This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/587A_sxhnB_Cg2VH6zBxs_1aZV4.roa File: 587A_sxhnB_Cg2VH6zBxs_1aZV4.roa (raw, json) Hash identifier: qUldoYoFLJ85vGl93bSFHpePwO1mUtBhilmXXO0xSlk= Subject key identifier: E7:CE:C0:FE:CC:61:9C:1F:C2:83:65:47:EB:30:71:B3:FD:5A:65:5E Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a Certificate serial: 019A910C8AD098B08ABA775E3FC94AEF0122 Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/587A_sxhnB_Cg2VH6zBxs_1aZV4.roa Signing time: Mon 17 Nov 2025 09:01:49 +0000 ROA not before: Mon 17 Nov 2025 09:01:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205516 IP address blocks: 5.35.80.0/24 maxlen: 24 5.35.81.0/24 maxlen: 24 37.233.81.0/24 maxlen: 24 45.94.23.0/24 maxlen: 24 45.130.145.0/24 maxlen: 24 45.133.234.0/24 maxlen: 24 45.139.29.0/24 maxlen: 24 45.145.6.0/24 maxlen: 24 77.73.232.0/24 maxlen: 24 83.222.22.0/23 maxlen: 24 89.40.233.0/24 maxlen: 24 89.169.36.0/23 maxlen: 24 90.156.252.0/23 maxlen: 24 91.193.25.0/24 maxlen: 24 91.218.140.0/24 maxlen: 24 91.218.141.0/24 maxlen: 24 109.94.211.0/24 maxlen: 24 109.196.165.0/24 maxlen: 24 178.236.16.0/24 maxlen: 24 178.236.17.0/24 maxlen: 24 193.28.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:0c:8a:d0:98:b0:8a:ba:77:5e:3f:c9:4a:ef:01:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a Validity Not Before: Nov 17 09:01:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e7cec0fecc619c1fc2836547eb3071b3fd5a655e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5a:73:44:73:2c:4d:36:4c:bf:3f:6f:9a:9c: 7b:9c:d2:e8:5e:d5:f7:f8:7d:60:ad:c6:62:f5:49: b6:c1:17:70:2d:62:b8:d4:95:42:91:d3:61:4e:ed: 49:15:35:db:76:17:53:da:ed:f8:85:8d:20:ab:18: 5e:1f:b5:3d:d3:d7:af:d3:7a:7a:f0:33:e7:7d:54: 64:cd:ee:51:b1:7f:5b:45:a1:01:24:e4:7f:a3:2d: ca:2b:49:5a:90:ee:55:b3:19:51:85:4a:67:aa:4f: 99:35:35:67:6a:f4:56:5e:e7:84:65:10:c7:0b:99: a2:da:4d:c9:1f:90:83:4b:27:69:a7:bf:30:45:06: 48:f9:63:30:81:6d:bb:e5:58:97:e1:33:fe:81:d3: 43:5f:a6:20:ad:92:6f:8a:bc:8a:4a:dc:f8:08:db: c2:ce:3b:61:59:f4:98:95:cf:74:18:9e:9a:a7:1c: 7c:49:5b:e1:56:7b:ec:18:13:fb:33:35:cd:4f:8e: 45:f7:1c:9e:52:18:f4:4b:31:0a:2f:44:e0:d4:34: 61:7b:b7:52:a6:ee:b8:42:3e:31:14:f4:4d:31:bf: 42:af:ca:1d:3a:1d:88:52:91:61:54:f6:ee:d5:a4: 3f:60:72:f3:9a:9e:b7:f0:65:6e:d0:0f:90:5d:0d: ee:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:CE:C0:FE:CC:61:9C:1F:C2:83:65:47:EB:30:71:B3:FD:5A:65:5E X509v3 Authority Key Identifier: keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/587A_sxhnB_Cg2VH6zBxs_1aZV4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.35.80.0/23 37.233.81.0/24 45.94.23.0/24 45.130.145.0/24 45.133.234.0/24 45.139.29.0/24 45.145.6.0/24 77.73.232.0/24 83.222.22.0/23 89.40.233.0/24 89.169.36.0/23 90.156.252.0/23 91.193.25.0/24 91.218.140.0/23 109.94.211.0/24 109.196.165.0/24 178.236.16.0/23 193.28.186.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:8f:56:88:6b:55:67:51:94:00:d8:e4:7b:81:e9:8d:bd:d5: 41:63:6f:29:4e:df:af:43:dc:07:f1:1b:29:68:b9:f3:d4:21: 83:1b:76:37:20:9f:14:4a:bb:71:cc:fd:8d:8a:ec:fc:97:36: c6:73:a8:07:0c:19:d3:47:68:d1:24:7f:af:45:fe:e9:1a:2d: 0f:56:f0:38:4d:44:ab:17:b3:82:59:18:32:87:cc:5b:78:ab: 77:e7:b4:d1:04:f4:ee:6b:95:65:60:61:91:7a:85:9a:ea:e4: 63:de:26:5e:72:32:3f:3a:01:0c:d9:3b:c0:ed:62:49:d8:7b: d9:08:4e:3b:2c:a6:66:ef:eb:ee:88:47:57:8b:1b:93:17:e8: 7e:e9:d8:e2:e2:3f:b5:33:b0:aa:83:0b:9c:af:a9:b3:3f:b6: b2:da:79:22:b0:b9:ef:3e:c3:8d:4f:41:d2:b3:d7:86:69:23: 7d:2e:5d:f8:fe:7a:20:2f:a0:68:4c:c6:7d:ea:45:b5:41:69: 6f:32:79:37:83:f4:ec:95:d1:7d:93:0d:d9:66:2f:aa:22:c0: dd:06:af:cc:f3:bf:97:1e:b0:8d:e6:73:bc:c4:6a:5e:b4:ff: 99:0a:e6:10:56:53:63:76:5c:fc:21:1e:90:78:ee:f7:5c:18: 23:8c:da:6b -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgISAZqRDIrQmLCKundeP8lK7wEiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNzNlZWI4ZDAyZjVmNjQ3ODhiM2ZkYzc4ZDZiYWI4YTU1 ZmQxNmEwHhcNMjUxMTE3MDkwMTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2NlYzBmZWNjNjE5YzFmYzI4MzY1NDdlYjMwNzFiM2ZkNWE2NTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplpzRHMsTTZMvz9vmpx7nNLoXtX3 +H1grcZi9Um2wRdwLWK41JVCkdNhTu1JFTXbdhdT2u34hY0gqxheH7U909ev03p6 8DPnfVRkze5RsX9bRaEBJOR/oy3KK0lakO5VsxlRhUpnqk+ZNTVnavRWXueEZRDH C5mi2k3JH5CDSydpp78wRQZI+WMwgW275ViX4TP+gdNDX6YgrZJviryKStz4CNvC zjthWfSYlc90GJ6apxx8SVvhVnvsGBP7MzXNT45F9xyeUhj0SzEKL0Tg1DRhe7dS pu64Qj4xFPRNMb9Cr8odOh2IUpFhVPbu1aQ/YHLzmp638GVu0A+QXQ3uawIDAQAB o4ICcDCCAmwwHQYDVR0OBBYEFOfOwP7MYZwfwoNlR+swcbP9WmVeMB8GA1UdIwQY MBaAFEFz7rjQL19keIs/3HjWurilX9FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmIt ZDgzZWQxNDBkMjhkLzEvNTg3QV9zeGhuQl9DZzJWSDZ6QnhzXzFhWlY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmItZDgzZWQxNDBkMjhk LzEvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAQUjUAME ACXpUQMEAC1eFwMEAC2CkQMEAC2F6gMEAC2LHQMEAC2RBgMEAE1J6AMEAVPeFgME AFko6QMEAVmpJAMEAVqc/AMEAFvBGQMEAVvajAMEAG1e0wMEAG3EpQMEAbLsEAME AMEcujANBgkqhkiG9w0BAQsFAAOCAQEAHY9WiGtVZ1GUANjke4Hpjb3VQWNvKU7f r0PcB/EbKWi589Qhgxt2NyCfFEq7ccz9jYrs/Jc2xnOoBwwZ00do0SR/r0X+6Rot D1bwOE1EqxezglkYMofMW3ird+e00QT07muVZWBhkXqFmurkY94mXnIyPzoBDNk7 wO1iSdh72QhOOyymZu/r7ohHV4sbkxfofunY4uI/tTOwqoMLnK+psz+2stp5IrC5 7z7DjU9B0rPXhmkjfS5d+P56IC+gaEzGfepFtUFpbzJ5N4P07JXRfZMN2WYvqiLA 3QavzPO/lx6wjeZzvMRqXrT/mQrmEFZTY3Zc/CEekHju91wYI4zaaw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:07:01 2025 by rpki-client