This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/4q2SmbJbIyxfJJzsqRsTfltVhb0.roa File: 4q2SmbJbIyxfJJzsqRsTfltVhb0.roa (raw, json) Hash identifier: I3MzLiQewh9hw1+9vNZ5T29Hm0FiM1MXipBx8Cg4CW0= Subject key identifier: E2:AD:92:99:B2:5B:23:2C:5F:24:9C:EC:A9:1B:13:7E:5B:55:85:BD Certificate issuer: /CN=485f76274c805d25b115a3adba1d2ea154deead7 Certificate serial: 019AD9F2A2A43849B9947184B95D46AD2345 Authority key identifier: 48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/4q2SmbJbIyxfJJzsqRsTfltVhb0.roa Signing time: Mon 01 Dec 2025 12:45:48 +0000 ROA not before: Mon 01 Dec 2025 12:45:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206728 IP address blocks: 45.141.84.0/24 maxlen: 24 45.141.85.0/24 maxlen: 24 45.141.86.0/24 maxlen: 24 45.141.87.0/24 maxlen: 24 91.220.163.0/24 maxlen: 24 194.26.25.0/24 maxlen: 24 194.26.29.0/24 maxlen: 24 194.26.69.0/24 maxlen: 24 2a0b:7ec0::/29 maxlen: 48 2a0b:7ec0:1320::/48 maxlen: 48 2a0b:7ec0:1321::/48 maxlen: 48 2a0b:7ec0:7701::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 04:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:f2:a2:a4:38:49:b9:94:71:84:b9:5d:46:ad:23:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485f76274c805d25b115a3adba1d2ea154deead7 Validity Not Before: Dec 1 12:45:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e2ad9299b25b232c5f249ceca91b137e5b5585bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5f:c0:7e:fe:23:3f:d4:43:5f:19:86:c3:2c: 22:ef:a9:3e:84:fd:86:c4:9c:d7:9b:a3:cb:8d:ee: c3:6d:84:8a:1f:01:ac:89:81:c3:a6:94:e8:28:55: bb:e2:6c:4f:7c:6f:6d:93:af:6a:05:16:23:78:4f: 25:44:9a:62:7e:39:88:9e:75:67:13:ef:ed:9f:e1: 4c:e5:1d:f2:c8:ac:3d:2b:7c:18:b7:32:a4:2c:98: 80:fc:1e:43:51:2d:5c:6b:bd:1d:16:00:3b:98:c7: 35:7a:a9:5e:cb:38:b2:9e:04:cf:3b:f2:02:f1:36: ef:17:42:f2:2e:5d:a0:51:a2:80:a6:5a:2e:6b:ec: 8d:94:9d:8d:c5:34:04:8e:23:8b:3f:2a:b1:79:be: 67:ee:18:64:86:65:d1:a1:d6:7c:1d:43:d6:53:b3: b0:28:3e:3f:eb:57:10:f4:a9:d3:c9:1e:ff:66:1c: bc:9f:3d:8b:10:bb:ad:cf:1f:0d:74:51:ca:55:cb: 5a:13:aa:9e:94:82:79:f4:40:d7:19:cf:4e:93:ed: b6:cb:6d:24:f0:3f:e2:3c:e1:d2:67:8b:93:a2:ce: 66:a1:8a:64:17:cc:97:e8:51:37:98:c5:11:4c:9f: c3:d8:fd:58:58:c8:22:bc:5a:2c:62:6e:94:dc:3a: 94:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AD:92:99:B2:5B:23:2C:5F:24:9C:EC:A9:1B:13:7E:5B:55:85:BD X509v3 Authority Key Identifier: keyid:48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/4q2SmbJbIyxfJJzsqRsTfltVhb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.84.0/22 91.220.163.0/24 194.26.25.0/24 194.26.29.0/24 194.26.69.0/24 IPv6: 2a0b:7ec0::/29 Signature Algorithm: sha256WithRSAEncryption 0d:7d:c7:32:24:7b:e2:cf:c8:48:70:87:d5:47:bb:f0:cb:90: c0:8e:88:54:c4:d0:4c:b7:43:cf:53:e2:56:af:27:ce:22:02: f7:d7:df:7a:ea:bd:aa:32:9b:9f:66:2c:af:5f:d9:4e:e0:e2: 37:da:b6:3b:83:40:64:5f:25:0e:67:36:6a:5f:64:b1:ea:07: 67:d7:e5:94:a1:53:53:3f:a7:0e:09:25:d0:4d:fa:1e:85:a0: eb:11:a5:c7:e3:08:dc:6b:bb:9e:13:c7:f3:41:fd:2a:6b:c1: ce:6d:de:bc:c2:d5:ea:46:f9:b5:3c:55:b8:36:02:92:41:d9: 4a:68:83:30:b8:47:4f:91:ca:67:cc:5a:02:64:f6:ec:95:ae: 2a:dd:3b:f3:5a:1d:b7:f2:e4:ca:e9:44:31:8a:a9:fd:88:bc: a6:6a:36:59:3c:d5:96:36:c5:53:72:03:76:eb:34:7a:1c:b3: fa:a1:86:f9:f3:e9:5d:3a:a4:36:6e:17:ef:c2:50:9f:4f:bf: a7:6a:47:fa:3f:7d:fa:4f:70:c6:39:c3:f1:c0:2d:f8:e3:cd: 4f:1d:79:d5:1f:4f:24:33:4e:a2:5b:fa:ba:7f:92:64:30:d0: ed:71:c5:34:5e:1e:29:81:fb:40:93:38:fd:9d:79:90:7c:41: 3f:fc:56:3c -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZrZ8qKkOEm5lHGEuV1GrSNFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NWY3NjI3NGM4MDVkMjViMTE1YTNhZGJhMWQyZWExNTRk ZWVhZDcwHhcNMjUxMjAxMTI0NTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmFkOTI5OWIyNWIyMzJjNWYyNDljZWNhOTFiMTM3ZTViNTU4NWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1/Afv4jP9RDXxmGwywi76k+hP2G xJzXm6PLje7DbYSKHwGsiYHDppToKFW74mxPfG9tk69qBRYjeE8lRJpifjmInnVn E+/tn+FM5R3yyKw9K3wYtzKkLJiA/B5DUS1ca70dFgA7mMc1eqleyziyngTPO/IC 8TbvF0LyLl2gUaKAploua+yNlJ2NxTQEjiOLPyqxeb5n7hhkhmXRodZ8HUPWU7Ow KD4/61cQ9KnTyR7/Zhy8nz2LELutzx8NdFHKVctaE6qelIJ59EDXGc9Ok+22y20k 8D/iPOHSZ4uTos5moYpkF8yX6FE3mMURTJ/D2P1YWMgivFosYm6U3DqUHQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFOKtkpmyWyMsXySc7KkbE35bVYW9MB8GA1UdIwQY MBaAFEhfdidMgF0lsRWjrbodLqFU3urXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0Y5MkoweUFYU1d4RmFPdHVoMHVvVlRlNnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ODViNTMtNmYxMS00MWRiLWJlYWQt NDNlYWY3NTY3Y2FhLzEvNHEyU21iSmJJeXhmSkp6c3FSc1RmbHRWaGIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ODViNTMtNmYxMS00MWRiLWJlYWQtNDNlYWY3NTY3Y2Fh LzEvU0Y5MkoweUFYU1d4RmFPdHVoMHVvVlRlNnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCLY1UAwQA W9yjAwQAwhoZAwQAwhodAwQAwhpFMA0EAgACMAcDBQMqC37AMA0GCSqGSIb3DQEB CwUAA4IBAQANfccyJHviz8hIcIfVR7vwy5DAjohUxNBMt0PPU+JWryfOIgL31996 6r2qMpufZiyvX9lO4OI32rY7g0BkXyUOZzZqX2Sx6gdn1+WUoVNTP6cOCSXQTfoe haDrEaXH4wjca7ueE8fzQf0qa8HObd68wtXqRvm1PFW4NgKSQdlKaIMwuEdPkcpn zFoCZPbsla4q3TvzWh238uTK6UQxiqn9iLymajZZPNWWNsVTcgN26zR6HLP6oYb5 8+ldOqQ2bhfvwlCfT7+nakf6P336T3DGOcPxwC34481PHXnVH08kM06iW/q6f5Jk MNDtccU0Xh4pgftAkzj9nXmQfEE//FY8 -----END CERTIFICATE-----Generated at Thu Dec 4 13:10:12 2025 by rpki-client