This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/HAyz5J_ENToOalXFKX0EDidPHjQ.roa File: HAyz5J_ENToOalXFKX0EDidPHjQ.roa (raw, json) Hash identifier: NPdkjAh7yuySflBx8NAeTPB84P2sUZ1dgBvoErQ1GxU= Subject key identifier: 1C:0C:B3:E4:9F:C4:35:3A:0E:6A:55:C5:29:7D:04:0E:27:4F:1E:34 Certificate issuer: /CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db Certificate serial: 019B2655E6429399A25C174D8CDBBAD720CC Authority key identifier: DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/HAyz5J_ENToOalXFKX0EDidPHjQ.roa Signing time: Tue 16 Dec 2025 08:45:22 +0000 ROA not before: Tue 16 Dec 2025 08:45:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41960 IP address blocks: 2.56.216.0/22 maxlen: 24 5.183.132.0/22 maxlen: 24 37.148.184.0/21 maxlen: 24 45.10.124.0/22 maxlen: 24 45.95.252.0/22 maxlen: 24 45.140.156.0/22 maxlen: 24 45.151.116.0/22 maxlen: 24 77.73.224.0/21 maxlen: 24 85.184.8.0/21 maxlen: 24 93.188.64.0/22 maxlen: 24 171.22.176.0/22 maxlen: 24 185.116.12.0/22 maxlen: 24 185.234.152.0/23 maxlen: 24 185.234.154.0/24 maxlen: 24 185.239.168.0/23 maxlen: 24 185.239.170.0/24 maxlen: 24 185.249.136.0/22 maxlen: 24 185.251.152.0/22 maxlen: 24 185.253.48.0/22 maxlen: 24 193.105.183.0/24 maxlen: 24 194.61.84.0/24 maxlen: 24 194.61.86.0/24 maxlen: 24 195.184.86.0/23 maxlen: 24 195.184.90.0/23 maxlen: 24 195.238.86.0/23 maxlen: 24 212.19.192.0/19 maxlen: 24 212.26.192.0/19 maxlen: 24 212.57.48.0/20 maxlen: 24 213.156.0.0/20 maxlen: 24 213.173.56.0/22 maxlen: 24 217.8.96.0/20 maxlen: 24 2001:6e0::/29 maxlen: 48 2a02:690::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:55:e6:42:93:99:a2:5c:17:4d:8c:db:ba:d7:20:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db Validity Not Before: Dec 16 08:45:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1c0cb3e49fc4353a0e6a55c5297d040e274f1e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f9:b6:b4:88:b8:3a:f2:35:fe:50:81:a0:2f: 24:f9:90:23:2d:52:ba:1e:1e:f1:e2:74:14:da:ac: 5c:06:70:fb:83:0a:5c:88:92:2e:9a:d2:7a:df:d0: 9f:26:74:ee:6f:1b:7c:6b:be:7c:98:39:09:bf:bc: 16:1c:fb:be:72:92:3b:83:cb:25:49:88:0a:77:98: e0:e2:82:a1:82:61:27:6f:e3:f5:93:5f:df:ae:2f: 41:bc:31:09:5a:91:ef:6f:50:7f:6a:38:81:22:c8: 3b:f9:a1:a9:95:a9:49:39:90:a3:33:f6:42:88:93: 39:87:21:39:32:81:93:dd:de:5c:91:b9:06:37:3d: 64:9a:20:27:03:1e:25:f1:71:55:87:1d:ed:e6:b4: f3:24:6c:26:94:81:bc:22:f5:0a:ef:82:33:b7:2e: 0f:b3:27:4d:0b:7f:16:13:44:e9:70:a7:b1:51:18: a2:2c:ae:3c:98:ae:03:e7:57:29:d7:e2:24:c1:5d: 85:12:51:65:11:31:69:11:3d:4b:ae:c9:9b:ce:5f: 8f:28:03:ce:17:33:ad:3d:94:d5:dc:f3:66:11:c2: 2d:c1:40:18:35:f2:ef:43:30:18:67:01:2a:90:cf: fa:34:1b:85:62:93:26:45:3e:65:74:85:d6:21:46: 08:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0C:B3:E4:9F:C4:35:3A:0E:6A:55:C5:29:7D:04:0E:27:4F:1E:34 X509v3 Authority Key Identifier: keyid:DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/HAyz5J_ENToOalXFKX0EDidPHjQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.216.0/22 5.183.132.0/22 37.148.184.0/21 45.10.124.0/22 45.95.252.0/22 45.140.156.0/22 45.151.116.0/22 77.73.224.0/21 85.184.8.0/21 93.188.64.0/22 171.22.176.0/22 185.116.12.0/22 185.234.152.0-185.234.154.255 185.239.168.0-185.239.170.255 185.249.136.0/22 185.251.152.0/22 185.253.48.0/22 193.105.183.0/24 194.61.84.0/24 194.61.86.0/24 195.184.86.0/23 195.184.90.0/23 195.238.86.0/23 212.19.192.0/19 212.26.192.0/19 212.57.48.0/20 213.156.0.0/20 213.173.56.0/22 217.8.96.0/20 IPv6: 2001:6e0::/29 2a02:690::/29 Signature Algorithm: sha256WithRSAEncryption 0d:7d:3a:56:41:bb:36:dd:00:10:ca:ca:94:dd:cf:b8:15:69: bb:61:15:dd:7d:4e:e7:85:27:1f:79:5e:38:64:2c:fc:07:82: 13:eb:10:04:8a:16:70:77:d9:e4:a9:3c:ca:9f:79:20:c6:07: 8d:36:6a:ca:87:c4:aa:ba:02:30:97:26:8b:3f:8b:ff:19:e0: 42:ec:cc:2b:8a:73:27:f4:7b:02:c2:8b:bc:9a:7b:50:34:1e: ef:d3:87:20:65:99:49:dd:e3:6c:e1:a4:a5:08:1a:e2:87:ab: 1c:1d:22:be:83:3d:a0:fa:c8:56:96:9f:64:fe:c6:8c:1e:90: 46:d0:fc:8d:02:5d:fa:03:bb:3e:ec:f2:02:c7:8b:66:8d:61: 58:a0:2f:98:99:fc:63:2f:99:1a:fb:89:70:25:09:dd:80:dd: a0:ea:4e:8a:c7:e2:32:9f:e6:3e:4c:e2:8f:86:97:6d:46:45: c4:33:1a:f1:53:8e:40:76:1e:91:60:02:b8:f9:a4:65:7b:da: c7:3d:08:53:87:86:be:27:da:a5:fd:64:27:06:df:85:bd:e2: 40:8b:f2:42:ee:ab:5c:1d:28:b6:db:72:70:d6:d6:36:a4:27: e9:bd:60:81:9a:4f:f1:6e:85:3c:14:c8:93:b5:a8:3f:b2:7a: 08:3a:0f:8a -----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgISAZsmVeZCk5miXBdNjNu61yDMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYTEyMjA3YWY0ZDE4NmM0NGRhMjUzM2MwYjhmMWZkMWY1 NWQ4ZGIwHhcNMjUxMjE2MDg0NTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzBjYjNlNDlmYzQzNTNhMGU2YTU1YzUyOTdkMDQwZTI3NGYxZTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvm2tIi4OvI1/lCBoC8k+ZAjLVK6 Hh7x4nQU2qxcBnD7gwpciJIumtJ639CfJnTubxt8a758mDkJv7wWHPu+cpI7g8sl SYgKd5jg4oKhgmEnb+P1k1/fri9BvDEJWpHvb1B/ajiBIsg7+aGplalJOZCjM/ZC iJM5hyE5MoGT3d5ckbkGNz1kmiAnAx4l8XFVhx3t5rTzJGwmlIG8IvUK74Izty4P sydNC38WE0TpcKexURiiLK48mK4D51cp1+IkwV2FElFlETFpET1Lrsmbzl+PKAPO FzOtPZTV3PNmEcItwUAYNfLvQzAYZwEqkM/6NBuFYpMmRT5ldIXWIUYIpwIDAQAB o4IC3DCCAtgwHQYDVR0OBBYEFBwMs+SfxDU6DmpVxSl9BA4nTx40MB8GA1UdIwQY MBaAFNuhIgevTRhsRNolM8C48f0fVdjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjZFaUI2OU5HR3hFMmlVendManhfUjlWMk5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jODAxMGUtMzI4OS00YTM2LWEyYjgt MTJiMmJjNTgwNTNhLzEvSEF5ejVKX0VOVG9PYWxYRktYMEVEaWRQSGpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9jODAxMGUtMzI4OS00YTM2LWEyYjgtMTJiMmJjNTgwNTNh LzEvMjZFaUI2OU5HR3hFMmlVendManhfUjlWMk5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHxBggrBgEFBQcBBwEB/wSB4TCB3jCBxQQCAAEwgb4DBAIC ONgDBAIFt4QDBAMllLgDBAItCnwDBAItX/wDBAItjJwDBAItl3QDBANNSeADBANV uAgDBAJdvEADBAKrFrADBAK5dAwwDAMEA7nqmAMEALnqmjAMAwQDue+oAwQAue+q AwQCufmIAwQCufuYAwQCuf0wAwQAwWm3AwQAwj1UAwQAwj1WAwQBw7hWAwQBw7ha AwQBw+5WAwQF1BPAAwQF1BrAAwQE1DkwAwQE1ZwAAwQC1a04AwQE2QhgMBQEAgAC MA4DBQMgAQbgAwUDKgIGkDANBgkqhkiG9w0BAQsFAAOCAQEADX06VkG7Nt0AEMrK lN3PuBVpu2EV3X1O54UnH3leOGQs/AeCE+sQBIoWcHfZ5Kk8yp95IMYHjTZqyofE qroCMJcmiz+L/xngQuzMK4pzJ/R7AsKLvJp7UDQe79OHIGWZSd3jbOGkpQga4oer HB0ivoM9oPrIVpafZP7GjB6QRtD8jQJd+gO7PuzyAseLZo1hWKAvmJn8Yy+ZGvuJ cCUJ3YDdoOpOisfiMp/mPkzij4aXbUZFxDMa8VOOQHYekWACuPmkZXvaxz0IU4eG vifapf1kJwbfhb3iQIvyQu6rXB0otttycNbWNqQn6b1ggZpP8W6FPBTIk7WoP7J6 CDoPig== -----END CERTIFICATE-----Generated at Wed Dec 17 15:24:18 2025 by rpki-client