This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/EDy93mAhA2FhoPZrv_qXDnBaEPY.roa File: EDy93mAhA2FhoPZrv_qXDnBaEPY.roa (raw, json) Hash identifier: gcQKa9NBtqbmaNQOkXvvz+TImpW4xhVs+8xtbTy1SZU= Subject key identifier: 10:3C:BD:DE:60:21:03:61:61:A0:F6:6B:BF:FA:97:0E:70:5A:10:F6 Certificate issuer: /CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6 Certificate serial: 019ADF1E36F9DB3071EF12D10EA6AB182971 Authority key identifier: 54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/EDy93mAhA2FhoPZrv_qXDnBaEPY.roa Signing time: Tue 02 Dec 2025 12:51:30 +0000 ROA not before: Tue 02 Dec 2025 12:51:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43872 IP address blocks: 5.253.252.0/22 maxlen: 22 45.136.108.0/24 maxlen: 24 92.118.111.0/24 maxlen: 24 176.101.169.0/24 maxlen: 24 185.183.20.0/22 maxlen: 22 185.187.61.0/24 maxlen: 24 185.253.176.0/22 maxlen: 22 193.105.189.0/24 maxlen: 24 193.247.94.0/24 maxlen: 24 193.247.101.0/24 maxlen: 24 193.247.103.0/24 maxlen: 24 193.247.165.0/24 maxlen: 24 195.234.28.0/24 maxlen: 24 217.198.183.0/24 maxlen: 24 2a0b:180::/29 maxlen: 29 2a0d:1e80::/29 maxlen: 29 2a10:c740::/29 maxlen: 29 2a10:c7c0::/29 maxlen: 29 2a10:c8c0::/29 maxlen: 29 2a10:c9c0::/29 maxlen: 29 2a10:cac0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:1e:36:f9:db:30:71:ef:12:d1:0e:a6:ab:18:29:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6 Validity Not Before: Dec 2 12:51:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=103cbdde6021036161a0f66bbffa970e705a10f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1c:26:2f:8b:10:30:30:3d:07:a9:15:9b:51: 69:b6:b0:de:0a:c5:c5:13:54:9b:e5:b8:88:7c:b0: fe:8b:83:d0:56:8c:2e:c8:e9:36:43:e0:28:ef:18: 63:76:4b:3b:d2:48:2a:1a:ce:b7:ac:2f:f9:11:09: 07:ea:dc:db:05:58:0e:b4:1f:94:cc:0b:ec:8d:ab: ab:e8:3e:9f:b8:42:bb:1a:a9:8d:b0:38:22:ef:e5: 96:1c:7a:66:06:12:b3:6d:eb:1e:4c:f7:fc:ea:9d: e4:d4:47:f2:bd:3d:94:51:33:0c:14:99:7e:9b:b7: e2:4e:a2:93:38:ab:e2:81:f6:19:db:55:64:f7:34: 28:b4:86:10:fc:0c:eb:c9:4a:74:7b:b4:a1:25:ba: b6:90:16:f2:05:e0:53:bb:9f:47:78:c2:47:b2:aa: 70:c2:01:d3:a5:2f:19:7b:49:26:47:5c:9b:87:8f: a7:bb:93:fc:ed:d1:7a:5e:49:c5:ef:9b:90:64:8a: 52:e2:36:0b:9b:9a:c5:5a:7c:f0:33:82:05:7b:e8: 20:2b:d2:df:c4:b9:75:3d:82:b6:71:1a:6f:ea:d3: cd:58:c4:57:a1:cb:a1:4a:76:da:4e:29:8b:69:fe: 19:d8:1a:ff:ac:1e:e4:a3:f1:fb:3c:d9:3a:27:af: 1b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3C:BD:DE:60:21:03:61:61:A0:F6:6B:BF:FA:97:0E:70:5A:10:F6 X509v3 Authority Key Identifier: keyid:54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/EDy93mAhA2FhoPZrv_qXDnBaEPY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.252.0/22 45.136.108.0/24 92.118.111.0/24 176.101.169.0/24 185.183.20.0/22 185.187.61.0/24 185.253.176.0/22 193.105.189.0/24 193.247.94.0/24 193.247.101.0/24 193.247.103.0/24 193.247.165.0/24 195.234.28.0/24 217.198.183.0/24 IPv6: 2a0b:180::/29 2a0d:1e80::/29 2a10:c740::/29 2a10:c7c0::/29 2a10:c8c0::/29 2a10:c9c0::/29 2a10:cac0::/29 Signature Algorithm: sha256WithRSAEncryption 43:67:fc:d2:54:6d:ba:04:49:cd:0e:3f:2d:f5:e1:55:26:35: 54:f0:6b:b4:f7:3e:26:71:97:d6:28:3b:49:ec:20:36:8f:57: 12:d0:7f:e8:ef:74:01:26:a4:32:da:c6:f7:e2:5e:6e:02:73: 84:f9:97:cd:e4:34:7e:de:f7:56:fb:59:c5:86:a5:03:6d:27: 07:9e:0b:f4:fe:a1:7a:2d:5a:0d:cd:bc:c5:fa:7f:ea:3d:be: 61:42:a2:64:a2:e9:90:be:57:94:83:22:05:87:d3:dd:e8:0d: 84:41:3a:a0:77:b2:5c:ed:5b:bd:8f:5e:bc:3f:78:5b:75:78: 8a:93:41:a7:7f:28:c8:1c:3e:14:82:ba:a2:24:ac:bd:5f:77: 8c:cb:68:ee:00:63:7c:55:f2:c1:23:45:21:26:58:9a:f9:c2: 92:3d:8b:c8:9b:a0:93:06:78:bc:29:74:52:21:14:50:fe:10: 99:f4:9a:b9:a2:01:8f:4b:23:25:80:cd:91:23:18:8f:ec:6c: 99:96:16:a8:01:2b:c2:ce:cc:90:79:8b:bc:7d:60:b4:d3:94: c2:18:3c:d2:a9:33:ae:bd:91:1d:94:a1:40:bc:67:7b:f2:b7: e4:52:09:48:6b:8c:83:ce:88:4a:a0:82:e6:8e:c6:78:9c:06: fa:9d:81:cb -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZrfHjb52zBx7xLRDqarGClxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0M2UyMGJmNWYyNTJiMWJkYmQyMWRjOTlkOTRjZDk3ZWE3 ZjBmZTYwHhcNMjUxMjAyMTI1MTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDNjYmRkZTYwMjEwMzYxNjFhMGY2NmJiZmZhOTcwZTcwNWExMGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BwmL4sQMDA9B6kVm1FptrDeCsXF E1Sb5biIfLD+i4PQVowuyOk2Q+Ao7xhjdks70kgqGs63rC/5EQkH6tzbBVgOtB+U zAvsjaur6D6fuEK7GqmNsDgi7+WWHHpmBhKzbeseTPf86p3k1EfyvT2UUTMMFJl+ m7fiTqKTOKvigfYZ21Vk9zQotIYQ/AzryUp0e7ShJbq2kBbyBeBTu59HeMJHsqpw wgHTpS8Ze0kmR1ybh4+nu5P87dF6XknF75uQZIpS4jYLm5rFWnzwM4IFe+ggK9Lf xLl1PYK2cRpv6tPNWMRXocuhSnbaTimLaf4Z2Br/rB7ko/H7PNk6J68bhwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFBA8vd5gIQNhYaD2a7/6lw5wWhD2MB8GA1UdIwQY MBaAFFQ+IL9fJSsb29IdyZ2UzZfqfw/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ZTg3YTYtNjUzNi00NTRhLWE1OWUt ZDVhZDk5NmExYWM4LzEvRUR5OTNtQWhBMkZob1BacnZfcVhEbkJhRVBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80ZTg3YTYtNjUzNi00NTRhLWE1OWUtZDVhZDk5NmExYWM4 LzEvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGoBggrBgEFBQcBBwEB/wSBmDCBlTBaBAIAATBUAwQCBf38 AwQALYhsAwQAXHZvAwQAsGWpAwQCubcUAwQAubs9AwQCuf2wAwQAwWm9AwQAwfde AwQAwfdlAwQAwfdnAwQAwfelAwQAw+ocAwQA2ca3MDcEAgACMDEDBQMqCwGAAwUD Kg0egAMFAyoQx0ADBQMqEMfAAwUDKhDIwAMFAyoQycADBQMqEMrAMA0GCSqGSIb3 DQEBCwUAA4IBAQBDZ/zSVG26BEnNDj8t9eFVJjVU8Gu09z4mcZfWKDtJ7CA2j1cS 0H/o73QBJqQy2sb34l5uAnOE+ZfN5DR+3vdW+1nFhqUDbScHngv0/qF6LVoNzbzF +n/qPb5hQqJkoumQvleUgyIFh9Pd6A2EQTqgd7Jc7Vu9j168P3hbdXiKk0GnfyjI HD4UgrqiJKy9X3eMy2juAGN8VfLBI0UhJlia+cKSPYvIm6CTBni8KXRSIRRQ/hCZ 9Jq5ogGPSyMlgM2RIxiP7GyZlhaoASvCzsyQeYu8fWC005TCGDzSqTOuvZEdlKFA vGd78rfkUglIa4yDzohKoILmjsZ4nAb6nYHL -----END CERTIFICATE-----Generated at Sat Dec 6 23:30:38 2025 by rpki-client