This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/f4FMIhtgeWoUMY7EiYz-PWPm8do.roa File: f4FMIhtgeWoUMY7EiYz-PWPm8do.roa (raw, json) Hash identifier: 9J3M63EhcrOtxQbOA25BDsJR1IwyddHic2UZOnTfau4= Subject key identifier: 7F:81:4C:22:1B:60:79:6A:14:31:8E:C4:89:8C:FE:3D:63:E6:F1:DA Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Certificate serial: 019AE90B62C11B5162BEE7AA73A519C83DF2 Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/f4FMIhtgeWoUMY7EiYz-PWPm8do.roa Signing time: Thu 04 Dec 2025 11:07:08 +0000 ROA not before: Thu 04 Dec 2025 11:07:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 26383 IP address blocks: 46.102.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 16:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:0b:62:c1:1b:51:62:be:e7:aa:73:a5:19:c8:3d:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Validity Not Before: Dec 4 11:07:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7f814c221b60796a14318ec4898cfe3d63e6f1da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6c:ac:7e:83:74:bd:62:b4:1f:00:90:e8:88: 4a:12:b9:c0:fd:36:e0:79:79:e9:1c:90:a4:63:84: 02:75:a0:29:04:c9:04:7e:9b:7d:3d:e8:96:2f:13: c0:ba:67:c4:da:c8:23:09:01:9a:de:d8:28:52:80: be:10:75:41:a0:7b:38:8a:e3:50:1a:e6:81:cb:e2: 37:83:e0:67:c1:03:83:55:92:87:23:4a:c6:31:cb: bf:72:79:c2:f9:88:e2:b4:6b:4b:08:ac:fa:4f:f9: 06:6c:b1:fb:5f:10:cd:28:3b:44:5e:58:21:75:cd: 34:27:e2:8b:81:e2:49:d5:c7:4c:67:47:fb:79:0b: d6:83:d6:ce:a0:90:33:b4:e5:23:23:d2:0b:8c:b7: d0:40:a7:c3:37:fa:ac:ff:09:54:8b:f6:b5:38:51: 4d:ae:8f:66:06:3f:3e:5a:09:20:b4:fd:ed:b2:4f: 28:c3:39:cf:dc:f6:38:a7:89:45:d0:8a:d6:bc:c5: 36:a9:c9:49:a9:df:53:85:78:f7:03:ed:9b:e4:ff: e9:8f:67:11:5e:c5:a8:58:b3:b9:16:7a:4a:94:7f: 75:22:83:33:b2:fa:a3:6c:78:42:51:93:ec:ef:02: 65:49:8d:6b:65:16:16:cf:bc:e7:fa:a9:10:e9:46: 83:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:81:4C:22:1B:60:79:6A:14:31:8E:C4:89:8C:FE:3D:63:E6:F1:DA X509v3 Authority Key Identifier: keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/f4FMIhtgeWoUMY7EiYz-PWPm8do.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.102.255.0/24 Signature Algorithm: sha256WithRSAEncryption 38:98:23:73:38:f7:b8:8b:d1:d3:f6:7e:00:5a:3e:cf:28:90: 1b:06:0b:cc:94:c5:e0:20:29:ae:81:00:e4:4e:ba:d3:48:6e: 91:60:76:e3:f5:50:a6:32:38:b5:31:83:08:57:9b:41:ea:69: c6:68:d6:05:a5:14:b5:3d:fb:88:7d:90:fe:17:3c:ed:48:3e: a5:ca:62:02:8d:5a:5a:d2:f1:2e:78:69:86:31:77:b1:5a:8b: 5c:a5:70:7d:91:e5:1c:61:3d:68:f1:e4:47:97:5c:a1:f6:60: ab:ba:2a:48:b4:93:3a:e1:f9:7b:bd:17:05:33:f2:2a:93:aa: 6d:22:48:cb:5e:1d:c5:84:b2:6e:91:8d:18:5d:ae:6f:5a:ea: e4:d2:b9:1d:57:d8:b6:34:26:03:ff:d3:a3:c5:b2:ae:76:4a: 89:d0:7a:e9:6e:78:7d:63:b5:09:be:f1:16:8d:b9:72:69:3b: 91:0f:d6:3c:60:59:08:88:47:cf:c0:0f:15:3f:0a:3f:35:36: eb:b4:5e:d1:34:ac:3d:9f:d9:0e:ae:27:bf:6a:1f:91:f7:0e: c6:ff:b3:93:4a:fd:c9:31:69:e2:06:07:9d:e6:1c:c6:6e:8c: f2:28:b1:05:eb:fa:ee:76:28:58:a9:fe:dd:c8:58:2c:39:66: e0:60:89:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrpC2LBG1Fivueqc6UZyD3yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3 NjA1MTkwHhcNMjUxMjA0MTEwNzA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjgxNGMyMjFiNjA3OTZhMTQzMThlYzQ4OThjZmUzZDYzZTZmMWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mysfoN0vWK0HwCQ6IhKErnA/Tbg eXnpHJCkY4QCdaApBMkEfpt9PeiWLxPAumfE2sgjCQGa3tgoUoC+EHVBoHs4iuNQ GuaBy+I3g+BnwQODVZKHI0rGMcu/cnnC+YjitGtLCKz6T/kGbLH7XxDNKDtEXlgh dc00J+KLgeJJ1cdMZ0f7eQvWg9bOoJAztOUjI9ILjLfQQKfDN/qs/wlUi/a1OFFN ro9mBj8+WgkgtP3tsk8owznP3PY4p4lF0IrWvMU2qclJqd9ThXj3A+2b5P/pj2cR XsWoWLO5FnpKlH91IoMzsvqjbHhCUZPs7wJlSY1rZRYWz7zn+qkQ6UaDTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH+BTCIbYHlqFDGOxImM/j1j5vHaMB8GA1UdIwQY MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt NzQwOGViOGJjNTg2LzEvZjRGTUlodGdlV29VTVk3RWlZei1QV1BtOGRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2 LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALmb/MA0G CSqGSIb3DQEBCwUAA4IBAQA4mCNzOPe4i9HT9n4AWj7PKJAbBgvMlMXgICmugQDk TrrTSG6RYHbj9VCmMji1MYMIV5tB6mnGaNYFpRS1PfuIfZD+FzztSD6lymICjVpa 0vEueGmGMXexWotcpXB9keUcYT1o8eRHl1yh9mCruipItJM64fl7vRcFM/Iqk6pt IkjLXh3FhLJukY0YXa5vWurk0rkdV9i2NCYD/9OjxbKudkqJ0Hrpbnh9Y7UJvvEW jblyaTuRD9Y8YFkIiEfPwA8VPwo/NTbrtF7RNKw9n9kOrie/ah+R9w7G/7OTSv3J MWniBged5hzGbozyKLEF6/rudihYqf7dyFgsOWbgYIlG -----END CERTIFICATE-----Generated at Thu Dec 4 22:32:54 2025 by rpki-client