This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/RhLNiL4GbR0DVBG_WTtWa7eVrFE.roa File: RhLNiL4GbR0DVBG_WTtWa7eVrFE.roa (raw, json) Hash identifier: Ke0GmKdB2bhnAotPPkMtIHWSSSoiX+g8gMOVBBR7b6k= Subject key identifier: 46:12:CD:88:BE:06:6D:1D:03:54:11:BF:59:3B:56:6B:B7:95:AC:51 Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019B07B65A84FBF2B1AD9BA33F876DF4697E Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/RhLNiL4GbR0DVBG_WTtWa7eVrFE.roa Signing time: Wed 10 Dec 2025 10:02:29 +0000 ROA not before: Wed 10 Dec 2025 10:02:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 3319 IP address blocks: 77.47.142.0/24 maxlen: 24 77.47.210.0/24 maxlen: 24 77.47.211.0/24 maxlen: 24 185.143.57.0/24 maxlen: 24 195.178.128.0/22 maxlen: 24 195.178.132.0/24 maxlen: 24 195.178.133.0/24 maxlen: 24 195.178.134.0/24 maxlen: 24 195.178.135.0/24 maxlen: 24 195.178.144.0/23 maxlen: 23 195.178.147.0/24 maxlen: 24 195.178.148.0/24 maxlen: 24 195.178.154.0/24 maxlen: 24 212.111.194.0/24 maxlen: 24 212.111.207.0/24 maxlen: 24 212.111.216.0/24 maxlen: 24 212.111.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 16:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b6:5a:84:fb:f2:b1:ad:9b:a3:3f:87:6d:f4:69:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Dec 10 10:02:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4612cd88be066d1d035411bf593b566bb795ac51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d5:60:c0:c3:82:d6:14:44:cc:86:1b:ce:78: d7:63:4d:07:fb:39:d5:69:cd:cd:e0:13:0a:76:f8: 33:35:17:c7:5d:a8:06:23:cc:2b:ee:b4:97:f6:6a: c4:fc:6d:b6:59:3b:05:74:b1:23:4c:39:35:5c:be: 5c:fb:b8:46:3c:d3:97:b2:2e:76:c0:a8:64:a8:70: a8:41:41:be:a8:60:62:64:97:74:92:33:c6:8b:58: 4a:b0:57:57:61:6c:ce:45:a1:44:79:ae:5b:a9:31: 6b:42:cc:f9:ac:c7:fa:df:02:c2:b7:e9:e1:7f:1c: 83:f5:98:48:d2:3f:6f:df:ce:af:eb:18:99:2a:15: d0:29:c4:bd:3e:1d:48:c3:3d:34:10:fd:93:04:7f: cb:3e:92:7a:15:64:81:dc:2f:0d:02:de:a0:b2:7a: 01:bb:b4:be:42:46:73:e9:df:32:ba:1d:2c:8c:15: ce:6d:6d:d4:dd:cb:77:30:a5:bd:d7:41:8f:93:04: cb:1a:11:27:2d:c7:b0:35:6c:7b:75:f9:f4:e9:2e: 11:53:58:79:aa:33:8b:7a:0e:66:5d:a1:4c:cb:41: 98:c7:52:81:23:08:f2:82:c7:8a:27:a3:a3:36:f2: eb:7d:52:99:5e:e6:e2:da:ef:c5:62:d7:d2:77:50: 97:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:12:CD:88:BE:06:6D:1D:03:54:11:BF:59:3B:56:6B:B7:95:AC:51 X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/RhLNiL4GbR0DVBG_WTtWa7eVrFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.47.142.0/24 77.47.210.0/23 185.143.57.0/24 195.178.128.0/21 195.178.144.0/23 195.178.147.0-195.178.148.255 195.178.154.0/24 212.111.194.0/24 212.111.207.0/24 212.111.216.0/23 Signature Algorithm: sha256WithRSAEncryption ad:58:9a:ed:51:74:cc:5d:7f:6e:4a:c1:42:ca:cf:44:f4:6e: 35:b2:7f:8c:52:b6:b1:d3:fa:1f:72:8b:d0:55:8f:3b:3e:2f: 4b:4b:d3:ca:35:bc:55:14:50:b0:de:14:65:b1:34:a4:48:77: 78:0e:eb:16:eb:10:7e:64:3d:c0:70:00:05:4c:28:62:eb:b7: 21:41:da:c8:3f:da:75:a8:89:bd:49:65:ea:26:57:2e:4d:4b: c3:d5:80:5e:cc:f9:5a:f2:74:e2:9a:48:ee:6c:80:8e:9f:ba: 6e:a8:61:9e:d8:a8:52:fc:e0:3c:f6:89:7d:cb:07:46:9b:7a: be:1d:39:11:dc:30:b4:b2:4d:ee:85:da:cf:28:09:9b:bc:8e: 2b:39:30:bc:b3:54:ed:3f:63:db:c7:0d:c0:b1:cf:7a:3c:e5: 59:9c:38:f1:68:2a:7d:4e:94:04:94:0f:76:3e:0c:ae:5c:28: ee:7f:15:09:c1:44:44:fc:1b:a5:58:13:3a:26:60:5a:76:99: 78:5b:e8:88:98:c1:e2:26:56:b6:53:3e:c0:68:81:4b:45:c3: 35:1c:dd:f6:3e:3e:c6:e6:82:b3:c5:71:df:cc:4b:21:ac:cf: e7:8d:49:a8:36:69:a3:6f:af:09:37:e2:94:4a:4d:40:d5:9b: b9:ac:24:64 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgISAZsHtlqE+/KxrZujP4dt9Gl+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjUxMjEwMTAwMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjEyY2Q4OGJlMDY2ZDFkMDM1NDExYmY1OTNiNTY2YmI3OTVhYzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutVgwMOC1hREzIYbznjXY00H+znV ac3N4BMKdvgzNRfHXagGI8wr7rSX9mrE/G22WTsFdLEjTDk1XL5c+7hGPNOXsi52 wKhkqHCoQUG+qGBiZJd0kjPGi1hKsFdXYWzORaFEea5bqTFrQsz5rMf63wLCt+nh fxyD9ZhI0j9v386v6xiZKhXQKcS9Ph1Iwz00EP2TBH/LPpJ6FWSB3C8NAt6gsnoB u7S+QkZz6d8yuh0sjBXObW3U3ct3MKW910GPkwTLGhEnLcewNWx7dfn06S4RU1h5 qjOLeg5mXaFMy0GYx1KBIwjygseKJ6OjNvLrfVKZXubi2u/FYtfSd1CXcQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFEYSzYi+Bm0dA1QRv1k7Vmu3laxRMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvUmhMTmlMNEdiUjBEVkJHX1dUdFdhN2VWckZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQATS+OAwQB TS/SAwQAuY85AwQDw7KAAwQBw7KQMAwDBADDspMDBADDspQDBADDspoDBADUb8ID BADUb88DBAHUb9gwDQYJKoZIhvcNAQELBQADggEBAK1Ymu1RdMxdf25KwULKz0T0 bjWyf4xStrHT+h9yi9BVjzs+L0tL08o1vFUUULDeFGWxNKRId3gO6xbrEH5kPcBw AAVMKGLrtyFB2sg/2nWoib1JZeomVy5NS8PVgF7M+VrydOKaSO5sgI6fum6oYZ7Y qFL84Dz2iX3LB0aber4dORHcMLSyTe6F2s8oCZu8jis5MLyzVO0/Y9vHDcCxz3o8 5VmcOPFoKn1OlASUD3Y+DK5cKO5/FQnBRET8G6VYEzomYFp2mXhb6IiYweImVrZT PsBogUtFwzUc3fY+PsbmgrPFcd/MSyGsz+eNSag2aaNvrwk34pRKTUDVm7msJGQ= -----END CERTIFICATE-----Generated at Fri Dec 12 23:23:11 2025 by rpki-client