This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/3256b4-4160-4d14-b44f-241e8fe27381/1/0f_arJoBaLF-XLrzU8EcXTZHmfY.roa File: 0f_arJoBaLF-XLrzU8EcXTZHmfY.roa (raw, json) Hash identifier: ywtuL9VpnhJkhV8T3hg8KzfDj9nIGXXgCL1jP2eFkdU= Subject key identifier: D1:FF:DA:AC:9A:01:68:B1:7E:5C:BA:F3:53:C1:1C:5D:36:47:99:F6 Certificate issuer: /CN=5dc28dd5d0ce18e212c69b0a0251e9d61571cac6 Certificate serial: 019AE89BB16B63567AC0EE95DAA88CAE5D32 Authority key identifier: 5D:C2:8D:D5:D0:CE:18:E2:12:C6:9B:0A:02:51:E9:D6:15:71:CA:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcKN1dDOGOISxpsKAlHp1hVxysY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/3256b4-4160-4d14-b44f-241e8fe27381/1/0f_arJoBaLF-XLrzU8EcXTZHmfY.roa Signing time: Thu 04 Dec 2025 09:05:08 +0000 ROA not before: Thu 04 Dec 2025 09:05:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51336 IP address blocks: 178.214.64.0/20 maxlen: 20 178.214.80.0/23 maxlen: 23 178.214.82.0/23 maxlen: 23 178.214.84.0/23 maxlen: 23 178.214.86.0/23 maxlen: 23 178.214.88.0/24 maxlen: 24 178.214.89.0/24 maxlen: 24 178.214.91.0/24 maxlen: 24 178.214.92.0/24 maxlen: 24 178.214.93.0/24 maxlen: 24 178.214.94.0/24 maxlen: 24 178.214.95.0/24 maxlen: 24 178.215.208.0/21 maxlen: 21 178.215.211.0/24 maxlen: 24 178.215.216.0/22 maxlen: 22 178.215.220.0/23 maxlen: 23 178.215.222.0/24 maxlen: 24 178.215.223.0/24 maxlen: 24 185.61.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/3256b4-4160-4d14-b44f-241e8fe27381/1/XcKN1dDOGOISxpsKAlHp1hVxysY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/3256b4-4160-4d14-b44f-241e8fe27381/1/XcKN1dDOGOISxpsKAlHp1hVxysY.mft rsync://rpki.ripe.net/repository/DEFAULT/XcKN1dDOGOISxpsKAlHp1hVxysY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:9b:b1:6b:63:56:7a:c0:ee:95:da:a8:8c:ae:5d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dc28dd5d0ce18e212c69b0a0251e9d61571cac6 Validity Not Before: Dec 4 09:05:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d1ffdaac9a0168b17e5cbaf353c11c5d364799f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:57:dc:70:a3:db:3c:43:cf:14:d9:3c:d2:8a: ae:d5:4a:ca:0a:f1:77:a1:ba:70:15:95:67:b3:c8: aa:d7:76:60:b0:2d:07:79:0a:af:ac:dc:15:50:d4: 65:b9:06:e3:9d:d1:3b:7a:39:93:f9:1a:03:01:36: c8:3c:51:d6:db:89:21:60:77:17:b4:32:90:75:9e: 4f:b9:05:af:da:ce:b7:0e:13:5e:e7:b0:9a:c7:af: c3:95:f4:34:6e:e8:fb:87:6f:27:9b:e1:da:d4:f3: 97:0c:66:84:a2:64:bc:3a:8f:11:b6:b7:4c:20:6d: 7d:ee:3d:30:7a:e3:2f:a2:21:9e:62:7c:4b:70:84: af:68:60:35:6b:d0:d0:b5:dd:97:55:aa:46:73:d7: 1b:83:d4:62:bd:76:da:0f:9a:17:bb:50:b2:9c:5f: 6e:63:8b:2b:d5:a4:2f:3c:b3:2d:9b:7b:92:c2:2d: 21:df:ee:6e:32:d0:da:2b:9c:4b:43:aa:43:df:ad: 2e:0e:33:bc:38:94:9c:00:aa:dc:89:05:ee:17:af: 82:e0:37:29:6a:35:75:d9:af:ac:6a:8d:3a:d8:24: f5:5f:a1:bd:88:52:c4:98:e6:52:32:2e:0d:08:cc: 81:f7:21:15:c5:b7:f0:b0:90:93:c6:f6:e3:47:91: f0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FF:DA:AC:9A:01:68:B1:7E:5C:BA:F3:53:C1:1C:5D:36:47:99:F6 X509v3 Authority Key Identifier: keyid:5D:C2:8D:D5:D0:CE:18:E2:12:C6:9B:0A:02:51:E9:D6:15:71:CA:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcKN1dDOGOISxpsKAlHp1hVxysY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3256b4-4160-4d14-b44f-241e8fe27381/1/0f_arJoBaLF-XLrzU8EcXTZHmfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3256b4-4160-4d14-b44f-241e8fe27381/1/XcKN1dDOGOISxpsKAlHp1hVxysY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.214.64.0-178.214.89.255 178.214.91.0-178.214.95.255 178.215.208.0/20 185.61.200.0/22 Signature Algorithm: sha256WithRSAEncryption 01:a2:27:36:19:93:a3:f0:75:a2:e6:2d:b1:66:51:6f:da:ab: 6b:ea:98:46:4a:1a:cc:2b:32:d4:d9:5b:8d:33:69:4f:3e:d3: 29:7b:bf:18:d2:6e:6b:97:89:01:fc:a5:a9:30:81:e4:b8:0f: 12:d3:e4:7d:9d:f7:7e:29:67:b7:b6:0a:88:cd:3c:7b:fc:37: 5b:ff:28:3a:56:0e:e4:8d:de:70:3f:4d:0c:72:1b:0d:92:d4: 11:aa:9c:f3:52:fd:d3:cd:80:12:27:ec:64:48:c4:45:24:ff: 36:2e:f1:a9:06:77:1a:19:86:d4:9b:cc:23:d5:66:20:57:0a: 0c:98:11:7d:c3:64:40:58:62:da:1a:36:33:4f:c0:24:1c:f6: b8:1f:95:e0:24:a8:ec:b4:ad:d5:19:df:a2:ee:cb:2d:c7:68: 9a:3e:86:c9:51:e5:c8:42:06:b1:d4:11:be:63:5a:20:af:ca: 5e:f3:fa:b2:f4:a4:71:96:e8:3a:1b:fa:c0:c7:f9:5b:20:7a: 12:17:ac:39:42:e0:39:3e:05:94:5d:a0:17:97:7d:56:69:d8: 22:01:9e:67:a9:ea:5f:e0:96:45:7e:98:19:59:48:c4:e0:51: 89:b2:88:78:44:f2:19:0f:e9:a6:cd:21:df:d9:4e:d9:c2:47: 25:e0:4a:ac -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZrom7FrY1Z6wO6V2qiMrl0yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYzI4ZGQ1ZDBjZTE4ZTIxMmM2OWIwYTAyNTFlOWQ2MTU3 MWNhYzYwHhcNMjUxMjA0MDkwNTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWZmZGFhYzlhMDE2OGIxN2U1Y2JhZjM1M2MxMWM1ZDM2NDc5OWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVfccKPbPEPPFNk80oqu1UrKCvF3 obpwFZVns8iq13ZgsC0HeQqvrNwVUNRluQbjndE7ejmT+RoDATbIPFHW24khYHcX tDKQdZ5PuQWv2s63DhNe57Cax6/DlfQ0buj7h28nm+Ha1POXDGaEomS8Oo8RtrdM IG197j0weuMvoiGeYnxLcISvaGA1a9DQtd2XVapGc9cbg9RivXbaD5oXu1CynF9u Y4sr1aQvPLMtm3uSwi0h3+5uMtDaK5xLQ6pD360uDjO8OJScAKrciQXuF6+C4Dcp ajV12a+sao062CT1X6G9iFLEmOZSMi4NCMyB9yEVxbfwsJCTxvbjR5Hw7QIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFNH/2qyaAWixfly681PBHF02R5n2MB8GA1UdIwQY MBaAFF3CjdXQzhjiEsabCgJR6dYVccrGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGNLTjFkRE9HT0lTeHBzS0FsSHAxaFZ4eXNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMjU2YjQtNDE2MC00ZDE0LWI0NGYt MjQxZThmZTI3MzgxLzEvMGZfYXJKb0JhTEYtWExyelU4RWNYVFpIbWZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8zMjU2YjQtNDE2MC00ZDE0LWI0NGYtMjQxZThmZTI3Mzgx LzEvWGNLTjFkRE9HT0lTeHBzS0FsSHAxaFZ4eXNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAay1kAD BAGy1lgwDAMEALLWWwMEBbLWQAMEBLLX0AMEArk9yDANBgkqhkiG9w0BAQsFAAOC AQEAAaInNhmTo/B1ouYtsWZRb9qra+qYRkoazCsy1NlbjTNpTz7TKXu/GNJua5eJ AfylqTCB5LgPEtPkfZ33filnt7YKiM08e/w3W/8oOlYO5I3ecD9NDHIbDZLUEaqc 81L9082AEifsZEjERST/Ni7xqQZ3GhmG1JvMI9VmIFcKDJgRfcNkQFhi2ho2M0/A JBz2uB+V4CSo7LSt1Rnfou7LLcdomj6GyVHlyEIGsdQRvmNaIK/KXvP6svSkcZbo Ohv6wMf5WyB6EhesOULgOT4FlF2gF5d9VmnYIgGeZ6nqX+CWRX6YGVlIxOBRibKI eETyGQ/pps0h39lO2cJHJeBKrA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:38:47 2025 by rpki-client