This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/FowJlWGJ75catmAvy76DNBRSo-Q.roa File: FowJlWGJ75catmAvy76DNBRSo-Q.roa (raw, json) Hash identifier: 81vaXaueXrO3XB2IcIbnwYS31i0uEEFUqvZGfzbTxlE= Subject key identifier: 16:8C:09:95:61:89:EF:97:1A:B6:60:2F:CB:BE:83:34:14:52:A3:E4 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019B3841B82C5AE897191887C1C7DC82A1E2 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/FowJlWGJ75catmAvy76DNBRSo-Q.roa Signing time: Fri 19 Dec 2025 20:16:29 +0000 ROA not before: Fri 19 Dec 2025 20:16:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 45.155.253.0/24 maxlen: 24 45.157.209.0/24 maxlen: 24 176.125.250.0/24 maxlen: 24 176.125.251.0/24 maxlen: 24 185.199.151.0/24 maxlen: 24 185.199.212.0/23 maxlen: 23 185.199.213.0/24 maxlen: 24 185.199.214.0/23 maxlen: 24 185.221.25.0/24 maxlen: 24 185.221.26.0/24 maxlen: 24 185.225.168.0/24 maxlen: 24 185.225.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:41:b8:2c:5a:e8:97:19:18:87:c1:c7:dc:82:a1:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Dec 19 20:16:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=168c09956189ef971ab6602fcbbe83341452a3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1c:2a:56:7a:64:36:5e:34:4d:41:ef:8a:c6: b4:96:56:28:fc:ce:ec:b6:63:75:1e:15:80:00:1b: b2:ac:59:9b:4d:82:b4:ec:33:a0:26:5f:af:16:91: 77:a9:61:b0:1c:b1:fe:2d:2e:c3:b6:4b:04:02:06: 98:98:71:fb:cb:1b:50:e1:c9:79:17:cb:96:45:b5: 4e:63:6a:32:dc:97:61:ca:8d:8d:a4:62:2d:a8:ec: 0c:63:bd:2f:a1:e1:b4:b4:9e:e6:2a:34:42:ba:68: 0d:48:b8:5a:cc:68:c7:c3:8d:00:3d:b2:41:84:7f: 1f:44:3a:94:99:12:28:cb:5a:a8:83:22:2f:e8:a2: b8:d0:76:bf:44:61:5a:41:15:56:5f:a9:d2:1d:df: 4d:ba:ba:3d:39:d2:f9:77:40:44:ed:76:5d:3d:dc: 01:b5:de:86:a6:de:3a:ba:b4:32:4c:55:91:52:4b: 12:df:bc:cc:1c:00:54:51:91:d8:6a:a0:e2:05:28: 00:2a:91:f8:8a:ea:78:8e:f7:0a:4a:e4:36:08:68: 54:1a:83:1c:50:7f:ac:1f:fc:b0:38:a8:03:b3:ec: 66:d9:1c:e0:6e:8f:d2:c9:fb:ec:cc:7c:e9:b3:76: 37:17:63:d1:4a:0a:89:08:c7:73:7a:ed:27:0e:5a: 11:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8C:09:95:61:89:EF:97:1A:B6:60:2F:CB:BE:83:34:14:52:A3:E4 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/FowJlWGJ75catmAvy76DNBRSo-Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.253.0/24 45.157.209.0/24 176.125.250.0/23 185.199.151.0/24 185.199.212.0/22 185.221.25.0-185.221.26.255 185.225.168.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:f3:c9:09:61:88:74:53:8c:b7:ef:5c:77:59:ca:c2:48:5e: e4:08:34:1f:45:96:71:37:1b:9e:f2:85:1e:5f:ac:4e:3e:fd: 45:15:78:50:14:88:d5:36:94:7b:ee:8e:03:46:a5:8c:c9:8b: 91:b6:98:af:31:73:e8:8a:0d:6e:8c:51:36:6f:0d:36:68:25: ed:18:e3:24:0e:7e:ea:f2:85:fc:65:4c:ee:48:5b:25:49:ca: 3b:34:be:86:18:ee:16:bd:9f:77:6e:8c:cb:58:be:22:57:04: e0:fb:25:da:f9:bd:d6:81:1c:57:6e:10:b6:35:19:20:86:1c: e0:89:be:0d:74:cd:6f:01:c7:90:46:fb:ac:fe:16:48:27:5f: 22:b5:88:1d:37:e0:95:a6:d7:66:c2:27:d0:a6:48:83:1b:25: 3c:1a:28:11:f7:99:6f:d2:79:72:d2:e6:98:2e:aa:74:3c:f7: 17:7c:69:88:e8:87:f9:9c:75:00:e0:b7:db:94:01:2d:e4:5d: bb:c0:5f:69:a7:61:03:bd:bb:97:4d:59:f3:9b:c6:c9:fb:77: 91:a7:29:7e:45:ed:a3:ff:ca:7b:d5:b3:96:e0:08:e7:0b:29: d0:6a:12:f2:e6:bd:94:a2:ca:f5:6a:96:42:03:9e:c6:44:91: a3:f0:2e:50 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZs4QbgsWuiXGRiHwcfcgqHiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjUxMjE5MjAxNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjhjMDk5NTYxODllZjk3MWFiNjYwMmZjYmJlODMzNDE0NTJhM2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBwqVnpkNl40TUHvisa0llYo/M7s tmN1HhWAABuyrFmbTYK07DOgJl+vFpF3qWGwHLH+LS7DtksEAgaYmHH7yxtQ4cl5 F8uWRbVOY2oy3Jdhyo2NpGItqOwMY70voeG0tJ7mKjRCumgNSLhazGjHw40APbJB hH8fRDqUmRIoy1qogyIv6KK40Ha/RGFaQRVWX6nSHd9Nuro9OdL5d0BE7XZdPdwB td6Gpt46urQyTFWRUksS37zMHABUUZHYaqDiBSgAKpH4iup4jvcKSuQ2CGhUGoMc UH+sH/ywOKgDs+xm2Rzgbo/SyfvszHzps3Y3F2PRSgqJCMdzeu0nDloRawIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFBaMCZVhie+XGrZgL8u+gzQUUqPkMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvRm93SmxXR0o3NWNhdG1Bdnk3NkROQlJTby1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQALZv9AwQA LZ3RAwQBsH36AwQAuceXAwQCucfUMAwDBAC53RkDBAC53RoDBAG54agwDQYJKoZI hvcNAQELBQADggEBADvzyQlhiHRTjLfvXHdZysJIXuQINB9FlnE3G57yhR5frE4+ /UUVeFAUiNU2lHvujgNGpYzJi5G2mK8xc+iKDW6MUTZvDTZoJe0Y4yQOfuryhfxl TO5IWyVJyjs0voYY7ha9n3dujMtYviJXBOD7Jdr5vdaBHFduELY1GSCGHOCJvg10 zW8Bx5BG+6z+FkgnXyK1iB034JWm12bCJ9CmSIMbJTwaKBH3mW/SeXLS5pguqnQ8 9xd8aYjoh/mcdQDgt9uUAS3kXbvAX2mnYQO9u5dNWfObxsn7d5GnKX5F7aP/ynvV s5bgCOcLKdBqEvLmvZSiyvVqlkIDnsZEkaPwLlA= -----END CERTIFICATE-----Generated at Tue Dec 23 07:46:19 2025 by rpki-client