This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/xC95aRjyTDhgBiOlUCeMozANfsg.roa File: xC95aRjyTDhgBiOlUCeMozANfsg.roa (raw, json) Hash identifier: g3im20hJizIQ/3Z10K8z6H2sCBC/EP8Gok5T7cZ5jAw= Subject key identifier: C4:2F:79:69:18:F2:4C:38:60:06:23:A5:50:27:8C:A3:30:0D:7E:C8 Certificate issuer: /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7 Certificate serial: 019AE4C8140C705F63FA1303A1B2AD1F76E2 Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/xC95aRjyTDhgBiOlUCeMozANfsg.roa Signing time: Wed 03 Dec 2025 15:15:08 +0000 ROA not before: Wed 03 Dec 2025 15:15:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42846 IP address blocks: 104.247.160.0/24 maxlen: 24 104.247.161.0/24 maxlen: 24 104.247.162.0/24 maxlen: 24 104.247.163.0/24 maxlen: 24 104.247.164.0/24 maxlen: 24 104.247.165.0/24 maxlen: 24 104.247.166.0/24 maxlen: 24 104.247.167.0/24 maxlen: 24 104.247.168.0/24 maxlen: 24 104.247.169.0/24 maxlen: 24 104.247.173.0/24 maxlen: 24 104.247.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:c8:14:0c:70:5f:63:fa:13:03:a1:b2:ad:1f:76:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7 Validity Not Before: Dec 3 15:15:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c42f796918f24c38600623a550278ca3300d7ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:23:d3:a9:75:37:8f:f3:09:c7:4d:68:f4:7a: 06:c4:f9:8a:f9:80:c4:c1:57:6d:4f:1a:22:89:06: 28:25:7b:79:3e:f4:de:28:38:f8:d0:e0:5d:69:7f: 2d:ce:dc:36:e8:58:93:55:d0:af:8c:3d:70:50:f4: b6:6f:8a:9f:61:75:76:e4:9e:72:16:b6:96:39:50: ae:93:46:6a:ce:37:87:78:8f:50:8e:6e:2c:f2:cd: 3d:91:d0:bd:b8:60:f6:c6:e8:76:3d:2b:d8:4b:6e: 3a:26:7f:19:8f:a8:3f:85:0b:76:69:b8:03:c0:30: e0:2d:9e:94:9f:1c:b8:5c:25:28:7f:3b:09:df:dd: 04:15:03:1a:c0:e1:b0:df:c3:02:bf:d6:97:56:79: c9:c6:88:3e:bb:f2:41:79:60:e9:b8:7c:b3:d4:fb: 15:65:70:49:d6:ea:f3:4c:c4:48:cc:33:98:c5:9e: 63:cc:4f:f1:49:a4:4d:46:27:75:05:31:d7:02:ba: 96:87:54:86:e3:ae:21:2d:e6:93:c3:29:d9:67:10: 23:cb:91:f6:a2:9a:cc:ac:5b:68:a8:6e:2b:82:c3: 98:cd:b8:19:c9:2c:77:08:36:18:80:c5:54:5e:81: 36:b6:71:c2:04:f1:ea:46:8f:3e:c6:e3:d9:34:d7: 59:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2F:79:69:18:F2:4C:38:60:06:23:A5:50:27:8C:A3:30:0D:7E:C8 X509v3 Authority Key Identifier: keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/xC95aRjyTDhgBiOlUCeMozANfsg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.247.160.0-104.247.169.255 104.247.173.0/24 104.247.179.0/24 Signature Algorithm: sha256WithRSAEncryption 56:bc:a7:b8:48:ae:05:bb:35:8b:89:06:35:39:7f:97:bc:ac: ba:e4:88:f0:db:3c:3e:da:ba:d9:87:d7:4e:10:bd:c4:94:87: fe:1f:7e:fe:95:02:80:80:bb:fe:20:f6:7f:e5:88:fb:ff:88: 01:10:57:e4:16:23:ee:7d:52:c7:e9:54:4e:b3:a2:36:3c:55: 61:21:d5:21:e1:7f:d4:9d:e8:86:9c:d1:76:f0:7c:84:cc:ad: 2e:be:16:95:4d:56:c6:43:9c:2f:df:9d:4e:73:b1:80:d3:8d: 25:cd:8f:ef:60:58:30:05:5b:58:e0:bf:fe:0e:01:a2:fd:15: 61:92:a9:10:e7:9f:a6:d5:bb:a3:b6:eb:a3:7a:7d:45:a6:8c: 0b:fe:93:44:6b:a3:50:9c:a2:aa:c2:c4:30:89:8d:a1:5d:9c: 01:01:45:63:e0:14:28:63:87:86:4e:6a:48:43:d6:60:22:5e: 4e:a9:26:16:60:53:30:81:8f:39:16:d3:64:f2:9e:ce:8e:73: a6:1f:9e:63:87:b7:06:17:9a:a4:ca:0a:9e:6a:a1:00:c2:35: ff:ea:bf:0e:52:fe:2e:7c:28:e8:1e:91:d2:c9:33:32:1d:4e: ba:87:d3:d1:92:d1:b0:da:7c:d8:e8:c7:f1:3d:9a:f7:c2:74: 64:ee:d4:b7 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZrkyBQMcF9j+hMDobKtH3biMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhY2RjMWUyNDdmYWE5NTMxODA4MmE0YWM1ZWRiZDgwNTEx ZjhkZjcwHhcNMjUxMjAzMTUxNTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDJmNzk2OTE4ZjI0YzM4NjAwNjIzYTU1MDI3OGNhMzMwMGQ3ZWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSPTqXU3j/MJx01o9HoGxPmK+YDE wVdtTxoiiQYoJXt5PvTeKDj40OBdaX8tztw26FiTVdCvjD1wUPS2b4qfYXV25J5y FraWOVCuk0ZqzjeHeI9Qjm4s8s09kdC9uGD2xuh2PSvYS246Jn8Zj6g/hQt2abgD wDDgLZ6Unxy4XCUofzsJ390EFQMawOGw38MCv9aXVnnJxog+u/JBeWDpuHyz1PsV ZXBJ1urzTMRIzDOYxZ5jzE/xSaRNRid1BTHXArqWh1SG464hLeaTwynZZxAjy5H2 oprMrFtoqG4rgsOYzbgZySx3CDYYgMVUXoE2tnHCBPHqRo8+xuPZNNdZ0wIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFMQveWkY8kw4YAYjpVAnjKMwDX7IMB8GA1UdIwQY MBaAFOrNweJH+qlTGAgqSsXtvYBRH433MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnMzQjRrZjZxVk1ZQ0NwS3hlMjlnRkVmamZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lNmM0NGMtMzEyNS00ZmU2LWEwMGQt NjI4Y2NmMDBkZmJkLzEveEM5NWFSanlURGhnQmlPbFVDZU1vekFOZnNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9lNmM0NGMtMzEyNS00ZmU2LWEwMGQtNjI4Y2NmMDBkZmJk LzEvNnMzQjRrZjZxVk1ZQ0NwS3hlMjlnRkVmamZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAVo96AD BAFo96gDBABo960DBABo97MwDQYJKoZIhvcNAQELBQADggEBAFa8p7hIrgW7NYuJ BjU5f5e8rLrkiPDbPD7autmH104QvcSUh/4ffv6VAoCAu/4g9n/liPv/iAEQV+QW I+59UsfpVE6zojY8VWEh1SHhf9Sd6Iac0XbwfITMrS6+FpVNVsZDnC/fnU5zsYDT jSXNj+9gWDAFW1jgv/4OAaL9FWGSqRDnn6bVu6O266N6fUWmjAv+k0Rro1CcoqrC xDCJjaFdnAEBRWPgFChjh4ZOakhD1mAiXk6pJhZgUzCBjzkW02Tyns6Oc6YfnmOH twYXmqTKCp5qoQDCNf/qvw5S/i58KOgekdLJMzIdTrqH09GS0bDafNjox/E9mvfC dGTu1Lc= -----END CERTIFICATE-----Generated at Sat Dec 6 12:53:36 2025 by rpki-client