This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/tF7ZN6QgVmqwoKFLIkCFvh6kWy4.roa File: tF7ZN6QgVmqwoKFLIkCFvh6kWy4.roa (raw, json) Hash identifier: wauF3WXkMhqIriQmJOKj3FIQZ6HtVxblJGI9UQrNei0= Subject key identifier: B4:5E:D9:37:A4:20:56:6A:B0:A0:A1:4B:22:40:85:BE:1E:A4:5B:2E Certificate issuer: /CN=0ae4bc9401d9f87772c8c9c69834077512f42611 Certificate serial: 019B144D01809362E7BD2DDC470A6DB60CB0 Authority key identifier: 0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/tF7ZN6QgVmqwoKFLIkCFvh6kWy4.roa Signing time: Fri 12 Dec 2025 20:42:29 +0000 ROA not before: Fri 12 Dec 2025 20:42:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50053 IP address blocks: 81.85.72.0/24 maxlen: 24 81.85.74.0/24 maxlen: 24 81.85.75.0/24 maxlen: 24 185.9.24.0/24 maxlen: 24 185.9.25.0/24 maxlen: 24 213.155.28.0/24 maxlen: 24 2a11:2cc0:2::/47 maxlen: 47 2a11:2cc0:4::/47 maxlen: 47 2a11:2cc0:6::/47 maxlen: 47 2a11:2cc0:8::/47 maxlen: 47 2a11:2cc0:10::/47 maxlen: 47 2a11:2cc0:20::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:14:4d:01:80:93:62:e7:bd:2d:dc:47:0a:6d:b6:0c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ae4bc9401d9f87772c8c9c69834077512f42611 Validity Not Before: Dec 12 20:42:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b45ed937a420566ab0a0a14b224085be1ea45b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f9:d3:d7:02:35:9e:0c:57:be:59:20:af:e1: c2:59:63:f3:26:e1:66:f2:5c:80:6a:1c:5a:23:a8: ea:4a:f1:8c:79:ee:ea:c5:11:d6:b6:cc:95:8e:20: 2c:8f:78:7b:3d:a1:ba:b7:b8:d3:3a:47:6b:79:ea: 78:25:ff:89:98:57:b8:1d:bc:44:c1:6a:d5:27:e3: 2a:70:4b:d5:61:a7:ba:71:b5:0b:fc:f3:dc:63:94: f2:37:ad:e6:76:bd:1e:67:89:3e:4a:4a:e8:73:b2: d0:a8:37:08:50:b0:b3:eb:b9:c3:cb:b8:e1:06:ef: d6:3a:44:f3:39:61:98:1a:dd:58:7c:27:0b:69:e4: fe:03:a1:8c:84:87:aa:2b:ce:52:db:f5:f8:3b:e6: 08:c6:11:f4:5c:42:84:b6:67:ab:bd:95:17:7e:cb: 3b:9a:d7:c6:0a:57:99:21:6a:55:9d:80:43:2e:89: b4:8f:13:33:d0:3d:c7:8e:61:7f:c3:b3:90:c1:b4: af:00:91:ff:b2:c9:34:05:8b:e0:af:b5:6e:ac:3a: 72:42:62:e9:37:f0:28:13:61:d9:eb:4d:39:6f:6a: e1:92:ab:6f:7a:49:10:3d:89:62:53:a9:4e:1b:63: 14:bd:87:26:b1:82:01:33:fe:f8:a7:7e:77:a4:84: e5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:5E:D9:37:A4:20:56:6A:B0:A0:A1:4B:22:40:85:BE:1E:A4:5B:2E X509v3 Authority Key Identifier: keyid:0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/tF7ZN6QgVmqwoKFLIkCFvh6kWy4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.85.72.0/24 81.85.74.0/23 185.9.24.0/23 213.155.28.0/24 IPv6: 2a11:2cc0:2::-2a11:2cc0:9:ffff:ffff:ffff:ffff:ffff 2a11:2cc0:10::/47 2a11:2cc0:20::/47 Signature Algorithm: sha256WithRSAEncryption 73:71:b7:d9:38:ba:cb:61:e3:c0:cc:70:e2:a8:b3:84:15:4b: 7b:f0:f4:0a:75:38:d2:a0:49:fe:74:b8:44:f3:57:39:94:f6: b8:08:09:06:67:3d:73:de:35:9b:44:67:57:4e:21:ff:17:87: f0:f7:01:41:fa:71:1a:6f:34:4b:48:89:55:f3:4a:95:1f:1d: b0:94:77:b4:24:8c:37:5b:ca:8a:14:28:64:57:d9:05:f8:71: e3:7f:89:6c:81:c9:55:e8:70:47:c5:cb:11:d2:a2:cf:90:42: 27:04:da:6e:d7:b8:d1:4a:b7:19:dd:9d:7c:b4:b2:29:f8:63: 05:41:ca:90:e8:c0:67:ab:8b:8b:24:34:1a:19:40:ff:fc:c7: f1:70:1f:b5:99:a8:53:06:74:63:4a:74:35:ab:23:70:eb:23: 8c:6a:06:75:7b:0f:69:0c:99:7c:14:c7:c7:ba:c8:fd:60:7a: f4:48:52:5c:b7:9f:1b:72:1b:01:0f:ef:41:8b:c9:ae:8d:33: 51:04:a5:60:78:53:0f:79:54:81:2e:53:2c:53:e0:8f:c9:a3: 12:b8:7d:bc:14:6d:fe:86:2a:88:98:e7:e0:5d:35:62:67:6e: 1b:79:8f:4f:db:26:d3:05:81:74:45:9e:e6:5c:bf:89:9c:8c: c6:c1:9b:73 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZsUTQGAk2LnvS3cRwpttgywMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZTRiYzk0MDFkOWY4Nzc3MmM4YzljNjk4MzQwNzc1MTJm NDI2MTEwHhcNMjUxMjEyMjA0MjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDVlZDkzN2E0MjA1NjZhYjBhMGExNGIyMjQwODViZTFlYTQ1YjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/nT1wI1ngxXvlkgr+HCWWPzJuFm 8lyAahxaI6jqSvGMee7qxRHWtsyVjiAsj3h7PaG6t7jTOkdreep4Jf+JmFe4HbxE wWrVJ+MqcEvVYae6cbUL/PPcY5TyN63mdr0eZ4k+Skroc7LQqDcIULCz67nDy7jh Bu/WOkTzOWGYGt1YfCcLaeT+A6GMhIeqK85S2/X4O+YIxhH0XEKEtmervZUXfss7 mtfGCleZIWpVnYBDLom0jxMz0D3HjmF/w7OQwbSvAJH/ssk0BYvgr7VurDpyQmLp N/AoE2HZ6005b2rhkqtvekkQPYliU6lOG2MUvYcmsYIBM/74p353pITl2QIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFLRe2TekIFZqsKChSyJAhb4epFsuMB8GA1UdIwQY MBaAFArkvJQB2fh3csjJxpg0B3US9CYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0Mzct MjQyNDY2ODJiZjAwLzEvdEY3Wk42UWdWbXF3b0tGTElrQ0Z2aDZrV3k0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0MzctMjQyNDY2ODJiZjAw LzEvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjAeBAIAATAYAwQAUVVIAwQB UVVKAwQBuQkYAwQA1ZscMCwEAgACMCYwEgMHASoRLMAAAgMHASoRLMAACAMHASoR LMAAEAMHASoRLMAAIDANBgkqhkiG9w0BAQsFAAOCAQEAc3G32Ti6y2HjwMxw4qiz hBVLe/D0CnU40qBJ/nS4RPNXOZT2uAgJBmc9c941m0RnV04h/xeH8PcBQfpxGm80 S0iJVfNKlR8dsJR3tCSMN1vKihQoZFfZBfhx43+JbIHJVehwR8XLEdKiz5BCJwTa bte40Uq3Gd2dfLSyKfhjBUHKkOjAZ6uLiyQ0GhlA//zH8XAftZmoUwZ0Y0p0Nasj cOsjjGoGdXsPaQyZfBTHx7rI/WB69EhSXLefG3IbAQ/vQYvJro0zUQSlYHhTD3lU gS5TLFPgj8mjErh9vBRt/oYqiJjn4F01YmduG3mPT9sm0wWBdEWe5ly/iZyMxsGb cw== -----END CERTIFICATE-----Generated at Wed Dec 17 12:31:26 2025 by rpki-client