This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/52iA0LrTI-HPaLrxRsOgzukXLSc.roa File: 52iA0LrTI-HPaLrxRsOgzukXLSc.roa (raw, json) Hash identifier: 07JM3bcJiWa7LEkknbEFtQ0zZ4C7WmcnQ4lrnwXLBac= Subject key identifier: E7:68:80:D0:BA:D3:23:E1:CF:68:BA:F1:46:C3:A0:CE:E9:17:2D:27 Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603 Certificate serial: 019A56367E52B69C957381A76E59FE83CE41 Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/52iA0LrTI-HPaLrxRsOgzukXLSc.roa Signing time: Wed 05 Nov 2025 22:50:03 +0000 ROA not before: Wed 05 Nov 2025 22:50:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213535 IP address blocks: 107.161.168.0/24 maxlen: 24 107.161.174.0/24 maxlen: 24 107.161.175.0/24 maxlen: 24 107.181.134.0/24 maxlen: 24 155.254.35.0/24 maxlen: 24 162.217.248.0/24 maxlen: 24 162.217.249.0/24 maxlen: 24 198.105.112.0/24 maxlen: 24 198.105.115.0/24 maxlen: 24 198.105.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:56:36:7e:52:b6:9c:95:73:81:a7:6e:59:fe:83:ce:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603 Validity Not Before: Nov 5 22:50:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e76880d0bad323e1cf68baf146c3a0cee9172d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8a:1a:14:ec:e5:1f:dc:7f:82:71:ea:df:00: 73:b0:6d:c8:6f:fe:f7:54:23:25:79:d7:fd:1b:f4: e3:fe:2f:17:7d:cd:a5:55:8c:24:f2:c4:54:35:97: fb:7f:3c:22:40:a7:7a:d5:0c:e8:14:c0:18:5e:26: 7f:21:7b:a1:8c:8d:d3:d7:e1:a4:4c:2b:97:35:e5: 49:a5:79:57:3e:ce:12:96:50:c6:90:86:81:6f:11: 84:c7:0c:f7:d1:e2:70:7d:c5:c3:34:ac:e2:35:b4: 5c:bc:0b:00:63:ac:2d:a3:44:00:db:99:18:19:b3: 0d:51:32:5c:cd:02:b7:fb:9f:bc:03:a2:b9:e0:ef: 81:85:68:7e:50:d5:ff:94:41:7c:3c:60:e5:74:8b: be:00:16:3f:9b:5d:9f:6f:d8:e2:ee:df:6b:c1:c2: 88:aa:24:8c:11:73:dc:b8:42:4f:25:85:de:3e:c9: 62:4d:96:e1:15:f6:ef:1b:36:ea:2d:f8:d5:bd:c5: 5a:41:e9:92:b7:c9:e3:db:29:af:0e:1d:2c:bf:ea: 43:6d:f0:c9:1e:84:0e:af:b9:e4:b0:38:b3:db:a3: 2e:87:8d:0e:f5:4f:7f:d5:da:d4:64:5b:83:4a:dd: fe:d8:df:7d:2f:52:f9:1a:e7:b5:9b:95:58:23:46: a6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:68:80:D0:BA:D3:23:E1:CF:68:BA:F1:46:C3:A0:CE:E9:17:2D:27 X509v3 Authority Key Identifier: keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/52iA0LrTI-HPaLrxRsOgzukXLSc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.161.168.0/24 107.161.174.0/23 107.181.134.0/24 155.254.35.0/24 162.217.248.0/23 198.105.112.0/24 198.105.115.0/24 198.105.123.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:c8:7e:de:cb:4a:5c:7b:b4:55:40:1c:0c:4f:f0:81:87:f5: b2:e3:bd:33:25:7e:3d:c5:99:c0:99:b7:1b:1f:48:a9:99:67: 74:9e:f8:01:b8:c9:f1:2e:f7:ba:03:c4:ef:8c:e9:a3:fa:d2: 35:e4:eb:9d:b5:a1:cd:f0:89:0d:04:f8:da:88:c5:48:e4:3e: 2d:f7:c0:10:98:62:3f:66:56:e1:74:b7:f6:ec:80:db:ab:e6: ef:9c:64:3a:80:28:f8:ec:4c:f1:bb:1b:a8:e2:3d:8a:3f:5a: ac:cf:2f:a7:4a:00:21:7d:ca:94:ef:ef:6b:0d:ae:e6:85:54: 95:29:98:c0:35:a0:f6:92:c3:c9:f4:e0:0a:d3:70:2e:52:7a: fb:ec:8f:6d:30:8f:3a:d8:49:f6:6c:ce:1b:54:21:42:c1:ed: 15:83:94:53:d5:be:2d:a6:52:8a:6f:83:17:aa:d2:be:45:a5: a5:cb:d3:99:30:eb:40:5a:84:c0:2e:4f:a6:7c:b5:7d:32:12: 87:bc:51:b1:eb:2d:46:02:0a:9c:5f:5b:84:67:ec:f3:18:3c: 8d:72:21:15:40:d2:d4:78:92:7f:3e:89:d7:92:31:86:b3:01: b4:7a:08:61:a7:b1:e9:c1:bf:65:ed:ca:cb:cd:9e:07:71:d0: 84:0c:98:f5 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZpWNn5StpyVc4Gnbln+g85BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NTRjMzQ3ZDY4ZDE1NDkzZGU3MWJiOTYyZjBhNTY3ZTEz NGQ2MDMwHhcNMjUxMTA1MjI1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzY4ODBkMGJhZDMyM2UxY2Y2OGJhZjE0NmMzYTBjZWU5MTcyZDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4oaFOzlH9x/gnHq3wBzsG3Ib/73 VCMledf9G/Tj/i8Xfc2lVYwk8sRUNZf7fzwiQKd61QzoFMAYXiZ/IXuhjI3T1+Gk TCuXNeVJpXlXPs4SllDGkIaBbxGExwz30eJwfcXDNKziNbRcvAsAY6wto0QA25kY GbMNUTJczQK3+5+8A6K54O+BhWh+UNX/lEF8PGDldIu+ABY/m12fb9ji7t9rwcKI qiSMEXPcuEJPJYXePsliTZbhFfbvGzbqLfjVvcVaQemSt8nj2ymvDh0sv+pDbfDJ HoQOr7nksDiz26Muh40O9U9/1drUZFuDSt3+2N99L1L5Gue1m5VYI0amQQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFOdogNC60yPhz2i68UbDoM7pFy0nMB8GA1UdIwQY MBaAFOdUw0fWjRVJPecbuWLwpWfhNNYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2It MzdiNjJkMjIzOTI0LzEvNTJpQTBMclRJLUhQYUxyeFJzT2d6dWtYTFNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2ItMzdiNjJkMjIzOTI0 LzEvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAa6GoAwQB a6GuAwQAa7WGAwQAm/4jAwQBotn4AwQAxmlwAwQAxmlzAwQAxml7MA0GCSqGSIb3 DQEBCwUAA4IBAQA9yH7ey0pce7RVQBwMT/CBh/Wy470zJX49xZnAmbcbH0ipmWd0 nvgBuMnxLve6A8TvjOmj+tI15OudtaHN8IkNBPjaiMVI5D4t98AQmGI/ZlbhdLf2 7IDbq+bvnGQ6gCj47Ezxuxuo4j2KP1qszy+nSgAhfcqU7+9rDa7mhVSVKZjANaD2 ksPJ9OAK03AuUnr77I9tMI862En2bM4bVCFCwe0Vg5RT1b4tplKKb4MXqtK+RaWl y9OZMOtAWoTALk+mfLV9MhKHvFGx6y1GAgqcX1uEZ+zzGDyNciEVQNLUeJJ/PonX kjGGswG0eghhp7Hpwb9l7crLzZ4HcdCEDJj1 -----END CERTIFICATE-----Generated at Sun Dec 7 00:35:18 2025 by rpki-client