This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/4vo2mZ5vkhxU7uSwqosdL3JTchM.roa File: 4vo2mZ5vkhxU7uSwqosdL3JTchM.roa (raw, json) Hash identifier: lZHVKHYSQoDjaWruIiT3TKxTEHZ6ZEU8I5OK9fcl8f0= Subject key identifier: E2:FA:36:99:9E:6F:92:1C:54:EE:E4:B0:AA:8B:1D:2F:72:53:72:13 Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464 Certificate serial: 019ADA592C31B0EFCDB19845E0EE37FABC10 Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/4vo2mZ5vkhxU7uSwqosdL3JTchM.roa Signing time: Mon 01 Dec 2025 14:37:48 +0000 ROA not before: Mon 01 Dec 2025 14:37:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204650 IP address blocks: 37.32.40.0/24 maxlen: 24 37.32.42.0/24 maxlen: 24 37.32.44.0/24 maxlen: 24 37.32.45.0/24 maxlen: 24 185.124.173.0/24 maxlen: 24 185.212.48.0/24 maxlen: 24 185.243.49.0/24 maxlen: 24 185.243.50.0/24 maxlen: 24 2a00:7040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 03:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:59:2c:31:b0:ef:cd:b1:98:45:e0:ee:37:fa:bc:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464 Validity Not Before: Dec 1 14:37:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e2fa36999e6f921c54eee4b0aa8b1d2f72537213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4c:c9:cd:7d:9e:21:c5:de:48:83:38:64:b6: 13:69:c3:d8:f4:a1:2e:49:50:83:09:78:37:41:a3: 32:2a:62:6c:b9:b2:71:b3:2c:27:4e:4a:18:a7:d8: b7:a0:55:b2:58:1f:1a:28:8b:ea:ea:29:82:89:4b: 9f:b6:67:30:ee:1e:f6:c2:80:44:9e:60:9d:02:45: d8:4c:ba:3c:8c:74:d5:78:8d:0b:88:48:3f:f1:17: af:9b:ee:9f:2b:30:0e:a3:98:78:01:e5:59:e9:f7: 69:1e:8e:c4:de:73:6a:5a:3d:ea:27:90:f7:8f:aa: 36:09:7a:6f:76:97:89:ab:4d:82:32:03:c6:06:51: 4b:a8:58:c8:b9:70:22:98:1e:fe:69:70:33:3c:a7: 2f:7b:3b:f4:44:e3:72:e5:8b:46:c5:c2:81:8f:a4: 04:1e:cc:2f:d2:83:6f:a8:d7:aa:af:df:d7:6b:76: c3:79:0f:bf:51:08:bd:7b:1d:d0:54:cb:b9:10:7e: 3d:09:ff:47:bc:85:d2:39:79:3b:18:03:b4:f8:9c: 67:6c:22:fc:5e:a2:d8:5b:be:2a:64:03:9e:dc:0c: 87:f2:14:bd:da:9c:d3:fe:4a:5c:11:cc:bb:76:1e: 20:fb:b3:a3:f8:42:86:49:da:7e:ae:2f:5d:f2:df: be:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:FA:36:99:9E:6F:92:1C:54:EE:E4:B0:AA:8B:1D:2F:72:53:72:13 X509v3 Authority Key Identifier: keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/4vo2mZ5vkhxU7uSwqosdL3JTchM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.32.40.0/24 37.32.42.0/24 37.32.44.0/23 185.124.173.0/24 185.212.48.0/24 185.243.49.0-185.243.50.255 IPv6: 2a00:7040::/32 Signature Algorithm: sha256WithRSAEncryption ba:2c:0b:44:20:2b:36:96:30:4b:0a:0e:71:4d:0f:2a:84:86: 5e:0f:71:b0:e0:da:b9:30:49:32:b4:3c:98:f4:87:2d:f9:09: b5:03:4e:d9:83:da:77:f3:37:a9:0d:6d:52:dd:03:ce:c9:13: 2d:eb:4d:3a:ed:ca:d1:6e:55:62:de:de:62:a1:c7:b8:1e:00: 7c:95:9f:02:31:81:c5:ab:1d:d9:6d:9b:e4:2b:ff:ad:2d:31: 21:e4:0f:e3:32:9e:7c:65:27:90:cc:e7:71:21:2a:61:0b:7c: 8c:f1:74:2f:f9:65:87:71:94:7f:6c:9a:10:36:30:19:90:57: 32:09:01:a4:80:86:59:9f:a3:c2:f5:61:f1:76:4a:92:51:51: 47:41:6c:df:59:14:7d:e3:3f:1f:32:12:a2:b7:45:1d:7c:60: 24:18:ba:ca:ef:05:0e:d5:98:a9:63:b4:cd:cb:83:16:8c:32: 3b:be:c5:3a:ba:ae:41:2b:b4:95:59:c7:98:cc:a8:25:9b:91: ec:6a:21:9c:ce:19:ec:c7:03:9c:94:de:87:b9:66:87:7c:3f: 51:36:32:04:78:cd:c6:73:d2:76:01:70:9c:25:fc:ee:9a:78: 69:d3:41:b8:fc:cf:16:88:bd:f7:c6:bb:0e:9a:d5:9b:38:35: e0:28:f3:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgISAZraWSwxsO/NsZhF4O43+rwQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0 ZDY0NjQwHhcNMjUxMjAxMTQzNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmZhMzY5OTllNmY5MjFjNTRlZWU0YjBhYThiMWQyZjcyNTM3MjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskzJzX2eIcXeSIM4ZLYTacPY9KEu SVCDCXg3QaMyKmJsubJxsywnTkoYp9i3oFWyWB8aKIvq6imCiUuftmcw7h72woBE nmCdAkXYTLo8jHTVeI0LiEg/8Revm+6fKzAOo5h4AeVZ6fdpHo7E3nNqWj3qJ5D3 j6o2CXpvdpeJq02CMgPGBlFLqFjIuXAimB7+aXAzPKcvezv0RONy5YtGxcKBj6QE Hswv0oNvqNeqr9/Xa3bDeQ+/UQi9ex3QVMu5EH49Cf9HvIXSOXk7GAO0+JxnbCL8 XqLYW74qZAOe3AyH8hS92pzT/kpcEcy7dh4g+7Oj+EKGSdp+ri9d8t++sQIDAQAB o4ICPjCCAjowHQYDVR0OBBYEFOL6Npmeb5IcVO7ksKqLHS9yU3ITMB8GA1UdIwQY MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt OTg5MTY2ODgxOTY5LzEvNHZvMm1aNXZraHhVN3VTd3Fvc2RMM0pUY2hNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5 LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAyBAIAATAsAwQAJSAoAwQA JSAqAwQBJSAsAwQAuXytAwQAudQwMAwDBAC58zEDBAC58zIwDQQCAAIwBwMFACoA cEAwDQYJKoZIhvcNAQELBQADggEBALosC0QgKzaWMEsKDnFNDyqEhl4PcbDg2rkw STK0PJj0hy35CbUDTtmD2nfzN6kNbVLdA87JEy3rTTrtytFuVWLe3mKhx7geAHyV nwIxgcWrHdltm+Qr/60tMSHkD+MynnxlJ5DM53EhKmELfIzxdC/5ZYdxlH9smhA2 MBmQVzIJAaSAhlmfo8L1YfF2SpJRUUdBbN9ZFH3jPx8yEqK3RR18YCQYusrvBQ7V mKljtM3LgxaMMju+xTq6rkErtJVZx5jMqCWbkexqIZzOGezHA5yU3oe5Zod8P1E2 MgR4zcZz0nYBcJwl/O6aeGnTQbj8zxaIvffGuw6a1Zs4NeAo85A= -----END CERTIFICATE-----Generated at Wed Dec 10 12:24:17 2025 by rpki-client