This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/0l_JlSvFq56OWKuOAyiuGAPthgE.roa File: 0l_JlSvFq56OWKuOAyiuGAPthgE.roa (raw, json) Hash identifier: pilCAnWAIbPSFLZ93yZvglCMjzzYpW/PzWAfKaEfMX8= Subject key identifier: D2:5F:C9:95:2B:C5:AB:9E:8E:58:AB:8E:03:28:AE:18:03:ED:86:01 Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Certificate serial: 019A9C7051610C5EC257E930BA3B4FFE852E Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/0l_JlSvFq56OWKuOAyiuGAPthgE.roa Signing time: Wed 19 Nov 2025 14:06:37 +0000 ROA not before: Wed 19 Nov 2025 14:06:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 398781 IP address blocks: 46.33.24.0/23 maxlen: 32 79.108.168.0/21 maxlen: 32 79.108.176.0/21 maxlen: 32 79.108.184.0/21 maxlen: 32 79.108.192.0/21 maxlen: 32 82.158.64.0/21 maxlen: 32 82.158.72.0/21 maxlen: 32 82.158.80.0/21 maxlen: 32 82.198.36.0/22 maxlen: 32 84.234.48.0/22 maxlen: 32 84.234.52.0/22 maxlen: 32 84.234.60.0/22 maxlen: 32 84.238.176.0/23 maxlen: 32 91.238.12.0/22 maxlen: 32 95.36.16.0/20 maxlen: 32 95.36.32.0/20 maxlen: 32 95.36.48.0/20 maxlen: 32 109.175.232.0/23 maxlen: 32 109.175.244.0/23 maxlen: 32 167.150.180.0/22 maxlen: 32 167.150.188.0/22 maxlen: 32 167.150.208.0/22 maxlen: 32 167.150.236.0/22 maxlen: 32 185.165.24.0/22 maxlen: 32 198.13.200.0/21 maxlen: 32 199.182.80.0/20 maxlen: 32 209.16.224.0/21 maxlen: 32 209.16.232.0/21 maxlen: 32 209.16.240.0/21 maxlen: 32 209.16.248.0/21 maxlen: 32 213.5.20.0/22 maxlen: 32 213.130.88.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9c:70:51:61:0c:5e:c2:57:e9:30:ba:3b:4f:fe:85:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Validity Not Before: Nov 19 14:06:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d25fc9952bc5ab9e8e58ab8e0328ae1803ed8601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d4:60:92:0f:05:db:62:61:88:57:44:dd:6e: 36:4d:91:22:37:a5:8f:77:68:46:43:ea:e5:16:67: a0:84:c5:d1:96:63:1a:ac:f0:ea:c1:15:bc:51:89: 18:2e:0b:c4:e0:13:76:74:24:ec:a5:59:9c:fe:16: b0:dc:cd:1b:eb:49:4f:93:6f:97:1c:a0:df:5b:cd: 2d:60:65:e9:66:2f:39:d5:54:4f:66:d0:af:ff:88: 11:6c:b3:c4:0f:26:a0:e8:a4:5e:46:7c:9a:8d:ca: 1d:1d:1a:65:1c:c4:33:9c:ef:6d:ff:1a:4c:d7:56: 99:35:f6:9a:30:0a:54:65:93:2e:1a:fa:99:d5:1f: 8b:07:0e:9d:7d:40:b3:ca:f6:31:43:66:f1:2c:38: 13:ff:79:aa:98:d4:f4:55:a2:88:ff:f4:16:c3:95: 9e:f3:c3:b5:73:d5:76:fe:dc:06:9a:be:e7:38:14: 10:9f:5d:ae:4f:65:78:c5:49:0c:8e:e2:a0:24:33: 84:13:50:99:44:55:18:1b:63:bf:c0:80:db:51:7c: 78:97:5a:d9:8a:46:84:e2:cf:37:f0:d7:96:d1:db: b9:90:9d:4e:be:c8:3e:24:0d:49:cd:06:f0:56:f5: 10:5b:6d:75:7a:6d:6a:29:8b:f5:73:43:5b:1e:ee: d8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5F:C9:95:2B:C5:AB:9E:8E:58:AB:8E:03:28:AE:18:03:ED:86:01 X509v3 Authority Key Identifier: keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/0l_JlSvFq56OWKuOAyiuGAPthgE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.33.24.0/23 79.108.168.0-79.108.199.255 82.158.64.0-82.158.87.255 82.198.36.0/22 84.234.48.0/21 84.234.60.0/22 84.238.176.0/23 91.238.12.0/22 95.36.16.0-95.36.63.255 109.175.232.0/23 109.175.244.0/23 167.150.180.0/22 167.150.188.0/22 167.150.208.0/22 167.150.236.0/22 185.165.24.0/22 198.13.200.0/21 199.182.80.0/20 209.16.224.0/19 213.5.20.0/22 213.130.88.0/22 Signature Algorithm: sha256WithRSAEncryption 83:48:75:cc:4d:89:b0:24:7f:35:0e:7a:00:cf:26:ce:ae:d3: 4a:72:5f:79:b1:0e:e5:e1:22:77:f6:cc:0a:db:99:d0:75:a4: 55:35:48:37:91:83:bc:9c:c6:01:e5:b2:dc:1c:6c:cb:ca:f2: df:b1:82:f2:ed:68:10:7e:09:e1:0d:53:ce:e6:a7:48:af:e5: b9:73:29:0a:4f:3e:cc:5c:c4:49:cd:d8:d8:72:e2:3d:e3:46: 04:fe:a8:82:bb:ad:78:8f:32:f5:5a:c6:e3:2d:5a:44:b0:a3: 7b:68:66:2a:d9:6d:6b:3e:04:75:b6:f9:ed:84:29:20:dd:18: f6:7d:01:81:94:4e:72:00:d8:5c:0e:06:d6:25:59:f7:94:f9: e0:bd:1d:b4:f5:76:d4:d4:42:7c:49:40:2d:24:34:9b:85:ec: 14:59:4f:8a:05:cc:ff:10:49:4b:3e:7a:5e:85:5e:23:3c:7e: 2c:59:b6:d9:c9:e9:72:0f:c6:23:51:cb:a4:2d:88:e6:f2:85: db:06:ad:53:9a:54:2c:30:71:2e:34:fa:e3:0d:7c:9c:d7:97: 99:78:c4:48:a5:ce:68:73:74:f6:fe:4f:5c:56:14:15:50:08: 62:86:f3:d6:d7:3b:14:11:7f:67:b3:0b:fa:0c:8e:29:09:e1: d6:74:8a:80 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgISAZqccFFhDF7CV+kwujtP/oUuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYTUxYTBiYzBmMGFmZWJiZjZkNWQ5MjdmZTFmOTgxNmY1 MjM1MmQwHhcNMjUxMTE5MTQwNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjVmYzk5NTJiYzVhYjllOGU1OGFiOGUwMzI4YWUxODAzZWQ4NjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNRgkg8F22JhiFdE3W42TZEiN6WP d2hGQ+rlFmeghMXRlmMarPDqwRW8UYkYLgvE4BN2dCTspVmc/haw3M0b60lPk2+X HKDfW80tYGXpZi851VRPZtCv/4gRbLPEDyag6KReRnyajcodHRplHMQznO9t/xpM 11aZNfaaMApUZZMuGvqZ1R+LBw6dfUCzyvYxQ2bxLDgT/3mqmNT0VaKI//QWw5We 88O1c9V2/twGmr7nOBQQn12uT2V4xUkMjuKgJDOEE1CZRFUYG2O/wIDbUXx4l1rZ ikaE4s838NeW0du5kJ1Ovsg+JA1JzQbwVvUQW211em1qKYv1c0NbHu7YRQIDAQAB o4ICnjCCApowHQYDVR0OBBYEFNJfyZUrxauejlirjgMorhgD7YYBMB8GA1UdIwQY MBaAFBulGgvA8K/rv21dkn/h+YFvUjUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQt ODcxZjllZDcwOGUwLzEvMGxfSmxTdkZxNTZPV0t1T0F5aXVHQVB0aGdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQtODcxZjllZDcwOGUw LzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYDBAEu IRgwDAMEA09sqAMEA09swDAMAwQGUp5AAwQDUp5QAwQCUsYkAwQDVOowAwQCVOo8 AwQBVO6wAwQCW+4MMAwDBARfJBADBAZfJAADBAFtr+gDBAFtr/QDBAKnlrQDBAKn lrwDBAKnltADBAKnluwDBAK5pRgDBAPGDcgDBATHtlADBAXREOADBALVBRQDBALV glgwDQYJKoZIhvcNAQELBQADggEBAINIdcxNibAkfzUOegDPJs6u00pyX3mxDuXh Inf2zArbmdB1pFU1SDeRg7ycxgHlstwcbMvK8t+xgvLtaBB+CeENU87mp0iv5blz KQpPPsxcxEnN2Nhy4j3jRgT+qIK7rXiPMvVaxuMtWkSwo3toZirZbWs+BHW2+e2E KSDdGPZ9AYGUTnIA2FwOBtYlWfeU+eC9HbT1dtTUQnxJQC0kNJuF7BRZT4oFzP8Q SUs+el6FXiM8fixZttnJ6XIPxiNRy6QtiObyhdsGrVOaVCwwcS40+uMNfJzXl5l4 xEilzmhzdPb+T1xWFBVQCGKG89bXOxQRf2ezC/oMjikJ4dZ0ioA= -----END CERTIFICATE-----Generated at Wed Dec 10 10:53:25 2025 by rpki-client