This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sF8rq_CJUeGZ8EROuDeyJeegfJY.roa File: sF8rq_CJUeGZ8EROuDeyJeegfJY.roa (raw, json) Hash identifier: U8Xx91VpCIBN9Sl8DnmlsvmkdbeGS7EugGMXUwKxdNE= Subject key identifier: B0:5F:2B:AB:F0:89:51:E1:99:F0:44:4E:B8:37:B2:25:E7:A0:7C:96 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019ABED49D3427C3EA9D89F2C3D0172941EB Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sF8rq_CJUeGZ8EROuDeyJeegfJY.roa Signing time: Wed 26 Nov 2025 06:23:16 +0000 ROA not before: Wed 26 Nov 2025 06:23:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 45.66.228.0/24 maxlen: 24 45.66.231.0/24 maxlen: 24 45.89.247.0/24 maxlen: 24 45.141.158.0/24 maxlen: 24 81.161.238.0/24 maxlen: 24 85.217.130.0/23 maxlen: 24 87.120.87.0/24 maxlen: 24 87.120.126.0/24 maxlen: 24 87.120.166.0/24 maxlen: 24 87.120.245.0/24 maxlen: 24 87.121.132.0/22 maxlen: 24 87.121.165.0/24 maxlen: 24 91.92.27.0/24 maxlen: 24 91.92.248.0/21 maxlen: 24 92.119.196.0/23 maxlen: 24 92.249.50.0/24 maxlen: 24 93.123.109.0/24 maxlen: 24 178.215.239.0/24 maxlen: 24 185.222.160.0/24 maxlen: 24 193.25.216.0/24 maxlen: 24 194.31.222.0/24 maxlen: 24 194.55.186.0/24 maxlen: 24 194.169.175.0/24 maxlen: 24 212.115.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Nov 2025 08:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:be:d4:9d:34:27:c3:ea:9d:89:f2:c3:d0:17:29:41:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Nov 26 06:23:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b05f2babf08951e199f0444eb837b225e7a07c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:83:01:6e:a6:9c:ff:63:0a:ba:f3:cf:d9:fb: 5c:aa:ae:8b:07:c8:69:2b:f9:8c:9f:a5:70:95:d9: 59:6e:44:8b:9b:d4:a8:54:30:5f:06:6d:ea:a5:b4: fb:ef:0d:eb:0d:bc:87:ac:7a:51:1e:4e:59:03:82: d7:50:7d:e0:df:65:d4:32:34:55:55:b0:21:3e:99: 37:25:1d:83:23:8b:d1:3d:ec:46:31:62:b5:ce:e3: 55:4a:84:27:ac:19:2b:79:df:8a:58:61:60:d8:28: 74:77:f1:f4:58:ac:a6:c1:b4:7f:c6:92:ad:e6:39: 12:0a:db:f1:26:87:1a:83:15:88:ec:f0:b0:86:3b: 71:4b:0e:d5:8e:62:d1:0d:c3:5d:1e:fa:cd:98:b8: 41:75:a1:e0:d9:25:f8:da:a3:5a:a2:7b:5c:7a:8f: 08:ad:70:02:6e:f6:76:c0:96:fe:4e:94:61:bb:e9: a4:63:b9:29:30:d0:34:3e:f2:63:8d:4c:ca:a7:99: 6c:39:91:d1:0c:d7:2a:e8:16:ed:51:e8:96:72:9e: d9:16:57:05:d3:0c:2a:2c:61:a8:de:8d:30:87:c4: e7:32:47:84:31:7a:05:83:1d:60:2e:a7:20:4e:08: 0c:03:36:b1:cc:4c:52:3e:54:22:53:3d:89:c4:67: f2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:5F:2B:AB:F0:89:51:E1:99:F0:44:4E:B8:37:B2:25:E7:A0:7C:96 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sF8rq_CJUeGZ8EROuDeyJeegfJY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.228.0/24 45.66.231.0/24 45.89.247.0/24 45.141.158.0/24 81.161.238.0/24 85.217.130.0/23 87.120.87.0/24 87.120.126.0/24 87.120.166.0/24 87.120.245.0/24 87.121.132.0/22 87.121.165.0/24 91.92.27.0/24 91.92.248.0/21 92.119.196.0/23 92.249.50.0/24 93.123.109.0/24 178.215.239.0/24 185.222.160.0/24 193.25.216.0/24 194.31.222.0/24 194.55.186.0/24 194.169.175.0/24 212.115.41.0/24 Signature Algorithm: sha256WithRSAEncryption ac:72:47:aa:6e:41:cb:37:43:71:28:11:b8:9f:43:5a:a3:93: 90:b6:d5:52:18:c7:98:56:33:16:ee:45:1a:79:cb:13:01:7c: c8:7b:89:9c:9d:dc:06:aa:c9:9f:e8:ab:7d:e4:30:d7:49:be: d4:d1:8d:c7:b3:39:80:92:89:bb:ac:0d:39:65:32:9c:60:0b: cb:62:56:dc:ed:3a:5f:70:6e:84:88:e5:0c:0f:fc:01:69:ae: ee:60:9c:5b:09:b6:5c:3d:bc:cd:2e:31:8a:a5:2b:cc:ba:29: 37:5b:3d:ae:4e:78:99:6b:7e:db:18:81:29:ec:f9:8f:fb:31: 8e:ac:97:f6:14:02:f3:c4:66:f3:14:bc:58:58:39:52:47:b1: b6:7e:a9:cf:d5:fe:ea:89:d2:61:c1:30:01:65:75:9e:0b:c7: 3f:a5:c2:3c:cf:dd:07:85:76:48:7c:43:91:04:c8:12:a0:bc: 9b:46:bf:7f:fb:47:f1:a7:fa:25:34:75:b6:1f:c3:c3:13:fe: 33:83:e4:d1:53:a9:fa:91:fa:a9:71:52:45:a5:1e:86:44:bf: d3:d0:9c:bd:3a:c3:f2:c9:2e:40:87:12:4a:92:9c:24:6e:9c: 65:49:b8:d4:39:da:bd:e0:4a:60:f2:50:42:2f:0a:aa:51:ef: 96:ca:0b:41 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgISAZq+1J00J8PqnYnyw9AXKUHrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMTI2MDYyMzE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDVmMmJhYmYwODk1MWUxOTlmMDQ0NGViODM3YjIyNWU3YTA3Yzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIMBbqac/2MKuvPP2ftcqq6LB8hp K/mMn6VwldlZbkSLm9SoVDBfBm3qpbT77w3rDbyHrHpRHk5ZA4LXUH3g32XUMjRV VbAhPpk3JR2DI4vRPexGMWK1zuNVSoQnrBkred+KWGFg2Ch0d/H0WKymwbR/xpKt 5jkSCtvxJocagxWI7PCwhjtxSw7VjmLRDcNdHvrNmLhBdaHg2SX42qNaontceo8I rXACbvZ2wJb+TpRhu+mkY7kpMNA0PvJjjUzKp5lsOZHRDNcq6BbtUeiWcp7ZFlcF 0wwqLGGo3o0wh8TnMkeEMXoFgx1gLqcgTggMAzaxzExSPlQiUz2JxGfykQIDAQAB o4ICmDCCApQwHQYDVR0OBBYEFLBfK6vwiVHhmfBETrg3siXnoHyWMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvc0Y4cnFfQ0pVZUdaOEVST3VEZXlKZWVnZkpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZADBAAt QuQDBAAtQucDBAAtWfcDBAAtjZ4DBABRoe4DBAFV2YIDBABXeFcDBABXeH4DBABX eKYDBABXePUDBAJXeYQDBABXeaUDBABbXBsDBANbXPgDBAFcd8QDBABc+TIDBABd e20DBACy1+8DBAC53qADBADBGdgDBADCH94DBADCN7oDBADCqa8DBADUcykwDQYJ KoZIhvcNAQELBQADggEBAKxyR6puQcs3Q3EoEbifQ1qjk5C21VIYx5hWMxbuRRp5 yxMBfMh7iZyd3AaqyZ/oq33kMNdJvtTRjcezOYCSibusDTllMpxgC8tiVtztOl9w boSI5QwP/AFpru5gnFsJtlw9vM0uMYqlK8y6KTdbPa5OeJlrftsYgSns+Y/7MY6s l/YUAvPEZvMUvFhYOVJHsbZ+qc/V/uqJ0mHBMAFldZ4Lxz+lwjzP3QeFdkh8Q5EE yBKgvJtGv3/7R/Gn+iU0dbYfw8MT/jOD5NFTqfqR+qlxUkWlHoZEv9PQnL06w/LJ LkCHEkqSnCRunGVJuNQ52r3gSmDyUEIvCqpR75bKC0E= -----END CERTIFICATE-----Generated at Wed Nov 26 17:36:24 2025 by rpki-client