This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/m4H483z2P-zcC4ubnNBjNvxbHMo.roa File: m4H483z2P-zcC4ubnNBjNvxbHMo.roa (raw, json) Hash identifier: b3Rm8ItHdOPM68urQcBIHMskc29iL1u/gZHs0ce3q8I= Subject key identifier: 9B:81:F8:F3:7C:F6:3F:EC:DC:0B:8B:9B:9C:D0:63:36:FC:5B:1C:CA Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Certificate serial: 019A9D117323FCD3ECC9306AFE8173C6493A Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/m4H483z2P-zcC4ubnNBjNvxbHMo.roa Signing time: Wed 19 Nov 2025 17:02:37 +0000 ROA not before: Wed 19 Nov 2025 17:02:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199081 IP address blocks: 5.172.192.0/20 maxlen: 20 5.172.192.0/22 maxlen: 22 5.172.192.0/24 maxlen: 24 5.172.193.0/24 maxlen: 24 5.172.194.0/24 maxlen: 24 5.172.195.0/24 maxlen: 24 5.172.196.0/22 maxlen: 22 5.172.196.0/24 maxlen: 24 5.172.197.0/24 maxlen: 24 5.172.198.0/24 maxlen: 24 5.172.199.0/24 maxlen: 24 5.172.200.0/22 maxlen: 22 5.172.201.0/24 maxlen: 24 5.172.202.0/24 maxlen: 24 5.172.203.0/24 maxlen: 24 5.172.204.0/22 maxlen: 22 5.172.204.0/24 maxlen: 24 5.172.205.0/24 maxlen: 24 5.172.206.0/24 maxlen: 24 45.66.185.0/24 maxlen: 24 45.66.186.0/24 maxlen: 24 45.66.187.0/24 maxlen: 24 91.193.60.0/22 maxlen: 22 91.193.60.0/24 maxlen: 24 91.193.61.0/24 maxlen: 24 91.193.62.0/24 maxlen: 24 91.193.63.0/24 maxlen: 24 109.68.144.0/21 maxlen: 21 109.68.144.0/24 maxlen: 24 109.68.145.0/24 maxlen: 24 109.68.147.0/24 maxlen: 24 109.68.149.0/24 maxlen: 24 109.68.150.0/24 maxlen: 24 178.21.168.0/21 maxlen: 21 178.21.168.0/22 maxlen: 22 178.21.168.0/24 maxlen: 24 178.21.169.0/24 maxlen: 24 178.21.170.0/24 maxlen: 24 178.21.171.0/24 maxlen: 24 178.21.172.0/22 maxlen: 22 178.21.172.0/24 maxlen: 24 178.21.173.0/24 maxlen: 24 178.21.174.0/24 maxlen: 24 178.21.175.0/24 maxlen: 24 185.70.76.0/22 maxlen: 22 185.70.76.0/24 maxlen: 24 185.70.77.0/24 maxlen: 24 185.70.78.0/23 maxlen: 23 185.70.78.0/24 maxlen: 24 185.70.79.0/24 maxlen: 24 185.88.23.0/24 maxlen: 24 185.118.125.0/24 maxlen: 24 185.168.36.0/22 maxlen: 22 185.168.38.0/23 maxlen: 23 185.168.38.0/24 maxlen: 24 185.168.39.0/24 maxlen: 24 185.205.96.0/22 maxlen: 22 185.205.96.0/24 maxlen: 24 185.205.97.0/24 maxlen: 24 185.205.98.0/24 maxlen: 24 185.205.99.0/24 maxlen: 24 195.35.92.0/22 maxlen: 22 2a02:4fc0::/32 maxlen: 32 2a02:4fc0:4000::/48 maxlen: 48 2a02:4fc0:4001::/48 maxlen: 48 2a02:4fc0:4002::/48 maxlen: 48 2a02:4fc0:4003::/48 maxlen: 48 2a02:4fc0:4100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9d:11:73:23:fc:d3:ec:c9:30:6a:fe:81:73:c6:49:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Validity Not Before: Nov 19 17:02:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9b81f8f37cf63fecdc0b8b9b9cd06336fc5b1cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ff:4a:63:d4:84:79:49:fe:fd:eb:41:9f:2d: b5:fb:99:34:e9:76:53:35:cd:5b:42:69:08:87:b8: 2e:31:0e:12:30:d7:f4:7c:cb:6d:ea:ed:71:e6:77: 30:35:c1:d9:a2:33:df:af:b4:14:d7:36:bc:d9:bb: 22:20:53:29:23:67:ce:98:f1:9f:43:22:f9:a4:da: ca:c3:f4:3f:74:5c:a7:b0:9a:01:16:4d:b8:d5:9f: ab:10:1b:ad:7b:a1:cb:01:f6:62:08:82:3f:06:54: df:11:26:3e:c4:43:6e:13:19:a7:c4:bd:9c:53:5f: cf:9b:d1:db:03:81:5f:e6:46:bc:fa:f9:37:e6:33: c8:b1:05:78:e4:d3:f2:29:fc:1a:08:db:91:b4:1b: f7:95:db:47:24:36:8b:bb:a0:88:30:c1:4a:25:f8: cc:2c:a4:0b:25:d3:a1:0b:14:54:ee:71:73:ec:af: d8:40:e4:b1:fe:eb:6b:82:4f:0d:39:bf:e0:d8:77: c1:95:64:c9:53:32:92:81:ec:d9:aa:f7:97:6f:8f: 38:57:2f:f5:56:78:a1:4d:22:3f:10:ea:b6:d9:b3: 74:aa:13:4b:43:fd:4c:f1:4a:d7:ff:7a:8e:e7:e7: 54:f4:b9:cc:13:05:0e:99:2e:2d:60:79:26:f4:7c: 93:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:81:F8:F3:7C:F6:3F:EC:DC:0B:8B:9B:9C:D0:63:36:FC:5B:1C:CA X509v3 Authority Key Identifier: keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/m4H483z2P-zcC4ubnNBjNvxbHMo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.172.192.0/20 45.66.185.0-45.66.187.255 91.193.60.0/22 109.68.144.0/21 178.21.168.0/21 185.70.76.0/22 185.88.23.0/24 185.118.125.0/24 185.168.36.0/22 185.205.96.0/22 195.35.92.0/22 IPv6: 2a02:4fc0::/32 Signature Algorithm: sha256WithRSAEncryption 1a:73:c0:0d:98:a6:f8:77:cc:7b:c4:b8:7e:69:f7:e3:49:fc: ef:6d:83:86:34:b1:e2:60:1e:34:ce:de:3b:eb:22:04:1c:00: a4:af:ea:8d:ba:7e:92:c7:14:fc:fe:98:13:1b:99:d1:bb:5a: 67:3a:c6:45:b0:a4:e7:39:a8:b9:47:d3:c2:0e:24:ba:5e:25: fe:6f:9b:c6:9b:4e:8b:2c:a2:db:92:b0:e6:3c:9a:68:76:ca: c0:b0:c8:4f:e6:26:aa:10:4b:33:6e:e3:48:e4:9e:4c:c5:d5: b9:17:8a:ac:6d:6c:94:c7:c5:e0:6e:83:c6:a8:90:55:2f:39: e0:b4:05:46:74:52:74:54:4a:b7:e6:bb:4e:e6:f1:34:02:ff: 28:ec:1f:4f:c2:b5:22:ef:eb:bd:e2:3a:72:35:a3:55:1d:e6: aa:e8:f5:44:95:7a:46:c9:22:16:66:f7:c3:af:83:ef:cd:e2: cf:bb:d1:12:8f:33:9d:05:95:10:a9:12:05:13:37:f4:43:a7: 6c:bf:fb:8a:c4:37:d4:16:df:18:59:39:8a:02:41:dc:40:2a: cf:4f:f4:3e:90:e9:81:d9:82:1a:dc:20:6e:0b:ac:a0:86:15: d1:83:04:72:e8:2e:cf:2f:1d:a4:c2:d7:1f:b0:d0:c5:6d:cc: 16:9a:14:c3 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgISAZqdEXMj/NPsyTBq/oFzxkk6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYzUxYjBjMDYzY2ZjMTY5NDNmYzlhNDdlMmM4MDU5OTBm NmVhYWUwHhcNMjUxMTE5MTcwMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjgxZjhmMzdjZjYzZmVjZGMwYjhiOWI5Y2QwNjMzNmZjNWIxY2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/9KY9SEeUn+/etBny21+5k06XZT Nc1bQmkIh7guMQ4SMNf0fMtt6u1x5ncwNcHZojPfr7QU1za82bsiIFMpI2fOmPGf QyL5pNrKw/Q/dFynsJoBFk241Z+rEBute6HLAfZiCII/BlTfESY+xENuExmnxL2c U1/Pm9HbA4Ff5ka8+vk35jPIsQV45NPyKfwaCNuRtBv3ldtHJDaLu6CIMMFKJfjM LKQLJdOhCxRU7nFz7K/YQOSx/utrgk8NOb/g2HfBlWTJUzKSgezZqveXb484Vy/1 VnihTSI/EOq22bN0qhNLQ/1M8UrX/3qO5+dU9LnMEwUOmS4tYHkm9HyTNwIDAQAB o4ICXDCCAlgwHQYDVR0OBBYEFJuB+PN89j/s3AuLm5zQYzb8WxzKMB8GA1UdIwQY MBaAFLPFGwwGPPwWlD/JpH4sgFmQ9uquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEt ZmY1ZjFhZDY5MjY2LzEvbTRINDgzejJQLXpjQzR1Ym5OQmpOdnhiSE1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEtZmY1ZjFhZDY5MjY2 LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTBQBAIAATBKAwQEBazAMAwD BAAtQrkDBAItQrgDBAJbwTwDBANtRJADBAOyFagDBAK5RkwDBAC5WBcDBAC5dn0D BAK5qCQDBAK5zWADBALDI1wwDQQCAAIwBwMFACoCT8AwDQYJKoZIhvcNAQELBQAD ggEBABpzwA2Ypvh3zHvEuH5p9+NJ/O9tg4Y0seJgHjTO3jvrIgQcAKSv6o26fpLH FPz+mBMbmdG7Wmc6xkWwpOc5qLlH08IOJLpeJf5vm8abTossotuSsOY8mmh2ysCw yE/mJqoQSzNu40jknkzF1bkXiqxtbJTHxeBug8aokFUvOeC0BUZ0UnRUSrfmu07m 8TQC/yjsH0/CtSLv673iOnI1o1Ud5qro9USVekbJIhZm98Ovg+/N4s+70RKPM50F lRCpEgUTN/RDp2y/+4rEN9QW3xhZOYoCQdxAKs9P9D6Q6YHZghrcIG4LrKCGFdGD BHLoLs8vHaTC1x+w0MVtzBaaFMM= -----END CERTIFICATE-----Generated at Sat Dec 6 21:30:21 2025 by rpki-client