This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/ff_a8SBBXF3be68FdU0vfTPnh5s.roa File: ff_a8SBBXF3be68FdU0vfTPnh5s.roa (raw, json) Hash identifier: bW2UtMneC9Mg6cMlRlCRXeNJHB26wQRTTLDsoAfILRU= Subject key identifier: 7D:FF:DA:F1:20:41:5C:5D:DB:7B:AF:05:75:4D:2F:7D:33:E7:87:9B Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019A879062160050A1585E4100C543BE5371 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/ff_a8SBBXF3be68FdU0vfTPnh5s.roa Signing time: Sat 15 Nov 2025 12:49:37 +0000 ROA not before: Sat 15 Nov 2025 12:49:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 37.44.228.0/22 maxlen: 24 37.44.228.0/24 maxlen: 24 165.84.224.0/22 maxlen: 22 165.84.228.0/22 maxlen: 22 194.15.32.0/24 maxlen: 24 194.15.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Nov 2025 03:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:87:90:62:16:00:50:a1:58:5e:41:00:c5:43:be:53:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Nov 15 12:49:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7dffdaf120415c5ddb7baf05754d2f7d33e7879b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:22:05:b3:14:a7:69:02:69:d3:dc:e7:75:70: 4f:5e:fa:41:68:8d:53:76:61:14:9b:38:fa:cf:f2: 22:0f:22:dc:52:47:85:c6:5b:c4:cb:95:21:fb:48: 4e:50:f0:46:ea:12:e4:25:c2:bc:df:83:e2:ef:aa: 59:e6:05:f1:82:0a:2c:d6:9b:2a:0a:55:8e:93:1f: 0b:1e:ec:55:3e:17:06:7e:b3:05:a7:e2:dd:64:3b: 69:c1:64:c5:46:7c:12:25:db:ed:47:0a:b8:7e:67: 2c:b9:6c:ed:30:06:a9:17:e4:28:9a:40:d0:24:5d: bd:18:9d:24:18:91:25:ae:14:4d:15:4c:6b:2e:a0: d8:fd:3e:5a:79:b5:10:dd:af:ef:4c:32:ab:98:fe: 68:9f:77:0f:af:ac:60:bd:e4:37:e1:f4:24:cd:23: 71:19:b7:a3:a4:f8:e7:33:a6:52:36:5c:83:88:78: 4a:0f:b0:d2:8a:b8:7b:ba:9b:97:ab:c3:dc:e9:07: c5:8d:78:cb:2c:27:44:9e:91:10:41:d2:d8:83:50: 6d:1e:c2:7d:c0:c8:3f:30:d9:87:8f:bc:88:ad:72: 56:e5:d5:f9:1b:1d:4e:48:65:d6:ca:f6:1d:31:51: 44:e9:cf:db:b2:97:3c:4f:98:10:b8:0c:2f:97:91: 93:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:FF:DA:F1:20:41:5C:5D:DB:7B:AF:05:75:4D:2F:7D:33:E7:87:9B X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/ff_a8SBBXF3be68FdU0vfTPnh5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.44.228.0/22 165.84.224.0/21 194.15.32.0/24 194.15.34.0/23 Signature Algorithm: sha256WithRSAEncryption 06:9a:b3:6d:40:b5:a0:0a:59:09:4b:53:72:40:f7:19:a0:73: bf:70:3b:09:fd:83:4d:01:5c:c8:24:a1:02:bf:42:be:9a:e9: ed:57:95:fa:26:88:71:f3:fb:aa:45:7d:70:cd:53:b5:fc:a1: 8b:c7:e8:51:f6:64:e4:5c:a8:0a:5f:f0:f9:5d:64:bd:40:69: 50:49:8c:ec:46:e2:78:cf:6c:3f:5b:27:34:73:bb:60:2e:0d: 6e:cf:26:d1:b5:17:bd:bd:f5:e1:28:73:d7:70:24:8d:51:6b: 7b:0b:8c:f3:50:79:a2:68:2c:ea:78:a7:2e:bc:75:ce:73:0f: f4:0c:20:20:e2:5f:4a:68:30:99:59:b9:21:29:af:d1:b8:14: 8f:f3:85:06:33:14:a5:01:1a:d6:50:63:69:cf:34:6d:05:3b: d0:0c:8f:a9:7c:67:26:81:fe:8f:cc:e5:b4:6c:0d:1e:93:44: 0c:46:5a:86:e7:4a:ce:d8:8e:c4:7b:a8:67:5c:d4:ff:54:fa: b5:b6:56:1e:b0:79:53:28:2e:f7:d3:a2:82:63:97:1a:46:db: 25:43:93:96:5f:f3:5b:87:03:3f:0e:6d:37:09:d5:5d:b3:19: 54:54:7c:33:e3:ea:f6:f2:fe:57:44:99:91:e5:2a:df:bb:8c: 6e:16:14:7f -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZqHkGIWAFChWF5BAMVDvlNxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjUxMTE1MTI0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGZmZGFmMTIwNDE1YzVkZGI3YmFmMDU3NTRkMmY3ZDMzZTc4NzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSIFsxSnaQJp09zndXBPXvpBaI1T dmEUmzj6z/IiDyLcUkeFxlvEy5Uh+0hOUPBG6hLkJcK834Pi76pZ5gXxggos1psq ClWOkx8LHuxVPhcGfrMFp+LdZDtpwWTFRnwSJdvtRwq4fmcsuWztMAapF+QomkDQ JF29GJ0kGJElrhRNFUxrLqDY/T5aebUQ3a/vTDKrmP5on3cPr6xgveQ34fQkzSNx GbejpPjnM6ZSNlyDiHhKD7DSirh7upuXq8Pc6QfFjXjLLCdEnpEQQdLYg1BtHsJ9 wMg/MNmHj7yIrXJW5dX5Gx1OSGXWyvYdMVFE6c/bspc8T5gQuAwvl5GTmQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFH3/2vEgQVxd23uvBXVNL30z54ebMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvZmZfYThTQkJYRjNiZTY4RmRVMHZmVFBuaDVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCJSzkAwQD pVTgAwQAwg8gAwQBwg8iMA0GCSqGSIb3DQEBCwUAA4IBAQAGmrNtQLWgClkJS1Ny QPcZoHO/cDsJ/YNNAVzIJKECv0K+muntV5X6Johx8/uqRX1wzVO1/KGLx+hR9mTk XKgKX/D5XWS9QGlQSYzsRuJ4z2w/Wyc0c7tgLg1uzybRtRe9vfXhKHPXcCSNUWt7 C4zzUHmiaCzqeKcuvHXOcw/0DCAg4l9KaDCZWbkhKa/RuBSP84UGMxSlARrWUGNp zzRtBTvQDI+pfGcmgf6PzOW0bA0ek0QMRlqG50rO2I7Ee6hnXNT/VPq1tlYesHlT KC7306KCY5caRtslQ5OWX/NbhwM/Dm03CdVdsxlUVHwz4+r28v5XRJmR5Srfu4xu FhR/ -----END CERTIFICATE-----Generated at Fri Nov 21 10:36:07 2025 by rpki-client