This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/F3Fzvuewg5rSmt66kLcFE3kwwlY.roa File: F3Fzvuewg5rSmt66kLcFE3kwwlY.roa (raw, json) Hash identifier: hcOeaGo4+3IDIEKUeW5pWD/4vLI+EphBbol71rMrCqA= Subject key identifier: 17:71:73:BE:E7:B0:83:9A:D2:9A:DE:BA:90:B7:05:13:79:30:C2:56 Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4 Certificate serial: 019AEB75AF3517E2B8478DD1BAF1D8509377 Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/F3Fzvuewg5rSmt66kLcFE3kwwlY.roa Signing time: Thu 04 Dec 2025 22:22:29 +0000 ROA not before: Thu 04 Dec 2025 22:22:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59796 IP address blocks: 5.252.32.0/24 maxlen: 24 5.252.33.0/24 maxlen: 24 5.252.34.0/24 maxlen: 24 5.252.35.0/24 maxlen: 24 160.79.120.0/24 maxlen: 24 160.79.121.0/24 maxlen: 24 160.79.122.0/24 maxlen: 24 160.79.123.0/24 maxlen: 24 185.121.240.0/22 maxlen: 22 185.121.240.0/24 maxlen: 24 185.121.241.0/24 maxlen: 24 185.121.242.0/24 maxlen: 24 185.121.243.0/24 maxlen: 24 2a06:a180:10::/48 maxlen: 48 2a06:a180:1f::/48 maxlen: 48 2a06:a180:30::/48 maxlen: 48 2a06:a180:40::/48 maxlen: 48 2a06:a180:50::/48 maxlen: 48 2a06:a180:5f::/48 maxlen: 48 2a06:a180:60::/48 maxlen: 48 2a06:a180:70::/48 maxlen: 48 2a06:a180:80::/48 maxlen: 48 2a06:a180:a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:eb:75:af:35:17:e2:b8:47:8d:d1:ba:f1:d8:50:93:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4 Validity Not Before: Dec 4 22:22:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=177173bee7b0839ad29adeba90b705137930c256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fc:42:08:d7:ab:a0:42:36:11:d8:6b:fb:25: d0:c2:7c:ba:09:0f:0d:a2:dd:0f:ee:2e:93:24:7c: 21:4c:cf:8b:79:62:fc:48:79:c1:c5:70:fe:73:a9: 69:73:6e:cf:c8:47:c9:eb:aa:94:92:2e:b4:d7:0b: d0:01:38:81:ad:94:c8:0b:e0:ba:b5:98:71:d8:59: 78:06:78:d2:43:cc:02:31:34:bf:a7:6a:33:44:8f: b1:4d:16:7e:25:45:68:f0:cd:ea:58:77:42:9c:a6: 86:ac:ef:97:b9:60:49:e2:42:e0:32:20:72:a3:81: e2:fd:42:6f:87:da:8d:c0:45:8d:46:7f:85:bd:82: 65:c5:0e:2e:8f:7a:53:dd:6b:cb:3e:6b:58:67:ca: 84:01:7a:19:4d:fe:88:44:85:e8:93:57:72:dc:c0: 39:04:d1:e1:e0:f5:4c:cc:46:92:1e:4a:9d:b0:a1: 3c:d6:a8:2e:68:1a:82:b0:38:99:a4:e3:0f:70:e2: 0c:05:cf:78:40:f2:0c:8e:59:e7:b1:af:c4:f7:e2: ff:79:0f:f9:b2:ac:ad:e2:4a:4d:d3:97:e7:de:6f: 89:b9:f0:90:0f:ba:ea:3f:3f:3c:6e:04:48:31:0d: 92:0c:83:ef:db:6f:91:b7:95:2a:2a:b8:6e:c6:ce: 77:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:71:73:BE:E7:B0:83:9A:D2:9A:DE:BA:90:B7:05:13:79:30:C2:56 X509v3 Authority Key Identifier: keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/F3Fzvuewg5rSmt66kLcFE3kwwlY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.32.0/22 160.79.120.0/22 185.121.240.0/22 IPv6: 2a06:a180:10::/48 2a06:a180:1f::/48 2a06:a180:30::/48 2a06:a180:40::/48 2a06:a180:50::/48 2a06:a180:5f::-2a06:a180:60:ffff:ffff:ffff:ffff:ffff 2a06:a180:70::/48 2a06:a180:80::/48 2a06:a180:a0::/48 Signature Algorithm: sha256WithRSAEncryption 50:bb:21:b3:69:94:23:ae:0f:c4:d0:3d:12:02:34:67:a8:f5: ce:c2:bf:ec:24:3e:39:0e:d6:3f:e0:52:d2:25:28:93:7b:d4: d8:7f:88:38:bf:04:d3:c4:0a:45:55:f3:c4:a5:7e:48:66:1f: 2c:a8:ec:28:72:ce:15:71:0d:ad:6b:a7:5b:0e:65:9d:bc:4b: 3a:b5:a0:c9:a8:d1:f6:5f:58:e4:28:c9:18:4a:fb:4d:96:b9: db:60:85:3d:74:11:84:e6:6f:45:8f:ac:47:cf:55:0a:46:93: d9:9b:fa:7e:27:9f:12:ac:3b:c9:36:1c:17:ac:e3:a0:d3:fc: b1:0b:d6:b9:cd:70:d9:96:3a:9f:64:cb:40:94:00:10:26:58: 86:ab:38:c0:bf:72:1b:54:28:2b:52:28:5d:28:1e:4a:54:b5: 48:e6:20:48:59:45:21:4e:73:c8:3f:c1:c3:19:f5:97:f4:a7: e6:9a:40:aa:ef:e6:35:c9:e9:54:e5:93:93:f7:51:72:b0:5c: b4:cb:fc:48:9a:e1:dc:c0:21:69:25:1b:a8:60:17:3b:05:2a: 75:f3:9c:4d:bf:01:d3:31:ed:95:0b:17:81:63:ad:34:e0:64: 45:f8:65:bd:3b:17:89:27:a8:8a:26:c4:a7:93:7e:8f:3f:49: 9a:f2:6c:90 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgISAZrrda81F+K4R43RuvHYUJN3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjZiMWVmNzQxMDA3MmNlOTZlODJkNzU4MWJlNDM2ZTYz OWE3YzQwHhcNMjUxMjA0MjIyMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzcxNzNiZWU3YjA4MzlhZDI5YWRlYmE5MGI3MDUxMzc5MzBjMjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfxCCNeroEI2Edhr+yXQwny6CQ8N ot0P7i6TJHwhTM+LeWL8SHnBxXD+c6lpc27PyEfJ66qUki601wvQATiBrZTIC+C6 tZhx2Fl4BnjSQ8wCMTS/p2ozRI+xTRZ+JUVo8M3qWHdCnKaGrO+XuWBJ4kLgMiBy o4Hi/UJvh9qNwEWNRn+FvYJlxQ4uj3pT3WvLPmtYZ8qEAXoZTf6IRIXok1dy3MA5 BNHh4PVMzEaSHkqdsKE81qguaBqCsDiZpOMPcOIMBc94QPIMjlnnsa/E9+L/eQ/5 sqyt4kpN05fn3m+JufCQD7rqPz88bgRIMQ2SDIPv22+Rt5UqKrhuxs533QIDAQAB o4ICezCCAncwHQYDVR0OBBYEFBdxc77nsIOa0preupC3BRN5MMJWMB8GA1UdIwQY MBaAFH4mse90EAcs6W6C11gb5DbmOafEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYt OGMzMmMzNTFlZTcwLzEvRjNGenZ1ZXdnNXJTbXQ2NmtMY0ZFM2t3d2xZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYtOGMzMmMzNTFlZTcw LzEvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MBgEAgABMBIDBAIF/CAD BAKgT3gDBAK5efAwYgQCAAIwXAMHACoGoYAAEAMHACoGoYAAHwMHACoGoYAAMAMH ACoGoYAAQAMHACoGoYAAUDASAwcAKgahgABfAwcAKgahgABgAwcAKgahgABwAwcA KgahgACAAwcAKgahgACgMA0GCSqGSIb3DQEBCwUAA4IBAQBQuyGzaZQjrg/E0D0S AjRnqPXOwr/sJD45DtY/4FLSJSiTe9TYf4g4vwTTxApFVfPEpX5IZh8sqOwocs4V cQ2ta6dbDmWdvEs6taDJqNH2X1jkKMkYSvtNlrnbYIU9dBGE5m9Fj6xHz1UKRpPZ m/p+J58SrDvJNhwXrOOg0/yxC9a5zXDZljqfZMtAlAAQJliGqzjAv3IbVCgrUihd KB5KVLVI5iBIWUUhTnPIP8HDGfWX9KfmmkCq7+Y1yelU5ZOT91FysFy0y/xImuHc wCFpJRuoYBc7BSp185xNvwHTMe2VCxeBY6004GRF+GW9OxeJJ6iKJsSnk36PP0ma 8myQ -----END CERTIFICATE-----Generated at Sat Dec 6 18:47:30 2025 by rpki-client