This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/0rmRaTIN4c1Sc2PvvZDU6a3FYAo.roa File: 0rmRaTIN4c1Sc2PvvZDU6a3FYAo.roa (raw, json) Hash identifier: HNBBQf0tRe4DO0PaAHC9SUtWINS2vI5+scXfl5zTeog= Subject key identifier: D2:B9:91:69:32:0D:E1:CD:52:73:63:EF:BD:90:D4:E9:AD:C5:60:0A Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0 Certificate serial: 019B2273C0A5E4D46432F5DF449EC6825084 Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/0rmRaTIN4c1Sc2PvvZDU6a3FYAo.roa Signing time: Mon 15 Dec 2025 14:39:29 +0000 ROA not before: Mon 15 Dec 2025 14:39:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207990 IP address blocks: 185.5.145.0/24 maxlen: 32 185.5.146.0/24 maxlen: 32 193.142.132.0/24 maxlen: 32 193.142.133.0/24 maxlen: 32 193.142.134.0/24 maxlen: 32 193.142.135.0/24 maxlen: 32 193.228.72.0/24 maxlen: 32 193.228.73.0/24 maxlen: 32 193.228.74.0/24 maxlen: 32 193.228.75.0/24 maxlen: 32 194.33.156.0/24 maxlen: 32 194.33.157.0/24 maxlen: 32 194.33.158.0/24 maxlen: 32 194.33.159.0/24 maxlen: 32 194.34.128.0/24 maxlen: 32 194.34.129.0/24 maxlen: 32 194.34.130.0/24 maxlen: 32 194.34.131.0/24 maxlen: 32 194.110.48.0/24 maxlen: 32 194.110.49.0/24 maxlen: 32 194.110.50.0/24 maxlen: 32 194.110.51.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:73:c0:a5:e4:d4:64:32:f5:df:44:9e:c6:82:50:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0 Validity Not Before: Dec 15 14:39:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d2b99169320de1cd527363efbd90d4e9adc5600a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b5:56:7e:0b:31:47:fa:77:d6:ac:82:71:d2: 82:4f:63:64:9c:41:a4:b4:70:5f:61:ae:ea:b1:ba: fa:45:71:bd:72:c7:ce:74:af:44:fa:09:dd:ce:fa: 3f:68:ec:6b:bc:f9:c5:58:be:bd:a8:0f:9f:1e:07: 1d:56:cd:cc:50:27:67:73:2b:12:28:dd:ef:e8:c0: fd:83:fd:4e:3b:44:0e:61:01:9b:e9:60:63:1e:c6: cd:83:ba:75:56:f7:b2:dd:1d:be:89:d6:1d:27:63: da:bb:3c:b2:dc:f8:40:01:e4:78:83:3a:7e:4b:0b: 3a:ac:f5:cc:fd:e5:12:90:80:76:f8:96:a9:b2:62: 45:50:55:e3:71:17:db:bf:a8:81:dc:fb:35:7d:c2: c6:12:24:5f:40:68:b5:14:da:0a:09:c8:e4:59:80: 81:88:57:b4:c1:36:48:c8:da:da:16:cb:78:a2:0d: a8:70:2f:6c:7b:e3:8c:fa:36:88:89:7c:e2:d1:59: b2:ce:7a:67:93:ee:9e:20:a0:d1:8a:fe:eb:31:76: e6:fe:39:28:8f:ff:c4:c4:a1:4e:00:6a:8b:c3:94: 32:4e:66:95:e1:14:f4:c5:22:03:f0:4e:d2:d2:62: 3c:dd:d3:59:63:44:a9:da:9f:88:67:1c:d2:3d:50: 17:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B9:91:69:32:0D:E1:CD:52:73:63:EF:BD:90:D4:E9:AD:C5:60:0A X509v3 Authority Key Identifier: keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/0rmRaTIN4c1Sc2PvvZDU6a3FYAo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.5.145.0-185.5.146.255 193.142.132.0/22 193.228.72.0/22 194.33.156.0/22 194.34.128.0/22 194.110.48.0/22 Signature Algorithm: sha256WithRSAEncryption 81:e5:19:fe:68:86:d7:06:b6:c4:a6:3a:a5:be:3a:d7:d8:b3: 7e:4e:4b:35:12:9f:52:ab:79:d3:50:26:07:bc:c9:0d:c5:9b: fd:3f:63:c1:d2:33:01:bd:69:e1:2d:c0:1b:ba:73:ba:58:93: 78:10:b7:5e:d3:7c:bb:97:e0:10:49:e5:89:8a:09:49:c4:ce: 52:a6:57:e5:e8:66:5e:fb:a9:a3:f2:1b:e4:f2:9a:0e:b5:69: 26:1a:3f:02:82:87:cf:7c:b7:d5:0e:12:0c:8c:8a:e8:6d:f0: 88:41:e1:05:43:0a:df:38:eb:db:32:4a:af:3b:3d:e3:80:84: 20:21:63:18:40:83:86:d3:c3:a3:16:0e:9b:ce:84:fa:03:52: 7d:dd:57:72:73:28:21:7d:a7:42:fb:b7:ef:2e:60:f9:94:ea: a4:94:fe:f6:4c:d2:e0:0d:ab:13:73:c1:ac:d3:e1:b9:1c:e2: 9a:42:39:8d:71:30:e2:05:9b:e1:44:21:32:53:b4:c5:ec:45: cd:a1:65:8c:31:25:20:97:47:d0:0c:74:08:ba:a3:9d:bf:09: 91:d9:97:ac:10:3c:f7:82:6a:3b:5e:78:cf:1c:73:9f:1e:2d: e3:56:a2:a0:2a:14:d2:95:5b:c9:cd:62:35:16:54:d3:d0:6b: 33:d2:89:9b -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZsic8Cl5NRkMvXfRJ7GglCEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZDQ0OTE5ZmRkMDhhZmI5YTRkMGE4Nzc4OTIzMDExMjUx ZGQ3ZjAwHhcNMjUxMjE1MTQzOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmI5OTE2OTMyMGRlMWNkNTI3MzYzZWZiZDkwZDRlOWFkYzU2MDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbVWfgsxR/p31qyCcdKCT2NknEGk tHBfYa7qsbr6RXG9csfOdK9E+gndzvo/aOxrvPnFWL69qA+fHgcdVs3MUCdncysS KN3v6MD9g/1OO0QOYQGb6WBjHsbNg7p1Vvey3R2+idYdJ2Pauzyy3PhAAeR4gzp+ Sws6rPXM/eUSkIB2+JapsmJFUFXjcRfbv6iB3Ps1fcLGEiRfQGi1FNoKCcjkWYCB iFe0wTZIyNraFst4og2ocC9se+OM+jaIiXzi0Vmyznpnk+6eIKDRiv7rMXbm/jko j//ExKFOAGqLw5QyTmaV4RT0xSID8E7S0mI83dNZY0Sp2p+IZxzSPVAXcQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFNK5kWkyDeHNUnNj772Q1OmtxWAKMB8GA1UdIwQY MBaAFDLUSRn90Ir7mk0Kh3iSMBElHdfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXRSSkdmM1FpdnVhVFFxSGVKSXdFU1VkMV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9mZDIyOTQtY2YzNy00ZmM5LTllZGQt YTRmN2IwODhiYzFhLzEvMHJtUmFUSU40YzFTYzJQdnZaRFU2YTNGWUFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9mZDIyOTQtY2YzNy00ZmM5LTllZGQtYTRmN2IwODhiYzFh LzEvTXRSSkdmM1FpdnVhVFFxSGVKSXdFU1VkMV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsMAwDBAC5BZED BAC5BZIDBALBjoQDBALB5EgDBALCIZwDBALCIoADBALCbjAwDQYJKoZIhvcNAQEL BQADggEBAIHlGf5ohtcGtsSmOqW+OtfYs35OSzUSn1KredNQJge8yQ3Fm/0/Y8HS MwG9aeEtwBu6c7pYk3gQt17TfLuX4BBJ5YmKCUnEzlKmV+XoZl77qaPyG+Tymg61 aSYaPwKCh898t9UOEgyMiuht8IhB4QVDCt8469sySq87PeOAhCAhYxhAg4bTw6MW DpvOhPoDUn3dV3JzKCF9p0L7t+8uYPmU6qSU/vZM0uANqxNzwazT4bkc4ppCOY1x MOIFm+FEITJTtMXsRc2hZYwxJSCXR9AMdAi6o52/CZHZl6wQPPeCajteeM8cc58e LeNWoqAqFNKVW8nNYjUWVNPQazPSiZs= -----END CERTIFICATE-----Generated at Tue Dec 16 11:32:45 2025 by rpki-client