This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/in3uH-QU9RFHkY8ehz94_Fcz35E.roa File: in3uH-QU9RFHkY8ehz94_Fcz35E.roa (raw, json) Hash identifier: UzSDLRLFHRNqmfNycEefzmW2shp4CdNC6DpdJtG5NNE= Subject key identifier: 8A:7D:EE:1F:E4:14:F5:11:47:91:8F:1E:87:3F:78:FC:57:33:DF:91 Certificate issuer: /CN=331bce2ee806e93621112dbd618536f775f44fba Certificate serial: 019ADEC2EDEE52A2135DE967F17D61668907 Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/in3uH-QU9RFHkY8ehz94_Fcz35E.roa Signing time: Tue 02 Dec 2025 11:11:48 +0000 ROA not before: Tue 02 Dec 2025 11:11:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43260 IP address blocks: 5.252.204.0/24 maxlen: 24 5.252.205.0/24 maxlen: 24 5.252.207.0/24 maxlen: 24 45.67.233.0/24 maxlen: 24 45.67.235.0/24 maxlen: 24 185.122.200.0/24 maxlen: 24 185.122.201.0/24 maxlen: 24 185.122.202.0/24 maxlen: 24 185.122.203.0/24 maxlen: 24 185.130.56.0/24 maxlen: 24 185.130.57.0/24 maxlen: 24 185.130.58.0/24 maxlen: 24 185.130.59.0/24 maxlen: 24 185.198.72.0/24 maxlen: 24 185.198.73.0/24 maxlen: 24 185.198.74.0/24 maxlen: 24 185.198.75.0/24 maxlen: 24 2a07:cd00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:c2:ed:ee:52:a2:13:5d:e9:67:f1:7d:61:66:89:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba Validity Not Before: Dec 2 11:11:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8a7dee1fe414f51147918f1e873f78fc5733df91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b9:14:5f:f8:15:28:6e:a0:64:58:c5:0a:de: e1:28:51:26:e8:11:31:01:36:90:4d:5c:35:c0:68: dd:6b:04:a6:fd:53:04:a2:12:5c:0f:14:40:26:9f: 5c:49:02:44:17:4a:f8:76:30:38:87:aa:1c:75:7b: f0:d5:5c:75:53:40:43:5b:c5:44:90:02:8b:d1:5d: f1:39:9f:5c:a6:66:c2:60:1a:71:bb:28:67:06:32: 06:81:86:56:d9:f0:1e:1d:a5:27:e2:80:29:da:37: 0f:be:09:a7:36:4e:4b:e1:a9:36:26:7e:ef:a3:5a: 64:30:1e:cb:10:02:44:fe:d7:61:81:cb:93:be:fa: 81:42:61:ec:d9:ce:14:2d:ac:45:ab:d5:10:f0:ba: b6:3b:20:7c:cb:5f:b7:7c:98:a5:24:48:a2:a6:c9: 97:b0:47:ce:e5:7c:e8:4f:ec:31:7d:1f:e7:25:be: 3e:10:c5:de:cd:99:e8:99:02:42:b2:4a:dd:92:24: 62:f6:ca:53:07:a8:7d:c2:db:eb:a3:f8:5e:47:79: b4:f9:63:5a:dc:ef:73:8d:dc:9e:36:09:40:03:53: f6:90:b0:25:12:8c:74:40:ca:e0:a9:a5:30:c0:1e: 7b:a4:f7:a8:db:09:e8:fb:34:98:26:78:3a:48:1c: 68:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:7D:EE:1F:E4:14:F5:11:47:91:8F:1E:87:3F:78:FC:57:33:DF:91 X509v3 Authority Key Identifier: keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/in3uH-QU9RFHkY8ehz94_Fcz35E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.204.0/23 5.252.207.0/24 45.67.233.0/24 45.67.235.0/24 185.122.200.0/22 185.130.56.0/22 185.198.72.0/22 IPv6: 2a07:cd00::/48 Signature Algorithm: sha256WithRSAEncryption 3d:29:f3:55:2d:de:bf:78:54:56:87:7d:53:15:5c:37:a2:c1: aa:2d:58:79:54:c8:1c:61:4b:85:e3:70:3d:5a:bb:df:66:73: b2:9d:ff:73:04:cf:a8:9c:60:3c:02:71:90:10:18:ae:34:f5: a2:ae:0e:27:40:cb:3a:49:6d:ff:bc:27:e8:29:b7:41:89:b6: 5a:d8:b5:4a:de:51:7e:80:8d:5f:c7:9b:90:33:07:b2:79:7e: 7d:51:f1:76:8a:34:a7:ae:3d:66:1c:92:8d:4a:55:e7:a6:24: b9:9c:fd:cb:f3:f6:ce:8d:30:ff:e7:ba:52:83:e8:98:01:a0: c6:c4:8a:f2:2b:e9:60:5d:1f:c0:5b:62:5b:54:88:c9:bb:62: 8d:96:53:5c:89:97:ff:95:92:3a:d1:b6:70:c4:80:b0:52:13: 47:57:b3:43:9d:b0:04:3b:14:f7:47:c6:99:8c:2f:db:b5:cb: d2:59:bf:53:34:b7:e4:35:e3:52:b9:18:57:8e:01:e0:04:2d: c9:dd:6e:a4:aa:7d:3d:be:7a:af:0a:1d:83:08:74:d6:3c:75: 37:17:73:8f:a4:56:b9:76:af:01:c0:00:b3:0b:fe:52:90:58: 81:53:bf:6c:f1:c9:8c:c6:e6:58:0c:fa:48:b7:77:87:b5:e2: 90:42:06:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgISAZrewu3uUqITXeln8X1hZokHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMWJjZTJlZTgwNmU5MzYyMTExMmRiZDYxODUzNmY3NzVm NDRmYmEwHhcNMjUxMjAyMTExMTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTdkZWUxZmU0MTRmNTExNDc5MThmMWU4NzNmNzhmYzU3MzNkZjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7kUX/gVKG6gZFjFCt7hKFEm6BEx ATaQTVw1wGjdawSm/VMEohJcDxRAJp9cSQJEF0r4djA4h6ocdXvw1Vx1U0BDW8VE kAKL0V3xOZ9cpmbCYBpxuyhnBjIGgYZW2fAeHaUn4oAp2jcPvgmnNk5L4ak2Jn7v o1pkMB7LEAJE/tdhgcuTvvqBQmHs2c4ULaxFq9UQ8Lq2OyB8y1+3fJilJEiipsmX sEfO5XzoT+wxfR/nJb4+EMXezZnomQJCskrdkiRi9spTB6h9wtvro/heR3m0+WNa 3O9zjdyeNglAA1P2kLAlEox0QMrgqaUwwB57pPeo2wno+zSYJng6SBxoKwIDAQAB o4ICPjCCAjowHQYDVR0OBBYEFIp97h/kFPURR5GPHoc/ePxXM9+RMB8GA1UdIwQY MBaAFDMbzi7oBuk2IREtvWGFNvd19E+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXh2T0x1Z0c2VFloRVMyOVlZVTI5M1gwVDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS80YmEzY2EtZDZmZC00MTE2LTkxNDYt YWVhYzE2MjI3YzI1LzEvaW4zdUgtUVU5UkZIa1k4ZWh6OTRfRmN6MzVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS80YmEzY2EtZDZmZC00MTE2LTkxNDYtYWVhYzE2MjI3YzI1 LzEvTXh2T0x1Z0c2VFloRVMyOVlZVTI5M1gwVDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAwBAIAATAqAwQBBfzMAwQA BfzPAwQALUPpAwQALUPrAwQCuXrIAwQCuYI4AwQCucZIMA8EAgACMAkDBwAqB80A AAAwDQYJKoZIhvcNAQELBQADggEBAD0p81Ut3r94VFaHfVMVXDeiwaotWHlUyBxh S4XjcD1au99mc7Kd/3MEz6icYDwCcZAQGK409aKuDidAyzpJbf+8J+gpt0GJtlrY tUreUX6AjV/Hm5AzB7J5fn1R8XaKNKeuPWYcko1KVeemJLmc/cvz9s6NMP/nulKD 6JgBoMbEivIr6WBdH8BbYltUiMm7Yo2WU1yJl/+VkjrRtnDEgLBSE0dXs0OdsAQ7 FPdHxpmML9u1y9JZv1M0t+Q141K5GFeOAeAELcndbqSqfT2+eq8KHYMIdNY8dTcX c4+kVrl2rwHAALML/lKQWIFTv2zxyYzG5lgM+ki3d4e14pBCBi0= -----END CERTIFICATE-----Generated at Fri Dec 5 07:07:35 2025 by rpki-client