This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/5WgcdrlGb7MVaF-nd4hP1QAkOnk.roa File: 5WgcdrlGb7MVaF-nd4hP1QAkOnk.roa (raw, json) Hash identifier: 3kqQzuANh+iGQZ1sMEi5NixE/pfQb2Az43AwVlQm4DM= Subject key identifier: E5:68:1C:76:B9:46:6F:B3:15:68:5F:A7:77:88:4F:D5:00:24:3A:79 Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777 Certificate serial: 019ABF444B2058C8AA93F77F7B77D3661D28 Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/5WgcdrlGb7MVaF-nd4hP1QAkOnk.roa Signing time: Wed 26 Nov 2025 08:25:15 +0000 ROA not before: Wed 26 Nov 2025 08:25:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13150 IP address blocks: 85.255.16.0/24 maxlen: 24 85.255.17.0/24 maxlen: 24 85.255.19.0/24 maxlen: 24 85.255.20.0/24 maxlen: 24 85.255.21.0/24 maxlen: 24 85.255.22.0/24 maxlen: 24 85.255.23.0/24 maxlen: 24 85.255.24.0/24 maxlen: 24 85.255.25.0/24 maxlen: 24 85.255.26.0/24 maxlen: 24 85.255.27.0/24 maxlen: 24 85.255.28.0/24 maxlen: 24 85.255.29.0/24 maxlen: 24 85.255.30.0/24 maxlen: 24 85.255.31.0/24 maxlen: 24 159.117.224.0/24 maxlen: 24 159.117.225.0/24 maxlen: 24 159.117.226.0/24 maxlen: 24 159.117.227.0/24 maxlen: 24 159.117.229.0/24 maxlen: 24 159.117.230.0/24 maxlen: 24 159.117.231.0/24 maxlen: 24 159.117.232.0/24 maxlen: 24 159.117.233.0/24 maxlen: 24 159.117.234.0/24 maxlen: 24 185.114.120.0/24 maxlen: 24 185.114.121.0/24 maxlen: 24 185.114.122.0/24 maxlen: 24 185.114.123.0/24 maxlen: 24 209.206.0.0/24 maxlen: 24 209.206.1.0/24 maxlen: 24 209.206.2.0/24 maxlen: 24 209.206.3.0/24 maxlen: 24 209.206.4.0/24 maxlen: 24 209.206.5.0/24 maxlen: 24 209.206.6.0/24 maxlen: 24 209.206.7.0/24 maxlen: 24 209.206.8.0/24 maxlen: 24 209.206.9.0/24 maxlen: 24 209.206.10.0/24 maxlen: 24 209.206.11.0/24 maxlen: 24 209.206.12.0/24 maxlen: 24 209.206.13.0/24 maxlen: 24 209.206.14.0/24 maxlen: 24 209.206.15.0/24 maxlen: 24 209.206.16.0/24 maxlen: 24 209.206.17.0/24 maxlen: 24 209.206.18.0/24 maxlen: 24 209.206.19.0/24 maxlen: 24 209.206.20.0/24 maxlen: 24 209.206.21.0/24 maxlen: 24 209.206.22.0/24 maxlen: 24 209.206.23.0/24 maxlen: 24 209.206.24.0/24 maxlen: 24 209.206.25.0/24 maxlen: 24 209.206.26.0/24 maxlen: 24 209.206.27.0/24 maxlen: 24 209.206.28.0/24 maxlen: 24 209.206.29.0/24 maxlen: 24 209.206.30.0/24 maxlen: 24 209.206.31.0/24 maxlen: 24 216.252.177.0/24 maxlen: 24 216.252.178.0/24 maxlen: 24 216.252.179.0/24 maxlen: 24 216.252.180.0/24 maxlen: 24 216.252.181.0/24 maxlen: 24 216.252.182.0/24 maxlen: 24 216.252.183.0/24 maxlen: 24 216.252.184.0/24 maxlen: 24 216.252.185.0/24 maxlen: 24 216.252.186.0/24 maxlen: 24 216.252.187.0/24 maxlen: 24 216.252.189.0/24 maxlen: 24 216.252.190.0/24 maxlen: 24 216.252.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:44:4b:20:58:c8:aa:93:f7:7f:7b:77:d3:66:1d:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777 Validity Not Before: Nov 26 08:25:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e5681c76b9466fb315685fa777884fd500243a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4f:fd:20:05:19:19:53:4c:39:21:a9:d0:5b: 99:e3:e6:d2:fb:bb:8c:b4:c5:38:0b:81:ae:21:ab: dc:da:19:ad:10:d1:cd:67:2d:2b:70:53:a0:d8:34: 96:1a:81:7f:34:5d:47:f0:a4:02:0c:d4:4a:bf:4d: f4:57:a1:8e:57:38:21:9c:ba:65:ad:03:dd:9f:58: 78:c2:a1:cd:d9:4a:07:dd:b7:1b:a3:ee:1f:94:01: ad:a4:ab:1c:0b:42:48:2a:f0:80:62:f8:87:1a:b0: 07:03:df:13:33:dd:83:d7:9d:1c:28:1b:81:10:5b: 8e:fd:31:d7:3c:c8:32:89:2c:d0:d5:d3:a3:b5:24: 02:81:1d:62:17:22:60:9b:ad:07:20:32:09:21:49: 0a:ee:3e:e8:cd:bc:80:61:32:57:3b:03:49:a0:15: ec:ec:c0:52:19:ac:5d:0b:b2:89:73:36:b0:2c:1f: b6:d2:9c:a4:f2:0e:83:58:11:73:f3:17:21:bc:8d: 02:ee:64:b4:94:bc:30:18:c8:fb:a3:00:26:a9:e8: c3:f9:c1:a2:51:4f:28:51:4e:19:2f:5a:92:c0:df: 4c:6c:f8:a0:cd:3e:1e:cf:5e:ad:b3:a0:e4:14:ed: c1:9b:60:84:e4:c6:7a:e7:73:1c:a6:a6:04:64:b7: 3e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:68:1C:76:B9:46:6F:B3:15:68:5F:A7:77:88:4F:D5:00:24:3A:79 X509v3 Authority Key Identifier: keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/5WgcdrlGb7MVaF-nd4hP1QAkOnk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.255.16.0/23 85.255.19.0-85.255.31.255 159.117.224.0/22 159.117.229.0-159.117.234.255 185.114.120.0/22 209.206.0.0/19 216.252.177.0-216.252.187.255 216.252.189.0-216.252.191.255 Signature Algorithm: sha256WithRSAEncryption cb:6a:d9:61:e4:ff:25:a7:bc:f5:f7:e3:c7:05:79:3d:f4:5e: 17:d2:75:e9:40:ae:0f:a5:de:35:1c:9a:9b:e4:a2:db:f9:68: 16:8f:1e:38:13:5e:34:41:91:f0:65:93:fb:3b:fb:44:e2:e7: 93:04:f5:a3:8b:a8:d7:27:f4:be:ba:73:ed:b0:0c:59:38:d8: 33:79:c7:99:0b:db:fc:e4:a8:9b:ba:b3:5f:cf:fb:6d:73:b2: 90:2e:e1:27:ee:7e:be:cf:1e:b0:77:1e:e1:85:92:90:cd:e7: ee:7a:54:31:2b:a5:1b:e9:91:d7:59:74:2c:39:d1:00:b5:73: fe:cf:05:2c:32:8a:fa:6c:99:31:03:c5:db:ab:97:18:92:79: af:cd:a0:81:7a:96:d2:15:91:86:98:ca:88:c8:b0:69:96:ff: dd:09:1f:64:98:37:1c:48:03:3a:98:33:e5:d5:c8:fe:49:7a: e0:a4:2d:99:ac:50:3d:6d:58:18:a2:66:4d:05:f6:75:c0:03: 25:17:a7:ed:a5:b0:1d:d4:d5:16:41:dd:1d:3c:70:ce:d4:69: 31:01:2b:b6:bd:b5:f6:48:79:37:5c:6e:fe:c3:27:c4:1f:91: be:ff:e0:d9:c4:70:50:2d:d0:90:1a:d4:9a:74:67:0b:81:22: 4d:4a:55:be -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgISAZq/REsgWMiqk/d/e3fTZh0oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYjc1MTkxOTc4ODY2ZjFmYzk3ZjUyM2M3ZGRhNDBhODhm N2U3NzcwHhcNMjUxMTI2MDgyNTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTY4MWM3NmI5NDY2ZmIzMTU2ODVmYTc3Nzg4NGZkNTAwMjQzYTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk/9IAUZGVNMOSGp0FuZ4+bS+7uM tMU4C4GuIavc2hmtENHNZy0rcFOg2DSWGoF/NF1H8KQCDNRKv030V6GOVzghnLpl rQPdn1h4wqHN2UoH3bcbo+4flAGtpKscC0JIKvCAYviHGrAHA98TM92D150cKBuB EFuO/THXPMgyiSzQ1dOjtSQCgR1iFyJgm60HIDIJIUkK7j7ozbyAYTJXOwNJoBXs 7MBSGaxdC7KJczawLB+20pyk8g6DWBFz8xchvI0C7mS0lLwwGMj7owAmqejD+cGi UU8oUU4ZL1qSwN9MbPigzT4ez16ts6DkFO3Bm2CE5MZ653McpqYEZLc++wIDAQAB o4ICUzCCAk8wHQYDVR0OBBYEFOVoHHa5Rm+zFWhfp3eIT9UAJDp5MB8GA1UdIwQY MBaAFM+3UZGXiGbx/Jf1I8fdpAqI9+d3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOTU3NWItYjdjMS00YzVjLTlkYWIt YzE5OWM3YjRjYWMyLzEvNVdnY2RybEdiN01WYUYtbmQ0aFAxUUFrT25rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iOTU3NWItYjdjMS00YzVjLTlkYWItYzE5OWM3YjRjYWMy LzEvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQBVf8QMAwD BABV/xMDBAVV/wADBAKfdeAwDAMEAJ915QMEAJ916gMEArlyeAMEBdHOADAMAwQA 2PyxAwQC2Py4MAwDBADY/L0DBAbY/IAwDQYJKoZIhvcNAQELBQADggEBAMtq2WHk /yWnvPX348cFeT30XhfSdelArg+l3jUcmpvkotv5aBaPHjgTXjRBkfBlk/s7+0Ti 55ME9aOLqNcn9L66c+2wDFk42DN5x5kL2/zkqJu6s1/P+21zspAu4Sfufr7PHrB3 HuGFkpDN5+56VDErpRvpkddZdCw50QC1c/7PBSwyivpsmTEDxdurlxiSea/NoIF6 ltIVkYaYyojIsGmW/90JH2SYNxxIAzqYM+XVyP5JeuCkLZmsUD1tWBiiZk0F9nXA AyUXp+2lsB3U1RZB3R08cM7UaTEBK7a9tfZIeTdcbv7DJ8Qfkb7/4NnEcFAt0JAa 1Jp0ZwuBIk1KVb4= -----END CERTIFICATE-----Generated at Sun Dec 7 09:25:08 2025 by rpki-client