This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/Rc9xUfd1M_4VrtGhHSHmPnryTVE.roa File: Rc9xUfd1M_4VrtGhHSHmPnryTVE.roa (raw, json) Hash identifier: 3QUy2heHImw3kzh7TVYAlRFh0zOncJFt5DAUSaYKO2I= Subject key identifier: 45:CF:71:51:F7:75:33:FE:15:AE:D1:A1:1D:21:E6:3E:7A:F2:4D:51 Certificate issuer: /CN=2b76e1570cad7739fd0bff60632e05bc06f642e3 Certificate serial: 019B2E2CD8D71C6DA8433A406B1A07C9CB2D Authority key identifier: 2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/Rc9xUfd1M_4VrtGhHSHmPnryTVE.roa Signing time: Wed 17 Dec 2025 21:17:29 +0000 ROA not before: Wed 17 Dec 2025 21:17:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208893 IP address blocks: 45.88.64.0/24 maxlen: 24 91.92.197.0/24 maxlen: 24 93.123.20.0/24 maxlen: 24 94.154.173.0/24 maxlen: 24 94.156.64.0/24 maxlen: 24 94.156.65.0/24 maxlen: 24 94.156.175.0/24 maxlen: 24 94.156.253.0/24 maxlen: 24 193.222.98.0/24 maxlen: 24 2a14:e200::/44 maxlen: 44 2a14:e200::/48 maxlen: 48 2a14:e200:1::/48 maxlen: 48 2a14:e200:2::/48 maxlen: 48 2a14:e200:3::/48 maxlen: 48 2a14:e200:10::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:2c:d8:d7:1c:6d:a8:43:3a:40:6b:1a:07:c9:cb:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b76e1570cad7739fd0bff60632e05bc06f642e3 Validity Not Before: Dec 17 21:17:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=45cf7151f77533fe15aed1a11d21e63e7af24d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:91:e9:af:b2:1d:07:17:d6:89:8c:45:d4:13: 59:16:72:71:95:fa:5c:37:68:c2:72:2f:a8:93:63: 78:d0:0f:71:de:23:57:93:67:d7:8e:b9:e1:ce:f5: 9c:f7:a8:58:82:f3:9c:d5:e4:4e:98:26:30:10:02: 98:b8:58:7c:8f:c9:80:71:50:ee:65:26:f9:f5:e3: 92:8c:9d:64:61:d2:95:7f:53:7a:a0:96:95:dc:c3: 05:4d:96:bc:97:17:2a:c9:0a:5a:a7:40:55:f3:d1: a2:85:35:86:d7:1b:78:b3:94:39:82:d2:67:e9:de: e9:14:67:e2:45:cc:5c:e4:bd:ae:07:f0:bb:3e:b7: 35:0a:c2:66:32:48:6b:ec:9c:ad:f5:90:07:9a:66: 7e:12:f6:57:75:1d:8c:57:65:5a:39:04:1d:d2:2f: 10:8e:b2:85:2e:b4:f9:3e:81:b5:18:9f:76:ba:9b: a2:2e:69:87:e9:4c:b4:0d:98:17:92:91:c7:ca:3e: 34:91:8c:ac:53:2f:90:9e:b7:fc:64:26:7b:4e:36: e1:94:e0:f4:27:66:58:6f:e3:78:b4:3a:f9:00:fb: 36:69:5e:5e:6d:4a:f0:9f:69:99:25:f1:4d:c4:d2: 22:f7:ec:6f:98:a5:55:fd:35:ee:60:3e:3f:30:53: 87:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:CF:71:51:F7:75:33:FE:15:AE:D1:A1:1D:21:E6:3E:7A:F2:4D:51 X509v3 Authority Key Identifier: keyid:2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/Rc9xUfd1M_4VrtGhHSHmPnryTVE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.64.0/24 91.92.197.0/24 93.123.20.0/24 94.154.173.0/24 94.156.64.0/23 94.156.175.0/24 94.156.253.0/24 193.222.98.0/24 IPv6: 2a14:e200::/43 Signature Algorithm: sha256WithRSAEncryption a7:67:bf:26:1d:08:88:d4:4f:b7:02:d4:1f:66:83:c5:1d:2c: e2:4a:6a:b2:9e:8e:d0:5a:49:c5:b3:6b:2b:8e:f4:d6:30:e8: b6:a5:2e:7c:f4:b3:41:40:10:5b:47:6e:2b:04:15:9e:0d:fe: cf:3c:52:80:c9:ea:b0:8f:03:4f:d7:5f:57:da:e6:3c:d9:1d: 0f:88:a5:d7:0a:5d:0f:9d:14:8b:2c:86:dc:52:7d:30:8b:68: ae:68:b1:01:1b:d2:f9:e2:bc:0f:40:21:ff:f1:1b:fb:53:3e: cc:51:66:0a:e1:15:9e:d6:ee:90:f8:80:e8:04:61:1f:78:b3: a7:bc:1c:5e:2b:2b:df:09:c4:3a:da:45:00:81:aa:7c:d2:0a: 61:ff:57:54:81:da:2e:eb:b8:64:f5:24:3a:e8:a0:c7:48:cc: 74:4f:25:f0:9c:f1:63:a0:78:e8:39:e7:c3:9d:73:5b:76:fe: ef:90:95:23:e6:d9:43:a9:0c:57:d2:15:3e:a4:5a:82:31:94: e1:f5:9b:60:27:22:8f:60:81:18:cf:d0:67:0c:35:f3:21:20: a6:54:de:4b:fe:dd:02:e4:82:76:07:ab:d0:a8:ab:19:ac:63: ba:a2:1a:31:6f:c2:91:d6:b9:e8:ac:de:4b:14:a2:d0:71:92: 81:4b:40:f1 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgISAZsuLNjXHG2oQzpAaxoHycstMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNzZlMTU3MGNhZDc3MzlmZDBiZmY2MDYzMmUwNWJjMDZm NjQyZTMwHhcNMjUxMjE3MjExNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWNmNzE1MWY3NzUzM2ZlMTVhZWQxYTExZDIxZTYzZTdhZjI0ZDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5Hpr7IdBxfWiYxF1BNZFnJxlfpc N2jCci+ok2N40A9x3iNXk2fXjrnhzvWc96hYgvOc1eROmCYwEAKYuFh8j8mAcVDu ZSb59eOSjJ1kYdKVf1N6oJaV3MMFTZa8lxcqyQpap0BV89GihTWG1xt4s5Q5gtJn 6d7pFGfiRcxc5L2uB/C7Prc1CsJmMkhr7Jyt9ZAHmmZ+EvZXdR2MV2VaOQQd0i8Q jrKFLrT5PoG1GJ92upuiLmmH6Uy0DZgXkpHHyj40kYysUy+Qnrf8ZCZ7TjbhlOD0 J2ZYb+N4tDr5APs2aV5ebUrwn2mZJfFNxNIi9+xvmKVV/TXuYD4/MFOH4QIDAQAB o4ICRDCCAkAwHQYDVR0OBBYEFEXPcVH3dTP+Fa7RoR0h5j568k1RMB8GA1UdIwQY MBaAFCt24VcMrXc5/Qv/YGMuBbwG9kLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzNiaFZ3eXRkem45Q185Z1l5NEZ2QWIyUXVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mMGY5NDUtZGMzYi00NjcyLTk0MmQt N2Y2ZWU3YTc2NTY1LzEvUmM5eFVmZDFNXzRWcnRHaEhTSG1QbnJ5VFZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9mMGY5NDUtZGMzYi00NjcyLTk0MmQtN2Y2ZWU3YTc2NTY1 LzEvSzNiaFZ3eXRkem45Q185Z1l5NEZ2QWIyUXVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTA2BAIAATAwAwQALVhAAwQA W1zFAwQAXXsUAwQAXpqtAwQBXpxAAwQAXpyvAwQAXpz9AwQAwd5iMA8EAgACMAkD BwUqFOIAAAAwDQYJKoZIhvcNAQELBQADggEBAKdnvyYdCIjUT7cC1B9mg8UdLOJK arKejtBaScWzayuO9NYw6LalLnz0s0FAEFtHbisEFZ4N/s88UoDJ6rCPA0/XX1fa 5jzZHQ+IpdcKXQ+dFIsshtxSfTCLaK5osQEb0vnivA9AIf/xG/tTPsxRZgrhFZ7W 7pD4gOgEYR94s6e8HF4rK98JxDraRQCBqnzSCmH/V1SB2i7ruGT1JDrooMdIzHRP JfCc8WOgeOg558Odc1t2/u+QlSPm2UOpDFfSFT6kWoIxlOH1m2AnIo9ggRjP0GcM NfMhIKZU3kv+3QLkgnYHq9CoqxmsY7qiGjFvwpHWueis3ksUotBxkoFLQPE= -----END CERTIFICATE-----Generated at Sat Dec 20 01:53:31 2025 by rpki-client