This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/1-fO1x-zi8QWRbmjkH4DjBKGyJ98.roa File: 1-fO1x-zi8QWRbmjkH4DjBKGyJ98.roa (raw, json) Hash identifier: mvfK7I5z/jAXOStg+IEHlWFuIOiBRl1nmXGrXHhSqtY= Subject key identifier: F9:F3:B5:C7:EC:E2:F1:05:91:6E:68:E4:1F:80:E3:04:A1:B2:27:DF Certificate issuer: /CN=490b21f79b9ea2f3d042374714867d12401995db Certificate serial: 019AE41B0B9D3DBB09FE2D739ECD49F99ACD Authority key identifier: 49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/1-fO1x-zi8QWRbmjkH4DjBKGyJ98.roa Signing time: Wed 03 Dec 2025 12:06:08 +0000 ROA not before: Wed 03 Dec 2025 12:06:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51043 IP address blocks: 5.22.136.0/21 maxlen: 24 77.73.9.0/24 maxlen: 24 77.73.12.0/24 maxlen: 24 82.197.74.0/24 maxlen: 24 83.98.32.0/19 maxlen: 19 148.253.160.0/19 maxlen: 24 159.242.64.0/18 maxlen: 24 178.23.128.0/21 maxlen: 24 185.59.180.0/22 maxlen: 24 185.173.67.0/24 maxlen: 24 195.184.238.0/23 maxlen: 24 212.47.86.0/23 maxlen: 23 2a00:ed40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:1b:0b:9d:3d:bb:09:fe:2d:73:9e:cd:49:f9:9a:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490b21f79b9ea2f3d042374714867d12401995db Validity Not Before: Dec 3 12:06:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f9f3b5c7ece2f105916e68e41f80e304a1b227df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e4:a6:b0:4d:4c:07:59:d8:8b:34:14:e6:93: 8c:79:63:9c:f8:0f:2b:c4:00:ce:f6:ba:b1:4d:25: 62:48:5e:0b:18:aa:51:0b:4c:25:e2:f2:0a:5c:9b: 56:8f:33:0f:b8:a0:63:bd:a8:1e:57:48:b7:f9:9d: 8d:fe:0e:c1:79:58:b1:34:5c:d2:41:c4:96:83:06: e5:ae:87:df:d9:fd:2b:f8:41:6a:f3:44:62:b2:e6: f7:f6:e0:18:95:9c:72:a4:ab:32:95:6b:9f:e2:84: d0:86:ec:13:1d:87:45:64:10:4d:9e:61:3d:09:21: db:c3:76:a9:a0:89:c4:6e:63:bb:fd:65:30:0a:bf: ac:78:99:da:51:33:4c:0e:47:13:8e:11:62:30:c8: 2f:fe:bd:a9:48:87:08:47:3a:46:32:a5:d1:26:a4: 0d:00:af:80:69:35:e6:27:b6:35:42:68:6f:0d:27: b9:09:2d:59:9b:16:b5:1b:f8:d4:7a:60:c6:57:0b: 91:7d:f8:f8:f1:75:21:7a:8d:6a:4e:ea:27:f9:a7: 13:63:30:1a:0f:af:10:91:17:b2:2b:3d:13:61:c1: f1:d8:d4:19:e6:15:40:8e:a5:53:68:3f:f9:c4:db: 28:8d:f3:77:15:c5:84:a1:8a:27:14:31:5f:5c:56: af:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F3:B5:C7:EC:E2:F1:05:91:6E:68:E4:1F:80:E3:04:A1:B2:27:DF X509v3 Authority Key Identifier: keyid:49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/1-fO1x-zi8QWRbmjkH4DjBKGyJ98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.22.136.0/21 77.73.9.0/24 77.73.12.0/24 82.197.74.0/24 83.98.32.0/19 148.253.160.0/19 159.242.64.0/18 178.23.128.0/21 185.59.180.0/22 185.173.67.0/24 195.184.238.0/23 212.47.86.0/23 IPv6: 2a00:ed40::/32 Signature Algorithm: sha256WithRSAEncryption 5e:80:60:8c:92:55:67:4c:2e:3d:55:e1:56:88:d8:13:76:cf: 41:fa:ba:3b:35:42:71:20:2a:ba:d1:59:bb:8a:2b:9d:3e:cc: 17:7f:41:04:58:e1:f9:13:53:0c:04:1e:d2:91:2c:97:7d:d5: a6:3c:65:58:87:e0:7d:a3:eb:6a:f5:94:a1:51:d5:b1:3b:d0: 12:3c:d4:65:9f:fb:fa:55:ec:21:3c:eb:a5:e0:52:fb:8b:20: 57:28:47:5d:72:0c:66:6a:34:33:55:cd:b5:86:ce:40:71:5b: f1:16:9f:5b:d2:58:d3:e3:b1:4d:15:9a:87:58:d3:6e:66:08: ca:ae:83:e9:3e:f9:ac:b9:f2:a0:a5:74:db:37:c7:fd:80:f0: 92:2d:23:68:17:7e:d1:ae:f6:a5:23:af:2e:9b:81:99:ac:aa: 1e:4c:52:5c:23:7c:cd:a0:c7:7b:f9:54:34:a6:f2:17:2a:ba: dc:f7:a5:31:1d:71:a9:1e:86:80:1a:98:50:fe:43:7b:25:27: ae:4b:f6:7b:9a:f3:c8:be:42:b1:a8:6a:78:72:9b:8e:6a:74: 2f:1d:29:a0:4e:97:2e:31:78:0b:de:d2:2d:82:23:20:0a:cd: 24:f0:ab:06:f2:d8:f0:73:98:ca:3f:98:53:b2:63:41:b2:bd: b4:76:bb:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgISAZrkGwudPbsJ/i1zns1J+ZrNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MGIyMWY3OWI5ZWEyZjNkMDQyMzc0NzE0ODY3ZDEyNDAx OTk1ZGIwHhcNMjUxMjAzMTIwNjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWYzYjVjN2VjZTJmMTA1OTE2ZTY4ZTQxZjgwZTMwNGExYjIyN2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuSmsE1MB1nYizQU5pOMeWOc+A8r xADO9rqxTSViSF4LGKpRC0wl4vIKXJtWjzMPuKBjvageV0i3+Z2N/g7BeVixNFzS QcSWgwblroff2f0r+EFq80Risub39uAYlZxypKsylWuf4oTQhuwTHYdFZBBNnmE9 CSHbw3apoInEbmO7/WUwCr+seJnaUTNMDkcTjhFiMMgv/r2pSIcIRzpGMqXRJqQN AK+AaTXmJ7Y1QmhvDSe5CS1Zmxa1G/jUemDGVwuRffj48XUheo1qTuon+acTYzAa D68QkReyKz0TYcHx2NQZ5hVAjqVTaD/5xNsojfN3FcWEoYonFDFfXFavjwIDAQAB o4ICWzCCAlcwHQYDVR0OBBYEFPnztcfs4vEFkW5o5B+A4wShsiffMB8GA1UdIwQY MBaAFEkLIfebnqLz0EI3RxSGfRJAGZXbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1FzaDk1dWVvdlBRUWpkSEZJWjlFa0FabGRzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9lMTAxNjUtYjRjZC00MzIxLWJmM2Mt NDgwYzMyZjQwMGUxLzEvMS1mTzF4LXppOFFXUmJtamtINERqQktHeUo5OC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYWUvZTEwMTY1LWI0Y2QtNDMyMS1iZjNjLTQ4MGMzMmY0MDBl MS8xL1NRc2g5NXVlb3ZQUVFqZEhGSVo5RWtBWmxkcy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBwBggrBgEFBQcBBwEB/wRhMF8wTgQCAAEwSAMEAwUWiAME AE1JCQMEAE1JDAMEAFLFSgMEBVNiIAMEBZT9oAMEBp/yQAMEA7IXgAMEArk7tAME ALmtQwMEAcO47gMEAdQvVjANBAIAAjAHAwUAKgDtQDANBgkqhkiG9w0BAQsFAAOC AQEAXoBgjJJVZ0wuPVXhVojYE3bPQfq6OzVCcSAqutFZu4ornT7MF39BBFjh+RNT DAQe0pEsl33VpjxlWIfgfaPravWUoVHVsTvQEjzUZZ/7+lXsITzrpeBS+4sgVyhH XXIMZmo0M1XNtYbOQHFb8RafW9JY0+OxTRWah1jTbmYIyq6D6T75rLnyoKV02zfH /YDwki0jaBd+0a72pSOvLpuBmayqHkxSXCN8zaDHe/lUNKbyFyq63PelMR1xqR6G gBqYUP5DeyUnrkv2e5rzyL5CsahqeHKbjmp0Lx0poE6XLjF4C97SLYIjIArNJPCr BvLY8HOYyj+YU7JjQbK9tHa7pw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:47:48 2025 by rpki-client