This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/Pm6S7LF4MF2BvoSNV639-A7oVdg.roa File: Pm6S7LF4MF2BvoSNV639-A7oVdg.roa (raw, json) Hash identifier: zRtbA+eEbt7rP8hULiWX7WLL5EfHRRQj7dA9Qx3CuQ0= Subject key identifier: 3E:6E:92:EC:B1:78:30:5D:81:BE:84:8D:57:AD:FD:F8:0E:E8:55:D8 Certificate issuer: /CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde Certificate serial: 019A7C6AAE93DB9BFA072F0CBD1FBCC23CFC Authority key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/Pm6S7LF4MF2BvoSNV639-A7oVdg.roa Signing time: Thu 13 Nov 2025 08:52:37 +0000 ROA not before: Thu 13 Nov 2025 08:52:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59395 IP address blocks: 5.133.16.0/21 maxlen: 21 46.31.80.0/21 maxlen: 21 46.31.168.0/21 maxlen: 21 46.231.64.0/21 maxlen: 21 82.144.224.0/19 maxlen: 19 87.238.216.0/21 maxlen: 21 89.105.0.0/19 maxlen: 19 89.105.25.0/24 maxlen: 24 109.235.120.0/21 maxlen: 21 109.235.127.0/24 maxlen: 24 185.7.188.0/22 maxlen: 22 185.36.248.0/22 maxlen: 22 185.45.24.0/22 maxlen: 22 185.63.80.0/22 maxlen: 22 185.65.24.0/22 maxlen: 22 185.74.232.0/21 maxlen: 21 185.74.232.0/22 maxlen: 22 185.74.236.0/22 maxlen: 22 185.109.104.0/22 maxlen: 22 185.109.106.0/24 maxlen: 24 185.159.216.0/22 maxlen: 22 185.175.112.0/22 maxlen: 22 217.119.128.0/24 maxlen: 24 217.119.137.0/24 maxlen: 24 2a02:73c0::/32 maxlen: 32 2a05:4b80::/29 maxlen: 29 2a05:4bc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7c:6a:ae:93:db:9b:fa:07:2f:0c:bd:1f:bc:c2:3c:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde Validity Not Before: Nov 13 08:52:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3e6e92ecb178305d81be848d57adfdf80ee855d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d4:a7:a1:27:2c:26:d8:9d:06:cf:f0:58:6f: ee:d8:7e:c4:38:c8:82:a8:30:65:cc:c2:68:22:33: 35:4d:c9:f3:4c:1e:42:ad:6a:b1:f5:3a:80:38:16: c7:a7:2c:d8:97:23:c4:a6:ed:61:ca:02:c4:18:0e: ff:ad:2e:c2:a7:0b:fd:c5:b6:6b:ab:6f:a5:54:a4: 3c:c6:af:0b:ca:ee:68:bc:3f:70:91:1b:e0:11:14: d9:d9:77:87:09:f7:fa:3c:86:16:bb:fd:25:68:97: de:88:59:37:9a:ef:4b:40:97:45:62:b6:a4:cc:f2: 12:61:86:97:12:dd:8f:eb:40:e9:3f:b0:73:3a:1c: d9:68:8b:dd:1b:ff:34:96:a4:d7:e3:ec:4a:6d:9b: f0:c2:33:7f:3e:e3:07:4f:7a:64:1f:3e:eb:93:08: ad:d1:33:ff:e1:35:61:06:f0:4f:dc:9a:62:b4:fe: c2:8b:ea:99:6b:66:10:8f:e6:d5:75:d8:97:e4:e4: 4c:2e:6e:c3:52:0d:40:a8:8d:2d:52:14:9c:71:b9: 8d:d2:b3:41:8c:ba:ea:27:98:8d:fd:ac:87:f2:d0: ad:da:a9:2c:03:af:e0:b9:91:43:f4:06:0a:86:75: e8:cb:d4:6e:7a:e8:25:70:3b:7a:2f:34:d3:0c:0f: b8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6E:92:EC:B1:78:30:5D:81:BE:84:8D:57:AD:FD:F8:0E:E8:55:D8 X509v3 Authority Key Identifier: keyid:FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/Pm6S7LF4MF2BvoSNV639-A7oVdg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.16.0/21 46.31.80.0/21 46.31.168.0/21 46.231.64.0/21 82.144.224.0/19 87.238.216.0/21 89.105.0.0/19 109.235.120.0/21 185.7.188.0/22 185.36.248.0/22 185.45.24.0/22 185.63.80.0/22 185.65.24.0/22 185.74.232.0/21 185.109.104.0/22 185.159.216.0/22 185.175.112.0/22 217.119.128.0/24 217.119.137.0/24 IPv6: 2a02:73c0::/32 2a05:4b80::/29 2a05:4bc0::/29 Signature Algorithm: sha256WithRSAEncryption 59:04:e1:22:8f:78:8a:66:75:be:29:16:a5:aa:3f:00:30:f2: 20:47:0c:95:cd:a8:30:67:db:48:c5:34:21:79:66:67:fd:3e: f2:c4:4c:f2:5d:65:c7:d0:68:17:01:5d:05:30:6a:d0:89:c0: 4b:fb:8b:3d:d1:54:63:27:f1:72:d7:82:3d:39:26:81:49:7f: 92:01:e9:2c:e9:fc:cc:6a:1b:20:c5:a4:8d:2c:98:f9:1c:b5: 9f:9f:20:e4:b1:54:5b:a9:f7:6f:0e:97:a1:22:bf:44:f2:94: a3:ec:41:de:6f:4b:3c:80:df:3b:d5:cf:ff:fd:1e:34:bf:80: b2:02:43:c3:1e:b3:6b:49:57:1e:88:97:ee:4d:d6:90:60:9e: ed:68:e8:ea:0e:6d:3e:ce:eb:74:01:b6:9a:a1:5c:01:4b:10: 6f:a1:45:56:ce:c5:4e:9b:a5:b5:a3:39:a5:0d:d1:95:a7:b9: 33:9e:9e:6e:82:e2:6e:87:bd:30:69:28:15:38:ac:c2:92:67: 1e:42:8a:8c:dc:ab:42:5b:49:8c:9e:30:f3:b4:46:fa:69:6a: d9:3e:69:0f:28:00:e9:6b:ad:5e:24:59:d0:af:7e:cb:04:6a: c1:f8:0c:a1:3a:fc:4e:29:a8:0f:72:11:ab:f2:f4:15:1a:b2: 22:26:51:47 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZp8aq6T25v6By8MvR+8wjz8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlZjkxOGM1YTkzMzBkYmJlNmVlZTE3Y2I5YTFkNjJmYmM4 NTViZGUwHhcNMjUxMTEzMDg1MjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTZlOTJlY2IxNzgzMDVkODFiZTg0OGQ1N2FkZmRmODBlZTg1NWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNSnoScsJtidBs/wWG/u2H7EOMiC qDBlzMJoIjM1TcnzTB5CrWqx9TqAOBbHpyzYlyPEpu1hygLEGA7/rS7Cpwv9xbZr q2+lVKQ8xq8Lyu5ovD9wkRvgERTZ2XeHCff6PIYWu/0laJfeiFk3mu9LQJdFYrak zPISYYaXEt2P60DpP7BzOhzZaIvdG/80lqTX4+xKbZvwwjN/PuMHT3pkHz7rkwit 0TP/4TVhBvBP3JpitP7Ci+qZa2YQj+bVddiX5ORMLm7DUg1AqI0tUhSccbmN0rNB jLrqJ5iN/ayH8tCt2qksA6/guZFD9AYKhnXoy9RueuglcDt6LzTTDA+4VwIDAQAB o4IClTCCApEwHQYDVR0OBBYEFD5ukuyxeDBdgb6EjVet/fgO6FXYMB8GA1UdIwQY MBaAFP75GMWpMw275u7hfLmh1i+8hVveMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3ZrWXhha3pEYnZtN3VGOHVhSFdMN3lGVzk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lZDY1NWQtNTEwMi00OTMyLWIxZGIt YmEyODg5YWZhYWRkLzEvUG02UzdMRjRNRjJCdm9TTlY2MzktQTdvVmRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lZDY1NWQtNTEwMi00OTMyLWIxZGItYmEyODg5YWZhYWRk LzEvX3ZrWXhha3pEYnZtN3VGOHVhSFdMN3lGVzk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGqBggrBgEFBQcBBwEB/wSBmjCBlzB4BAIAATByAwQDBYUQ AwQDLh9QAwQDLh+oAwQDLudAAwQFUpDgAwQDV+7YAwQFWWkAAwQDbet4AwQCuQe8 AwQCuST4AwQCuS0YAwQCuT9QAwQCuUEYAwQDuUroAwQCuW1oAwQCuZ/YAwQCua9w AwQA2XeAAwQA2XeJMBsEAgACMBUDBQAqAnPAAwUDKgVLgAMFAyoFS8AwDQYJKoZI hvcNAQELBQADggEBAFkE4SKPeIpmdb4pFqWqPwAw8iBHDJXNqDBn20jFNCF5Zmf9 PvLETPJdZcfQaBcBXQUwatCJwEv7iz3RVGMn8XLXgj05JoFJf5IB6Szp/MxqGyDF pI0smPkctZ+fIOSxVFup928Ol6Eiv0TylKPsQd5vSzyA3zvVz//9HjS/gLICQ8Me s2tJVx6Il+5N1pBgnu1o6OoObT7O63QBtpqhXAFLEG+hRVbOxU6bpbWjOaUN0ZWn uTOenm6C4m6HvTBpKBU4rMKSZx5Ciozcq0JbSYyeMPO0Rvppatk+aQ8oAOlrrV4k WdCvfssEasH4DKE6/E4pqA9yEavy9BUasiImUUc= -----END CERTIFICATE-----Generated at Sat Dec 6 17:18:24 2025 by rpki-client