This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/L4yM2pAG-Lu_8H3cgDGWtb473_k.roa File: L4yM2pAG-Lu_8H3cgDGWtb473_k.roa (raw, json) Hash identifier: t3Xcn5JwvdP3hcDj9YLTcK+I61CT26G16e4uXCxUa+Q= Subject key identifier: 2F:8C:8C:DA:90:06:F8:BB:BF:F0:7D:DC:80:31:96:B5:BE:3B:DF:F9 Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec Certificate serial: 019B35E480561ECDAB7C8116CED78D907A45 Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/L4yM2pAG-Lu_8H3cgDGWtb473_k.roa Signing time: Fri 19 Dec 2025 09:15:26 +0000 ROA not before: Fri 19 Dec 2025 09:15:26 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 19905 IP address blocks: 2.96.0.0/13 maxlen: 24 62.3.192.0/18 maxlen: 24 62.24.128.0/17 maxlen: 24 62.241.160.0/19 maxlen: 24 78.144.0.0/13 maxlen: 24 79.77.0.0/16 maxlen: 24 79.78.0.0/15 maxlen: 24 80.40.0.0/13 maxlen: 24 81.1.64.0/18 maxlen: 24 81.6.192.0/18 maxlen: 24 81.86.0.0/16 maxlen: 24 81.170.0.0/17 maxlen: 24 81.178.0.0/15 maxlen: 24 82.133.0.0/17 maxlen: 24 83.67.0.0/16 maxlen: 24 84.43.0.0/17 maxlen: 24 87.242.128.0/17 maxlen: 24 89.168.128.0/17 maxlen: 24 89.240.0.0/14 maxlen: 24 91.146.112.0/21 maxlen: 24 92.10.0.0/15 maxlen: 24 92.16.0.0/12 maxlen: 24 145.255.240.0/21 maxlen: 24 185.24.12.0/22 maxlen: 24 185.112.212.0/22 maxlen: 24 185.173.116.0/22 maxlen: 24 185.173.120.0/22 maxlen: 24 185.175.48.0/22 maxlen: 24 185.175.144.0/22 maxlen: 24 193.218.99.0/24 maxlen: 24 194.106.32.0/19 maxlen: 24 194.247.224.0/19 maxlen: 24 195.112.0.0/18 maxlen: 24 195.137.0.0/17 maxlen: 24 195.149.0.0/18 maxlen: 24 212.1.128.0/19 maxlen: 24 212.67.96.0/19 maxlen: 24 212.74.96.0/19 maxlen: 24 212.139.0.0/16 maxlen: 24 212.159.128.0/18 maxlen: 24 213.78.0.0/16 maxlen: 24 217.8.0.0/19 maxlen: 24 217.68.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:e4:80:56:1e:cd:ab:7c:81:16:ce:d7:8d:90:7a:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec Validity Not Before: Dec 19 09:15:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2f8c8cda9006f8bbbff07ddc803196b5be3bdff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:10:c5:9f:2a:2e:b1:af:7a:28:62:0e:ee:e9: 03:21:11:68:c2:1e:db:c7:b4:6b:e5:34:65:bb:27: 5b:10:69:8d:b9:31:49:3b:15:f7:c1:16:ce:0e:13: bb:fc:40:c1:74:26:98:7c:ef:33:07:be:1d:6d:46: 17:c1:93:e1:8d:13:b6:e4:40:6e:83:61:89:50:6d: 50:2f:38:cc:05:f2:a2:95:26:a4:5b:74:61:cf:64: 98:54:96:5f:b7:d9:81:60:5d:6d:62:11:66:21:6e: 59:4f:a2:b8:3b:96:c8:3a:fa:3e:6f:81:c9:86:80: 98:56:6d:06:62:aa:64:38:97:9e:c3:cd:98:c9:99: 6e:4b:d3:8c:ef:3c:4e:c2:4f:39:76:87:14:3c:f0: 1e:b0:2a:e2:4a:a7:f3:b3:99:16:ab:ca:dd:20:3a: 54:32:fe:d2:b7:62:35:f9:27:3d:96:55:0d:ca:7b: 48:9f:bb:35:5e:44:11:b1:f6:46:aa:fc:a0:4c:a3: 70:14:ce:7d:68:a9:d5:2b:23:c9:f6:bc:80:a4:09: fc:54:a2:1c:4d:9d:05:b1:79:49:d0:61:35:4f:7e: b4:c2:d0:ce:60:9c:63:14:3f:bd:62:c6:a3:c4:88: 26:e7:e9:63:5d:95:33:98:2f:68:2a:c0:07:99:a5: 7b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:8C:8C:DA:90:06:F8:BB:BF:F0:7D:DC:80:31:96:B5:BE:3B:DF:F9 X509v3 Authority Key Identifier: keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/L4yM2pAG-Lu_8H3cgDGWtb473_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.96.0.0/13 62.3.192.0/18 62.24.128.0/17 62.241.160.0/19 78.144.0.0/13 79.77.0.0-79.79.255.255 80.40.0.0/13 81.1.64.0/18 81.6.192.0/18 81.86.0.0/16 81.170.0.0/17 81.178.0.0/15 82.133.0.0/17 83.67.0.0/16 84.43.0.0/17 87.242.128.0/17 89.168.128.0/17 89.240.0.0/14 91.146.112.0/21 92.10.0.0/15 92.16.0.0/12 145.255.240.0/21 185.24.12.0/22 185.112.212.0/22 185.173.116.0-185.173.123.255 185.175.48.0/22 185.175.144.0/22 193.218.99.0/24 194.106.32.0/19 194.247.224.0/19 195.112.0.0/18 195.137.0.0/17 195.149.0.0/18 212.1.128.0/19 212.67.96.0/19 212.74.96.0/19 212.139.0.0/16 212.159.128.0/18 213.78.0.0/16 217.8.0.0/19 217.68.128.0/20 Signature Algorithm: sha256WithRSAEncryption 51:3b:12:81:ba:1c:c1:34:37:be:70:02:45:51:86:2f:38:b7: 47:93:d5:d4:b0:7d:af:16:eb:4d:48:61:92:30:17:f3:9c:94: f1:7e:b3:c0:91:0c:ae:e7:2c:60:f6:be:04:c4:28:18:af:27: eb:b4:53:ea:43:66:c6:b6:50:2e:8b:24:98:fe:da:fd:be:49: 05:6a:69:1e:30:ed:69:d1:38:67:e1:40:03:22:28:b9:79:50: 76:49:1b:b3:16:05:5f:53:c6:8d:7e:17:1a:18:a0:8a:05:e7: c1:68:6f:bf:be:54:3f:84:2b:0a:6e:91:39:3a:76:1c:b3:d2: 69:65:b8:40:6f:b1:8e:f9:e8:6e:cc:ce:9b:a1:e3:83:ce:92: a3:ab:62:72:ed:5e:4c:e0:44:fc:f8:a4:3a:0f:81:69:58:bd: 1a:76:28:ef:ad:63:f1:e7:6c:f2:06:d5:29:a3:a2:ef:b3:f9: 0b:b9:19:19:b7:c9:02:aa:42:e8:7b:3b:0a:eb:5a:a6:09:fb: 1c:1a:d6:80:2e:dc:50:41:54:2d:23:c5:ec:63:59:da:b2:8c: 10:75:06:51:00:a4:fb:6b:27:5d:57:c3:30:6f:76:1e:75:6a: 13:de:83:80:83:5e:d4:0a:73:1a:72:c7:ef:a6:c6:97:e5:4a: 15:ba:b8:27 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgISAZs15IBWHs2rfIEWzteNkHpFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ODA3ZjZkNTBkOTdkOTcxZGNmMmUyZTUwNjRlOWI5MDdh ZGIzZWMwHhcNMjUxMjE5MDkxNTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjhjOGNkYTkwMDZmOGJiYmZmMDdkZGM4MDMxOTZiNWJlM2JkZmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xDFnyousa96KGIO7ukDIRFowh7b x7Rr5TRluydbEGmNuTFJOxX3wRbODhO7/EDBdCaYfO8zB74dbUYXwZPhjRO25EBu g2GJUG1QLzjMBfKilSakW3Rhz2SYVJZft9mBYF1tYhFmIW5ZT6K4O5bIOvo+b4HJ hoCYVm0GYqpkOJeew82YyZluS9OM7zxOwk85docUPPAesCriSqfzs5kWq8rdIDpU Mv7St2I1+Sc9llUNyntIn7s1XkQRsfZGqvygTKNwFM59aKnVKyPJ9ryApAn8VKIc TZ0FsXlJ0GE1T360wtDOYJxjFD+9YsajxIgm5+ljXZUzmC9oKsAHmaV7dwIDAQAB o4IDBTCCAwEwHQYDVR0OBBYEFC+MjNqQBvi7v/B93IAxlrW+O9/5MB8GA1UdIwQY MBaAFKmAf21Q2X2XHc8uLlBk6bkHrbPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzIt MGQ4ZjdkZDhjY2U2LzEvTDR5TTJwQUctTHVfOEgzY2dER1d0YjQ3M19rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzItMGQ4ZjdkZDhjY2U2 LzEvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBGQYIKwYBBQUHAQcBAf8EggEIMIIBBDCCAQAEAgABMIH5 AwMDAmADBAY+A8ADBAc+GIADBAU+8aADAwNOkDAKAwMAT00DAwRPQAMDA1AoAwQG UQFAAwQGUQbAAwMAUVYDBAdRqgADAwFRsgMEB1KFAAMDAFNDAwQHVCsAAwQHV/KA AwQHWaiAAwMCWfADBANbknADAwFcCgMDBFwQAwQDkf/wAwQCuRgMAwQCuXDUMAwD BAK5rXQDBAK5rXgDBAK5rzADBAK5r5ADBADB2mMDBAXCaiADBAXC9+ADBAbDcAAD BAfDiQADBAbDlQADBAXUAYADBAXUQ2ADBAXUSmADAwDUiwMEBtSfgAMDANVOAwQF 2QgAAwQE2USAMA0GCSqGSIb3DQEBCwUAA4IBAQBROxKBuhzBNDe+cAJFUYYvOLdH k9XUsH2vFutNSGGSMBfznJTxfrPAkQyu5yxg9r4ExCgYryfrtFPqQ2bGtlAuiySY /tr9vkkFamkeMO1p0Thn4UADIii5eVB2SRuzFgVfU8aNfhcaGKCKBefBaG+/vlQ/ hCsKbpE5OnYcs9JpZbhAb7GO+ehuzM6boeODzpKjq2Jy7V5M4ET8+KQ6D4FpWL0a dijvrWPx52zyBtUpo6Lvs/kLuRkZt8kCqkLoezsK61qmCfscGtaALtxQQVQtI8Xs Y1nasowQdQZRAKT7ayddV8Mwb3YedWoT3oOAg17UCnMacsfvpsaX5UoVurgn -----END CERTIFICATE-----Generated at Fri Dec 19 22:56:53 2025 by rpki-client