This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/lArwr8_PfkDYr8SBOSW8MnQBUXQ.roa File: lArwr8_PfkDYr8SBOSW8MnQBUXQ.roa (raw, json) Hash identifier: AD2nqbhdm3sQUtFHZTKBMCAVZNhqnsAWjkg28nriwS4= Subject key identifier: 94:0A:F0:AF:CF:CF:7E:40:D8:AF:C4:81:39:25:BC:32:74:01:51:74 Certificate issuer: /CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf Certificate serial: 019AA4CAA599ED7A501B1C1AE95B543D25A8 Authority key identifier: C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/lArwr8_PfkDYr8SBOSW8MnQBUXQ.roa Signing time: Fri 21 Nov 2025 05:02:15 +0000 ROA not before: Fri 21 Nov 2025 05:02:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60064 IP address blocks: 185.63.252.0/24 maxlen: 24 185.63.253.0/24 maxlen: 24 185.63.254.0/24 maxlen: 24 2a04:f780::/32 maxlen: 32 2a04:f781::/40 maxlen: 40 2a04:f781:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a4:ca:a5:99:ed:7a:50:1b:1c:1a:e9:5b:54:3d:25:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf Validity Not Before: Nov 21 05:02:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=940af0afcfcf7e40d8afc4813925bc3274015174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:92:98:a3:90:e5:d5:17:5a:e2:4b:79:a2:62: 8d:1d:3c:29:79:c1:96:21:92:e4:30:66:e8:ac:6c: a4:cf:20:8f:88:52:1c:56:7a:00:b7:4d:a7:da:f7: f5:a2:b1:cc:69:55:0f:8c:48:66:ac:21:7a:e0:e7: 7a:e2:67:55:7b:19:13:ba:49:8d:56:f2:95:36:e9: ff:16:15:3f:3e:c3:32:e7:33:7d:a8:d2:6f:f0:d9: 99:14:34:4c:2f:1c:d2:24:89:7a:4d:95:3e:4a:45: c4:d5:fb:4b:b1:c5:e3:8f:b6:81:cf:4e:e6:09:85: 23:04:04:54:35:29:ea:41:be:3a:bb:61:9e:76:50: 9f:94:c8:81:3c:38:1f:1c:1d:94:34:1e:04:6e:cf: 51:b0:4c:2c:5c:7c:e7:8e:a5:cc:76:01:5a:eb:cd: e4:d8:33:86:7b:0f:46:10:d2:b8:f2:90:ba:ad:2b: 8f:ca:15:25:05:2f:d6:e7:54:f7:3d:fa:84:5b:a5: 23:55:e6:b3:14:9c:e1:a7:2b:47:ed:81:b1:ee:9e: 46:41:5a:ea:7c:4a:82:c4:87:5b:3d:b6:32:d7:d8: e7:10:0f:c2:e7:25:cf:ac:19:7d:38:e1:b0:66:c2: 4e:55:43:14:f8:d9:9a:69:bf:7a:a1:f0:dc:a7:25: 85:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:0A:F0:AF:CF:CF:7E:40:D8:AF:C4:81:39:25:BC:32:74:01:51:74 X509v3 Authority Key Identifier: keyid:C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/lArwr8_PfkDYr8SBOSW8MnQBUXQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.63.252.0-185.63.254.255 IPv6: 2a04:f780::-2a04:f781:1ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 3a:6a:ff:90:77:1a:96:fa:3c:3b:09:b4:8c:95:92:a1:3d:82: b0:57:b2:7d:2e:3b:68:a8:02:30:41:f7:55:5c:73:66:ad:d4: fb:de:cf:16:c1:a6:de:d9:47:8e:75:ce:cc:61:fd:8b:a4:2b: eb:39:0c:8e:05:2d:74:86:ba:df:a6:f5:3e:52:4f:d2:ba:08: fc:9d:f1:13:3b:b6:e6:75:0b:c0:02:b3:5a:30:56:11:00:0e: a1:89:1d:d5:5c:1c:af:1c:75:63:0f:a5:46:a7:9f:5e:a2:34: f5:bf:9b:32:c8:0a:05:bd:68:1b:1a:33:3f:0c:7d:26:90:24: ca:ab:ec:b5:df:30:bf:43:24:de:60:64:9f:98:12:1d:4f:98: b0:ba:72:ac:12:27:31:82:e6:01:6b:14:7d:5a:32:c8:10:d7: 00:21:ba:2c:45:8f:21:b5:cb:70:6d:cb:e8:c9:8e:54:75:c0: 4f:d2:22:fe:13:7d:87:a1:2e:65:89:55:8f:67:90:d7:de:0e: 76:79:c0:28:f0:a4:25:c8:46:07:06:04:d6:bb:87:42:19:c3: 9b:f3:75:7a:9b:9f:f9:7c:81:89:8e:fb:6a:8e:8c:53:13:13: 72:d4:84:8b:fb:fe:b4:34:b2:ef:2d:e5:45:b5:56:55:40:68: 18:57:9c:4b -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZqkyqWZ7XpQGxwa6VtUPSWoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZmI0OTJmMGExODhmMDAxNDI3OGUwZGY2YmJiMDI5Y2Vi YWRiYWYwHhcNMjUxMTIxMDUwMjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDBhZjBhZmNmY2Y3ZTQwZDhhZmM0ODEzOTI1YmMzMjc0MDE1MTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJKYo5Dl1Rda4kt5omKNHTwpecGW IZLkMGborGykzyCPiFIcVnoAt02n2vf1orHMaVUPjEhmrCF64Od64mdVexkTukmN VvKVNun/FhU/PsMy5zN9qNJv8NmZFDRMLxzSJIl6TZU+SkXE1ftLscXjj7aBz07m CYUjBARUNSnqQb46u2GedlCflMiBPDgfHB2UNB4Ebs9RsEwsXHznjqXMdgFa683k 2DOGew9GENK48pC6rSuPyhUlBS/W51T3PfqEW6UjVeazFJzhpytH7YGx7p5GQVrq fEqCxIdbPbYy19jnEA/C5yXPrBl9OOGwZsJOVUMU+Nmaab96ofDcpyWF4QIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFJQK8K/Pz35A2K/EgTklvDJ0AVF0MB8GA1UdIwQY MBaAFMH7SS8KGI8AFCeODfa7sCnOutuvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2Z0Skx3b1lqd0FVSjQ0TjlydXdLYzY2MjY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9jZmRkNzItYWM0My00N2YyLWE4OGQt NTE1YTBlZjY4NmFiLzEvbEFyd3I4X1Bma0RZcjhTQk9TVzhNblFCVVhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9jZmRkNzItYWM0My00N2YyLWE4OGQtNTE1YTBlZjY4NmFi LzEvd2Z0Skx3b1lqd0FVSjQ0TjlydXdLYzY2MjY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAUBAIAATAOMAwDBAK5P/wD BAC5P/4wFwQCAAIwETAPAwUHKgT3gAMGASoE94EAMA0GCSqGSIb3DQEBCwUAA4IB AQA6av+QdxqW+jw7CbSMlZKhPYKwV7J9LjtoqAIwQfdVXHNmrdT73s8Wwabe2UeO dc7MYf2LpCvrOQyOBS10hrrfpvU+Uk/Sugj8nfETO7bmdQvAArNaMFYRAA6hiR3V XByvHHVjD6VGp59eojT1v5syyAoFvWgbGjM/DH0mkCTKq+y13zC/QyTeYGSfmBId T5iwunKsEicxguYBaxR9WjLIENcAIbosRY8htctwbcvoyY5UdcBP0iL+E32HoS5l iVWPZ5DX3g52ecAo8KQlyEYHBgTWu4dCGcOb83V6m5/5fIGJjvtqjoxTExNy1ISL +/60NLLvLeVFtVZVQGgYV5xL -----END CERTIFICATE-----Generated at Sun Dec 14 08:36:39 2025 by rpki-client