This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/5JBiV6_ZwlIO1DRO8e-vucg26dc.roa File: 5JBiV6_ZwlIO1DRO8e-vucg26dc.roa (raw, json) Hash identifier: pnq6FxEs3n389ufMWaHkhV00a/UkldcfAj8b2n3j78M= Subject key identifier: E4:90:62:57:AF:D9:C2:52:0E:D4:34:4E:F1:EF:AF:B9:C8:36:E9:D7 Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 019ACB6F6ECADDC0D1A467475730D91F44EF Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/5JBiV6_ZwlIO1DRO8e-vucg26dc.roa Signing time: Fri 28 Nov 2025 17:07:48 +0000 ROA not before: Fri 28 Nov 2025 17:07:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209737 IP address blocks: 5.180.105.0/24 maxlen: 24 5.180.106.0/24 maxlen: 24 5.180.107.0/24 maxlen: 24 45.131.0.0/24 maxlen: 24 45.131.1.0/24 maxlen: 24 45.136.4.0/24 maxlen: 24 77.83.200.0/24 maxlen: 24 77.83.201.0/24 maxlen: 24 77.83.202.0/24 maxlen: 24 77.83.203.0/24 maxlen: 24 91.208.204.0/24 maxlen: 24 194.116.237.0/24 maxlen: 24 194.146.36.0/24 maxlen: 24 2a09:8780::/29 maxlen: 29 2a0f:b700::/29 maxlen: 29 2a0f:e900::/29 maxlen: 29 2a0f:eb00::/29 maxlen: 29 2a0f:eb00::/32 maxlen: 32 2a0f:eb07::/32 maxlen: 32 2a0f:ed00::/29 maxlen: 29 2a0f:ed03::/32 maxlen: 32 2a0f:f900::/29 maxlen: 29 2a13:a440:7::/48 maxlen: 48 2a13:a441::/32 maxlen: 32 2a13:a445::/32 maxlen: 32 2a13:a447::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:6f:6e:ca:dd:c0:d1:a4:67:47:57:30:d9:1f:44:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Nov 28 17:07:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e4906257afd9c2520ed4344ef1efafb9c836e9d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cb:ec:06:ec:0f:01:3d:c0:58:b1:ec:bc:51: b0:7e:16:f1:f5:04:11:5b:82:2e:03:c7:ca:a8:c4: c9:26:19:96:5a:a1:76:fd:dc:69:03:f6:5c:e3:76: da:24:77:d8:52:70:c0:14:6f:06:f8:d1:d7:91:e2: 0d:81:9f:bb:5c:ab:d0:6f:17:b0:70:11:ad:8f:18: 29:53:52:b5:a0:ac:d2:ab:86:3a:5b:bb:bb:93:44: 6c:8f:e9:5e:db:f0:a3:2a:74:25:d0:d3:a8:33:26: d8:02:60:8e:f5:16:a1:e4:10:2d:48:90:2e:42:4e: bd:5a:66:80:b4:fb:63:8c:e0:b2:0f:f8:03:92:cd: 14:d1:25:7b:39:42:4f:d4:ee:db:15:a5:b1:6d:c3: a4:ef:3e:2e:c1:73:87:8c:d0:3e:a4:29:8e:cb:94: 40:82:47:2a:bb:02:a7:db:59:b9:4e:96:88:61:21: e2:6d:0e:f2:3e:89:f1:71:5d:b2:43:ae:5a:0e:56: 12:5a:0e:ee:34:3f:7e:2b:21:64:7e:f0:c0:e0:30: cc:60:a1:29:80:b0:63:96:8b:b7:45:ea:32:a3:6a: b5:4a:55:6f:b3:ab:85:e0:10:42:13:b9:23:19:c6: 97:3a:89:f1:2c:5d:8a:62:b5:fe:35:9e:48:9a:ce: 3f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:90:62:57:AF:D9:C2:52:0E:D4:34:4E:F1:EF:AF:B9:C8:36:E9:D7 X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/5JBiV6_ZwlIO1DRO8e-vucg26dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.105.0-5.180.107.255 45.131.0.0/23 45.136.4.0/24 77.83.200.0/22 91.208.204.0/24 194.116.237.0/24 194.146.36.0/24 IPv6: 2a09:8780::/29 2a0f:b700::/29 2a0f:e900::/29 2a0f:eb00::/29 2a0f:ed00::/29 2a0f:f900::/29 2a13:a440:7::/48 2a13:a441::/32 2a13:a445::/32 2a13:a447::/32 Signature Algorithm: sha256WithRSAEncryption 14:8d:3a:9b:c5:0c:88:00:7a:4e:04:b1:ab:14:2a:c6:1f:21: b3:1e:8d:bd:93:30:33:e1:73:7f:ad:7b:b2:07:ef:81:94:c7: 7c:89:ee:d6:ac:40:b5:36:b1:70:01:19:ba:cf:4d:b4:8d:55: 3c:36:62:35:59:d6:95:5b:b6:60:bf:ef:eb:5a:8e:a1:57:e4: 95:32:d9:be:21:7f:84:32:5c:89:cd:e3:ee:69:0a:d3:7b:ec: f0:c0:08:8d:30:ee:38:93:ad:8d:10:5b:ed:e8:2e:b0:2f:98: 88:54:2b:af:d3:32:18:f5:e3:e5:53:0b:e4:e5:78:20:42:cb: 6c:a0:17:84:9f:42:5a:fe:53:ee:43:ae:3e:d2:14:ef:84:77: 82:1a:13:0a:3c:63:ea:f8:de:57:4e:04:72:2b:94:87:a6:da: 40:c2:1e:ef:5d:6f:b9:ba:77:43:7b:45:09:66:e5:68:47:95: 9c:41:af:b0:ec:3f:18:11:96:a6:76:20:b3:aa:3e:dd:73:6e: 96:f5:aa:bf:ca:5d:6f:f7:e2:97:09:22:b6:10:60:6a:85:83: 36:e8:01:d5:0f:fd:4a:84:01:59:c3:15:55:3e:f4:e8:c1:82: 07:17:9f:fd:b2:0b:c7:03:53:04:be:62:e1:54:35:6c:5d:01: e2:b7:20:39 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgISAZrLb27K3cDRpGdHVzDZH0TvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjUxMTI4MTcwNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDkwNjI1N2FmZDljMjUyMGVkNDM0NGVmMWVmYWZiOWM4MzZlOWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8vsBuwPAT3AWLHsvFGwfhbx9QQR W4IuA8fKqMTJJhmWWqF2/dxpA/Zc43baJHfYUnDAFG8G+NHXkeINgZ+7XKvQbxew cBGtjxgpU1K1oKzSq4Y6W7u7k0Rsj+le2/CjKnQl0NOoMybYAmCO9Rah5BAtSJAu Qk69WmaAtPtjjOCyD/gDks0U0SV7OUJP1O7bFaWxbcOk7z4uwXOHjNA+pCmOy5RA gkcquwKn21m5TpaIYSHibQ7yPonxcV2yQ65aDlYSWg7uND9+KyFkfvDA4DDMYKEp gLBjlou3Reoyo2q1SlVvs6uF4BBCE7kjGcaXOonxLF2KYrX+NZ5Ims4/FwIDAQAB o4ICiDCCAoQwHQYDVR0OBBYEFOSQYlev2cJSDtQ0TvHvr7nINunXMB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvNUpCaVY2X1p3bElPMURSTzhlLXZ1Y2cyNmRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijA4BAIAATAyMAwDBAAF tGkDBAIFtGgDBAEtgwADBAAtiAQDBAJNU8gDBABb0MwDBADCdO0DBADCkiQwTgQC AAIwSAMFAyoJh4ADBQMqD7cAAwUDKg/pAAMFAyoP6wADBQMqD+0AAwUDKg/5AAMH ACoTpEAABwMFACoTpEEDBQAqE6RFAwUAKhOkRzANBgkqhkiG9w0BAQsFAAOCAQEA FI06m8UMiAB6TgSxqxQqxh8hsx6NvZMwM+Fzf617sgfvgZTHfInu1qxAtTaxcAEZ us9NtI1VPDZiNVnWlVu2YL/v61qOoVfklTLZviF/hDJcic3j7mkK03vs8MAIjTDu OJOtjRBb7egusC+YiFQrr9MyGPXj5VML5OV4IELLbKAXhJ9CWv5T7kOuPtIU74R3 ghoTCjxj6vjeV04EciuUh6baQMIe711vubp3Q3tFCWblaEeVnEGvsOw/GBGWpnYg s6o+3XNulvWqv8pdb/filwkithBgaoWDNugB1Q/9SoQBWcMVVT706MGCBxef/bIL xwNTBL5i4VQ1bF0B4rcgOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:40:29 2025 by rpki-client