This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/sGh4leOiqeUbD9ETXq4INosKjgA.roa File: sGh4leOiqeUbD9ETXq4INosKjgA.roa (raw, json) Hash identifier: zQNus8r96YCQp+l8cgOvwchxCyXBB9NQl2BAMnnD1SE= Subject key identifier: B0:68:78:95:E3:A2:A9:E5:1B:0F:D1:13:5E:AE:08:36:8B:0A:8E:00 Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255 Certificate serial: 019A932FD9415F8383F3B67EC5F2C43A953F Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/sGh4leOiqeUbD9ETXq4INosKjgA.roa Signing time: Mon 17 Nov 2025 18:59:37 +0000 ROA not before: Mon 17 Nov 2025 18:59:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51032 IP address blocks: 31.128.128.0/19 maxlen: 24 31.130.0.0/19 maxlen: 24 62.122.88.0/21 maxlen: 24 85.159.224.0/24 maxlen: 24 85.159.227.0/24 maxlen: 24 89.23.128.0/19 maxlen: 20 89.23.128.0/21 maxlen: 24 89.23.144.0/20 maxlen: 24 89.23.146.0/24 maxlen: 24 89.23.147.0/24 maxlen: 24 89.23.160.0/19 maxlen: 19 89.23.168.0/21 maxlen: 21 89.23.176.0/21 maxlen: 21 91.123.80.0/20 maxlen: 20 91.202.204.0/22 maxlen: 24 93.157.160.0/21 maxlen: 21 93.157.162.0/24 maxlen: 24 93.157.163.0/24 maxlen: 24 178.212.80.0/21 maxlen: 24 178.216.176.0/21 maxlen: 24 2a13:2c80::/29 maxlen: 32 2a13:2c80::/32 maxlen: 48 2a13:2c81::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:93:2f:d9:41:5f:83:83:f3:b6:7e:c5:f2:c4:3a:95:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255 Validity Not Before: Nov 17 18:59:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b0687895e3a2a9e51b0fd1135eae08368b0a8e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fb:e8:bd:e5:aa:db:b2:ab:46:9d:93:e4:6d: 9f:56:c5:b3:5d:4f:07:90:51:71:b5:49:09:bc:c4: 86:89:96:a9:eb:c1:e5:8b:87:a7:62:a5:01:fe:ba: 9a:21:db:35:17:7b:d5:b0:c5:97:24:80:6b:93:94: 17:62:a3:1d:7e:e5:ea:ea:9d:96:56:66:54:de:57: 17:5a:15:16:91:82:3d:86:66:b8:e3:e7:62:5f:80: 04:69:9e:60:ff:71:95:ba:00:e2:10:07:d5:e7:32: 5b:f2:4a:45:69:1a:ce:76:05:77:6b:c4:4c:9a:2a: 9f:d7:71:02:84:a9:12:55:20:3e:33:69:39:1c:e9: 9e:8c:1c:d0:ab:07:ab:d7:3b:41:d8:cb:36:48:56: 76:33:6e:ee:1b:cb:48:0c:90:f1:de:38:99:6d:34: 4b:8a:08:2e:94:e4:b6:ae:88:5d:75:9d:fe:7a:c1: 73:1d:b3:02:b8:23:a2:9b:41:c4:39:ad:5c:2b:ee: 06:49:7d:ca:58:a4:23:0f:dc:97:86:fc:b9:a0:b2: 28:bc:3d:0d:d4:47:2e:1a:b0:27:81:af:80:35:a8: d0:31:89:6f:02:2f:07:2a:fb:da:81:44:f2:81:5e: b0:28:de:fb:df:64:ac:95:4a:63:94:98:e3:89:d7: e7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:68:78:95:E3:A2:A9:E5:1B:0F:D1:13:5E:AE:08:36:8B:0A:8E:00 X509v3 Authority Key Identifier: keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/sGh4leOiqeUbD9ETXq4INosKjgA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.128.128.0/19 31.130.0.0/19 62.122.88.0/21 85.159.224.0/24 85.159.227.0/24 89.23.128.0/18 91.123.80.0/20 91.202.204.0/22 93.157.160.0/21 178.212.80.0/21 178.216.176.0/21 IPv6: 2a13:2c80::/29 Signature Algorithm: sha256WithRSAEncryption 37:b5:a8:1b:e3:53:69:82:c8:7d:51:b8:8c:cf:37:52:c3:65: de:58:a9:03:b4:9b:5d:51:16:a3:80:ec:3e:5b:8f:43:9f:01: 6b:79:1c:03:cb:a3:65:d1:7d:86:05:b9:76:b7:bf:82:ef:60: 3e:49:17:a3:8c:fe:55:bc:0c:19:0e:79:53:ed:dd:3e:6c:a6: 08:35:64:67:0a:09:21:bc:9d:d4:da:e9:2f:c1:3a:5d:2e:1e: c5:24:64:0a:d7:3b:77:0c:7e:7d:43:23:aa:96:f2:f3:d2:ef: db:22:74:a7:70:96:7e:b4:6f:4a:ca:ef:71:37:ee:51:8e:6e: 37:32:4f:c0:af:9c:8c:46:68:c9:7d:68:9a:26:8d:bb:d7:a5: e0:1d:50:69:1a:f0:55:89:11:99:6f:9f:ce:a0:98:5d:62:1c: f8:b2:a7:e3:8a:41:f9:46:f1:4b:b3:3c:54:84:1a:f0:71:21: 39:38:f7:67:99:ce:e6:5a:5d:c9:62:f8:3a:28:01:e8:d7:04: 9a:e3:6a:d1:84:57:ac:d1:ba:5f:c3:fc:d1:75:a9:5c:d7:a9: ef:51:41:7c:10:ee:33:9d:cf:7a:bf:b0:d3:d6:d9:93:d6:45: de:50:6a:99:3d:d6:d3:2f:a0:94:56:4a:60:39:0b:29:d1:b4: 59:97:d8:3c -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISAZqTL9lBX4OD87Z+xfLEOpU/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMzZkZTI3OTc0NzI3YWEwMDQ2YjNlOWM4ZDA2MjQ2NzQ1 NDEyNTUwHhcNMjUxMTE3MTg1OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDY4Nzg5NWUzYTJhOWU1MWIwZmQxMTM1ZWFlMDgzNjhiMGE4ZTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/voveWq27KrRp2T5G2fVsWzXU8H kFFxtUkJvMSGiZap68Hli4enYqUB/rqaIds1F3vVsMWXJIBrk5QXYqMdfuXq6p2W VmZU3lcXWhUWkYI9hma44+diX4AEaZ5g/3GVugDiEAfV5zJb8kpFaRrOdgV3a8RM miqf13EChKkSVSA+M2k5HOmejBzQqwer1ztB2Ms2SFZ2M27uG8tIDJDx3jiZbTRL iggulOS2rohddZ3+esFzHbMCuCOim0HEOa1cK+4GSX3KWKQjD9yXhvy5oLIovD0N 1EcuGrAnga+ANajQMYlvAi8HKvvagUTygV6wKN7732SslUpjlJjjidfnNQIDAQAB o4ICVDCCAlAwHQYDVR0OBBYEFLBoeJXjoqnlGw/RE16uCDaLCo4AMB8GA1UdIwQY MBaAFB423ieXRyeqAEaz6cjQYkZ0VBJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzkt ZGY3OTNhOTQwYmFiLzEvc0doNGxlT2lxZVViRDlFVFhxNElOb3NLamdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzktZGY3OTNhOTQwYmFi LzEvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQFH4CAAwQF H4IAAwQDPnpYAwQAVZ/gAwQAVZ/jAwQGWReAAwQEW3tQAwQCW8rMAwQDXZ2gAwQD stRQAwQDstiwMA0EAgACMAcDBQMqEyyAMA0GCSqGSIb3DQEBCwUAA4IBAQA3tagb 41Npgsh9UbiMzzdSw2XeWKkDtJtdURajgOw+W49DnwFreRwDy6Nl0X2GBbl2t7+C 72A+SRejjP5VvAwZDnlT7d0+bKYINWRnCgkhvJ3U2ukvwTpdLh7FJGQK1zt3DH59 QyOqlvLz0u/bInSncJZ+tG9Kyu9xN+5Rjm43Mk/Ar5yMRmjJfWiaJo2716XgHVBp GvBViRGZb5/OoJhdYhz4sqfjikH5RvFLszxUhBrwcSE5OPdnmc7mWl3JYvg6KAHo 1wSa42rRhFes0bpfw/zRdalc16nvUUF8EO4znc96v7DT1tmT1kXeUGqZPdbTL6CU VkpgOQsp0bRZl9g8 -----END CERTIFICATE-----Generated at Sat Dec 6 14:54:39 2025 by rpki-client