This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/r9az9HnXvhUUh0LvFWja9dGdMeY.roa File: r9az9HnXvhUUh0LvFWja9dGdMeY.roa (raw, json) Hash identifier: fg4TC1YAlUmWKMESpQqjzHsVx3SYKdYRYLoWjHzIu7A= Subject key identifier: AF:D6:B3:F4:79:D7:BE:15:14:87:42:EF:15:68:DA:F5:D1:9D:31:E6 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B4CC61A29E0150A30A9124569170AA7E4 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/r9az9HnXvhUUh0LvFWja9dGdMeY.roa Signing time: Tue 23 Dec 2025 19:53:29 +0000 ROA not before: Tue 23 Dec 2025 19:53:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202656 IP address blocks: 45.15.239.0/24 maxlen: 24 45.129.1.0/24 maxlen: 24 45.132.39.0/24 maxlen: 24 45.135.35.0/24 maxlen: 24 45.138.7.0/24 maxlen: 24 45.138.156.0/24 maxlen: 24 45.138.212.0/24 maxlen: 24 45.138.215.0/24 maxlen: 24 45.140.65.0/24 maxlen: 24 45.149.130.0/24 maxlen: 24 45.149.131.0/24 maxlen: 24 45.152.118.0/24 maxlen: 24 45.152.119.0/24 maxlen: 24 62.192.136.0/24 maxlen: 24 62.192.139.0/24 maxlen: 24 83.138.51.0/24 maxlen: 24 83.138.52.0/24 maxlen: 24 84.246.82.0/24 maxlen: 24 91.206.69.0/24 maxlen: 24 91.224.140.0/24 maxlen: 24 91.237.104.0/24 maxlen: 24 91.237.105.0/24 maxlen: 24 91.242.240.0/24 maxlen: 24 92.119.194.0/23 maxlen: 23 176.116.2.0/24 maxlen: 24 176.116.5.0/24 maxlen: 24 176.116.9.0/24 maxlen: 24 176.116.20.0/24 maxlen: 24 176.116.23.0/24 maxlen: 24 176.126.109.0/24 maxlen: 24 176.126.112.0/24 maxlen: 24 176.126.115.0/24 maxlen: 24 178.211.140.0/24 maxlen: 24 193.0.245.0/24 maxlen: 24 193.0.246.0/24 maxlen: 24 193.5.1.0/24 maxlen: 24 193.33.67.0/24 maxlen: 24 193.58.171.0/24 maxlen: 24 193.58.178.0/24 maxlen: 24 194.26.216.0/24 maxlen: 24 194.34.251.0/24 maxlen: 24 195.96.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:c6:1a:29:e0:15:0a:30:a9:12:45:69:17:0a:a7:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Dec 23 19:53:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=afd6b3f479d7be15148742ef1568daf5d19d31e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b1:12:e7:3a:66:3b:c7:97:95:e5:96:33:b3: 21:2b:9d:ff:07:90:d7:e0:11:54:58:70:bc:2b:da: 77:ae:bc:a8:ff:09:91:30:40:3d:1c:9c:0e:93:ff: ff:d3:d0:c3:5e:3d:25:d3:47:dd:4f:af:48:d8:89: e4:c3:7c:44:dc:68:d5:d5:26:03:65:cd:6a:51:15: 9d:a1:72:63:ee:f1:7b:dc:77:28:17:34:3d:6c:e3: 38:08:02:c7:aa:b3:fc:bf:d3:d6:81:16:01:a9:9f: ae:bf:54:ed:0e:15:87:bb:c1:f8:8c:54:9f:a7:c1: 13:9d:81:db:a7:38:0a:5b:d8:57:ef:56:81:aa:d6: 43:e7:e1:6b:88:53:30:e4:7a:75:d3:09:48:76:cf: 0d:3a:b9:53:9c:be:5f:46:f1:14:b4:9c:8f:d1:63: 4b:aa:c3:44:98:da:d8:54:67:06:9d:a0:87:c2:7f: bc:08:c1:bd:3b:ca:ba:61:f0:61:72:1c:17:1d:f3: b6:89:1b:c7:dd:0b:cd:d1:9f:f0:96:6a:a7:bb:90: dc:72:b7:30:bf:d6:5e:c1:0d:5e:54:e3:8a:e5:e5: 69:63:80:31:40:d0:17:b1:36:8b:77:81:c7:a0:ed: a6:63:e7:99:26:f4:85:80:e7:d3:32:be:52:dc:32: 14:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D6:B3:F4:79:D7:BE:15:14:87:42:EF:15:68:DA:F5:D1:9D:31:E6 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/r9az9HnXvhUUh0LvFWja9dGdMeY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.239.0/24 45.129.1.0/24 45.132.39.0/24 45.135.35.0/24 45.138.7.0/24 45.138.156.0/24 45.138.212.0/24 45.138.215.0/24 45.140.65.0/24 45.149.130.0/23 45.152.118.0/23 62.192.136.0/24 62.192.139.0/24 83.138.51.0-83.138.52.255 84.246.82.0/24 91.206.69.0/24 91.224.140.0/24 91.237.104.0/23 91.242.240.0/24 92.119.194.0/23 176.116.2.0/24 176.116.5.0/24 176.116.9.0/24 176.116.20.0/24 176.116.23.0/24 176.126.109.0/24 176.126.112.0/24 176.126.115.0/24 178.211.140.0/24 193.0.245.0-193.0.246.255 193.5.1.0/24 193.33.67.0/24 193.58.171.0/24 193.58.178.0/24 194.26.216.0/24 194.34.251.0/24 195.96.155.0/24 Signature Algorithm: sha256WithRSAEncryption 17:19:f2:2d:eb:07:31:c0:c3:c7:be:76:f3:7a:fd:1f:68:1e: 8f:6e:37:0b:2b:a4:85:a7:1f:d1:37:ee:69:3b:30:57:44:03: 8c:c2:49:3f:a5:64:9b:af:fb:42:1f:54:fb:29:6a:ef:19:61: 2a:9f:b3:64:f5:1d:e3:a8:ee:2d:eb:56:a9:24:0f:e9:96:48: 06:09:90:c4:bb:97:6c:b0:50:f1:5d:14:55:0e:27:59:5f:1c: 46:18:77:ca:fa:3d:c3:35:1a:c4:28:c8:45:7e:ce:06:bb:2e: 56:ea:35:e8:b1:5b:6b:13:4b:26:f5:f3:38:30:1c:3a:5e:74: 25:9f:c3:24:09:50:d3:35:5d:b8:58:86:d2:da:24:15:49:d0: 87:92:5d:3f:81:8f:40:49:89:6d:bc:e8:f5:c9:a6:42:2a:30: fb:ea:5e:ae:02:65:a5:69:ad:70:c6:1e:0e:b7:ee:63:4a:b1: d0:e3:52:96:36:d1:91:e2:3d:e4:fc:f2:89:2b:2a:d7:33:2e: 33:9c:57:10:3e:07:7b:d2:47:8b:73:3b:c7:72:2e:f4:e1:f2: 4a:71:fd:07:eb:7d:e7:16:51:bc:0f:78:4e:8a:94:1d:a8:d9: 03:71:af:fd:c1:55:27:9b:df:72:cb:2d:05:11:9d:bb:d0:a6: 64:c4:81:b8 -----BEGIN CERTIFICATE----- MIIF6zCCBNOgAwIBAgISAZtMxhop4BUKMKkSRWkXCqfkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjUxMjIzMTk1MzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmQ2YjNmNDc5ZDdiZTE1MTQ4NzQyZWYxNTY4ZGFmNWQxOWQzMWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7ES5zpmO8eXleWWM7MhK53/B5DX 4BFUWHC8K9p3rryo/wmRMEA9HJwOk///09DDXj0l00fdT69I2Inkw3xE3GjV1SYD Zc1qURWdoXJj7vF73HcoFzQ9bOM4CALHqrP8v9PWgRYBqZ+uv1TtDhWHu8H4jFSf p8ETnYHbpzgKW9hX71aBqtZD5+FriFMw5Hp10wlIds8NOrlTnL5fRvEUtJyP0WNL qsNEmNrYVGcGnaCHwn+8CMG9O8q6YfBhchwXHfO2iRvH3QvN0Z/wlmqnu5Dccrcw v9ZewQ1eVOOK5eVpY4AxQNAXsTaLd4HHoO2mY+eZJvSFgOfTMr5S3DIU4QIDAQAB o4IC9zCCAvMwHQYDVR0OBBYEFK/Ws/R5174VFIdC7xVo2vXRnTHmMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvcjlhejlIblh2aFVVaDBMdkZXamE5ZEdkTWVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBCwYIKwYBBQUHAQcBAf8EgfswgfgwgfUEAgABMIHuAwQA LQ/vAwQALYEBAwQALYQnAwQALYcjAwQALYoHAwQALYqcAwQALYrUAwQALYrXAwQA LYxBAwQBLZWCAwQBLZh2AwQAPsCIAwQAPsCLMAwDBABTijMDBABTijQDBABU9lID BABbzkUDBABb4IwDBAFb7WgDBABb8vADBAFcd8IDBACwdAIDBACwdAUDBACwdAkD BACwdBQDBACwdBcDBACwfm0DBACwfnADBACwfnMDBACy04wwDAMEAMEA9QMEAMEA 9gMEAMEFAQMEAMEhQwMEAME6qwMEAME6sgMEAMIa2AMEAMIi+wMEAMNgmzANBgkq hkiG9w0BAQsFAAOCAQEAFxnyLesHMcDDx75283r9H2gej243Cyukhacf0TfuaTsw V0QDjMJJP6Vkm6/7Qh9U+ylq7xlhKp+zZPUd46juLetWqSQP6ZZIBgmQxLuXbLBQ 8V0UVQ4nWV8cRhh3yvo9wzUaxCjIRX7OBrsuVuo16LFbaxNLJvXzODAcOl50JZ/D JAlQ0zVduFiG0tokFUnQh5JdP4GPQEmJbbzo9cmmQiow++pergJlpWmtcMYeDrfu Y0qx0ONSljbRkeI95PzyiSsq1zMuM5xXED4He9JHi3M7x3Iu9OHySnH9B+t95xZR vA94ToqUHajZA3Gv/cFVJ5vfcsstBRGdu9CmZMSBuA== -----END CERTIFICATE-----Generated at Wed Dec 24 21:16:54 2025 by rpki-client