This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/4FJzd_Wfr7xcsj_U76Sq9g_Qctk.roa File: 4FJzd_Wfr7xcsj_U76Sq9g_Qctk.roa (raw, json) Hash identifier: plueYcsSwAm/2lTu9lvJeTlCkxmMfqNyVXx7DhNEahY= Subject key identifier: E0:52:73:77:F5:9F:AF:BC:5C:B2:3F:D4:EF:A4:AA:F6:0F:D0:72:D9 Certificate issuer: /CN=0ae4bc9401d9f87772c8c9c69834077512f42611 Certificate serial: 019AFE3D1E7A16010ACDB1D619936F9D1D8E Authority key identifier: 0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/4FJzd_Wfr7xcsj_U76Sq9g_Qctk.roa Signing time: Mon 08 Dec 2025 13:53:29 +0000 ROA not before: Mon 08 Dec 2025 13:53:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50053 IP address blocks: 81.85.72.0/24 maxlen: 24 81.85.74.0/24 maxlen: 24 81.85.75.0/24 maxlen: 24 185.9.24.0/24 maxlen: 24 213.155.28.0/24 maxlen: 24 2a11:2cc0:2::/47 maxlen: 47 2a11:2cc0:4::/47 maxlen: 47 2a11:2cc0:6::/47 maxlen: 47 2a11:2cc0:8::/47 maxlen: 47 2a11:2cc0:10::/47 maxlen: 47 2a11:2cc0:20::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:3d:1e:7a:16:01:0a:cd:b1:d6:19:93:6f:9d:1d:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ae4bc9401d9f87772c8c9c69834077512f42611 Validity Not Before: Dec 8 13:53:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e0527377f59fafbc5cb23fd4efa4aaf60fd072d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:99:f6:d4:52:23:ef:40:9c:19:58:13:2e:81: 91:ab:58:89:da:9c:e4:60:7c:14:02:b0:02:ee:db: 7c:93:d5:f5:41:2f:6c:ef:7a:ef:54:16:cd:60:67: 6d:d7:9a:ca:4c:16:aa:58:05:2b:99:3a:aa:77:23: 93:2f:e2:33:80:3e:39:1c:a9:a6:34:ae:70:05:ef: eb:fc:8d:23:d4:4f:49:2f:46:98:fd:85:20:e4:b9: 83:b0:6c:a0:b2:fb:ad:7a:1b:7f:4a:02:74:de:cd: a5:39:44:99:0a:7d:09:5d:e3:86:f5:a9:97:fd:9d: 5a:67:fe:d1:1d:8d:89:28:25:ff:77:0f:4d:65:91: 22:25:7b:9e:c2:d0:f3:59:91:ef:98:4d:ad:07:f6: 3b:2c:f2:ed:6d:8f:99:71:b9:e1:c9:37:90:67:7f: b4:ba:5c:ce:68:92:a0:80:1f:43:7d:ed:44:b3:5f: ca:71:d2:49:5f:0a:77:af:52:d7:dc:25:a1:98:fe: 7c:98:a5:e8:f1:d6:29:91:e1:14:47:ef:7b:0d:26: d0:83:06:6b:57:2a:c2:e5:f9:6b:c1:93:7f:22:65: 63:12:b1:09:1e:d5:e5:1a:02:ef:24:6a:c6:69:c0: 8c:d5:c2:ad:aa:ee:2d:f9:30:d3:68:88:36:d7:40: 29:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:52:73:77:F5:9F:AF:BC:5C:B2:3F:D4:EF:A4:AA:F6:0F:D0:72:D9 X509v3 Authority Key Identifier: keyid:0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/4FJzd_Wfr7xcsj_U76Sq9g_Qctk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.85.72.0/24 81.85.74.0/23 185.9.24.0/24 213.155.28.0/24 IPv6: 2a11:2cc0:2::-2a11:2cc0:9:ffff:ffff:ffff:ffff:ffff 2a11:2cc0:10::/47 2a11:2cc0:20::/47 Signature Algorithm: sha256WithRSAEncryption 7d:fc:df:fc:96:57:04:43:cf:db:14:22:b2:73:1f:12:ca:54: f1:fc:b5:87:5a:2b:38:0c:b9:1c:e2:65:e4:d1:6e:91:57:d6: 4d:f9:ce:44:66:fc:6e:06:eb:1e:84:97:05:b1:46:4b:e2:bb: c7:8d:f4:e3:0c:bb:bb:55:04:26:a1:b6:5c:75:41:20:55:ef: 53:93:ce:32:02:45:83:c5:fc:87:ff:b2:cf:48:40:d3:e9:c7: 99:82:82:d7:33:23:dc:8c:14:88:e8:a1:cb:4c:d5:bf:b5:e5: d6:c8:b4:77:64:9b:e5:17:7a:9e:3c:6f:0e:a3:a6:40:43:e0: 6f:ec:10:aa:8d:45:32:3e:25:90:2e:2a:08:fa:f9:52:9d:68: bb:1f:6a:bc:a6:4d:db:15:fb:fc:ca:80:6c:3f:66:3f:66:dc: cb:23:9b:7d:10:38:24:22:d6:28:23:68:43:14:c9:5a:9b:4b: 95:d3:e2:93:f6:dd:d1:a3:0e:e5:26:26:7b:81:82:33:26:5e: a1:9c:69:19:91:f0:8c:55:00:c1:6c:26:7f:8e:55:b2:18:f4: 6e:58:c3:97:15:9a:0a:cf:62:de:b2:7a:e2:08:39:cc:3a:a7: e4:e7:7a:33:40:c9:89:6d:4e:08:15:ed:95:53:2d:e3:6e:1e: 83:ed:e4:17 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZr+PR56FgEKzbHWGZNvnR2OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZTRiYzk0MDFkOWY4Nzc3MmM4YzljNjk4MzQwNzc1MTJm NDI2MTEwHhcNMjUxMjA4MTM1MzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDUyNzM3N2Y1OWZhZmJjNWNiMjNmZDRlZmE0YWFmNjBmZDA3MmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJn21FIj70CcGVgTLoGRq1iJ2pzk YHwUArAC7tt8k9X1QS9s73rvVBbNYGdt15rKTBaqWAUrmTqqdyOTL+IzgD45HKmm NK5wBe/r/I0j1E9JL0aY/YUg5LmDsGygsvuteht/SgJ03s2lOUSZCn0JXeOG9amX /Z1aZ/7RHY2JKCX/dw9NZZEiJXuewtDzWZHvmE2tB/Y7LPLtbY+ZcbnhyTeQZ3+0 ulzOaJKggB9Dfe1Es1/KcdJJXwp3r1LX3CWhmP58mKXo8dYpkeEUR+97DSbQgwZr VyrC5flrwZN/ImVjErEJHtXlGgLvJGrGacCM1cKtqu4t+TDTaIg210ApswIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFOBSc3f1n6+8XLI/1O+kqvYP0HLZMB8GA1UdIwQY MBaAFArkvJQB2fh3csjJxpg0B3US9CYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0Mzct MjQyNDY2ODJiZjAwLzEvNEZKemRfV2ZyN3hjc2pfVTc2U3E5Z19RY3RrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0MzctMjQyNDY2ODJiZjAw LzEvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjAeBAIAATAYAwQAUVVIAwQB UVVKAwQAuQkYAwQA1ZscMCwEAgACMCYwEgMHASoRLMAAAgMHASoRLMAACAMHASoR LMAAEAMHASoRLMAAIDANBgkqhkiG9w0BAQsFAAOCAQEAffzf/JZXBEPP2xQisnMf EspU8fy1h1orOAy5HOJl5NFukVfWTfnORGb8bgbrHoSXBbFGS+K7x4304wy7u1UE JqG2XHVBIFXvU5POMgJFg8X8h/+yz0hA0+nHmYKC1zMj3IwUiOihy0zVv7Xl1si0 d2Sb5Rd6njxvDqOmQEPgb+wQqo1FMj4lkC4qCPr5Up1oux9qvKZN2xX7/MqAbD9m P2bcyyObfRA4JCLWKCNoQxTJWptLldPik/bd0aMO5SYme4GCMyZeoZxpGZHwjFUA wWwmf45Vshj0bljDlxWaCs9i3rJ64gg5zDqn5Od6M0DJiW1OCBXtlVMt424eg+3k Fw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:23:47 2025 by rpki-client