This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/LRiyT-rlzmXrQXbcYMWhBU482eg.roa File: LRiyT-rlzmXrQXbcYMWhBU482eg.roa (raw, json) Hash identifier: ICoe3kPCb8Fc28l3cr0GMLtrwRJd+KH/IvmqLhqbyWo= Subject key identifier: 2D:18:B2:4F:EA:E5:CE:65:EB:41:76:DC:60:C5:A1:05:4E:3C:D9:E8 Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 019AF2BDB33876622908AEF4DC882B0EE195 Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/LRiyT-rlzmXrQXbcYMWhBU482eg.roa Signing time: Sat 06 Dec 2025 08:18:29 +0000 ROA not before: Sat 06 Dec 2025 08:18:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41689 IP address blocks: 31.7.64.0/20 maxlen: 32 31.25.128.0/21 maxlen: 32 37.156.144.0/22 maxlen: 32 46.143.0.0/17 maxlen: 32 77.238.120.0/22 maxlen: 32 79.127.0.0/17 maxlen: 32 86.57.0.0/17 maxlen: 32 89.41.40.0/22 maxlen: 32 89.235.96.0/22 maxlen: 32 93.115.144.0/21 maxlen: 32 93.118.180.0/22 maxlen: 32 128.65.176.0/20 maxlen: 32 176.65.240.0/22 maxlen: 32 176.65.252.0/23 maxlen: 32 176.65.254.0/23 maxlen: 32 178.22.120.0/21 maxlen: 32 185.49.84.0/22 maxlen: 32 185.98.112.0/22 maxlen: 32 185.99.212.0/22 maxlen: 32 185.109.244.0/22 maxlen: 32 185.109.248.0/22 maxlen: 32 185.112.32.0/22 maxlen: 32 185.112.36.0/22 maxlen: 32 185.120.220.0/22 maxlen: 32 185.120.248.0/22 maxlen: 32 188.0.240.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:bd:b3:38:76:62:29:08:ae:f4:dc:88:2b:0e:e1:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Dec 6 08:18:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2d18b24feae5ce65eb4176dc60c5a1054e3cd9e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f1:df:2a:67:8a:5e:df:f6:52:b7:b8:9b:cf: 8a:ce:40:1a:8b:0f:4b:b4:24:72:e6:5b:85:56:20: 24:ec:4d:4c:43:1f:31:a6:c5:71:55:41:2a:6b:f6: d1:51:45:1d:ae:08:bd:e7:dc:d7:4b:56:8a:52:f5: 2f:cb:e9:6b:5f:67:68:b2:6c:c9:3e:d4:c1:3d:b3: c4:16:4e:ca:e5:be:f6:31:85:60:af:23:37:6b:96: 83:fb:4e:59:ef:53:d3:06:19:1b:36:d6:3e:b2:0e: 58:f6:1f:42:4a:7c:c5:2a:d2:c7:09:2b:ef:16:67: 58:cd:35:49:60:5a:87:f1:59:36:3c:92:a0:64:96: 69:56:57:f9:af:5c:ac:b4:38:ee:94:a4:24:97:24: be:b4:fe:0a:f1:aa:eb:01:7d:fe:e4:96:a6:81:61: 59:50:17:d0:e1:c1:6b:c3:b8:d3:d7:dc:4a:28:17: bc:e7:c1:c0:d6:d7:35:ae:d2:1a:0e:fd:e2:4a:cc: 69:1b:1d:fa:c8:b4:4e:91:24:ad:f1:ab:f1:25:20: 05:fd:5a:12:84:25:6f:0c:cc:8f:7d:5e:30:0c:e7: 2a:a0:28:2a:b4:d0:23:18:f5:53:65:00:55:67:a9: 8e:21:5e:0a:da:7b:86:b9:d9:bb:3d:13:d4:1c:bb: 07:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:18:B2:4F:EA:E5:CE:65:EB:41:76:DC:60:C5:A1:05:4E:3C:D9:E8 X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/LRiyT-rlzmXrQXbcYMWhBU482eg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.7.64.0/20 31.25.128.0/21 37.156.144.0/22 46.143.0.0/17 77.238.120.0/22 79.127.0.0/17 86.57.0.0/17 89.41.40.0/22 89.235.96.0/22 93.115.144.0/21 93.118.180.0/22 128.65.176.0/20 176.65.240.0/22 176.65.252.0/22 178.22.120.0/21 185.49.84.0/22 185.98.112.0/22 185.99.212.0/22 185.109.244.0-185.109.251.255 185.112.32.0/21 185.120.220.0/22 185.120.248.0/22 188.0.240.0/23 Signature Algorithm: sha256WithRSAEncryption d3:df:79:b0:99:08:63:55:4b:cb:e2:b9:10:e6:ae:14:cb:86: 99:ae:f8:dc:c4:3c:c3:b6:1e:cc:24:6e:88:37:ba:30:1e:39: f9:e3:a9:75:f4:8e:05:c0:a1:30:d5:59:18:8d:f1:8f:d3:71: da:2c:2b:32:ce:d6:c1:87:8f:8b:58:a1:cb:6a:e2:9b:48:20: 54:53:4e:e6:e4:0e:7d:d0:7d:8d:6a:7e:48:ff:6e:20:79:cf: 01:83:52:b1:a6:5c:f1:c6:c9:21:9e:40:23:03:5a:b6:47:2e: ca:b0:29:3b:5f:c6:34:24:6c:f2:e3:e8:60:78:26:28:ed:eb: 18:0d:82:4e:ce:06:da:0d:59:fb:fb:8a:9a:b1:c7:14:72:5b: 59:43:6b:7b:05:a9:2d:11:2f:96:dd:c1:18:e1:c4:d2:f7:ae: 75:6d:9a:8d:b6:37:1d:86:13:a1:b3:c6:c0:db:4f:ca:0c:ef: 1d:f1:cf:10:cd:31:d3:2e:9a:e5:2d:f9:30:73:61:9b:12:48: 78:c0:e6:17:5b:6b:01:c4:0c:f7:0d:3d:67:79:69:bb:e0:ff: 39:9c:d4:10:70:2c:11:ac:a6:de:d1:80:b6:ce:3e:e3:43:20: 8e:70:da:a2:32:57:2f:07:0f:ef:0e:d1:ff:dd:70:a1:b7:35: f7:90:9b:c3 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgISAZryvbM4dmIpCK703IgrDuGVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjUxMjA2MDgxODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDE4YjI0ZmVhZTVjZTY1ZWI0MTc2ZGM2MGM1YTEwNTRlM2NkOWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfHfKmeKXt/2Ure4m8+KzkAaiw9L tCRy5luFViAk7E1MQx8xpsVxVUEqa/bRUUUdrgi959zXS1aKUvUvy+lrX2dosmzJ PtTBPbPEFk7K5b72MYVgryM3a5aD+05Z71PTBhkbNtY+sg5Y9h9CSnzFKtLHCSvv FmdYzTVJYFqH8Vk2PJKgZJZpVlf5r1ystDjulKQklyS+tP4K8arrAX3+5JamgWFZ UBfQ4cFrw7jT19xKKBe858HA1tc1rtIaDv3iSsxpGx36yLROkSSt8avxJSAF/VoS hCVvDMyPfV4wDOcqoCgqtNAjGPVTZQBVZ6mOIV4K2nuGudm7PRPUHLsHNwIDAQAB o4ICmjCCApYwHQYDVR0OBBYEFC0Ysk/q5c5l60F23GDFoQVOPNnoMB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvTFJpeVQtcmx6bVhyUVhiY1lNV2hCVTQ4MmVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGvBggrBgEFBQcBBwEB/wSBnzCBnDCBmQQCAAEwgZIDBAQf B0ADBAMfGYADBAIlnJADBAcujwADBAJN7ngDBAdPfwADBAdWOQADBAJZKSgDBAJZ 62ADBANdc5ADBAJddrQDBASAQbADBAKwQfADBAKwQfwDBAOyFngDBAK5MVQDBAK5 YnADBAK5Y9QwDAMEArlt9AMEArlt+AMEA7lwIAMEArl43AMEArl4+AMEAbwA8DAN BgkqhkiG9w0BAQsFAAOCAQEA0995sJkIY1VLy+K5EOauFMuGma743MQ8w7YezCRu iDe6MB45+eOpdfSOBcChMNVZGI3xj9Nx2iwrMs7WwYePi1ihy2rim0ggVFNO5uQO fdB9jWp+SP9uIHnPAYNSsaZc8cbJIZ5AIwNatkcuyrApO1/GNCRs8uPoYHgmKO3r GA2CTs4G2g1Z+/uKmrHHFHJbWUNrewWpLREvlt3BGOHE0veudW2ajbY3HYYTobPG wNtPygzvHfHPEM0x0y6a5S35MHNhmxJIeMDmF1trAcQM9w09Z3lpu+D/OZzUEHAs Eaym3tGAts4+40MgjnDaojJXLwcP7w7R/91wobc195Cbww== -----END CERTIFICATE-----Generated at Sat Dec 6 21:52:00 2025 by rpki-client