This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/9dpvTj3dN-E7QsiczyUqUE2pmXg.roa File: 9dpvTj3dN-E7QsiczyUqUE2pmXg.roa (raw, json) Hash identifier: jPZhbMHjd5Wy0OIvYiA0rk7oPkiRrytJe32NXuq6K3g= Subject key identifier: F5:DA:6F:4E:3D:DD:37:E1:3B:42:C8:9C:CF:25:2A:50:4D:A9:99:78 Certificate issuer: /CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581 Certificate serial: 019AE3255DD09F2564820D732D758CB5713F Authority key identifier: 3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/9dpvTj3dN-E7QsiczyUqUE2pmXg.roa Signing time: Wed 03 Dec 2025 07:37:48 +0000 ROA not before: Wed 03 Dec 2025 07:37:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5619 IP address blocks: 139.105.0.0/16 maxlen: 16 139.106.0.0/15 maxlen: 15 139.108.0.0/14 maxlen: 14 139.112.0.0/13 maxlen: 13 139.120.0.0/16 maxlen: 16 146.192.0.0/17 maxlen: 17 153.110.0.0/16 maxlen: 16 192.68.76.0/22 maxlen: 22 192.68.80.0/20 maxlen: 20 192.146.163.0/24 maxlen: 24 192.146.164.0/24 maxlen: 24 192.146.165.0/24 maxlen: 24 192.146.167.0/24 maxlen: 24 192.146.169.0/24 maxlen: 24 192.146.170.0/24 maxlen: 24 212.18.128.0/19 maxlen: 19 217.17.0.0/20 maxlen: 20 2a00:1be8::/29 maxlen: 29 2a02:9c8::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:25:5d:d0:9f:25:64:82:0d:73:2d:75:8c:b5:71:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581 Validity Not Before: Dec 3 07:37:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f5da6f4e3ddd37e13b42c89ccf252a504da99978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8e:00:11:a7:7e:4d:a0:f0:c9:b0:ac:f2:f7: 17:49:bd:54:32:6c:b1:48:87:87:2a:34:51:36:3e: 1d:26:8f:73:91:19:25:e9:33:2f:fb:0e:06:58:00: 58:49:ab:2e:e0:92:24:95:b2:f0:8e:cb:32:b1:fc: f2:04:66:89:0a:06:43:65:e2:1f:77:3b:5c:c4:f8: 5f:79:09:47:ce:03:0a:44:be:c3:3c:bc:a8:76:23: c8:2c:e8:52:28:91:da:94:84:f2:d7:76:7d:88:b5: d6:87:e6:50:ad:58:8b:e7:bc:9a:30:22:d1:5c:d4: f1:f6:bc:25:16:90:f4:c8:f6:63:39:d7:ad:a0:17: 94:c7:95:59:7f:a9:d2:50:1c:83:f4:9b:2c:ab:82: 27:da:5b:2f:5b:45:f8:25:d3:89:14:b5:af:11:ac: 81:3b:1e:61:45:89:62:2e:78:3b:5c:c4:73:c1:0c: 18:d2:d8:d5:63:48:41:61:c2:27:06:3a:d0:53:8e: 65:d2:3f:45:30:62:c5:16:5e:ee:35:e4:ce:24:c9: e8:23:a8:34:19:8f:c0:66:4b:96:9a:e1:c7:fe:32: 79:c7:f8:ae:6a:6d:2f:51:67:db:3e:75:a0:d4:d9: 18:58:c9:07:63:2e:cd:36:f2:fd:e6:05:b1:0e:19: 84:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:DA:6F:4E:3D:DD:37:E1:3B:42:C8:9C:CF:25:2A:50:4D:A9:99:78 X509v3 Authority Key Identifier: keyid:3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/9dpvTj3dN-E7QsiczyUqUE2pmXg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.105.0.0-139.120.255.255 146.192.0.0/17 153.110.0.0/16 192.68.76.0-192.68.95.255 192.146.163.0-192.146.165.255 192.146.167.0/24 192.146.169.0-192.146.170.255 212.18.128.0/19 217.17.0.0/20 IPv6: 2a00:1be8::/29 2a02:9c8::/29 Signature Algorithm: sha256WithRSAEncryption 32:db:c7:97:ab:eb:86:37:78:ae:fa:f1:12:08:c4:a2:3d:76: de:1f:98:c8:12:7f:e2:87:9d:98:ed:3b:d2:04:be:97:09:49: 0d:4b:e6:01:91:1e:c9:6c:1b:73:e7:31:00:84:ec:99:4b:d2: 8b:c3:da:b4:5e:2b:fb:4e:00:53:12:2d:53:67:3a:59:8c:b2: 0b:58:68:e0:cb:d0:fd:c6:a6:a1:0c:bf:52:29:ea:93:64:63: ed:ff:38:aa:82:5a:d9:0e:b5:98:c5:da:35:08:be:53:1d:7e: 7c:e3:f5:cd:dd:fe:b9:4f:ce:d3:e3:e2:31:a6:9d:37:71:35: 8d:c6:30:24:45:2b:be:0b:fb:42:f2:c6:4d:0a:39:ec:63:4a: 52:8d:ef:54:f5:75:08:c3:07:19:6a:09:b6:97:45:b3:b6:93: dd:79:3d:70:2e:9a:7e:dd:aa:b0:1e:f3:69:c0:a4:4a:d0:59: fd:1f:c9:82:28:ca:4a:ac:68:6c:10:b9:ad:f6:cc:fe:10:17: 78:ff:55:17:9b:76:06:02:dd:87:f6:69:b3:33:76:7c:95:32: ec:1b:97:88:e7:e0:06:22:0c:5e:1b:0f:74:2c:6b:d3:a7:5d: f9:ab:26:77:c5:4f:91:0a:d0:88:35:a0:04:52:d4:2c:5c:19: ca:6a:2e:c8 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgISAZrjJV3QnyVkgg1zLXWMtXE/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMmViNDE0N2VlN2JmYzZiYTcyZmMwMzQ5NDUzNDk4ZjAw MGU1ODEwHhcNMjUxMjAzMDczNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWRhNmY0ZTNkZGQzN2UxM2I0MmM4OWNjZjI1MmE1MDRkYTk5OTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY4AEad+TaDwybCs8vcXSb1UMmyx SIeHKjRRNj4dJo9zkRkl6TMv+w4GWABYSasu4JIklbLwjssysfzyBGaJCgZDZeIf dztcxPhfeQlHzgMKRL7DPLyodiPILOhSKJHalITy13Z9iLXWh+ZQrViL57yaMCLR XNTx9rwlFpD0yPZjOdetoBeUx5VZf6nSUByD9Jssq4In2lsvW0X4JdOJFLWvEayB Ox5hRYliLng7XMRzwQwY0tjVY0hBYcInBjrQU45l0j9FMGLFFl7uNeTOJMnoI6g0 GY/AZkuWmuHH/jJ5x/iuam0vUWfbPnWg1NkYWMkHYy7NNvL95gWxDhmEvQIDAQAB o4ICbTCCAmkwHQYDVR0OBBYEFPXab0493TfhO0LInM8lKlBNqZl4MB8GA1UdIwQY MBaAFD0utBR+57/GunL8A0lFNJjwAOWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFM2MEZIN252OGE2Y3Z3RFNVVTBtUEFBNVlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iOGY1M2YtNDY3Zi00NWNmLTgzMDYt NDI5NTFjMmNhNzM4LzEvOWRwdlRqM2ROLUU3UXNpY3p5VXFVRTJwbVhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9iOGY1M2YtNDY3Zi00NWNmLTgzMDYtNDI5NTFjMmNhNzM4 LzEvUFM2MEZIN252OGE2Y3Z3RFNVVTBtUEFBNVlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwWQQCAAEwUzAKAwMAi2kD AwCLeAMEB5LAAAMDAJluMAwDBALAREwDBAXAREAwDAMEAMCSowMEAcCSpAMEAMCS pzAMAwQAwJKpAwQAwJKqAwQF1BKAAwQE2REAMBQEAgACMA4DBQMqABvoAwUDKgIJ yDANBgkqhkiG9w0BAQsFAAOCAQEAMtvHl6vrhjd4rvrxEgjEoj123h+YyBJ/4oed mO070gS+lwlJDUvmAZEeyWwbc+cxAITsmUvSi8PatF4r+04AUxItU2c6WYyyC1ho 4MvQ/camoQy/Uinqk2Rj7f84qoJa2Q61mMXaNQi+Ux1+fOP1zd3+uU/O0+PiMaad N3E1jcYwJEUrvgv7QvLGTQo57GNKUo3vVPV1CMMHGWoJtpdFs7aT3Xk9cC6aft2q sB7zacCkStBZ/R/JgijKSqxobBC5rfbM/hAXeP9VF5t2BgLdh/ZpszN2fJUy7BuX iOfgBiIMXhsPdCxr06dd+asmd8VPkQrQiDWgBFLULFwZymouyA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:05 2025 by rpki-client