This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/miXkfdkTYcN754tr_aLGfPl-3Tk.roa File: miXkfdkTYcN754tr_aLGfPl-3Tk.roa (raw, json) Hash identifier: 5ukLL2h1d5yIxr7ZrPsbZ/U2/BfFPVbUmX6Hes9T/is= Subject key identifier: 9A:25:E4:7D:D9:13:61:C3:7B:E7:8B:6B:FD:A2:C6:7C:F9:7E:DD:39 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B085ACF25079F10BBBFF02735A4335403 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/miXkfdkTYcN754tr_aLGfPl-3Tk.roa Signing time: Wed 10 Dec 2025 13:02:07 +0000 ROA not before: Wed 10 Dec 2025 13:02:07 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2.56.123.0/24 maxlen: 24 5.180.22.0/24 maxlen: 24 5.180.31.0/24 maxlen: 24 45.9.18.0/24 maxlen: 24 45.9.19.0/24 maxlen: 24 45.15.145.0/24 maxlen: 24 45.15.146.0/24 maxlen: 24 45.15.154.0/24 maxlen: 24 45.15.155.0/24 maxlen: 24 45.15.164.0/24 maxlen: 24 45.15.179.0/24 maxlen: 24 45.15.186.0/24 maxlen: 24 45.82.248.0/24 maxlen: 24 45.83.23.0/24 maxlen: 24 45.83.24.0/24 maxlen: 24 45.83.25.0/24 maxlen: 24 45.83.128.0/24 maxlen: 24 45.83.149.0/24 maxlen: 24 45.86.60.0/22 maxlen: 24 45.86.64.0/24 maxlen: 24 45.86.65.0/24 maxlen: 24 45.86.67.0/24 maxlen: 24 45.86.68.0/24 maxlen: 24 45.86.69.0/24 maxlen: 24 45.86.75.0/24 maxlen: 24 45.88.176.0/24 maxlen: 24 45.88.177.0/24 maxlen: 24 45.92.140.0/22 maxlen: 24 45.92.160.0/24 maxlen: 24 45.92.161.0/24 maxlen: 24 45.92.163.0/24 maxlen: 24 45.92.164.0/22 maxlen: 24 45.92.192.0/24 maxlen: 24 45.92.193.0/24 maxlen: 24 45.92.194.0/24 maxlen: 24 45.128.51.0/24 maxlen: 24 45.128.57.0/24 maxlen: 24 45.128.58.0/24 maxlen: 24 92.118.236.0/22 maxlen: 24 95.214.249.0/24 maxlen: 24 95.214.250.0/24 maxlen: 24 171.22.115.0/24 maxlen: 24 171.22.130.0/24 maxlen: 24 171.22.132.0/24 maxlen: 24 185.166.153.0/24 maxlen: 24 213.59.119.0/24 maxlen: 24 213.59.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:5a:cf:25:07:9f:10:bb:bf:f0:27:35:a4:33:54:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Dec 10 13:02:07 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9a25e47dd91361c37be78b6bfda2c67cf97edd39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6a:af:92:fa:5c:ad:97:6c:e8:4c:1f:6b:4c: 67:aa:7f:ae:9c:f6:e9:8c:e2:a2:f6:92:83:94:6b: e2:9d:06:64:8e:14:83:7c:df:07:ae:fd:e1:ca:fa: 89:82:2c:28:0c:d8:05:24:30:f6:e7:6f:be:f7:5c: 70:91:8b:f9:ff:f1:cf:23:d4:25:5b:cd:fa:17:cd: 82:b8:03:e6:49:f0:bf:60:fc:a2:be:b1:44:08:51: fa:7b:31:3c:ab:c2:5c:71:4f:77:c6:17:c2:86:fc: da:f9:f6:84:70:dc:6b:15:a4:c7:b6:96:3e:71:6e: fd:2c:7b:43:18:6b:42:b9:72:e9:49:ef:0d:0c:d0: 87:0f:c8:3f:26:93:ab:40:27:68:3c:df:76:a9:9c: 2a:a8:32:a7:e7:5c:a3:cb:0d:ce:70:d1:f9:20:5d: 01:77:d3:df:5b:ce:64:2a:21:0a:03:c8:87:02:1f: 4a:bb:48:78:bb:b6:39:a6:8a:b9:87:cc:f5:cc:6b: 4e:76:13:5f:6f:f4:82:d7:1d:40:58:60:21:59:87: 00:c5:58:70:7f:48:fe:ce:bf:81:fd:5a:44:6f:57: a9:61:84:d4:9c:4b:59:5b:67:7f:95:98:67:d5:3c: 21:d3:5c:4c:bd:97:d1:72:63:71:33:d3:ab:c3:24: ae:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:25:E4:7D:D9:13:61:C3:7B:E7:8B:6B:FD:A2:C6:7C:F9:7E:DD:39 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/miXkfdkTYcN754tr_aLGfPl-3Tk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.123.0/24 5.180.22.0/24 5.180.31.0/24 45.9.18.0/23 45.15.145.0-45.15.146.255 45.15.154.0/23 45.15.164.0/24 45.15.179.0/24 45.15.186.0/24 45.82.248.0/24 45.83.23.0-45.83.25.255 45.83.128.0/24 45.83.149.0/24 45.86.60.0-45.86.65.255 45.86.67.0-45.86.69.255 45.86.75.0/24 45.88.176.0/23 45.92.140.0/22 45.92.160.0/23 45.92.163.0-45.92.167.255 45.92.192.0-45.92.194.255 45.128.51.0/24 45.128.57.0-45.128.58.255 92.118.236.0/22 95.214.249.0-95.214.250.255 171.22.115.0/24 171.22.130.0/24 171.22.132.0/24 185.166.153.0/24 213.59.119.0-213.59.120.255 Signature Algorithm: sha256WithRSAEncryption ad:65:f4:12:50:c2:5b:be:22:c3:d2:18:28:f9:f4:e4:08:13: a1:60:d5:7e:6c:fa:03:5c:4c:f3:02:74:c9:c2:fc:5f:66:15: 25:ad:68:eb:9a:5d:4a:52:ff:54:12:67:a6:5d:67:e4:b3:af: c9:a9:23:63:bf:19:b0:1b:44:e5:b2:22:9d:ac:0e:0e:ae:2c: 62:5c:15:d3:48:d0:e9:15:08:ee:95:e4:be:3e:a7:c8:20:76: 05:99:c3:a9:9f:8b:fc:e2:2c:cf:f6:24:61:fc:95:c2:f9:9e: b1:30:d6:73:59:45:4d:89:74:93:c8:24:e1:d6:02:25:c3:b7: d9:4c:db:4c:cb:e6:e1:09:54:05:2f:d9:1b:19:c7:95:03:69: a8:a7:22:e3:05:b9:cb:51:5c:c1:37:e2:ce:5a:06:58:67:5d: 2d:cf:41:2a:94:74:36:07:1e:77:f6:99:ac:03:f8:df:c7:2d: f3:2f:4c:a4:37:c7:0b:e5:89:3a:7e:6f:1e:a6:ff:43:dc:76: 70:14:96:d0:3a:3e:29:39:12:07:64:f5:cd:f9:d4:06:21:14: 91:72:8b:04:bc:db:6f:f6:ce:1c:1c:e4:4f:0a:e5:f2:64:b5: 8f:68:0b:c3:33:4c:f2:ef:b1:f0:a9:1b:82:14:73:f4:f3:95: de:aa:4d:94 -----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgISAZsIWs8lB58Qu7/wJzWkM1QDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjUxMjEwMTMwMjA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTI1ZTQ3ZGQ5MTM2MWMzN2JlNzhiNmJmZGEyYzY3Y2Y5N2VkZDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWqvkvpcrZds6Ewfa0xnqn+unPbp jOKi9pKDlGvinQZkjhSDfN8Hrv3hyvqJgiwoDNgFJDD252++91xwkYv5//HPI9Ql W836F82CuAPmSfC/YPyivrFECFH6ezE8q8JccU93xhfChvza+faEcNxrFaTHtpY+ cW79LHtDGGtCuXLpSe8NDNCHD8g/JpOrQCdoPN92qZwqqDKn51yjyw3OcNH5IF0B d9PfW85kKiEKA8iHAh9Ku0h4u7Y5poq5h8z1zGtOdhNfb/SC1x1AWGAhWYcAxVhw f0j+zr+B/VpEb1epYYTUnEtZW2d/lZhn1Twh01xMvZfRcmNxM9OrwySu6wIDAQAB o4IDCDCCAwQwHQYDVR0OBBYEFJol5H3ZE2HDe+eLa/2ixnz5ft05MB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvbWlYa2Zka1RZY043NTR0cl9hTEdmUGwtM1RrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBHAYIKwYBBQUHAQcBAf8EggELMIIBBzCCAQMEAgABMIH8 AwQAAjh7AwQABbQWAwQABbQfAwQBLQkSMAwDBAAtD5EDBAAtD5IDBAEtD5oDBAAt D6QDBAAtD7MDBAAtD7oDBAAtUvgwDAMEAC1TFwMEAS1TGAMEAC1TgAMEAC1TlTAM AwQCLVY8AwQBLVZAMAwDBAAtVkMDBAEtVkQDBAAtVksDBAEtWLADBAItXIwDBAEt XKAwDAMEAC1cowMEAy1coDAMAwQGLVzAAwQALVzCAwQALYAzMAwDBAAtgDkDBAAt gDoDBAJcduwwDAMEAF/W+QMEAF/W+gMEAKsWcwMEAKsWggMEAKsWhAMEALmmmTAM AwQA1Tt3AwQA1Tt4MA0GCSqGSIb3DQEBCwUAA4IBAQCtZfQSUMJbviLD0hgo+fTk CBOhYNV+bPoDXEzzAnTJwvxfZhUlrWjrml1KUv9UEmemXWfks6/JqSNjvxmwG0Tl siKdrA4OrixiXBXTSNDpFQjuleS+PqfIIHYFmcOpn4v84izP9iRh/JXC+Z6xMNZz WUVNiXSTyCTh1gIlw7fZTNtMy+bhCVQFL9kbGceVA2mopyLjBbnLUVzBN+LOWgZY Z10tz0EqlHQ2Bx539pmsA/jfxy3zL0ykN8cL5Yk6fm8epv9D3HZwFJbQOj4pORIH ZPXN+dQGIRSRcosEvNtv9s4cHORPCuXyZLWPaAvDM0zy77HwqRuCFHP085Xeqk2U -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:53 2025 by rpki-client