This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/fCyg3nd-harMTi4pUtJhTBh_cYM.roa File: fCyg3nd-harMTi4pUtJhTBh_cYM.roa (raw, json) Hash identifier: Kcvhuze+vwAD4la29HziGrt0+sJ8/kodFTmW8OQ5Pko= Subject key identifier: 7C:2C:A0:DE:77:7E:85:AA:CC:4E:2E:29:52:D2:61:4C:18:7F:71:83 Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13 Certificate serial: 019AFB5C1EA778DBC4BB7BE9BCCF5CBF226C Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/fCyg3nd-harMTi4pUtJhTBh_cYM.roa Signing time: Mon 08 Dec 2025 00:28:29 +0000 ROA not before: Mon 08 Dec 2025 00:28:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 45.66.135.0/24 maxlen: 24 45.67.55.0/24 maxlen: 24 45.82.165.0/24 maxlen: 24 45.85.2.0/24 maxlen: 24 45.90.140.0/24 maxlen: 24 45.128.152.0/24 maxlen: 24 45.134.18.0/24 maxlen: 24 89.31.124.0/24 maxlen: 24 91.220.202.0/24 maxlen: 24 91.220.203.0/24 maxlen: 24 147.78.14.0/24 maxlen: 24 152.89.210.0/24 maxlen: 24 185.105.191.0/24 maxlen: 24 185.120.17.0/24 maxlen: 24 185.126.68.0/24 maxlen: 24 185.126.136.0/24 maxlen: 24 185.126.137.0/24 maxlen: 24 185.126.224.0/24 maxlen: 24 185.126.227.0/24 maxlen: 24 185.167.117.0/24 maxlen: 24 185.167.118.0/24 maxlen: 24 185.167.119.0/24 maxlen: 24 185.171.122.0/24 maxlen: 24 185.171.123.0/24 maxlen: 24 185.172.114.0/24 maxlen: 24 185.175.142.0/24 maxlen: 24 185.175.143.0/24 maxlen: 24 185.187.236.0/24 maxlen: 24 188.119.102.0/24 maxlen: 24 192.54.56.0/24 maxlen: 24 192.54.58.0/24 maxlen: 24 192.54.59.0/24 maxlen: 24 193.37.56.0/24 maxlen: 24 193.37.57.0/24 maxlen: 24 193.38.136.0/24 maxlen: 24 194.124.32.0/24 maxlen: 24 194.156.229.0/24 maxlen: 24 2a0c:8a40:2::/48 maxlen: 48 2a0c:8a41:a300::/64 maxlen: 64 2a0c:8a47::/32 maxlen: 32 2a0c:8a47::/36 maxlen: 36 2a0c:8a47:1000::/36 maxlen: 36 2a0c:8a47:2000::/36 maxlen: 36 2a0c:8a47:3000::/36 maxlen: 36 2a0c:8a47:4000::/36 maxlen: 36 2a0c:8a47:5000::/36 maxlen: 36 2a0c:8a47:6000::/36 maxlen: 36 2a0c:8a47:7000::/36 maxlen: 36 2a0c:8a47:8000::/36 maxlen: 36 2a0c:8a47:9000::/36 maxlen: 36 2a0c:8a47:a000::/36 maxlen: 36 2a0c:8a47:b000::/36 maxlen: 36 2a0c:8a47:c000::/36 maxlen: 36 2a0c:8a47:d000::/36 maxlen: 36 2a0c:8a47:e000::/36 maxlen: 36 2a0c:8a47:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:5c:1e:a7:78:db:c4:bb:7b:e9:bc:cf:5c:bf:22:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13 Validity Not Before: Dec 8 00:28:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7c2ca0de777e85aacc4e2e2952d2614c187f7183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b6:99:46:bb:bb:5f:dd:71:14:0d:62:72:35: 98:2a:f8:aa:cf:36:f5:d3:23:01:a3:31:5c:a4:14: 73:c6:9b:7e:e1:62:88:73:e6:61:f7:2a:a3:99:5a: 46:e3:6c:33:0f:33:55:77:c4:8d:02:33:99:f9:6b: 6e:34:76:28:73:9c:46:c5:5c:38:d0:d3:16:37:52: 85:a0:3e:5b:43:16:0e:43:73:e3:e9:03:d9:bc:f6: df:70:37:c3:d7:e8:77:41:be:f8:05:90:71:dd:23: e4:6b:89:94:f6:8f:ea:8c:e2:10:51:97:3d:b1:2f: da:94:33:e7:49:88:7a:1d:84:78:13:1a:f9:fc:ef: 88:61:84:55:ad:14:c0:2a:0d:53:b0:d3:fc:2b:80: 44:15:54:76:63:9e:cd:c0:a5:54:e8:ab:98:69:bd: d5:cd:4d:9a:87:8a:c2:13:5c:b9:e7:ae:5d:86:10: b5:ff:9d:ee:59:e0:90:6c:51:b9:08:7f:dc:91:ca: 3f:98:99:ec:8e:2e:d1:69:7b:04:60:be:a1:96:d9: 15:70:5a:38:5b:1c:f1:48:be:91:37:0e:01:e4:39: 0e:b2:7e:84:76:bd:19:0e:42:e5:88:20:ff:61:b6: f0:94:eb:d0:03:2f:20:0b:9f:bb:04:c2:f5:61:05: f5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:2C:A0:DE:77:7E:85:AA:CC:4E:2E:29:52:D2:61:4C:18:7F:71:83 X509v3 Authority Key Identifier: keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/fCyg3nd-harMTi4pUtJhTBh_cYM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.135.0/24 45.67.55.0/24 45.82.165.0/24 45.85.2.0/24 45.90.140.0/24 45.128.152.0/24 45.134.18.0/24 89.31.124.0/24 91.220.202.0/23 147.78.14.0/24 152.89.210.0/24 185.105.191.0/24 185.120.17.0/24 185.126.68.0/24 185.126.136.0/23 185.126.224.0/24 185.126.227.0/24 185.167.117.0-185.167.119.255 185.171.122.0/23 185.172.114.0/24 185.175.142.0/23 185.187.236.0/24 188.119.102.0/24 192.54.56.0/24 192.54.58.0/23 193.37.56.0/23 193.38.136.0/24 194.124.32.0/24 194.156.229.0/24 IPv6: 2a0c:8a40:2::/48 2a0c:8a41:a300::/64 2a0c:8a47::/32 Signature Algorithm: sha256WithRSAEncryption 2e:db:b3:c3:59:03:80:75:e4:61:3d:a2:a1:07:8f:20:5c:1e: e5:fc:d7:51:fe:04:83:83:99:0f:00:cd:bc:3e:c1:12:06:ec: 5e:5d:d3:83:53:6d:fc:69:80:c5:0e:92:af:16:25:5f:23:c5: ee:36:29:79:e9:2b:51:c5:2a:24:f5:20:0b:cc:39:10:01:34: d9:1d:99:d4:14:91:94:d4:1f:6c:61:3f:f9:ca:0e:42:07:c1: 83:4d:ad:32:35:8b:8e:63:18:a7:d6:51:6a:fc:8a:5a:19:62: 51:5d:2b:97:44:11:08:12:d3:4e:da:28:0a:91:01:2e:c3:01: 23:cd:c0:04:1e:92:be:0e:21:77:e6:c7:73:15:e2:be:23:e6: 6a:77:2e:8c:b0:fc:08:eb:58:a3:9d:75:fb:cd:00:99:15:78: ef:1b:a9:c3:e5:64:03:2a:7b:ec:bd:93:9b:7f:3d:b7:7d:3a: 33:be:c5:2e:41:c8:14:47:5a:75:f8:46:63:c9:70:1e:07:26: e8:b0:68:17:34:7b:6c:ba:58:10:7b:22:6a:05:cb:d2:66:bc: 16:d2:cd:d2:38:62:bc:93:17:f6:9f:78:03:29:b6:80:39:b8: 71:7e:8b:58:bf:44:33:85:17:f7:0b:eb:19:eb:33:bc:5b:14: eb:02:1b:d6 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgISAZr7XB6neNvEu3vpvM9cvyJsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMjQ3ZTczMzkxZWM5ZDZhMmE0NmYyY2IwYjAyZmM5OTQy ODhmMTMwHhcNMjUxMjA4MDAyODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzJjYTBkZTc3N2U4NWFhY2M0ZTJlMjk1MmQyNjE0YzE4N2Y3MTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbaZRru7X91xFA1icjWYKviqzzb1 0yMBozFcpBRzxpt+4WKIc+Zh9yqjmVpG42wzDzNVd8SNAjOZ+WtuNHYoc5xGxVw4 0NMWN1KFoD5bQxYOQ3Pj6QPZvPbfcDfD1+h3Qb74BZBx3SPka4mU9o/qjOIQUZc9 sS/alDPnSYh6HYR4Exr5/O+IYYRVrRTAKg1TsNP8K4BEFVR2Y57NwKVU6KuYab3V zU2ah4rCE1y5565dhhC1/53uWeCQbFG5CH/ckco/mJnsji7RaXsEYL6hltkVcFo4 WxzxSL6RNw4B5DkOsn6Edr0ZDkLliCD/YbbwlOvQAy8gC5+7BML1YQX1RQIDAQAB o4IC4TCCAt0wHQYDVR0OBBYEFHwsoN53foWqzE4uKVLSYUwYf3GDMB8GA1UdIwQY MBaAFAskfnM5HsnWoqRvLLCwL8mUKI8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMt NzM2Nzg5ZWU2ZmQwLzEvZkN5ZzNuZC1oYXJNVGk0cFV0SmhUQmhfY1lNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMtNzM2Nzg5ZWU2ZmQw LzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH2BggrBgEFBQcBBwEB/wSB5jCB4zCBvQQCAAEwgbYDBAAt QocDBAAtQzcDBAAtUqUDBAAtVQIDBAAtWowDBAAtgJgDBAAthhIDBABZH3wDBAFb 3MoDBACTTg4DBACYWdIDBAC5ab8DBAC5eBEDBAC5fkQDBAG5fogDBAC5fuADBAC5 fuMwDAMEALmndQMEA7mncAMEAbmregMEALmscgMEAbmvjgMEALm77AMEALx3ZgME AMA2OAMEAcA2OgMEAcElOAMEAMEmiAMEAMJ8IAMEAMKc5TAhBAIAAjAbAwcAKgyK QAACAwkAKgyKQaMAAAADBQAqDIpHMA0GCSqGSIb3DQEBCwUAA4IBAQAu27PDWQOA deRhPaKhB48gXB7l/NdR/gSDg5kPAM28PsESBuxeXdODU238aYDFDpKvFiVfI8Xu Nil56StRxSok9SALzDkQATTZHZnUFJGU1B9sYT/5yg5CB8GDTa0yNYuOYxin1lFq /IpaGWJRXSuXRBEIEtNO2igKkQEuwwEjzcAEHpK+DiF35sdzFeK+I+Zqdy6MsPwI 61ijnXX7zQCZFXjvG6nD5WQDKnvsvZObfz23fTozvsUuQcgUR1p1+EZjyXAeBybo sGgXNHtsulgQeyJqBcvSZrwW0s3SOGK8kxf2n3gDKbaAObhxfotYv0QzhRf3C+sZ 6zO8WxTrAhvW -----END CERTIFICATE-----Generated at Mon Dec 8 16:53:36 2025 by rpki-client