This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/B4fPhGrpI2pg0XWKOyPE09oH6uw.roa File: B4fPhGrpI2pg0XWKOyPE09oH6uw.roa (raw, json) Hash identifier: B5g9LB9sai8M83rndIElqRt2j/OPCWFzHO4n+DMUF8M= Subject key identifier: 07:87:CF:84:6A:E9:23:6A:60:D1:75:8A:3B:23:C4:D3:DA:07:EA:EC Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e Certificate serial: 019A53B70E92789D540D7FD0FE9AE08647C7 Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/B4fPhGrpI2pg0XWKOyPE09oH6uw.roa Signing time: Wed 05 Nov 2025 11:11:36 +0000 ROA not before: Wed 05 Nov 2025 11:11:36 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203020 IP address blocks: 45.142.24.0/24 maxlen: 24 91.217.72.0/23 maxlen: 32 103.93.40.0/24 maxlen: 32 103.93.41.0/24 maxlen: 32 103.111.0.0/22 maxlen: 32 103.204.120.0/24 maxlen: 32 103.204.122.0/24 maxlen: 32 103.204.123.0/24 maxlen: 32 109.104.132.0/24 maxlen: 32 109.104.133.0/24 maxlen: 32 185.153.124.0/22 maxlen: 32 185.233.124.0/22 maxlen: 32 194.113.94.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:b7:0e:92:78:9d:54:0d:7f:d0:fe:9a:e0:86:47:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e Validity Not Before: Nov 5 11:11:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0787cf846ae9236a60d1758a3b23c4d3da07eaec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:14:68:5d:fa:cd:cf:ba:07:8e:2d:9b:ab:cf: d8:39:bd:e4:14:4b:cf:b0:b8:ea:40:39:0b:44:f1: 1f:4a:57:a2:03:bc:5d:72:c0:d3:91:e1:1e:76:e6: 17:bd:54:a9:7b:3d:d9:87:b1:fb:7c:2c:2c:d0:a4: df:9d:2f:68:9f:fd:75:e4:30:ef:ad:f3:65:dc:84: 57:2b:05:f4:ca:be:d8:0f:e6:db:fb:17:63:de:a1: 75:c1:41:60:66:ee:0d:b7:95:ec:5b:0f:32:7f:28: 61:25:f1:07:5c:12:74:fc:94:a9:c9:0d:ef:56:ca: 62:38:ec:78:50:eb:0a:e3:3d:1c:60:8d:b7:20:51: d3:2b:75:16:00:bd:5b:8a:54:f1:b0:92:7d:be:4a: 49:e6:e8:6e:63:57:13:c3:4a:d5:67:96:2c:80:ce: 76:cc:c9:2a:53:6d:9a:74:b0:97:0c:70:33:6b:74: 1c:9b:a4:83:ba:9f:99:ea:29:e0:85:9c:09:ad:41: b3:04:d4:5b:90:fa:72:5b:f1:50:3c:53:c7:2d:79: 1b:01:3d:b9:cf:59:92:7f:46:82:70:03:c0:71:f4: ad:46:42:60:60:aa:c2:af:4e:b2:74:21:4a:67:63: f4:2c:7c:ba:26:00:a6:08:b3:a2:92:6f:74:a8:f2: eb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:87:CF:84:6A:E9:23:6A:60:D1:75:8A:3B:23:C4:D3:DA:07:EA:EC X509v3 Authority Key Identifier: keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/B4fPhGrpI2pg0XWKOyPE09oH6uw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.24.0/24 91.217.72.0/23 103.93.40.0/23 103.111.0.0/22 103.204.120.0/24 103.204.122.0/23 109.104.132.0/23 185.153.124.0/22 185.233.124.0/22 194.113.94.0/23 Signature Algorithm: sha256WithRSAEncryption 17:75:28:d7:b3:1b:27:a2:bc:c4:06:8f:65:fd:f0:8a:d0:45: 83:a3:d5:7d:35:49:af:01:5c:fe:b9:0d:26:1c:7c:42:c8:8a: 03:e1:18:70:e7:b6:51:c0:af:b8:fa:c2:e9:21:b9:b9:76:87: 02:fe:11:8b:c7:b9:e9:6f:45:7a:0c:30:e1:6d:5c:87:3d:9a: 76:89:fa:43:4c:cf:e3:3a:17:f5:6a:17:29:ba:86:36:0b:bf: c6:ed:47:f7:35:a7:0e:16:ec:20:db:4c:4b:ab:a9:a8:33:9f: 35:bf:f8:d7:83:db:73:4c:c5:b6:25:f8:7a:6b:74:aa:7d:16: 8f:ce:e6:72:39:7b:56:40:4a:8a:61:c4:31:db:83:b2:6c:ba: ec:b1:53:3b:65:8f:ec:ba:df:0f:a7:99:82:52:a7:bc:5f:ca: 28:05:8e:8a:8d:d6:4c:19:d2:ff:ae:fe:da:30:fa:b5:3e:45: e4:a1:d7:5c:87:f9:82:58:d9:90:e5:f1:a0:bf:b3:8f:c5:39: f1:ea:f4:55:40:cb:3f:8f:12:3b:5e:2c:bd:e7:ea:2c:26:a3: a4:cd:2f:2b:b0:5f:41:43:bf:5d:39:0f:7e:df:34:71:52:83: 37:f2:02:81:87:29:50:79:62:df:11:b5:62:6c:56:27:1e:b1: 38:b8:6e:e2 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZpTtw6SeJ1UDX/Q/prghkfHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNGFkNDUzNWFjODhkZDUzNDE5OWYyYTcyNjA5NWFmNzFh ZmU0NGUwHhcNMjUxMTA1MTExMTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzg3Y2Y4NDZhZTkyMzZhNjBkMTc1OGEzYjIzYzRkM2RhMDdlYWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxRoXfrNz7oHji2bq8/YOb3kFEvP sLjqQDkLRPEfSleiA7xdcsDTkeEeduYXvVSpez3Zh7H7fCws0KTfnS9on/115DDv rfNl3IRXKwX0yr7YD+bb+xdj3qF1wUFgZu4Nt5XsWw8yfyhhJfEHXBJ0/JSpyQ3v VspiOOx4UOsK4z0cYI23IFHTK3UWAL1bilTxsJJ9vkpJ5uhuY1cTw0rVZ5YsgM52 zMkqU22adLCXDHAza3Qcm6SDup+Z6inghZwJrUGzBNRbkPpyW/FQPFPHLXkbAT25 z1mSf0aCcAPAcfStRkJgYKrCr06ydCFKZ2P0LHy6JgCmCLOikm90qPLriQIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFAeHz4Rq6SNqYNF1ijsjxNPaB+rsMB8GA1UdIwQY MBaAFGJK1FNayI3VNBmfKnJgla9xr+ROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTct ZmI1OTQ5ODA4ZGRjLzEvQjRmUGhHcnBJMnBnMFhXS095UEUwOW9INnV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTctZmI1OTQ5ODA4ZGRj LzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQALY4YAwQB W9lIAwQBZ10oAwQCZ28AAwQAZ8x4AwQBZ8x6AwQBbWiEAwQCuZl8AwQCuel8AwQB wnFeMA0GCSqGSIb3DQEBCwUAA4IBAQAXdSjXsxsnorzEBo9l/fCK0EWDo9V9NUmv AVz+uQ0mHHxCyIoD4Rhw57ZRwK+4+sLpIbm5docC/hGLx7npb0V6DDDhbVyHPZp2 ifpDTM/jOhf1ahcpuoY2C7/G7Uf3NacOFuwg20xLq6moM581v/jXg9tzTMW2Jfh6 a3SqfRaPzuZyOXtWQEqKYcQx24OybLrssVM7ZY/sut8Pp5mCUqe8X8ooBY6KjdZM GdL/rv7aMPq1PkXkoddch/mCWNmQ5fGgv7OPxTnx6vRVQMs/jxI7Xiy95+osJqOk zS8rsF9BQ79dOQ9+3zRxUoM38gKBhylQeWLfEbVibFYnHrE4uG7i -----END CERTIFICATE-----Generated at Thu Dec 4 07:30:38 2025 by rpki-client