This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/kGUp47WG5G_Wel7cs85ecDXJxm4.roa File: kGUp47WG5G_Wel7cs85ecDXJxm4.roa (raw, json) Hash identifier: FarWEvOJ/JgOa5f9B3LnYP5C2r/V9zA4q1xgJVraMqE= Subject key identifier: 90:65:29:E3:B5:86:E4:6F:D6:7A:5E:DC:B3:CE:5E:70:35:C9:C6:6E Certificate issuer: /CN=4987941e74c1c03e7aba3b878530095eb6fa874e Certificate serial: 019B2784502E8BA97704FE47AB916454E767 Authority key identifier: 49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/kGUp47WG5G_Wel7cs85ecDXJxm4.roa Signing time: Tue 16 Dec 2025 14:15:41 +0000 ROA not before: Tue 16 Dec 2025 14:15:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200736 IP address blocks: 45.66.40.0/22 maxlen: 24 45.66.40.0/24 maxlen: 24 45.66.41.0/24 maxlen: 24 45.66.42.0/24 maxlen: 24 45.66.43.0/24 maxlen: 24 78.109.28.0/22 maxlen: 24 195.20.114.0/24 maxlen: 24 195.214.208.0/22 maxlen: 24 195.214.208.0/24 maxlen: 24 195.214.211.0/24 maxlen: 24 2a10:9300::/29 maxlen: 42 2a10:9300::/36 maxlen: 42 2a10:9300:100::/42 maxlen: 42 2a10:9300:400::/42 maxlen: 42 2a10:9300:500::/42 maxlen: 42 2a10:9300:600::/42 maxlen: 42 2a10:9300:700::/42 maxlen: 42 2a10:9300:900::/42 maxlen: 42 2a10:9300:b00::/42 maxlen: 42 2a10:9300:c00::/42 maxlen: 42 2a10:9301::/36 maxlen: 42 2a10:9301:100::/42 maxlen: 42 2a10:9301:140::/42 maxlen: 42 2a10:9301:180::/42 maxlen: 42 2a10:9301:300::/42 maxlen: 42 2a10:9301:340::/42 maxlen: 42 2a10:9301:700::/42 maxlen: 42 2a10:9301:740::/42 maxlen: 42 2a10:9301:980::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:84:50:2e:8b:a9:77:04:fe:47:ab:91:64:54:e7:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4987941e74c1c03e7aba3b878530095eb6fa874e Validity Not Before: Dec 16 14:15:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=906529e3b586e46fd67a5edcb3ce5e7035c9c66e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:03:bb:b0:38:ca:b8:bd:63:f8:e1:4e:6e:c1: 21:db:2f:3e:2c:81:cf:da:9b:48:43:08:f7:f9:e4: 60:1f:1d:85:20:2b:61:a7:d8:e5:01:e4:a3:50:2a: 89:3d:03:93:f8:1d:9e:ce:e1:53:2f:cc:b2:4c:b0: 54:5c:84:4e:8b:14:74:f7:52:6f:94:c8:71:b1:0e: b5:8a:70:29:90:dd:da:f2:ab:0e:6a:18:76:bf:7c: 7b:3c:1b:e5:2a:a8:d8:0f:f5:51:17:06:c8:17:d3: a1:62:5f:ef:30:ee:8a:23:35:5f:d2:dd:6f:9b:f5: 66:ee:6b:81:46:3f:0a:4f:65:15:85:98:77:60:ef: 2a:2c:c8:43:5b:40:eb:11:16:d0:d8:91:92:9d:dc: b5:7a:d0:06:a2:7f:f3:43:8e:f4:63:9b:6a:6f:26: a8:9e:cf:73:5a:53:a0:f2:48:2f:09:f8:e8:69:bf: 59:80:02:25:a3:3e:71:6d:77:51:2a:b5:cc:d6:7a: d5:fd:53:53:b4:5e:e6:86:51:f0:02:45:f4:cf:ff: 23:34:9d:76:2c:89:b9:96:ee:02:1b:ce:81:4a:b3: 65:76:2c:1f:34:7d:00:13:ed:29:a7:b3:3c:fc:7a: 9a:8f:8f:35:6a:da:d7:2c:ef:58:8a:29:1a:36:98: 31:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:65:29:E3:B5:86:E4:6F:D6:7A:5E:DC:B3:CE:5E:70:35:C9:C6:6E X509v3 Authority Key Identifier: keyid:49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/kGUp47WG5G_Wel7cs85ecDXJxm4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.40.0/22 78.109.28.0/22 195.20.114.0/24 195.214.208.0/22 IPv6: 2a10:9300::/29 Signature Algorithm: sha256WithRSAEncryption 2e:71:0d:81:5b:c0:d1:d4:a7:f0:e2:fb:15:f4:b6:9b:32:f8: b8:13:21:c0:36:ee:dd:34:d5:b8:d5:d1:0d:29:6d:d0:9a:b2: 10:11:ca:8b:42:3a:3c:8e:14:a3:33:8d:6a:f9:4f:32:4c:d2: ca:cc:3c:52:63:8f:d1:5d:49:b3:58:65:c6:b7:ae:c4:b6:dd: 4a:3d:bf:bb:87:d7:65:2e:9e:49:a2:b4:fd:30:66:bf:5c:98: e5:9f:dd:f4:72:cc:cc:75:66:7e:7e:0c:08:0b:6f:8d:f9:fa: b6:a2:5d:e4:48:65:85:8e:a2:ee:87:b1:d9:41:94:df:b1:9b: 26:cc:a2:87:d3:c9:9c:a4:72:8c:74:3e:53:42:1b:29:75:a7: ec:1a:eb:69:c2:f5:1c:a4:25:2a:ef:06:c0:0e:0a:e1:af:f3: 55:df:88:fa:e1:85:1b:58:c5:fa:14:a6:5f:e7:04:e6:42:27: 4a:df:cb:bd:14:71:bb:dc:7c:ff:3c:8f:4a:df:fe:40:2d:f0: d5:21:25:80:c2:e6:ed:a6:a3:c9:57:1b:27:07:c7:0f:94:1f: d7:7a:75:44:ab:91:8b:11:aa:a9:46:6f:1c:db:a2:0d:0a:c3: 88:4a:80:dc:0e:86:eb:ba:b5:80:b9:24:ca:30:8a:32:9b:d9: 41:13:e9:78 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZsnhFAui6l3BP5Hq5FkVOdnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODc5NDFlNzRjMWMwM2U3YWJhM2I4Nzg1MzAwOTVlYjZm YTg3NGUwHhcNMjUxMjE2MTQxNTQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDY1MjllM2I1ODZlNDZmZDY3YTVlZGNiM2NlNWU3MDM1YzljNjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wO7sDjKuL1j+OFObsEh2y8+LIHP 2ptIQwj3+eRgHx2FICthp9jlAeSjUCqJPQOT+B2ezuFTL8yyTLBUXIROixR091Jv lMhxsQ61inApkN3a8qsOahh2v3x7PBvlKqjYD/VRFwbIF9OhYl/vMO6KIzVf0t1v m/Vm7muBRj8KT2UVhZh3YO8qLMhDW0DrERbQ2JGSndy1etAGon/zQ470Y5tqbyao ns9zWlOg8kgvCfjoab9ZgAIloz5xbXdRKrXM1nrV/VNTtF7mhlHwAkX0z/8jNJ12 LIm5lu4CG86BSrNldiwfNH0AE+0pp7M8/Hqaj481atrXLO9YiikaNpgx7QIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFJBlKeO1huRv1npe3LPOXnA1ycZuMB8GA1UdIwQY MBaAFEmHlB50wcA+ero7h4UwCV62+odOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83MDc3N2ItNjhiMC00MmE4LTllOWQt ZThhZGE1MWVlOGZmLzEva0dVcDQ3V0c1R19XZWw3Y3M4NWVjRFhKeG00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83MDc3N2ItNjhiMC00MmE4LTllOWQtZThhZGE1MWVlOGZm LzEvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCLUIoAwQC Tm0cAwQAwxRyAwQCw9bQMA0EAgACMAcDBQMqEJMAMA0GCSqGSIb3DQEBCwUAA4IB AQAucQ2BW8DR1Kfw4vsV9LabMvi4EyHANu7dNNW41dENKW3QmrIQEcqLQjo8jhSj M41q+U8yTNLKzDxSY4/RXUmzWGXGt67Ett1KPb+7h9dlLp5JorT9MGa/XJjln930 cszMdWZ+fgwIC2+N+fq2ol3kSGWFjqLuh7HZQZTfsZsmzKKH08mcpHKMdD5TQhsp dafsGutpwvUcpCUq7wbADgrhr/NV34j64YUbWMX6FKZf5wTmQidK38u9FHG73Hz/ PI9K3/5ALfDVISWAwubtpqPJVxsnB8cPlB/XenVEq5GLEaqpRm8c26INCsOISoDc DobrurWAuSTKMIoym9lBE+l4 -----END CERTIFICATE-----Generated at Sat Dec 20 16:14:08 2025 by rpki-client