEncryption 35:50:61:b3:a1:f3:f2:71:8a:6c:7e:f3:36:a3:e2:9c:cc:01: 3d:4a:76:c5:e8:c1:62:35:6e:06:9f:a8:33:41:d8:da:83:ca: 7d:aa:c5:31:04:ea:87:26:b8:b4:f8:95:8c:52:97:ed:d2:01: 8b:f8:2f:31:96:80:07:f1:b5:b7:b6:34:d6:83:59:6e:67:c3: 97:f2:47:da:fb:51:f9:94:dc:8a:02:f9:98:fb:85:39:45:fa: e3:fa:d2:cf:ed:c2:c5:d5:0b:f2:f5:70:be:a7:d3:fc:34:43: 43:47:c8:c2:23:c9:b0:12:ac:f1:bc:49:0f:89:9a:bc:45:3d: 6c:d5:b1:61:a3:6c:c1:4b:5f:da:2e:66:89:af:22:66:54:d5: 3c:98:c0:18:53:40:0b:6c:79:2b:24:fa:7f:59:25:4b:8c:cb: 2e:be:47:39:26:f4:de:75:75:cf:11:bd:76:99:fe:51:ec:4e: 18:24:d4:d0:e4:6f:88:d5:ac:70:c0:0e:9b:76:da:d6:57:40: 05:d4:e5:0a:e5:d9:35:5a:4b:1e:13:2a:37:8d:72:37:8e:59: fe:c1:68:cd:70:55:df:a9:4f:7f:17:47:2e:fc:a1:90:63:ad: c2:28:c2:23:dd:c3:1d:01:32:d0:4f:41:42:bd:21:3c:e2:b6: cf:6a:99:e1 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgISAZp/HBQLLc+nx3RhuXFaKtWeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMzY4YjBhZWM2YzdmZDQ4ZDBkOTZiNDA3N2EyM2Y5MDZh ODZhNDgwHhcNMjUxMTEzMjEyNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTY5Y2ExMDUzNDM2MDk5NmI1MjA4NDc0NjE1MTczZjU5MTU3NDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcUxCtSngE2HoWV13RPP33ZlhV95 zaYt4DL4rpJvB3Hg3//Ot47gHx18i/NoKJLlvhp12XumRxp2PedhDE+QWK0DJAAL Nn/CX9OG5M9Lw9EnCRfc4kpqpwKVEd/Cbb3ThGzP9Ghii3bBTNfYjr1DiQK6vIB0 eSJx/8vpMugEondjUx72Sl0DXvU5unUTKOmkVOY7nsUyNBnOw0gcKb6KGmB1KrgA kkrqysDM7A15rpRN4601iSQ/AiHC7XDpqJqYIWuQ9hgWGs/XFl+GRlD0haEMPm56 RPvaUiVquQhCMlg9MP+OTqplaTk+RvxLbcKhJ55NmkR35q+mTiB5x88TTwIDAQAB o4IClDCCApAwHQYDVR0OBBYEFKFpyhBTQ2CZa1IIR0YVFz9ZFXQnMB8GA1UdIwQY MBaAFC42iwrsbH/UjQ2WtAd6I/kGqGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQt MTQyN2RkMTZlZmE0LzEvb1duS0VGTkRZSmxyVWdoSFJoVVhQMWtWZENjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQtMTQyN2RkMTZlZmE0 LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljCBkwQCAAEwgYwDBAAF /zkwDAMEAAX/PQMEBgX/ADAMAwQBF/xCAwQAF/xEAwQAF/xHMAwDBAAX/EsDBAAX /EwDBAAX/E8DBAFbXHADBAFrlqIDBABrlqsDBABrlq8DBABrlrEwDAMEA6LeWAME AKLeWgMEAKegBAMEAKegCwMEAKegGwMEALB+ZQMEAbkE4AMEALn80jANBgkqhkiG 9w0BAQsFAAOCAQEANVBhs6Hz8nGKbH7zNqPinMwBPUp2xejBYjVuBp+oM0HY2oPK farFMQTqhya4tPiVjFKX7dIBi/gvMZaAB/G1t7Y01oNZbmfDl/JH2vtR+ZTcigL5 mPuFOUX64/rSz+3CxdUL8vVwvqfT/DRDQ0fIwiPJsBKs8bxJD4mavEU9bNWxYaNs wUtf2i5mia8iZlTVPJjAGFNAC2x5KyT6f1klS4zLLr5HOSb03nV1zxG9dpn+UexO GCTU0ORviNWscMAOm3ba1ldABdTlCuXZNVpLHhMqN41yN45Z/sFozXBV36lPfxdH LvyhkGOtwijCI93DHQEy0E9BQr0hPOK2z2qZ4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 19:24:02 2025 by rpki-client