This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/rfxFRoMAK5UZ3QXGjh3uSKRDsCI.roa File: rfxFRoMAK5UZ3QXGjh3uSKRDsCI.roa (raw, json) Hash identifier: B0jP1n50rUzyEhb8sNQfRdBvFRnGYSNgdCNKMzpwhpA= Subject key identifier: AD:FC:45:46:83:00:2B:95:19:DD:05:C6:8E:1D:EE:48:A4:43:B0:22 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019ACF71BAD2A429FAC55DDE431C62A8D581 Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/rfxFRoMAK5UZ3QXGjh3uSKRDsCI.roa Signing time: Sat 29 Nov 2025 11:48:48 +0000 ROA not before: Sat 29 Nov 2025 11:48:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 53356 IP address blocks: 37.49.144.0/24 maxlen: 24 37.49.147.0/24 maxlen: 24 109.203.161.0/24 maxlen: 24 109.203.166.0/24 maxlen: 24 109.203.168.0/21 maxlen: 24 109.203.184.0/21 maxlen: 24 176.46.129.0/24 maxlen: 24 176.46.130.0/24 maxlen: 24 176.46.133.0/24 maxlen: 24 176.46.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cf:71:ba:d2:a4:29:fa:c5:5d:de:43:1c:62:a8:d5:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Nov 29 11:48:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=adfc454683002b9519dd05c68e1dee48a443b022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:54:85:57:53:b6:0b:b8:ad:ac:2e:91:31:b3: 25:4c:93:0f:ae:da:15:f7:b4:67:0b:5b:83:7f:d0: bc:d1:b9:f4:3d:b3:23:91:97:1c:cb:b2:8a:f8:5c: 0a:55:5a:26:78:4f:7a:33:6a:80:cd:ae:26:62:f1: 77:59:0f:6e:9a:3c:42:f8:02:1b:95:fc:bb:2f:ba: e2:9d:33:44:05:d2:3b:c6:44:19:8d:75:25:aa:49: cb:f2:fe:92:e3:97:0a:37:5c:9b:24:06:53:2d:a9: e2:0e:75:91:04:ad:89:4c:bf:19:02:15:7f:47:7e: 6c:df:c7:e7:e4:34:30:a8:89:58:09:48:46:28:16: f4:2a:21:2d:f0:32:f2:97:3d:36:9f:f2:ae:f7:7b: a5:db:83:76:cc:5e:43:5f:99:d3:43:84:89:fb:dd: b8:a3:90:77:7e:f0:d6:23:8d:57:f5:60:9e:5f:30: 20:21:e8:79:4d:10:fc:26:c1:54:37:76:60:0e:6d: c9:36:c4:dd:4f:6c:1c:ab:73:2e:c6:f8:6f:ee:bb: 35:23:47:58:70:c2:20:4b:58:8b:b7:0b:7e:0b:ac: 6b:6a:d6:18:13:69:ec:ef:60:64:5a:8c:e5:04:a1: c3:b2:76:a0:d5:39:5a:8c:58:f0:6e:b3:92:90:48: c5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FC:45:46:83:00:2B:95:19:DD:05:C6:8E:1D:EE:48:A4:43:B0:22 X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/rfxFRoMAK5UZ3QXGjh3uSKRDsCI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.49.144.0/24 37.49.147.0/24 109.203.161.0/24 109.203.166.0/24 109.203.168.0/21 109.203.184.0/21 176.46.129.0-176.46.130.255 176.46.133.0/24 176.46.135.0/24 Signature Algorithm: sha256WithRSAEncryption 62:a1:7a:61:40:e8:10:75:e0:1d:74:9c:d3:fc:3b:1c:ae:98: 1a:1d:d7:1e:8c:de:fb:ed:c9:1e:83:e8:a6:dd:91:c7:a9:b8: 0c:78:42:4e:4d:24:60:96:b0:ac:09:d1:a9:15:d9:a5:f5:c0: 58:6a:6b:3c:e8:18:78:ed:78:d7:15:08:dc:55:a3:c8:88:88: f0:88:51:2c:ce:58:8e:35:65:13:c9:30:6f:d1:7f:33:18:de: 03:b1:40:7c:50:7f:b9:d9:ef:15:4d:d6:76:49:30:04:57:d3: 79:09:f2:cf:11:f3:47:21:b6:9f:c1:0a:96:b7:97:d1:23:3c: a8:9b:c9:a8:04:16:85:fb:59:d3:5d:38:f4:30:91:08:69:96: a4:42:d3:ad:f6:a1:16:50:41:0d:5a:19:f7:8c:b4:bd:7e:b7: 98:e7:4e:cf:f8:0d:2c:4f:23:7a:8a:62:74:93:2f:a0:94:9f: 03:c8:b9:92:86:45:7e:82:93:60:48:90:79:04:25:69:41:06: 26:75:35:42:90:31:3c:23:41:5b:75:53:b7:bf:7a:6d:58:bb: 8b:6b:e6:5f:d3:f6:7e:e7:8b:10:4c:79:da:bc:d5:e1:4a:5c: 05:ad:fb:ba:d0:e2:5a:68:86:04:45:a3:da:ab:de:4b:c3:09: c3:b9:77:d2 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZrPcbrSpCn6xV3eQxxiqNWBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjUxMTI5MTE0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGZjNDU0NjgzMDAyYjk1MTlkZDA1YzY4ZTFkZWU0OGE0NDNiMDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFSFV1O2C7itrC6RMbMlTJMPrtoV 97RnC1uDf9C80bn0PbMjkZccy7KK+FwKVVomeE96M2qAza4mYvF3WQ9umjxC+AIb lfy7L7rinTNEBdI7xkQZjXUlqknL8v6S45cKN1ybJAZTLaniDnWRBK2JTL8ZAhV/ R35s38fn5DQwqIlYCUhGKBb0KiEt8DLylz02n/Ku93ul24N2zF5DX5nTQ4SJ+924 o5B3fvDWI41X9WCeXzAgIeh5TRD8JsFUN3ZgDm3JNsTdT2wcq3Muxvhv7rs1I0dY cMIgS1iLtwt+C6xratYYE2ns72BkWozlBKHDsnag1TlajFjwbrOSkEjF6wIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFK38RUaDACuVGd0Fxo4d7kikQ7AiMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvcmZ4RlJvTUFLNVVaM1FYR2poM3VTS1JEc0NJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAJTGQAwQA JTGTAwQAbcuhAwQAbcumAwQDbcuoAwQDbcu4MAwDBACwLoEDBACwLoIDBACwLoUD BACwLocwDQYJKoZIhvcNAQELBQADggEBAGKhemFA6BB14B10nNP8OxyumBod1x6M 3vvtyR6D6KbdkcepuAx4Qk5NJGCWsKwJ0akV2aX1wFhqazzoGHjteNcVCNxVo8iI iPCIUSzOWI41ZRPJMG/RfzMY3gOxQHxQf7nZ7xVN1nZJMARX03kJ8s8R80chtp/B Cpa3l9EjPKibyagEFoX7WdNdOPQwkQhplqRC0632oRZQQQ1aGfeMtL1+t5jnTs/4 DSxPI3qKYnSTL6CUnwPIuZKGRX6Ck2BIkHkEJWlBBiZ1NUKQMTwjQVt1U7e/em1Y u4tr5l/T9n7nixBMedq81eFKXAWt+7rQ4lpohgRFo9qr3kvDCcO5d9I= -----END CERTIFICATE-----Generated at Fri Dec 5 12:24:21 2025 by rpki-client