This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/aSZrI5x5qRWC5zpiDzl26YdnQ8o.roa File: aSZrI5x5qRWC5zpiDzl26YdnQ8o.roa (raw, json) Hash identifier: N5Tb+ycPdIMDqhO3I62rhDR7jaduMzbil3MG8zginEU= Subject key identifier: 69:26:6B:23:9C:79:A9:15:82:E7:3A:62:0F:39:76:E9:87:67:43:CA Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019AD9F8BB8270420E2D3E241652DF133771 Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/aSZrI5x5qRWC5zpiDzl26YdnQ8o.roa Signing time: Mon 01 Dec 2025 12:52:27 +0000 ROA not before: Mon 01 Dec 2025 12:52:27 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209641 IP address blocks: 46.243.7.0/24 maxlen: 24 91.200.14.0/24 maxlen: 24 91.200.15.0/24 maxlen: 24 92.62.119.0/24 maxlen: 24 94.232.248.0/24 maxlen: 24 95.81.76.0/24 maxlen: 24 95.81.114.0/24 maxlen: 24 95.81.115.0/24 maxlen: 24 95.81.123.0/24 maxlen: 24 95.81.124.0/24 maxlen: 24 95.81.125.0/24 maxlen: 24 109.69.60.0/24 maxlen: 24 185.87.48.0/22 maxlen: 22 185.87.48.0/24 maxlen: 24 185.87.49.0/24 maxlen: 24 185.87.50.0/24 maxlen: 24 185.87.51.0/24 maxlen: 24 185.117.152.0/22 maxlen: 22 2a06:ddc0::/29 maxlen: 29 2a0c:5d00:2001::/48 maxlen: 48 2a0c:6980::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:f8:bb:82:70:42:0e:2d:3e:24:16:52:df:13:37:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Dec 1 12:52:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69266b239c79a91582e73a620f3976e9876743ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:db:36:17:e2:68:70:9f:3b:5e:7b:1b:7e:a5: 62:b2:54:3e:97:3e:08:8c:cb:ac:56:db:47:27:bc: 13:e7:24:7f:07:7e:fc:83:7b:56:fb:70:15:c8:e6: 30:26:f3:12:20:79:8a:23:6a:ee:d2:15:74:55:a9: 6b:34:af:6b:9f:86:06:fa:1f:21:46:87:c8:28:04: 58:e0:0e:f2:23:30:f5:48:24:0d:19:7e:24:6d:eb: a1:4b:9e:d8:22:3b:a2:93:b9:28:01:8a:31:ee:be: cb:28:ce:fd:a5:16:72:cd:e3:39:dd:8c:6c:0f:cc: 60:12:94:6a:28:7b:71:f3:70:52:b9:65:b7:da:30: f2:e0:89:23:82:84:97:25:03:a3:dd:cb:df:11:a9: cc:6c:1e:0e:bb:1e:d8:a9:2b:11:7b:95:cc:17:84: e3:e3:59:aa:09:56:cc:d6:09:6c:1c:b7:2a:96:8d: 7b:ff:e7:f3:5a:b1:c8:62:5f:20:5f:96:b0:eb:b5: f4:63:cb:76:5c:b4:66:22:89:0f:43:a9:f8:f0:f4: ee:1b:02:d1:e6:c8:08:e0:29:54:14:73:a3:e0:ba: 7a:84:65:6b:b7:d3:52:08:21:df:be:d4:51:64:cd: 14:e0:1a:7d:d0:3d:bb:2d:57:4e:f8:30:cf:5b:7a: 8f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:26:6B:23:9C:79:A9:15:82:E7:3A:62:0F:39:76:E9:87:67:43:CA X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/aSZrI5x5qRWC5zpiDzl26YdnQ8o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.7.0/24 91.200.14.0/23 92.62.119.0/24 94.232.248.0/24 95.81.76.0/24 95.81.114.0/23 95.81.123.0-95.81.125.255 109.69.60.0/24 185.87.48.0/22 185.117.152.0/22 IPv6: 2a06:ddc0::/29 2a0c:5d00:2001::/48 2a0c:6980::/29 Signature Algorithm: sha256WithRSAEncryption 48:a4:f4:9c:8f:bd:03:56:bc:29:91:95:02:e9:de:65:61:c9: 03:7b:d2:a0:f6:71:48:b0:21:ba:f0:47:22:17:ea:44:83:ee: 3a:74:a6:c2:65:50:2c:ae:4d:b1:8d:5f:ae:38:9e:1a:b1:6a: 25:0f:60:8f:5a:0f:cf:83:06:85:de:1b:0a:51:21:51:c0:af: 43:8f:7f:af:f2:74:a6:7e:7c:06:01:86:84:fa:be:3e:d1:6f: 00:e2:53:a4:af:dd:ea:b2:d6:eb:51:51:a9:12:84:6d:45:f8: 44:6c:a5:8a:57:7b:d2:4c:11:9c:d6:97:cc:15:de:86:05:e9: ca:0d:91:6f:93:9b:37:2c:46:0f:53:56:16:ef:4d:f7:1b:95: 9e:a3:d0:c5:f3:67:b8:43:63:ff:e0:8e:4a:6b:18:c7:86:0b: 89:46:7d:b4:ac:e0:d7:ef:78:44:17:ca:45:57:25:f9:4e:14: 9b:d5:8f:3c:fa:89:bb:e9:83:c7:63:cb:bb:dd:ae:68:ae:09: fd:bb:8c:ef:9d:cc:84:0e:d9:d1:c6:68:43:dd:d3:19:9b:7f: 1b:8e:db:d3:d9:41:f8:6b:a5:7d:44:46:76:7d:25:9c:80:33: eb:ee:e4:09:10:f3:6d:d3:b2:2d:8e:d5:e5:d6:02:8e:68:65: 33:23:d7:ad -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgISAZrZ+LuCcEIOLT4kFlLfEzdxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjUxMjAxMTI1MjI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTI2NmIyMzljNzlhOTE1ODJlNzNhNjIwZjM5NzZlOTg3Njc0M2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtds2F+JocJ87XnsbfqVislQ+lz4I jMusVttHJ7wT5yR/B378g3tW+3AVyOYwJvMSIHmKI2ru0hV0ValrNK9rn4YG+h8h RofIKARY4A7yIzD1SCQNGX4kbeuhS57YIjuik7koAYox7r7LKM79pRZyzeM53Yxs D8xgEpRqKHtx83BSuWW32jDy4IkjgoSXJQOj3cvfEanMbB4Oux7YqSsRe5XMF4Tj 41mqCVbM1glsHLcqlo17/+fzWrHIYl8gX5aw67X0Y8t2XLRmIokPQ6n48PTuGwLR 5sgI4ClUFHOj4Lp6hGVrt9NSCCHfvtRRZM0U4Bp90D27LVdO+DDPW3qPKwIDAQAB o4ICZjCCAmIwHQYDVR0OBBYEFGkmayOceakVguc6Yg85dumHZ0PKMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvYVNackk1eDVxUldDNXpwaUR6bDI2WWRuUThvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEHAQH/BG0wazBKBAIAATBEAwQALvMHAwQB W8gOAwQAXD53AwQAXuj4AwQAX1FMAwQBX1FyMAwDBABfUXsDBAFfUXwDBABtRTwD BAK5VzADBAK5dZgwHQQCAAIwFwMFAyoG3cADBwAqDF0AIAEDBQMqDGmAMA0GCSqG SIb3DQEBCwUAA4IBAQBIpPScj70DVrwpkZUC6d5lYckDe9Kg9nFIsCG68EciF+pE g+46dKbCZVAsrk2xjV+uOJ4asWolD2CPWg/PgwaF3hsKUSFRwK9Dj3+v8nSmfnwG AYaE+r4+0W8A4lOkr93qstbrUVGpEoRtRfhEbKWKV3vSTBGc1pfMFd6GBenKDZFv k5s3LEYPU1YW7033G5Weo9DF82e4Q2P/4I5KaxjHhguJRn20rODX73hEF8pFVyX5 ThSb1Y88+om76YPHY8u73a5orgn9u4zvncyEDtnRxmhD3dMZm38bjtvT2UH4a6V9 REZ2fSWcgDPr7uQJEPNt07ItjtXl1gKOaGUzI9et -----END CERTIFICATE-----Generated at Sat Dec 6 17:58:37 2025 by rpki-client