This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/vhwlt9hIADrJv7otZh_LssImv9Y.roa File: vhwlt9hIADrJv7otZh_LssImv9Y.roa (raw, json) Hash identifier: R4BfbqQ5fF5ZIy3GiPyOjf6n76dI48wBtDAyppDRbJ0= Subject key identifier: BE:1C:25:B7:D8:48:00:3A:C9:BF:BA:2D:66:1F:CB:B2:C2:26:BF:D6 Certificate issuer: /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7 Certificate serial: 019AE4CD9262A7BD731E6C5AA738190BC5C6 Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/vhwlt9hIADrJv7otZh_LssImv9Y.roa Signing time: Wed 03 Dec 2025 15:21:08 +0000 ROA not before: Wed 03 Dec 2025 15:21:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6205 IP address blocks: 104.247.170.0/24 maxlen: 24 104.247.171.0/24 maxlen: 24 104.247.172.0/24 maxlen: 24 104.247.174.0/24 maxlen: 24 104.247.175.0/24 maxlen: 24 104.247.176.0/24 maxlen: 24 104.247.177.0/24 maxlen: 24 104.247.178.0/24 maxlen: 24 104.247.180.0/24 maxlen: 24 104.247.181.0/24 maxlen: 24 104.247.182.0/24 maxlen: 24 104.247.183.0/24 maxlen: 24 104.247.184.0/24 maxlen: 24 104.247.185.0/24 maxlen: 24 104.247.187.0/24 maxlen: 24 104.247.188.0/24 maxlen: 24 104.247.189.0/24 maxlen: 24 104.247.190.0/24 maxlen: 24 104.247.191.0/24 maxlen: 24 185.73.84.0/24 maxlen: 24 185.73.129.0/24 maxlen: 24 185.73.130.0/24 maxlen: 24 185.73.131.0/24 maxlen: 24 185.137.215.0/24 maxlen: 24 2a03:a5a0:1::/48 maxlen: 48 2a03:a5a0:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:cd:92:62:a7:bd:73:1e:6c:5a:a7:38:19:0b:c5:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7 Validity Not Before: Dec 3 15:21:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=be1c25b7d848003ac9bfba2d661fcbb2c226bfd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b8:65:5e:12:ce:9a:e2:ca:4a:ff:b6:da:56: 55:6f:cb:6c:66:c8:a7:23:6b:1f:65:8d:f2:dd:65: d6:6f:1e:0e:1b:cf:54:17:ee:87:bf:79:38:fe:42: 49:eb:38:0c:1a:c7:df:e3:79:9f:f4:e9:e1:30:88: fb:5b:8f:de:bb:fb:db:fa:07:fa:67:24:32:f9:a2: d7:aa:8a:6b:f9:2e:9e:50:02:94:4e:76:21:24:7e: 98:0d:d7:77:0a:27:51:f3:35:28:6c:ca:08:68:a2: e7:71:2f:eb:e5:24:a2:a2:5a:76:ee:cd:12:b1:4a: 06:b6:52:e8:e6:e8:98:67:2a:84:fd:5e:dc:75:a4: 4c:b9:41:98:4a:45:2d:43:c8:fd:e7:67:a7:15:d4: b4:34:b8:e8:6a:78:6a:60:30:3a:b3:2f:46:74:72: ce:82:2d:02:91:62:b1:44:c6:d3:86:45:f7:7e:b4: 54:e6:9e:7e:c8:17:40:63:79:1e:ae:8e:8f:20:4c: c9:43:ee:23:70:a2:29:2b:87:81:4e:ad:45:00:4e: 19:d3:a4:5c:0f:b2:4d:cf:c1:8b:0c:80:99:51:94: 91:bd:c5:37:94:04:da:ff:cf:5f:82:42:7e:4d:f7: 71:2d:86:f0:8c:92:b2:7e:f8:7d:2c:ff:46:e4:87: 0a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:1C:25:B7:D8:48:00:3A:C9:BF:BA:2D:66:1F:CB:B2:C2:26:BF:D6 X509v3 Authority Key Identifier: keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/vhwlt9hIADrJv7otZh_LssImv9Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.247.170.0-104.247.172.255 104.247.174.0-104.247.178.255 104.247.180.0-104.247.185.255 104.247.187.0-104.247.191.255 185.73.84.0/24 185.73.129.0-185.73.131.255 185.137.215.0/24 IPv6: 2a03:a5a0:1::/48 2a03:a5a0:4::/48 Signature Algorithm: sha256WithRSAEncryption 45:8b:4e:a0:20:66:58:b0:8b:ef:07:18:e5:04:66:b0:4c:9e: 47:cf:e5:97:f6:d3:52:b5:68:3b:24:1e:67:c0:5b:f5:27:a6: 40:c8:2b:0c:46:91:68:9c:77:dd:64:da:50:3e:09:97:09:05: c2:47:b6:41:b3:47:99:8d:00:ae:06:04:de:49:3c:4a:cc:f6: 6f:94:d9:3b:fa:5b:ea:8b:6c:c0:e0:0b:1a:a4:ef:46:b9:13: 71:08:27:76:0f:08:68:11:03:32:d2:79:d9:08:ef:f7:b8:21: 0f:d5:66:00:5c:69:42:1a:60:54:9d:d8:70:bd:2b:0a:cc:5c: 3d:ed:98:10:fc:4f:3f:eb:e1:53:8c:44:c6:61:bf:09:11:7f: 81:66:8f:9f:1c:c8:8b:ac:d0:29:06:d7:f1:71:bd:c7:4d:07: 2a:aa:d4:c9:8c:06:db:5d:bc:e9:2a:ac:8d:77:f3:d7:85:2e: 24:51:88:6c:31:85:ca:28:a0:6a:2b:96:d8:7a:82:13:93:d5: 01:a5:b4:91:ee:59:31:b5:36:5c:74:b9:72:0c:6e:51:6f:48: 78:62:7b:b3:3c:a4:9d:7b:70:eb:91:3e:99:11:7d:54:7d:18: 35:1f:0a:4a:10:a7:2c:35:76:40:01:46:80:0e:29:e6:16:43: d8:66:51:1e -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgISAZrkzZJip71zHmxapzgZC8XGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhY2RjMWUyNDdmYWE5NTMxODA4MmE0YWM1ZWRiZDgwNTEx ZjhkZjcwHhcNMjUxMjAzMTUyMTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTFjMjViN2Q4NDgwMDNhYzliZmJhMmQ2NjFmY2JiMmMyMjZiZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7hlXhLOmuLKSv+22lZVb8tsZsin I2sfZY3y3WXWbx4OG89UF+6Hv3k4/kJJ6zgMGsff43mf9OnhMIj7W4/eu/vb+gf6 ZyQy+aLXqopr+S6eUAKUTnYhJH6YDdd3CidR8zUobMoIaKLncS/r5SSiolp27s0S sUoGtlLo5uiYZyqE/V7cdaRMuUGYSkUtQ8j952enFdS0NLjoanhqYDA6sy9GdHLO gi0CkWKxRMbThkX3frRU5p5+yBdAY3kero6PIEzJQ+4jcKIpK4eBTq1FAE4Z06Rc D7JNz8GLDICZUZSRvcU3lATa/89fgkJ+TfdxLYbwjJKyfvh9LP9G5IcK9wIDAQAB o4ICcDCCAmwwHQYDVR0OBBYEFL4cJbfYSAA6yb+6LWYfy7LCJr/WMB8GA1UdIwQY MBaAFOrNweJH+qlTGAgqSsXtvYBRH433MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnMzQjRrZjZxVk1ZQ0NwS3hlMjlnRkVmamZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lNmM0NGMtMzEyNS00ZmU2LWEwMGQt NjI4Y2NmMDBkZmJkLzEvdmh3bHQ5aElBRHJKdjdvdFpoX0xzc0ltdjlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9lNmM0NGMtMzEyNS00ZmU2LWEwMGQtNjI4Y2NmMDBkZmJk LzEvNnMzQjRrZjZxVk1ZQ0NwS3hlMjlnRkVmamZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwWAQCAAEwUjAMAwQBaPeq AwQAaPesMAwDBAFo964DBABo97IwDAMEAmj3tAMEAWj3uDAMAwQAaPe7AwQGaPeA AwQAuUlUMAwDBAC5SYEDBAK5SYADBAC5idcwGAQCAAIwEgMHACoDpaAAAQMHACoD paAABDANBgkqhkiG9w0BAQsFAAOCAQEARYtOoCBmWLCL7wcY5QRmsEyeR8/ll/bT UrVoOyQeZ8Bb9SemQMgrDEaRaJx33WTaUD4JlwkFwke2QbNHmY0ArgYE3kk8Ssz2 b5TZO/pb6otswOALGqTvRrkTcQgndg8IaBEDMtJ52Qjv97ghD9VmAFxpQhpgVJ3Y cL0rCsxcPe2YEPxPP+vhU4xExmG/CRF/gWaPnxzIi6zQKQbX8XG9x00HKqrUyYwG 21286SqsjXfz14UuJFGIbDGFyiigaiuW2HqCE5PVAaW0ke5ZMbU2XHS5cgxuUW9I eGJ7szyknXtw65E+mRF9VH0YNR8KShCnLDV2QAFGgA4p5hZD2GZRHg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:53:37 2025 by rpki-client