This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/1qARPt6c0EJytUF4E1oNqKviQ-A.roa File: 1qARPt6c0EJytUF4E1oNqKviQ-A.roa (raw, json) Hash identifier: J1qcIJPFmFSAn4Z4tfcCfAY0ACYPoBfL89qm/npJC9s= Subject key identifier: D6:A0:11:3E:DE:9C:D0:42:72:B5:41:78:13:5A:0D:A8:AB:E2:43:E0 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019ADDD051FDA44EF8ABBA1782AA118CA012 Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/1qARPt6c0EJytUF4E1oNqKviQ-A.roa Signing time: Tue 02 Dec 2025 06:46:48 +0000 ROA not before: Tue 02 Dec 2025 06:46:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8795 IP address blocks: 77.85.175.0/24 maxlen: 24 77.85.196.0/24 maxlen: 24 95.43.230.0/24 maxlen: 24 212.5.130.0/24 maxlen: 24 212.5.133.0/24 maxlen: 24 212.5.145.0/24 maxlen: 24 213.16.35.0/24 maxlen: 24 213.91.134.0/24 maxlen: 24 213.91.170.0/24 maxlen: 24 2a01:5a8:7::/56 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:dd:d0:51:fd:a4:4e:f8:ab:ba:17:82:aa:11:8c:a0:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Dec 2 06:46:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d6a0113ede9cd04272b54178135a0da8abe243e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:30:62:c3:f0:72:37:60:35:b8:52:05:fc:2a: 4c:01:2c:ae:d2:56:8a:91:0a:6a:c3:20:29:41:7f: cd:68:15:32:13:e8:78:82:aa:6a:21:63:a4:94:c4: 43:1d:29:d8:45:91:c6:90:78:46:1b:2b:5a:4e:db: 54:52:6a:48:ad:24:d5:9a:55:9d:e2:20:5a:37:ae: 31:d7:6c:1b:e9:84:68:4c:d0:49:3d:68:a7:48:32: 29:6f:ff:1f:34:af:63:83:04:aa:ba:08:0c:fa:ce: 6f:f8:0b:85:c4:32:ce:62:26:4a:d7:72:2e:0e:13: f6:e9:40:5a:81:e5:a5:ad:c8:b4:39:22:f4:ef:a3: 1a:52:8c:d4:03:57:b9:a2:08:0e:50:b0:c0:a0:98: 36:c1:e3:35:08:8b:36:aa:77:bc:ae:30:1a:d1:45: cd:8f:b8:5d:63:c0:c6:d2:2f:60:e5:37:81:c3:0e: d9:e3:58:3a:e6:98:8e:0f:40:23:02:32:57:28:e4: c2:96:81:ea:99:81:77:c8:31:13:85:d2:e9:41:86: 55:9e:ad:a0:d3:e3:70:1b:00:8a:05:84:58:4e:8b: df:d3:e9:d2:d4:14:86:9e:38:a9:63:df:3d:bc:b6: 92:f7:25:cc:94:a0:00:5c:d7:f8:3c:1d:1d:1c:2e: cc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A0:11:3E:DE:9C:D0:42:72:B5:41:78:13:5A:0D:A8:AB:E2:43:E0 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/1qARPt6c0EJytUF4E1oNqKviQ-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.85.175.0/24 77.85.196.0/24 95.43.230.0/24 212.5.130.0/24 212.5.133.0/24 212.5.145.0/24 213.16.35.0/24 213.91.134.0/24 213.91.170.0/24 IPv6: 2a01:5a8:7::/56 Signature Algorithm: sha256WithRSAEncryption 74:7c:08:aa:85:67:01:60:b5:98:08:c1:72:dd:f3:ca:2e:71: 16:84:c0:a7:fa:e3:5b:b0:37:d7:aa:ec:a0:42:90:2b:e4:c4: 2c:c0:fa:e0:cf:0b:01:09:6f:86:46:6b:d0:ee:9b:0f:39:9d: 01:34:ac:ef:ac:1b:fb:11:64:5e:83:29:ca:c6:55:c3:e1:e2: 4a:22:a4:cb:c9:3d:4d:4a:54:0b:d4:02:b8:74:77:4c:d8:bc: 4e:fc:a8:36:d8:8a:a6:db:9d:96:10:0a:a4:92:38:98:10:04: ce:7d:52:d8:0f:c8:91:88:ee:80:d8:99:2d:5d:cc:06:44:50: 5e:bd:18:1f:44:b0:1d:53:a1:35:cc:d8:6d:da:31:45:9c:80: 97:08:7d:d2:7f:ea:70:1e:60:da:3a:9b:10:b1:62:d2:fb:86: f8:83:8d:87:2f:43:75:39:b8:4a:50:50:8d:43:25:e3:bc:44: 79:de:ed:64:c1:c4:86:12:cc:86:63:61:65:d9:3d:f9:f0:3d: 2c:af:33:8a:d7:6b:ed:61:27:eb:04:e1:7e:44:7e:67:3c:cf: 7a:25:ed:89:21:da:7e:38:90:62:45:05:73:91:eb:a1:d2:20: 08:f1:b9:27:6a:c8:1f:3f:13:2d:1f:49:9b:b5:e6:81:3b:56: 04:75:97:89 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZrd0FH9pE74q7oXgqoRjKASMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjUxMjAyMDY0NjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmEwMTEzZWRlOWNkMDQyNzJiNTQxNzgxMzVhMGRhOGFiZTI0M2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjBiw/ByN2A1uFIF/CpMASyu0laK kQpqwyApQX/NaBUyE+h4gqpqIWOklMRDHSnYRZHGkHhGGytaTttUUmpIrSTVmlWd 4iBaN64x12wb6YRoTNBJPWinSDIpb/8fNK9jgwSquggM+s5v+AuFxDLOYiZK13Iu DhP26UBageWlrci0OSL076MaUozUA1e5oggOULDAoJg2weM1CIs2qne8rjAa0UXN j7hdY8DG0i9g5TeBww7Z41g65piOD0AjAjJXKOTCloHqmYF3yDEThdLpQYZVnq2g 0+NwGwCKBYRYTovf0+nS1BSGnjipY989vLaS9yXMlKAAXNf4PB0dHC7MkwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNagET7enNBCcrVBeBNaDair4kPgMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvMXFBUlB0NmMwRUp5dFVGNEUxb05xS3ZpUS1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDA8BAIAATA2AwQATVWvAwQA TVXEAwQAXyvmAwQA1AWCAwQA1AWFAwQA1AWRAwQA1RAjAwQA1VuGAwQA1VuqMBAE AgACMAoDCAAqAQWoAAcAMA0GCSqGSIb3DQEBCwUAA4IBAQB0fAiqhWcBYLWYCMFy 3fPKLnEWhMCn+uNbsDfXquygQpAr5MQswPrgzwsBCW+GRmvQ7psPOZ0BNKzvrBv7 EWRegynKxlXD4eJKIqTLyT1NSlQL1AK4dHdM2LxO/Kg22Iqm252WEAqkkjiYEATO fVLYD8iRiO6A2JktXcwGRFBevRgfRLAdU6E1zNht2jFFnICXCH3Sf+pwHmDaOpsQ sWLS+4b4g42HL0N1ObhKUFCNQyXjvER53u1kwcSGEsyGY2Fl2T358D0srzOK12vt YSfrBOF+RH5nPM96Je2JIdp+OJBiRQVzkeuh0iAI8bknasgfPxMtH0mbteaBO1YE dZeJ -----END CERTIFICATE-----Generated at Thu Dec 11 10:25:37 2025 by rpki-client