This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/Xnsh1ipbAFGMoTxCcg2pz0iK1Pg.roa File: Xnsh1ipbAFGMoTxCcg2pz0iK1Pg.roa (raw, json) Hash identifier: kPxiiXsfCjuikHiwrTf7pS70mFZeZb17CE/hyAXCyoY= Subject key identifier: 5E:7B:21:D6:2A:5B:00:51:8C:A1:3C:42:72:0D:A9:CF:48:8A:D4:F8 Certificate issuer: /CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad Certificate serial: 019A810F0A401D349A302EA04A04777ED288 Authority key identifier: C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/Xnsh1ipbAFGMoTxCcg2pz0iK1Pg.roa Signing time: Fri 14 Nov 2025 06:30:37 +0000 ROA not before: Fri 14 Nov 2025 06:30:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208909 IP address blocks: 2.57.128.0/22 maxlen: 22 2.57.128.0/24 maxlen: 24 2.57.129.0/24 maxlen: 24 2.57.130.0/24 maxlen: 24 2.57.131.0/24 maxlen: 24 5.183.220.0/22 maxlen: 22 45.15.136.0/24 maxlen: 24 45.15.137.0/24 maxlen: 24 45.15.138.0/24 maxlen: 24 45.15.139.0/24 maxlen: 24 46.253.32.0/24 maxlen: 24 46.253.33.0/24 maxlen: 24 46.253.34.0/24 maxlen: 24 46.253.35.0/24 maxlen: 24 46.253.36.0/24 maxlen: 24 46.253.37.0/24 maxlen: 24 46.253.38.0/24 maxlen: 24 46.253.39.0/24 maxlen: 24 91.204.124.0/22 maxlen: 22 162.213.64.0/24 maxlen: 24 162.213.65.0/24 maxlen: 24 162.213.66.0/24 maxlen: 24 162.213.67.0/24 maxlen: 24 185.38.128.0/22 maxlen: 22 185.41.96.0/24 maxlen: 24 185.41.97.0/24 maxlen: 24 185.41.98.0/24 maxlen: 24 185.41.99.0/24 maxlen: 24 185.58.172.0/24 maxlen: 24 185.58.173.0/24 maxlen: 24 185.58.174.0/24 maxlen: 24 185.58.175.0/24 maxlen: 24 185.87.188.0/22 maxlen: 22 185.132.90.0/24 maxlen: 24 185.219.136.0/22 maxlen: 22 195.211.168.0/22 maxlen: 22 2a00:fde0::/32 maxlen: 32 2a01:57a0::/32 maxlen: 32 2a09:d940::/29 maxlen: 29 2a0e:3c80::/29 maxlen: 29 2a0e:3c80::/31 maxlen: 31 2a0e:3c82::/31 maxlen: 31 2a0e:3c84::/31 maxlen: 31 2a0e:3c86::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:0f:0a:40:1d:34:9a:30:2e:a0:4a:04:77:7e:d2:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad Validity Not Before: Nov 14 06:30:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5e7b21d62a5b00518ca13c42720da9cf488ad4f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:be:18:63:23:8b:78:16:ea:94:e1:c0:42:23: ec:67:b9:ed:71:9c:8e:1a:65:c4:30:07:38:fe:34: 0f:c6:b5:79:2d:15:06:5b:16:a7:6b:8d:5f:a5:61: 1d:93:8b:07:70:1d:b1:5b:9d:4f:0d:fd:91:6d:fe: 5a:ee:12:9b:66:5d:e4:79:4f:3e:bd:f9:c8:79:bf: 61:d8:48:1b:e6:df:83:4b:39:11:42:9b:88:91:f6: 21:70:ee:0c:01:d9:38:34:e1:13:ce:eb:b9:dd:fb: 89:bf:de:da:d6:61:22:f7:ee:45:4a:c7:f8:b1:40: fc:57:60:e6:47:48:6d:ab:29:8c:9b:b5:5f:2e:12: 89:1c:85:21:44:0c:c5:f6:2e:aa:8b:e9:d3:fd:69: de:f0:62:d3:50:ae:63:f0:88:7d:d1:46:9a:e9:6a: a4:fd:78:3d:e7:20:e2:d5:20:28:d2:74:a3:4c:b3: f5:13:33:dd:11:4a:66:44:88:44:16:65:b3:32:be: 1f:30:40:99:67:cb:91:b0:c2:4d:26:30:cc:06:c9: a1:bb:05:3b:c0:ff:7d:49:c0:de:90:b1:87:d3:5a: b7:c6:91:34:82:86:c5:98:ac:0f:12:83:45:aa:71: cd:03:0d:92:7a:5d:a2:07:da:79:0b:82:9f:06:c8: 3b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:7B:21:D6:2A:5B:00:51:8C:A1:3C:42:72:0D:A9:CF:48:8A:D4:F8 X509v3 Authority Key Identifier: keyid:C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/Xnsh1ipbAFGMoTxCcg2pz0iK1Pg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.128.0/22 5.183.220.0/22 45.15.136.0/22 46.253.32.0/21 91.204.124.0/22 162.213.64.0/22 185.38.128.0/22 185.41.96.0/22 185.58.172.0/22 185.87.188.0/22 185.132.90.0/24 185.219.136.0/22 195.211.168.0/22 IPv6: 2a00:fde0::/32 2a01:57a0::/32 2a09:d940::/29 2a0e:3c80::/29 Signature Algorithm: sha256WithRSAEncryption 1f:a4:39:df:a9:73:54:14:61:ca:c2:c5:d1:2d:c9:cd:cc:4f: 37:b4:16:2e:69:39:e0:89:9d:91:29:de:62:66:42:c5:b3:bb: 27:0a:2b:ed:d7:28:34:e3:0f:e8:1d:14:3d:16:f8:a4:4a:90: fd:7e:52:34:7e:22:38:33:29:7f:24:38:f1:6e:6e:c6:f9:67: 68:a2:14:02:8e:a3:6d:e4:58:50:f4:0d:63:e9:f6:0d:88:89: f4:62:01:2b:65:00:e8:5e:c9:49:fa:77:0e:7a:c6:cd:99:2c: 94:2e:13:89:e3:c9:9d:48:2e:c7:a1:30:b5:1d:9b:03:eb:09: 75:d3:af:e6:57:e7:23:2d:3c:75:25:3c:9b:37:25:49:a3:46: 20:c1:23:e0:b4:2c:18:2d:d6:53:e9:03:94:56:a9:52:d5:04: bc:f5:a0:6d:a2:9f:4b:3e:ee:3c:21:ce:2f:a1:ac:b9:03:2a: 06:0f:cf:0f:19:11:4a:ce:83:2f:fd:10:fc:7a:11:89:35:ed: 8e:1c:a0:90:32:32:52:7c:36:ac:e1:2c:83:c8:ff:f4:81:bf: 24:ac:da:01:43:42:dc:a6:ef:ef:ff:b0:39:68:d5:ae:c6:f3: e3:66:d2:8f:aa:47:3e:3c:53:ae:a2:ce:49:31:e0:17:7c:be: d5:d3:69:9c -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgISAZqBDwpAHTSaMC6gSgR3ftKIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZThlNTZiMThkNDVjNjQ2ZjAzY2I2ZjkwNjlkYTBjOGIz Yzc0YWQwHhcNMjUxMTE0MDYzMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTdiMjFkNjJhNWIwMDUxOGNhMTNjNDI3MjBkYTljZjQ4OGFkNGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL4YYyOLeBbqlOHAQiPsZ7ntcZyO GmXEMAc4/jQPxrV5LRUGWxana41fpWEdk4sHcB2xW51PDf2Rbf5a7hKbZl3keU8+ vfnIeb9h2Egb5t+DSzkRQpuIkfYhcO4MAdk4NOETzuu53fuJv97a1mEi9+5FSsf4 sUD8V2DmR0htqymMm7VfLhKJHIUhRAzF9i6qi+nT/Wne8GLTUK5j8Ih90Uaa6Wqk /Xg95yDi1SAo0nSjTLP1EzPdEUpmRIhEFmWzMr4fMECZZ8uRsMJNJjDMBsmhuwU7 wP99ScDekLGH01q3xpE0gobFmKwPEoNFqnHNAw2Sel2iB9p5C4KfBsg77QIDAQAB o4ICdjCCAnIwHQYDVR0OBBYEFF57IdYqWwBRjKE8QnINqc9IitT4MB8GA1UdIwQY MBaAFMDo5WsY1FxkbwPLb5Bp2gyLPHStMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd09qbGF4alVYR1J2QTh0dmtHbmFESXM4ZEswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yYWJlYTItMzBkMC00NjU0LWE4MzQt NzQ1YmNlMzA2MGM5LzEvWG5zaDFpcGJBRkdNb1R4Q2NnMnB6MGlLMVBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8yYWJlYTItMzBkMC00NjU0LWE4MzQtNzQ1YmNlMzA2MGM5 LzEvd09qbGF4alVYR1J2QTh0dmtHbmFESXM4ZEswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGLBggrBgEFBQcBBwEB/wR8MHowVAQCAAEwTgMEAgI5gAME AgW33AMEAi0PiAMEAy79IAMEAlvMfAMEAqLVQAMEArkmgAMEArkpYAMEArk6rAME ArlXvAMEALmEWgMEArnbiAMEAsPTqDAiBAIAAjAcAwUAKgD94AMFACoBV6ADBQMq CdlAAwUDKg48gDANBgkqhkiG9w0BAQsFAAOCAQEAH6Q536lzVBRhysLF0S3JzcxP N7QWLmk54ImdkSneYmZCxbO7Jwor7dcoNOMP6B0UPRb4pEqQ/X5SNH4iODMpfyQ4 8W5uxvlnaKIUAo6jbeRYUPQNY+n2DYiJ9GIBK2UA6F7JSfp3DnrGzZkslC4TiePJ nUgux6EwtR2bA+sJddOv5lfnIy08dSU8mzclSaNGIMEj4LQsGC3WU+kDlFapUtUE vPWgbaKfSz7uPCHOL6GsuQMqBg/PDxkRSs6DL/0Q/HoRiTXtjhygkDIyUnw2rOEs g8j/9IG/JKzaAUNC3Kbv7/+wOWjVrsbz42bSj6pHPjxTrqLOSTHgF3y+1dNpnA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:07:39 2025 by rpki-client