This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/_yddHTNEel0GBu-2Argpr_u83GQ.roa File: _yddHTNEel0GBu-2Argpr_u83GQ.roa (raw, json) Hash identifier: ZAIghD2GFPvhVjpWbd6Zm9RJtXdqLd2jsS/IulWaoyc= Subject key identifier: FF:27:5D:1D:33:44:7A:5D:06:06:EF:B6:02:B8:29:AF:FB:BC:DC:64 Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Certificate serial: 019AE383AA51B839DB7CDA46BBED59CD349C Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/_yddHTNEel0GBu-2Argpr_u83GQ.roa Signing time: Wed 03 Dec 2025 09:20:48 +0000 ROA not before: Wed 03 Dec 2025 09:20:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47232 IP address blocks: 5.39.200.0/22 maxlen: 24 5.39.200.0/23 maxlen: 23 46.29.224.0/21 maxlen: 32 46.29.228.0/23 maxlen: 32 78.111.112.0/20 maxlen: 32 78.111.114.0/23 maxlen: 32 78.111.116.0/23 maxlen: 32 91.192.32.0/22 maxlen: 24 93.91.144.0/20 maxlen: 32 93.91.149.0/24 maxlen: 32 93.91.150.0/23 maxlen: 32 93.91.152.0/24 maxlen: 32 93.91.153.0/24 maxlen: 32 93.91.154.0/24 maxlen: 32 109.235.0.0/21 maxlen: 24 185.15.108.0/22 maxlen: 32 185.52.172.0/24 maxlen: 32 185.64.220.0/22 maxlen: 32 185.125.128.0/22 maxlen: 32 213.108.162.0/23 maxlen: 32 213.109.172.0/22 maxlen: 32 217.75.208.0/20 maxlen: 32 2a02:17a0::/29 maxlen: 48 2a02:17a0:d000::/36 maxlen: 36 2a03:2a80::/29 maxlen: 48 2a03:2a82::/31 maxlen: 48 2a04:7bc0::/29 maxlen: 48 2a04:7bc7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:83:aa:51:b8:39:db:7c:da:46:bb:ed:59:cd:34:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Validity Not Before: Dec 3 09:20:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ff275d1d33447a5d0606efb602b829affbbcdc64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:64:89:97:4e:f5:e8:c9:1d:6a:36:5e:ea:d3: 63:bd:e3:66:02:cf:a7:70:b8:43:3c:f4:b5:d5:f2: 07:21:af:4e:68:97:c1:c6:37:06:a3:e9:04:86:af: d8:f1:a9:46:55:67:d4:dd:0c:cc:7e:c1:0e:09:c9: 7c:88:5c:c2:ad:3e:65:08:1e:03:d6:aa:0f:62:cd: 76:2b:42:b5:a1:79:67:47:ac:e7:90:7a:c8:cc:60: d7:38:5c:76:df:ef:9c:b9:5f:3c:bd:0b:1b:26:5a: 75:ca:e6:f1:97:8f:4e:5b:c3:fd:36:6b:14:df:b2: 3a:8c:a7:72:3e:6d:53:2d:11:32:2d:b9:01:2d:c9: 46:01:e5:ce:28:b8:fd:a8:b2:f6:78:95:05:2b:9b: 42:13:39:a7:40:26:2d:87:80:01:e1:d7:4b:a6:b0: 40:75:cf:78:f0:cf:c6:fd:02:16:40:4d:a3:0a:ed: ab:03:9d:52:b4:d1:c3:37:f9:df:0b:5e:f0:49:7c: 94:c4:6c:1e:e3:e7:98:48:9c:36:fc:42:05:1d:05: 7e:5a:05:02:1e:36:d7:8a:75:4f:fc:50:9c:fb:a3: 39:c5:ab:5e:4f:f3:f8:cd:49:44:b5:0d:44:2d:59: c4:28:11:f4:dc:b9:bc:4e:95:09:ce:8e:a1:46:ff: ca:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:27:5D:1D:33:44:7A:5D:06:06:EF:B6:02:B8:29:AF:FB:BC:DC:64 X509v3 Authority Key Identifier: keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/_yddHTNEel0GBu-2Argpr_u83GQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.39.200.0/22 46.29.224.0/21 78.111.112.0/20 91.192.32.0/22 93.91.144.0/20 109.235.0.0/21 185.15.108.0/22 185.52.172.0/24 185.64.220.0/22 185.125.128.0/22 213.108.162.0/23 213.109.172.0/22 217.75.208.0/20 IPv6: 2a02:17a0::/29 2a03:2a80::/29 2a04:7bc0::/29 Signature Algorithm: sha256WithRSAEncryption 36:fd:62:ab:95:3a:9e:1f:1b:ce:fe:c7:1d:0a:bf:c2:68:9a: 16:d9:0c:cb:20:66:f3:ab:18:ba:c6:63:32:9a:56:ec:dc:b5: 81:dd:c5:73:9f:bb:34:ae:db:f4:6a:43:5a:c1:a3:c4:2f:fc: ab:66:20:ad:40:79:eb:88:1e:87:f8:ad:a2:4b:30:07:8a:2c: d4:a2:46:1f:d3:e1:49:23:07:6a:27:c8:fe:bf:f7:5f:6e:c6: cb:e7:16:b4:2c:62:2a:4e:56:ed:50:88:de:97:8d:0e:b6:0e: b9:fd:f0:2b:04:eb:1e:6d:e6:08:81:a2:23:b5:a8:e4:9e:e4: 1c:ec:50:48:6a:a0:a0:f6:04:5d:7d:e0:a5:13:ee:08:50:6a: 3d:c4:62:09:1b:ef:61:bf:40:ff:2c:b6:30:90:c1:e3:03:ff: 9d:3c:f2:13:3d:9c:77:50:69:94:ae:91:84:00:93:59:5f:a0: 61:9f:86:32:0e:66:ac:78:05:51:b9:e1:10:99:41:71:08:2f: 14:fb:2e:d7:0b:6d:d5:c1:12:36:74:2a:67:3d:6d:a7:e6:ef: de:68:04:80:dd:ae:7f:b3:fe:a9:68:38:28:b3:7c:6b:22:20: bd:4b:4b:91:59:f1:e9:e0:f4:4c:69:73:b6:ac:06:ba:be:f7: e7:07:19:e9 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgISAZrjg6pRuDnbfNpGu+1ZzTScMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWYwZjVmZjYyMGUwZGI1MzExZjY0NzM2OTA5OTczYWM2 MGY2ZjMwHhcNMjUxMjAzMDkyMDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjI3NWQxZDMzNDQ3YTVkMDYwNmVmYjYwMmI4MjlhZmZiYmNkYzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmSJl0716MkdajZe6tNjveNmAs+n cLhDPPS11fIHIa9OaJfBxjcGo+kEhq/Y8alGVWfU3QzMfsEOCcl8iFzCrT5lCB4D 1qoPYs12K0K1oXlnR6znkHrIzGDXOFx23++cuV88vQsbJlp1yubxl49OW8P9NmsU 37I6jKdyPm1TLREyLbkBLclGAeXOKLj9qLL2eJUFK5tCEzmnQCYth4AB4ddLprBA dc948M/G/QIWQE2jCu2rA51StNHDN/nfC17wSXyUxGwe4+eYSJw2/EIFHQV+WgUC HjbXinVP/FCc+6M5xateT/P4zUlEtQ1ELVnEKBH03Lm8TpUJzo6hRv/KhQIDAQAB o4ICbzCCAmswHQYDVR0OBBYEFP8nXR0zRHpdBgbvtgK4Ka/7vNxkMB8GA1UdIwQY MBaAFDWfD1/2IODbUxH2RzaQmXOsYPbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvX3lkZEhUTkVlbDBHQnUtMkFyZ3ByX3U4M0dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwVAQCAAEwTgMEAgUnyAME Ay4d4AMEBE5vcAMEAlvAIAMEBF1bkAMEA23rAAMEArkPbAMEALk0rAMEArlA3AME Arl9gAMEAdVsogMEAtVtrAMEBNlL0DAbBAIAAjAVAwUDKgIXoAMFAyoDKoADBQMq BHvAMA0GCSqGSIb3DQEBCwUAA4IBAQA2/WKrlTqeHxvO/scdCr/CaJoW2QzLIGbz qxi6xmMymlbs3LWB3cVzn7s0rtv0akNawaPEL/yrZiCtQHnriB6H+K2iSzAHiizU okYf0+FJIwdqJ8j+v/dfbsbL5xa0LGIqTlbtUIjel40Otg65/fArBOsebeYIgaIj tajknuQc7FBIaqCg9gRdfeClE+4IUGo9xGIJG+9hv0D/LLYwkMHjA/+dPPITPZx3 UGmUrpGEAJNZX6Bhn4YyDmaseAVRueEQmUFxCC8U+y7XC23VwRI2dCpnPW2n5u/e aASA3a5/s/6paDgos3xrIiC9S0uRWfHp4PRMaXO2rAa6vvfnBxnp -----END CERTIFICATE-----Generated at Sun Dec 7 00:10:46 2025 by rpki-client