This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/kOhJZb5pvQekEUNKN2h9wR5e3bA.roa File: kOhJZb5pvQekEUNKN2h9wR5e3bA.roa (raw, json) Hash identifier: kPeZ6Lfy+ZAHngmgLvhb/1Y+IEKr+56sKk3ka6G/FWE= Subject key identifier: 90:E8:49:65:BE:69:BD:07:A4:11:43:4A:37:68:7D:C1:1E:5E:DD:B0 Certificate issuer: /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7 Certificate serial: 019AE4C8FEB160D8E008E0BA4166B84B4822 Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/kOhJZb5pvQekEUNKN2h9wR5e3bA.roa Signing time: Wed 03 Dec 2025 15:16:08 +0000 ROA not before: Wed 03 Dec 2025 15:16:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57152 IP address blocks: 104.247.170.0/24 maxlen: 24 104.247.172.0/24 maxlen: 24 104.247.174.0/24 maxlen: 24 104.247.176.0/24 maxlen: 24 104.247.177.0/24 maxlen: 24 104.247.178.0/24 maxlen: 24 104.247.180.0/24 maxlen: 24 104.247.181.0/24 maxlen: 24 104.247.182.0/24 maxlen: 24 104.247.184.0/24 maxlen: 24 104.247.185.0/24 maxlen: 24 104.247.186.0/24 maxlen: 24 104.247.187.0/24 maxlen: 24 104.247.190.0/24 maxlen: 24 104.247.191.0/24 maxlen: 24 185.73.129.0/24 maxlen: 24 185.73.130.0/24 maxlen: 24 185.137.215.0/24 maxlen: 24 2a03:a5a0:1::/48 maxlen: 48 2a03:a5a0:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:c8:fe:b1:60:d8:e0:08:e0:ba:41:66:b8:4b:48:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7 Validity Not Before: Dec 3 15:16:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=90e84965be69bd07a411434a37687dc11e5eddb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d7:d5:e3:d8:b3:05:d2:cb:3d:fd:fd:ee:82: 30:22:83:fb:1c:66:ac:e6:26:8f:43:e8:60:2d:90: 02:d9:e5:a9:c1:c2:e9:d4:e8:7e:33:1e:7e:25:b2: eb:f6:d7:8e:26:ac:b1:2d:80:de:94:3a:22:02:4a: 3b:a0:74:01:98:49:8c:46:f2:74:60:e8:6e:73:9d: 6a:cf:53:d7:28:02:58:ae:e6:5d:d5:73:32:1d:10: 97:97:08:15:2f:ca:b8:98:e1:f5:7a:9b:e7:0d:2f: cc:75:a1:eb:53:29:ad:ea:47:59:35:f6:e9:01:91: d9:cf:07:e9:5a:54:e0:66:a9:41:98:d2:8b:9a:0b: 4c:f8:43:cd:70:f3:61:b6:79:12:15:83:85:3c:29: 46:ce:08:a2:05:70:06:8b:77:b8:2e:48:7a:75:f8: 4c:e1:d7:7c:3e:f1:6c:19:69:b9:60:68:25:3b:2e: d9:b8:5b:2f:e5:be:90:16:03:27:17:e9:e4:28:25: e0:9f:0a:e3:3c:f4:71:71:82:f6:b9:a1:c1:5a:9e: c2:5d:e2:5f:6d:2a:06:dd:11:f7:93:1a:42:44:a8: 3b:c5:bc:6d:f9:a2:72:2b:32:11:7c:62:a8:a6:43: 73:9a:07:6a:86:50:f6:a5:6d:de:3e:28:1d:33:d6: f4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E8:49:65:BE:69:BD:07:A4:11:43:4A:37:68:7D:C1:1E:5E:DD:B0 X509v3 Authority Key Identifier: keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/kOhJZb5pvQekEUNKN2h9wR5e3bA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.247.170.0/24 104.247.172.0/24 104.247.174.0/24 104.247.176.0-104.247.178.255 104.247.180.0-104.247.182.255 104.247.184.0/22 104.247.190.0/23 185.73.129.0-185.73.130.255 185.137.215.0/24 IPv6: 2a03:a5a0:1::/48 2a03:a5a0:4::/48 Signature Algorithm: sha256WithRSAEncryption 34:8e:12:c3:95:cc:e8:0f:18:76:ff:6e:67:30:fb:07:f8:42: a4:0b:b3:21:3c:b0:d0:c7:4c:28:d9:18:93:ef:f2:af:25:a5: 08:9b:12:5d:25:2b:4a:d7:5f:98:6a:47:e9:18:53:19:4d:43: 57:97:c9:b1:b3:fd:59:d3:c5:0c:1f:e7:97:94:23:8a:3c:32: 6c:f9:e1:7a:a8:6b:4a:e2:1f:bc:bb:47:64:db:29:19:fb:e8: 08:41:1e:fd:23:eb:69:d1:8a:74:71:f0:d4:58:f3:c2:f7:53: 42:7a:f1:98:47:b3:83:c6:12:3b:cd:0e:5f:b1:f3:eb:79:21: 64:6c:74:52:95:87:29:03:2a:0b:14:f1:0c:b4:1f:64:43:a2: 66:cf:d0:f1:5d:64:5e:45:8b:47:35:61:ae:81:f6:85:8a:a7: 88:ab:a3:10:3b:e6:2c:44:6b:5b:6c:01:46:54:23:ce:07:12: a5:6a:89:2d:bc:d0:ea:82:d0:7c:fc:1b:ed:c9:ac:52:98:eb: 97:47:a6:8f:2a:f4:69:eb:28:d8:8d:2a:ec:0a:4c:29:37:00: 7d:a2:ca:78:d3:53:44:31:a6:32:f2:dd:b9:65:15:eb:d6:9a: c1:55:94:d2:a8:d6:0d:1d:09:59:f6:16:d2:84:8b:a5:e1:94: 96:63:01:05 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgISAZrkyP6xYNjgCOC6QWa4S0giMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhY2RjMWUyNDdmYWE5NTMxODA4MmE0YWM1ZWRiZDgwNTEx ZjhkZjcwHhcNMjUxMjAzMTUxNjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGU4NDk2NWJlNjliZDA3YTQxMTQzNGEzNzY4N2RjMTFlNWVkZGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntfV49izBdLLPf397oIwIoP7HGas 5iaPQ+hgLZAC2eWpwcLp1Oh+Mx5+JbLr9teOJqyxLYDelDoiAko7oHQBmEmMRvJ0 YOhuc51qz1PXKAJYruZd1XMyHRCXlwgVL8q4mOH1epvnDS/MdaHrUymt6kdZNfbp AZHZzwfpWlTgZqlBmNKLmgtM+EPNcPNhtnkSFYOFPClGzgiiBXAGi3e4Lkh6dfhM 4dd8PvFsGWm5YGglOy7ZuFsv5b6QFgMnF+nkKCXgnwrjPPRxcYL2uaHBWp7CXeJf bSoG3RH3kxpCRKg7xbxt+aJyKzIRfGKopkNzmgdqhlD2pW3ePigdM9b0nQIDAQAB o4ICbDCCAmgwHQYDVR0OBBYEFJDoSWW+ab0HpBFDSjdofcEeXt2wMB8GA1UdIwQY MBaAFOrNweJH+qlTGAgqSsXtvYBRH433MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnMzQjRrZjZxVk1ZQ0NwS3hlMjlnRkVmamZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lNmM0NGMtMzEyNS00ZmU2LWEwMGQt NjI4Y2NmMDBkZmJkLzEva09oSlpiNXB2UWVrRVVOS04yaDl3UjVlM2JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9lNmM0NGMtMzEyNS00ZmU2LWEwMGQtNjI4Y2NmMDBkZmJk LzEvNnMzQjRrZjZxVk1ZQ0NwS3hlMjlnRkVmamZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwVAQCAAEwTgMEAGj3qgME AGj3rAMEAGj3rjAMAwQEaPewAwQAaPeyMAwDBAJo97QDBABo97YDBAJo97gDBAFo 974wDAMEALlJgQMEALlJggMEALmJ1zAYBAIAAjASAwcAKgOloAABAwcAKgOloAAE MA0GCSqGSIb3DQEBCwUAA4IBAQA0jhLDlczoDxh2/25nMPsH+EKkC7MhPLDQx0wo 2RiT7/KvJaUImxJdJStK11+YakfpGFMZTUNXl8mxs/1Z08UMH+eXlCOKPDJs+eF6 qGtK4h+8u0dk2ykZ++gIQR79I+tp0Yp0cfDUWPPC91NCevGYR7ODxhI7zQ5fsfPr eSFkbHRSlYcpAyoLFPEMtB9kQ6Jmz9DxXWReRYtHNWGugfaFiqeIq6MQO+YsRGtb bAFGVCPOBxKlaoktvNDqgtB8/BvtyaxSmOuXR6aPKvRp6yjYjSrsCkwpNwB9osp4 01NEMaYy8t25ZRXr1prBVZTSqNYNHQlZ9hbShIul4ZSWYwEF -----END CERTIFICATE-----Generated at Sat Dec 6 12:54:14 2025 by rpki-client