This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/s8Wv5Fc3uQsTgPOKYgfb4zc1hzA.roa File: s8Wv5Fc3uQsTgPOKYgfb4zc1hzA.roa (raw, json) Hash identifier: 15oDWwoGKAnNQJhwA2U/emXgREOdRiYnsm3GozX5ul8= Subject key identifier: B3:C5:AF:E4:57:37:B9:0B:13:80:F3:8A:62:07:DB:E3:37:35:87:30 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B2BDE5E3451049AF9C3B89ADE13E2AE74 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/s8Wv5Fc3uQsTgPOKYgfb4zc1hzA.roa Signing time: Wed 17 Dec 2025 10:32:31 +0000 ROA not before: Wed 17 Dec 2025 10:32:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58057 IP address blocks: 45.131.186.0/24 maxlen: 24 45.136.136.0/22 maxlen: 24 45.136.136.0/24 maxlen: 24 45.136.137.0/24 maxlen: 24 45.136.139.0/24 maxlen: 24 185.102.84.0/24 maxlen: 24 193.33.94.0/23 maxlen: 24 193.163.86.0/24 maxlen: 24 194.50.92.0/24 maxlen: 24 2a04:ccc0:ffff::/48 maxlen: 48 2a04:ccc1::/32 maxlen: 48 2a04:ccc3::/32 maxlen: 48 2a04:ccc4::/32 maxlen: 48 2a04:ccc5::/32 maxlen: 48 2a04:ccc6::/32 maxlen: 48 2a04:ccc7::/32 maxlen: 48 2a09:4c0::/29 maxlen: 64 2a0c:3b80::/32 maxlen: 48 2a0c:3b81::/32 maxlen: 48 2a0c:3b82::/32 maxlen: 48 2a0c:3b83::/32 maxlen: 48 2a0c:3b84::/32 maxlen: 48 2a0c:3b85::/32 maxlen: 48 2a0c:3b86::/32 maxlen: 48 2a0e:97c0:1d0::/44 maxlen: 44 2a0e:97c0:260::/44 maxlen: 44 2a0e:97c1:200::/40 maxlen: 48 2a0e:97c3:110::/44 maxlen: 48 2a0e:97c4:120::/44 maxlen: 48 2a0e:b107:9f2::/48 maxlen: 48 2a0e:b107:1165::/48 maxlen: 48 2a0e:b107:1786::/48 maxlen: 48 2a0e:b107:21c0::/45 maxlen: 48 2a0e:b107:2220::/45 maxlen: 48 2a0e:b107:2228::/45 maxlen: 48 2a0f:e404:102::/48 maxlen: 48 2a10:2f00:18d::/48 maxlen: 48 2a10:2f00:18f::/48 maxlen: 48 2a10:2f00:193::/48 maxlen: 48 2a10:cc40:250::/44 maxlen: 48 2a10:cc45:130::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:de:5e:34:51:04:9a:f9:c3:b8:9a:de:13:e2:ae:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Dec 17 10:32:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b3c5afe45737b90b1380f38a6207dbe337358730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:08:27:df:36:ae:7f:0c:76:bf:25:1a:c6:3f: 2e:cf:cc:25:71:ba:b9:a9:ca:50:52:80:d0:f6:b5: cb:35:49:c2:19:24:fb:a9:d5:db:04:1d:a6:27:01: 88:a6:eb:31:32:48:20:2b:81:e5:87:13:b7:a7:48: ad:5a:f7:d9:a8:07:cb:b9:25:76:fc:8f:14:af:26: aa:94:07:c8:1c:6d:c8:61:0f:9a:0b:4b:9f:bf:80: 37:30:c0:56:bd:28:80:5a:2b:fd:4b:de:64:5d:86: e3:01:31:45:7b:90:4d:bb:4f:bf:55:7a:5a:96:e3: 0e:ef:a1:77:c4:c5:f2:52:e7:84:8a:b3:a0:fa:2e: eb:27:07:aa:91:c9:78:ea:ce:ce:a9:ac:9d:86:ca: b5:67:a5:d3:f0:9a:7d:4a:81:cc:04:b7:46:f1:aa: 6f:4e:9b:82:9a:08:23:00:7e:f3:d5:60:e4:ae:99: 32:44:62:85:7a:0a:67:02:db:3c:f6:ff:fa:6c:d3: ad:21:46:11:47:27:11:6a:42:f0:20:0c:dd:0e:a8: ed:16:d8:25:f6:01:48:dc:9c:ed:c7:ea:3d:00:fa: cc:17:4c:66:13:b6:18:76:22:47:19:16:ef:ee:6e: 90:f0:ae:2c:e1:b7:d3:b7:38:8d:e8:16:4a:e9:28: c0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C5:AF:E4:57:37:B9:0B:13:80:F3:8A:62:07:DB:E3:37:35:87:30 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/s8Wv5Fc3uQsTgPOKYgfb4zc1hzA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.186.0/24 45.136.136.0/22 185.102.84.0/24 193.33.94.0/23 193.163.86.0/24 194.50.92.0/24 IPv6: 2a04:ccc0:ffff::-2a04:ccc1:ffff:ffff:ffff:ffff:ffff:ffff 2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff 2a09:4c0::/29 2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff 2a0e:97c0:1d0::/44 2a0e:97c0:260::/44 2a0e:97c1:200::/40 2a0e:97c3:110::/44 2a0e:97c4:120::/44 2a0e:b107:9f2::/48 2a0e:b107:1165::/48 2a0e:b107:1786::/48 2a0e:b107:21c0::/45 2a0e:b107:2220::/44 2a0f:e404:102::/48 2a10:2f00:18d::/48 2a10:2f00:18f::/48 2a10:2f00:193::/48 2a10:cc40:250::/44 2a10:cc45:130::/44 Signature Algorithm: sha256WithRSAEncryption 6d:7f:07:13:a1:b3:2e:b2:64:68:1e:09:72:56:cc:9f:87:4f: 11:0a:30:09:13:66:f9:c3:d8:3b:33:7b:25:96:46:0c:40:35: 10:39:72:53:5e:50:19:bd:b7:08:d7:31:e8:9a:81:18:39:24: 93:02:48:a8:58:56:3b:b5:f1:0d:95:df:75:79:b3:65:b2:92: 94:f0:11:47:66:25:b5:8e:a0:91:00:ac:2a:f7:e6:ba:8d:85: 87:50:4d:24:7e:18:13:8c:fa:53:e3:82:92:0b:ea:31:73:5f: 06:f5:80:b0:6a:f5:9e:d9:4c:02:7e:a6:c6:e0:9a:e1:d9:6e: 5f:92:bc:81:68:b6:81:de:5e:10:d9:7b:ea:ae:12:ea:ba:ce: 37:f5:d4:62:e8:48:b0:b6:73:0e:33:c4:43:2d:b9:1c:eb:2d: 81:5d:01:c8:d1:7e:bc:6f:87:f8:01:58:df:d3:28:48:83:db: e3:13:35:4b:67:64:34:e6:a8:7f:cd:08:5e:13:f0:d3:d7:87: 2f:66:b3:7d:4e:15:c5:68:a3:d2:c2:a7:34:a8:6d:30:5b:db: db:9f:3f:32:cc:fd:c8:68:8f:c2:ed:72:a1:22:ab:aa:64:b5: 8b:eb:14:57:75:cd:a6:17:bb:50:c3:24:f5:74:c6:13:82:b9: 46:78:15:cc -----BEGIN CERTIFICATE----- MIIF8jCCBNqgAwIBAgISAZsr3l40UQSa+cO4mt4T4q50MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjUxMjE3MTAzMjMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2M1YWZlNDU3MzdiOTBiMTM4MGYzOGE2MjA3ZGJlMzM3MzU4NzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ggn3zaufwx2vyUaxj8uz8wlcbq5 qcpQUoDQ9rXLNUnCGST7qdXbBB2mJwGIpusxMkggK4HlhxO3p0itWvfZqAfLuSV2 /I8UryaqlAfIHG3IYQ+aC0ufv4A3MMBWvSiAWiv9S95kXYbjATFFe5BNu0+/VXpa luMO76F3xMXyUueEirOg+i7rJweqkcl46s7Oqaydhsq1Z6XT8Jp9SoHMBLdG8apv TpuCmggjAH7z1WDkrpkyRGKFegpnAts89v/6bNOtIUYRRycRakLwIAzdDqjtFtgl 9gFI3Jztx+o9APrMF0xmE7YYdiJHGRbv7m6Q8K4s4bfTtziN6BZK6SjA2wIDAQAB o4IC/jCCAvowHQYDVR0OBBYEFLPFr+RXN7kLE4DzimIH2+M3NYcwMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvczhXdjVGYzN1UXNUZ1BPS1lnZmI0emMxaHpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBEgYIKwYBBQUHAQcBAf8EggEBMIH+MCoEAgABMCQDBAAt g7oDBAItiIgDBAC5ZlQDBAHBIV4DBADBo1YDBADCMlwwgc8EAgACMIHIMBADBwAq BMzA//8DBQEqBMzAMA4DBQAqBMzDAwUDKgTMwAMFAyoJBMAwDgMFByoMO4ADBQAq DDuGAwcEKg6XwAHQAwcEKg6XwAJgAwYAKg6XwQIDBwQqDpfDARADBwQqDpfEASAD BwAqDrEHCfIDBwAqDrEHEWUDBwAqDrEHF4YDBwMqDrEHIcADBwQqDrEHIiADBwAq D+QEAQIDBwAqEC8AAY0DBwAqEC8AAY8DBwAqEC8AAZMDBwQqEMxAAlADBwQqEMxF ATAwDQYJKoZIhvcNAQELBQADggEBAG1/BxOhsy6yZGgeCXJWzJ+HTxEKMAkTZvnD 2DszeyWWRgxANRA5clNeUBm9twjXMeiagRg5JJMCSKhYVju18Q2V33V5s2WykpTw EUdmJbWOoJEArCr35rqNhYdQTSR+GBOM+lPjgpIL6jFzXwb1gLBq9Z7ZTAJ+psbg muHZbl+SvIFotoHeXhDZe+quEuq6zjf11GLoSLC2cw4zxEMtuRzrLYFdAcjRfrxv h/gBWN/TKEiD2+MTNUtnZDTmqH/NCF4T8NPXhy9ms31OFcVoo9LCpzSobTBb29uf PzLM/choj8LtcqEiq6pktYvrFFd1zaYXu1DDJPV0xhOCuUZ4Fcw= -----END CERTIFICATE-----Generated at Fri Dec 19 07:14:10 2025 by rpki-client