This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tJlmUE_jyYbuwX-RuaHlAdH6BzQ.roa File: tJlmUE_jyYbuwX-RuaHlAdH6BzQ.roa (raw, json) Hash identifier: DwfR9IhDgdvZB2EEN3XOwdcqEX4LcneaNyxbtNEm3kU= Subject key identifier: B4:99:66:50:4F:E3:C9:86:EE:C1:7F:91:B9:A1:E5:01:D1:FA:07:34 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019AA5233D123060E160B9FCBE0A33090A49 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tJlmUE_jyYbuwX-RuaHlAdH6BzQ.roa Signing time: Fri 21 Nov 2025 06:39:01 +0000 ROA not before: Fri 21 Nov 2025 06:39:01 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 45.66.228.0/24 maxlen: 24 45.66.231.0/24 maxlen: 24 45.89.247.0/24 maxlen: 24 45.141.158.0/24 maxlen: 24 79.110.50.0/24 maxlen: 24 81.161.238.0/24 maxlen: 24 85.217.130.0/23 maxlen: 24 87.120.87.0/24 maxlen: 24 87.120.126.0/24 maxlen: 24 87.120.166.0/24 maxlen: 24 87.120.245.0/24 maxlen: 24 87.121.132.0/22 maxlen: 24 87.121.165.0/24 maxlen: 24 91.92.27.0/24 maxlen: 24 91.92.248.0/21 maxlen: 24 92.119.196.0/23 maxlen: 24 92.249.50.0/24 maxlen: 24 93.123.109.0/24 maxlen: 24 178.215.239.0/24 maxlen: 24 185.222.160.0/24 maxlen: 24 193.25.216.0/24 maxlen: 24 193.222.98.0/24 maxlen: 24 194.31.222.0/24 maxlen: 24 194.55.186.0/24 maxlen: 24 194.169.175.0/24 maxlen: 24 212.115.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Nov 2025 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:23:3d:12:30:60:e1:60:b9:fc:be:0a:33:09:0a:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Nov 21 06:39:01 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b49966504fe3c986eec17f91b9a1e501d1fa0734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:84:fa:b6:fe:73:50:f9:83:cf:a9:e0:1d:0d: 9f:b8:1c:12:6a:06:19:e9:55:53:62:9e:19:d9:59: 62:d9:7f:71:d7:c8:29:8e:8a:fe:7a:db:00:12:2a: 50:b5:82:43:f0:a0:72:01:2f:ba:65:3f:a0:7b:47: 1e:6c:12:35:f3:19:e0:5d:ea:73:50:e0:fd:b0:81: ec:fd:34:cf:91:bf:64:b8:08:76:36:52:81:4d:6e: b5:af:4e:e1:2d:95:63:27:91:f6:3e:cd:8e:f5:1a: 4f:cf:9e:50:e3:05:11:14:e8:43:4a:ca:56:47:1b: 09:4a:19:da:97:69:a9:c2:f8:2a:da:42:42:d4:c3: b0:1e:b2:da:5d:36:ca:ba:bd:95:ca:a5:a0:1e:8f: 6d:ba:74:94:f3:7e:17:b3:39:6d:1b:7b:88:e0:b0: fb:3b:45:c0:c8:6e:91:10:12:fc:d2:92:fa:38:a0: 69:23:1a:3b:89:17:b9:25:de:5b:03:67:f9:ab:23: 4d:97:ed:aa:d1:de:16:a8:1d:b8:39:af:3c:cd:81: c4:a7:07:1e:eb:d8:79:61:58:df:86:06:a6:97:4c: aa:07:69:16:fb:b5:7a:82:8d:5d:48:cb:15:fa:c9: ae:21:1e:51:a9:c9:27:cc:a4:57:77:1b:45:58:b9: 45:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:99:66:50:4F:E3:C9:86:EE:C1:7F:91:B9:A1:E5:01:D1:FA:07:34 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tJlmUE_jyYbuwX-RuaHlAdH6BzQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.228.0/24 45.66.231.0/24 45.89.247.0/24 45.141.158.0/24 79.110.50.0/24 81.161.238.0/24 85.217.130.0/23 87.120.87.0/24 87.120.126.0/24 87.120.166.0/24 87.120.245.0/24 87.121.132.0/22 87.121.165.0/24 91.92.27.0/24 91.92.248.0/21 92.119.196.0/23 92.249.50.0/24 93.123.109.0/24 178.215.239.0/24 185.222.160.0/24 193.25.216.0/24 193.222.98.0/24 194.31.222.0/24 194.55.186.0/24 194.169.175.0/24 212.115.41.0/24 Signature Algorithm: sha256WithRSAEncryption 29:fe:ac:ad:43:ac:fc:0d:2c:d5:d5:2c:94:af:b0:b2:fe:b9: da:30:fc:66:d2:10:44:c5:85:f6:9e:4f:4d:93:42:f9:18:ba: ff:53:f1:42:49:6a:35:9c:75:22:c4:91:f8:76:4b:ff:6f:b9: 0e:1c:60:a2:7c:20:42:be:c5:8e:42:db:55:7a:d3:cc:68:d8: bf:f4:68:77:43:42:d4:e9:e3:e7:a7:a6:76:6a:36:33:17:f8: fe:4f:19:8c:95:96:93:6e:86:7e:2f:87:f4:cf:62:f2:bb:22: 5a:56:a9:8f:75:1b:94:a8:5f:55:23:8b:3f:4d:e3:e4:bd:59: f9:fa:6d:55:90:5a:10:3d:ec:1e:89:eb:49:0c:df:bd:fb:3f: 7d:78:f9:6d:37:92:77:b0:79:72:fe:1b:35:d5:63:b5:61:86: fd:92:c6:a4:dd:b5:fc:75:2d:55:86:56:1c:44:0a:bc:ce:f3: 7e:d5:a2:61:8b:20:ce:70:6d:b3:a6:a2:02:40:ee:4e:7c:f4: e8:57:48:c2:56:05:1c:60:f1:7b:f6:f8:c4:a4:08:66:b0:45: 89:80:e3:48:9e:f7:a9:06:38:f5:58:80:1b:a5:35:6d:07:4a: 8c:f7:49:34:08:e4:2d:f4:13:2e:55:93:90:94:b0:08:4e:07: 38:bf:c6:e7 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgISAZqlIz0SMGDhYLn8vgozCQpJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMTIxMDYzOTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDk5NjY1MDRmZTNjOTg2ZWVjMTdmOTFiOWExZTUwMWQxZmEwNzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIT6tv5zUPmDz6ngHQ2fuBwSagYZ 6VVTYp4Z2Vli2X9x18gpjor+etsAEipQtYJD8KByAS+6ZT+ge0cebBI18xngXepz UOD9sIHs/TTPkb9kuAh2NlKBTW61r07hLZVjJ5H2Ps2O9RpPz55Q4wURFOhDSspW RxsJShnal2mpwvgq2kJC1MOwHrLaXTbKur2VyqWgHo9tunSU834XszltG3uI4LD7 O0XAyG6REBL80pL6OKBpIxo7iRe5Jd5bA2f5qyNNl+2q0d4WqB24Oa88zYHEpwce 69h5YVjfhgaml0yqB2kW+7V6go1dSMsV+smuIR5RqcknzKRXdxtFWLlFRwIDAQAB o4ICpDCCAqAwHQYDVR0OBBYEFLSZZlBP48mG7sF/kbmh5QHR+gc0MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvdEpsbVVFX2p5WWJ1d1gtUnVhSGxBZEg2QnpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG5BggrBgEFBQcBBwEB/wSBqTCBpjCBowQCAAEwgZwDBAAt QuQDBAAtQucDBAAtWfcDBAAtjZ4DBABPbjIDBABRoe4DBAFV2YIDBABXeFcDBABX eH4DBABXeKYDBABXePUDBAJXeYQDBABXeaUDBABbXBsDBANbXPgDBAFcd8QDBABc +TIDBABde20DBACy1+8DBAC53qADBADBGdgDBADB3mIDBADCH94DBADCN7oDBADC qa8DBADUcykwDQYJKoZIhvcNAQELBQADggEBACn+rK1DrPwNLNXVLJSvsLL+udow /GbSEETFhfaeT02TQvkYuv9T8UJJajWcdSLEkfh2S/9vuQ4cYKJ8IEK+xY5C21V6 08xo2L/0aHdDQtTp4+enpnZqNjMX+P5PGYyVlpNuhn4vh/TPYvK7IlpWqY91G5So X1Ujiz9N4+S9Wfn6bVWQWhA97B6J60kM3737P314+W03kneweXL+GzXVY7Vhhv2S xqTdtfx1LVWGVhxECrzO837VomGLIM5wbbOmogJA7k589OhXSMJWBRxg8Xv2+MSk CGawRYmA40ie96kGOPVYgBulNW0HSoz3STQI5C30Ey5Vk5CUsAhOBzi/xuc= -----END CERTIFICATE-----Generated at Sat Nov 22 00:15:05 2025 by rpki-client