This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/IzDcWQJq5TjLviWA-SDOhUfGE88.roa File: IzDcWQJq5TjLviWA-SDOhUfGE88.roa (raw, json) Hash identifier: 4Nhe9PjVrikfr9c3yr21YzrVX5bVgLkJ6F3mxFBsnIU= Subject key identifier: 23:30:DC:59:02:6A:E5:38:CB:BE:25:80:F9:20:CE:85:47:C6:13:CF Certificate issuer: /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00 Certificate serial: 019A724E7D291BF6074D49CF5CB992842981 Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/IzDcWQJq5TjLviWA-SDOhUfGE88.roa Signing time: Tue 11 Nov 2025 09:45:37 +0000 ROA not before: Tue 11 Nov 2025 09:45:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50319 IP address blocks: 5.180.140.0/22 maxlen: 22 185.84.196.0/22 maxlen: 22 185.144.196.0/22 maxlen: 22 185.156.208.0/22 maxlen: 24 193.105.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:72:4e:7d:29:1b:f6:07:4d:49:cf:5c:b9:92:84:29:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00 Validity Not Before: Nov 11 09:45:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2330dc59026ae538cbbe2580f920ce8547c613cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3e:28:29:a2:c3:7b:81:76:dd:42:93:83:ce: 3b:f4:97:46:86:39:c1:d4:34:12:d1:3b:91:e0:7e: be:e6:9e:fb:16:ba:76:68:40:e7:e8:6b:17:ac:18: 2f:ff:61:6e:55:6f:6c:73:47:2b:01:b5:eb:da:2a: 13:3b:13:15:49:c0:e8:7f:ad:b6:9a:cb:bf:c6:89: b3:9d:2d:42:46:04:d6:a2:75:49:b7:29:c3:c5:f5: b0:aa:23:41:5e:7a:94:e5:d5:a5:85:73:40:9a:11: a1:1d:9d:c7:b3:e1:8b:e9:e2:e7:45:8d:f5:a9:bf: 56:33:8e:43:9e:43:7a:16:9b:57:01:e6:ef:be:e0: aa:1b:be:66:67:dd:25:47:1c:17:d8:59:ce:f7:15: 3b:07:80:e7:bb:b1:37:c2:fb:66:0e:bf:84:75:99: 60:4a:14:ad:42:02:8a:da:47:8c:d2:3c:97:d1:c6: 8b:78:da:c5:39:30:2a:41:e1:83:ce:0b:ac:57:ea: e4:45:5c:ae:be:95:2f:8c:38:66:75:78:80:2c:27: fd:cb:ed:60:5f:08:d9:da:17:72:a3:d4:01:fd:6d: 17:d9:69:48:60:55:8b:20:c5:8c:83:e8:b8:60:f6: 11:a3:96:2c:a7:1a:37:f0:8c:84:d0:2f:ad:53:eb: da:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:30:DC:59:02:6A:E5:38:CB:BE:25:80:F9:20:CE:85:47:C6:13:CF X509v3 Authority Key Identifier: keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/IzDcWQJq5TjLviWA-SDOhUfGE88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.140.0/22 185.84.196.0/22 185.144.196.0/22 185.156.208.0/22 193.105.215.0/24 Signature Algorithm: sha256WithRSAEncryption b5:ec:69:f0:de:7d:69:8e:1c:d0:1c:a9:0c:70:97:9d:2d:37: 6c:fd:fd:dd:60:74:f7:7d:5d:b4:4e:49:4f:74:59:e9:e0:bd: c4:fb:d4:36:2f:34:67:39:4e:ce:2e:29:a6:ce:5a:21:63:99: 8b:90:0c:86:05:0e:d3:a6:1a:2a:a7:db:25:42:3d:13:5b:9f: 99:ef:78:b7:84:79:3d:59:29:d0:a0:17:09:c8:2b:a4:6a:22: f6:f3:f9:a4:b8:97:7e:f0:5f:71:52:01:8a:f7:6c:fb:5f:52: dd:41:bd:c4:15:ef:6b:8f:68:70:9f:d5:f5:07:f2:72:49:ee: c0:78:43:8c:ff:cb:08:6f:49:64:e7:94:c4:39:87:6f:a3:ec: 78:3c:df:e2:46:64:40:c8:0c:c7:71:84:b9:05:8f:80:36:3d: 62:20:9f:7f:49:51:ab:4a:cf:43:6f:2b:18:bb:8c:7f:47:77: 34:20:83:e6:8a:e6:c4:8c:05:1e:08:8c:8f:a2:c5:c9:8e:65: d4:b7:00:ae:47:8e:70:68:05:cc:fd:ec:79:d3:0f:fc:f1:48: 0e:80:87:32:52:30:b4:ec:57:27:a9:e5:ed:28:96:01:22:8d: 60:be:97:4a:07:cc:f8:42:fd:69:f9:ab:26:22:c3:eb:02:56: 43:c1:a6:96 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZpyTn0pG/YHTUnPXLmShCmBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MzFiMDgwZDRlYTZmZDA2MTZhNmU3MDFjN2M4MTVkNmZm ODdjMDAwHhcNMjUxMTExMDk0NTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzMwZGM1OTAyNmFlNTM4Y2JiZTI1ODBmOTIwY2U4NTQ3YzYxM2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj4oKaLDe4F23UKTg8479JdGhjnB 1DQS0TuR4H6+5p77Frp2aEDn6GsXrBgv/2FuVW9sc0crAbXr2ioTOxMVScDof622 msu/xomznS1CRgTWonVJtynDxfWwqiNBXnqU5dWlhXNAmhGhHZ3Hs+GL6eLnRY31 qb9WM45DnkN6FptXAebvvuCqG75mZ90lRxwX2FnO9xU7B4Dnu7E3wvtmDr+EdZlg ShStQgKK2keM0jyX0caLeNrFOTAqQeGDzgusV+rkRVyuvpUvjDhmdXiALCf9y+1g XwjZ2hdyo9QB/W0X2WlIYFWLIMWMg+i4YPYRo5Yspxo38IyE0C+tU+vafwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFCMw3FkCauU4y74lgPkgzoVHxhPPMB8GA1UdIwQY MBaAFOYxsIDU6m/QYWpucBx8gV1v+HwAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWIt OTNiM2EzNjk2ZDk2LzEvSXpEY1dRSnE1VGpMdmlXQS1TRE9oVWZHRTg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWItOTNiM2EzNjk2ZDk2 LzEvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCBbSMAwQC uVTEAwQCuZDEAwQCuZzQAwQAwWnXMA0GCSqGSIb3DQEBCwUAA4IBAQC17Gnw3n1p jhzQHKkMcJedLTds/f3dYHT3fV20TklPdFnp4L3E+9Q2LzRnOU7OLimmzlohY5mL kAyGBQ7Tphoqp9slQj0TW5+Z73i3hHk9WSnQoBcJyCukaiL28/mkuJd+8F9xUgGK 92z7X1LdQb3EFe9rj2hwn9X1B/JySe7AeEOM/8sIb0lk55TEOYdvo+x4PN/iRmRA yAzHcYS5BY+ANj1iIJ9/SVGrSs9DbysYu4x/R3c0IIPmiubEjAUeCIyPosXJjmXU twCuR45waAXM/ex50w/88UgOgIcyUjC07FcnqeXtKJYBIo1gvpdKB8z4Qv1p+asm IsPrAlZDwaaW -----END CERTIFICATE-----Generated at Sat Dec 6 17:19:05 2025 by rpki-client