This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4Q6VKxDaoy-DIZm7kWIZx6-UerQ.roa File: 4Q6VKxDaoy-DIZm7kWIZx6-UerQ.roa (raw, json) Hash identifier: oOBInw3AGceS3Lsv3eXB8ahGI+/ckQG76NY+h9n5iEg= Subject key identifier: E1:0E:95:2B:10:DA:A3:2F:83:21:99:BB:91:62:19:C7:AF:94:7A:B4 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B6E2FE17D691020B20AA611EF40B781F3 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4Q6VKxDaoy-DIZm7kWIZx6-UerQ.roa Signing time: Tue 30 Dec 2025 07:36:30 +0000 ROA not before: Tue 30 Dec 2025 07:36:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57043 IP address blocks: 2.57.242.0/24 maxlen: 24 45.88.15.0/24 maxlen: 24 45.135.182.0/24 maxlen: 24 77.81.101.0/24 maxlen: 24 79.110.227.0/24 maxlen: 24 85.204.18.0/24 maxlen: 24 89.35.119.0/24 maxlen: 24 89.35.129.0/24 maxlen: 24 89.37.185.0/24 maxlen: 24 89.39.120.0/24 maxlen: 24 89.40.70.0/24 maxlen: 24 89.125.0.0/24 maxlen: 24 89.125.1.0/24 maxlen: 24 89.125.2.0/24 maxlen: 24 89.125.3.0/24 maxlen: 24 89.125.60.0/24 maxlen: 24 89.125.92.0/24 maxlen: 24 89.125.122.0/24 maxlen: 24 89.125.123.0/24 maxlen: 24 89.125.131.0/24 maxlen: 24 89.125.159.0/24 maxlen: 24 89.125.181.0/24 maxlen: 24 89.125.210.0/24 maxlen: 24 94.177.13.0/24 maxlen: 24 94.177.106.0/24 maxlen: 24 94.177.145.0/24 maxlen: 24 103.56.84.0/24 maxlen: 24 103.73.35.0/24 maxlen: 24 167.17.40.0/24 maxlen: 24 167.17.176.0/24 maxlen: 24 167.17.177.0/24 maxlen: 24 167.17.178.0/24 maxlen: 24 167.17.180.0/24 maxlen: 24 167.17.182.0/24 maxlen: 24 167.17.191.0/24 maxlen: 24 185.212.119.0/24 maxlen: 24 188.208.103.0/24 maxlen: 24 188.213.0.0/24 maxlen: 24 188.214.107.0/24 maxlen: 24 193.124.36.0/24 maxlen: 24 193.124.225.0/24 maxlen: 24 194.85.249.0/24 maxlen: 24 194.85.251.0/24 maxlen: 24 202.71.12.0/24 maxlen: 24 202.71.13.0/24 maxlen: 24 202.71.15.0/24 maxlen: 24 204.77.1.0/24 maxlen: 24 206.245.129.0/24 maxlen: 24 206.245.131.0/24 maxlen: 24 206.245.133.0/24 maxlen: 24 206.245.134.0/24 maxlen: 24 206.245.135.0/24 maxlen: 24 206.245.157.0/24 maxlen: 24 206.245.159.0/24 maxlen: 24 208.123.185.0/24 maxlen: 24 208.123.190.0/24 maxlen: 24 208.123.191.0/24 maxlen: 24 212.192.8.0/24 maxlen: 24 212.192.11.0/24 maxlen: 24 212.192.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:2f:e1:7d:69:10:20:b2:0a:a6:11:ef:40:b7:81:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Dec 30 07:36:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e10e952b10daa32f832199bb916219c7af947ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:98:ab:89:2b:29:dc:22:bc:ee:3e:6f:f3:f7: 56:34:41:5e:91:9c:04:ee:15:f7:63:42:44:d9:a3: bc:3b:71:81:40:10:85:60:e9:fb:aa:b4:5f:69:8a: 40:dc:d3:77:7c:fc:5b:f3:a7:8e:c6:f0:83:19:2b: 2c:10:5b:83:6c:30:5a:5e:5b:ea:e3:83:30:21:35: 55:c5:9b:1a:a9:4e:55:90:87:f5:a8:07:b7:75:98: 35:ad:72:02:ed:8c:35:35:87:c9:f7:a2:95:0e:45: 43:0f:68:07:1b:a3:ab:88:ad:bd:d0:36:01:c4:cc: e6:bc:e8:cd:7f:60:70:fc:57:24:78:1f:2e:ba:98: 06:b7:62:7a:01:f3:d8:66:a2:b2:60:c2:f6:15:1e: a7:4f:3f:92:1f:15:2d:58:72:24:a9:e3:14:a6:06: 98:cf:37:37:69:2c:9a:34:cc:4c:6b:76:ea:f1:fc: 05:66:f0:90:92:f3:9b:31:a0:40:29:e7:85:85:b1: b1:fe:5b:f4:78:f3:6d:ef:99:bc:34:01:73:82:d5: bd:bd:ef:f2:14:b8:fb:81:e2:49:a5:3d:1d:7a:ea: 25:4e:97:3a:03:af:06:f9:18:c1:40:31:66:54:5e: 48:12:7d:90:03:24:5d:c5:c3:06:26:5c:f4:cd:27: 9f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0E:95:2B:10:DA:A3:2F:83:21:99:BB:91:62:19:C7:AF:94:7A:B4 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4Q6VKxDaoy-DIZm7kWIZx6-UerQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.242.0/24 45.88.15.0/24 45.135.182.0/24 77.81.101.0/24 79.110.227.0/24 85.204.18.0/24 89.35.119.0/24 89.35.129.0/24 89.37.185.0/24 89.39.120.0/24 89.40.70.0/24 89.125.0.0/22 89.125.60.0/24 89.125.92.0/24 89.125.122.0/23 89.125.131.0/24 89.125.159.0/24 89.125.181.0/24 89.125.210.0/24 94.177.13.0/24 94.177.106.0/24 94.177.145.0/24 103.56.84.0/24 103.73.35.0/24 167.17.40.0/24 167.17.176.0-167.17.178.255 167.17.180.0/24 167.17.182.0/24 167.17.191.0/24 185.212.119.0/24 188.208.103.0/24 188.213.0.0/24 188.214.107.0/24 193.124.36.0/24 193.124.225.0/24 194.85.249.0/24 194.85.251.0/24 202.71.12.0/23 202.71.15.0/24 204.77.1.0/24 206.245.129.0/24 206.245.131.0/24 206.245.133.0-206.245.135.255 206.245.157.0/24 206.245.159.0/24 208.123.185.0/24 208.123.190.0/23 212.192.8.0/24 212.192.11.0/24 212.192.212.0/24 Signature Algorithm: sha256WithRSAEncryption 19:57:9d:e9:66:4a:6b:6b:47:13:19:c9:3d:c9:56:fd:bb:4e: 66:c6:75:19:5e:81:81:36:4d:80:3b:e2:a5:37:f8:f8:f0:73: c9:f3:61:f0:16:52:15:92:c4:24:b4:ec:0e:96:1b:75:e4:fc: 43:60:66:68:22:08:9f:6f:85:4a:c3:c2:90:d3:53:c9:3b:2b: 42:9e:1c:6b:fd:62:0a:61:cd:36:a1:7c:f4:29:16:af:d9:f2: 45:50:67:2d:df:c1:c6:88:3a:23:aa:62:cc:78:c6:96:2c:07: 58:a1:3d:f9:76:cf:57:a0:64:59:69:ea:78:53:de:8b:e6:a9: be:28:bb:1e:67:c8:95:4b:f3:d9:ba:95:3c:96:00:af:b2:e7: f1:89:6b:64:04:4c:e9:5c:ff:53:bc:88:69:db:a0:01:94:1d: e2:7d:be:41:e2:2f:95:4d:73:98:3e:2c:97:31:3e:c9:5a:bc: e9:f4:7e:98:73:1a:ab:d1:5f:a4:46:88:36:2e:a9:d1:72:f2: bf:35:14:86:29:7e:bc:7f:d2:4d:fc:92:33:5e:d1:3a:46:cf: 93:10:d1:8e:f4:89:d6:fa:2d:44:23:56:d4:40:ca:05:50:76: 6e:44:d1:7e:41:2a:d9:78:79:8b:29:16:94:c6:78:40:ce:8e: 2a:a2:46:da -----BEGIN CERTIFICATE----- MIIGPTCCBSWgAwIBAgISAZtuL+F9aRAgsgqmEe9At4HzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjUxMjMwMDczNjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTBlOTUyYjEwZGFhMzJmODMyMTk5YmI5MTYyMTljN2FmOTQ3YWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3piriSsp3CK87j5v8/dWNEFekZwE 7hX3Y0JE2aO8O3GBQBCFYOn7qrRfaYpA3NN3fPxb86eOxvCDGSssEFuDbDBaXlvq 44MwITVVxZsaqU5VkIf1qAe3dZg1rXIC7Yw1NYfJ96KVDkVDD2gHG6OriK290DYB xMzmvOjNf2Bw/FckeB8uupgGt2J6AfPYZqKyYML2FR6nTz+SHxUtWHIkqeMUpgaY zzc3aSyaNMxMa3bq8fwFZvCQkvObMaBAKeeFhbGx/lv0ePNt75m8NAFzgtW9ve/y FLj7geJJpT0deuolTpc6A68G+RjBQDFmVF5IEn2QAyRdxcMGJlz0zSefCwIDAQAB o4IDSTCCA0UwHQYDVR0OBBYEFOEOlSsQ2qMvgyGZu5FiGcevlHq0MB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvNFE2Vkt4RGFveS1ESVptN2tXSVp4Ni1VZXJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBXQYIKwYBBQUHAQcBAf8EggFMMIIBSDCCAUQEAgABMIIB PAMEAAI58gMEAC1YDwMEAC2HtgMEAE1RZQMEAE9u4wMEAFXMEgMEAFkjdwMEAFkj gQMEAFkluQMEAFkneAMEAFkoRgMEAll9AAMEAFl9PAMEAFl9XAMEAVl9egMEAFl9 gwMEAFl9nwMEAFl9tQMEAFl90gMEAF6xDQMEAF6xagMEAF6xkQMEAGc4VAMEAGdJ IwMEAKcRKDAMAwQEpxGwAwQApxGyAwQApxG0AwQApxG2AwQApxG/AwQAudR3AwQA vNBnAwQAvNUAAwQAvNZrAwQAwXwkAwQAwXzhAwQAwlX5AwQAwlX7AwQBykcMAwQA ykcPAwQAzE0BAwQAzvWBAwQAzvWDMAwDBADO9YUDBAPO9YADBADO9Z0DBADO9Z8D BADQe7kDBAHQe74DBADUwAgDBADUwAsDBADUwNQwDQYJKoZIhvcNAQELBQADggEB ABlXnelmSmtrRxMZyT3JVv27TmbGdRlegYE2TYA74qU3+Pjwc8nzYfAWUhWSxCS0 7A6WG3Xk/ENgZmgiCJ9vhUrDwpDTU8k7K0KeHGv9YgphzTahfPQpFq/Z8kVQZy3f wcaIOiOqYsx4xpYsB1ihPfl2z1egZFlp6nhT3ovmqb4oux5nyJVL89m6lTyWAK+y 5/GJa2QETOlc/1O8iGnboAGUHeJ9vkHiL5VNc5g+LJcxPslavOn0fphzGqvRX6RG iDYuqdFy8r81FIYpfrx/0k38kjNe0TpGz5MQ0Y70idb6LUQjVtRAygVQdm5E0X5B Ktl4eYspFpTGeEDOjiqiRto= -----END CERTIFICATE-----Generated at Wed Dec 31 08:28:51 2025 by rpki-client