This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/Ma9Ikd6hdTtGzEOY7RC-SeQ9wUw.roa File: Ma9Ikd6hdTtGzEOY7RC-SeQ9wUw.roa (raw, json) Hash identifier: mYux390OsCPiajLg/1tt+lZqU5GQYKEz7ajHTrFy5ig= Subject key identifier: 31:AF:48:91:DE:A1:75:3B:46:CC:43:98:ED:10:BE:49:E4:3D:C1:4C Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a Certificate serial: 019AC9E12A9356BA3A3DB78F371222957042 Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/Ma9Ikd6hdTtGzEOY7RC-SeQ9wUw.roa Signing time: Fri 28 Nov 2025 09:52:48 +0000 ROA not before: Fri 28 Nov 2025 09:52:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9002 IP address blocks: 2.58.98.0/24 maxlen: 24 31.128.32.0/22 maxlen: 24 37.233.82.0/23 maxlen: 24 37.233.84.0/23 maxlen: 24 37.233.86.0/24 maxlen: 24 45.92.174.0/24 maxlen: 24 45.130.212.0/22 maxlen: 24 45.137.188.0/24 maxlen: 24 45.145.5.0/24 maxlen: 24 45.145.163.0/24 maxlen: 24 45.145.168.0/24 maxlen: 24 45.152.87.0/24 maxlen: 24 45.156.20.0/24 maxlen: 24 46.173.20.0/24 maxlen: 24 77.73.233.0/24 maxlen: 24 77.73.235.0/24 maxlen: 24 77.73.238.0/24 maxlen: 24 83.222.20.0/23 maxlen: 24 89.40.204.0/24 maxlen: 24 90.156.254.0/23 maxlen: 24 91.218.142.0/23 maxlen: 24 155.212.224.0/21 maxlen: 24 185.77.231.0/24 maxlen: 24 193.22.244.0/24 maxlen: 24 193.23.3.0/24 maxlen: 24 193.242.106.0/24 maxlen: 24 193.242.109.0/24 maxlen: 24 194.36.208.0/24 maxlen: 24 194.113.209.0/24 maxlen: 24 212.74.231.0/24 maxlen: 24 213.139.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 06:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:e1:2a:93:56:ba:3a:3d:b7:8f:37:12:22:95:70:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a Validity Not Before: Nov 28 09:52:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=31af4891dea1753b46cc4398ed10be49e43dc14c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f2:2d:4e:82:38:db:42:20:95:a3:15:ad:bc: 16:32:02:d2:cb:cf:9e:1f:d1:b0:5c:77:cc:db:0b: 8f:74:de:3f:d2:d2:9c:87:f7:e5:dc:d9:fc:6f:95: e0:0c:a8:59:5c:9b:a2:c4:33:84:c1:14:be:86:eb: 05:30:d1:8b:bf:ed:19:be:a8:91:63:04:90:fd:20: 78:be:01:91:46:de:6d:c7:d9:f7:6b:24:9c:ff:cc: 54:a5:c8:23:78:d4:3f:69:37:16:dd:2d:cf:49:28: 1e:0d:4a:1b:3d:85:91:54:ca:47:ed:a8:2e:a8:d0: 1d:a1:8d:36:45:5f:d1:b9:63:1a:db:a0:f4:66:4c: 59:3e:65:fa:95:b4:b6:74:e6:14:f5:91:29:ad:b3: 53:79:6d:a4:22:e9:ae:85:fd:bc:62:06:f6:5a:45: 9c:b7:62:1f:9b:d9:49:b2:24:dc:5f:66:d5:a1:88: 94:7f:1a:5a:01:11:e2:e4:46:b7:cf:c9:c3:db:af: 25:3e:3b:1a:3a:70:d1:1d:97:03:c8:4d:12:1a:d0: 0f:66:e9:ea:38:ae:cc:b0:66:a3:fc:b2:82:c5:f2: 3c:f6:1d:53:13:0e:1c:c6:5f:f4:96:38:da:f4:36: 89:fb:50:3e:c8:c2:19:d4:31:e1:e9:58:e7:81:9f: dd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:AF:48:91:DE:A1:75:3B:46:CC:43:98:ED:10:BE:49:E4:3D:C1:4C X509v3 Authority Key Identifier: keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/Ma9Ikd6hdTtGzEOY7RC-SeQ9wUw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.98.0/24 31.128.32.0/22 37.233.82.0-37.233.86.255 45.92.174.0/24 45.130.212.0/22 45.137.188.0/24 45.145.5.0/24 45.145.163.0/24 45.145.168.0/24 45.152.87.0/24 45.156.20.0/24 46.173.20.0/24 77.73.233.0/24 77.73.235.0/24 77.73.238.0/24 83.222.20.0/23 89.40.204.0/24 90.156.254.0/23 91.218.142.0/23 155.212.224.0/21 185.77.231.0/24 193.22.244.0/24 193.23.3.0/24 193.242.106.0/24 193.242.109.0/24 194.36.208.0/24 194.113.209.0/24 212.74.231.0/24 213.139.229.0/24 Signature Algorithm: sha256WithRSAEncryption 79:eb:ed:3c:98:86:ed:39:1d:52:d3:aa:24:9f:99:15:d3:d2: 19:bf:d0:86:48:d2:b7:13:ab:44:1b:c4:57:e8:7e:d8:e4:0e: b7:38:e3:71:2b:e2:a9:ad:64:f2:d8:82:be:59:f6:d7:08:d7: 6c:0a:a4:2a:cb:a8:79:0a:be:23:9e:b1:5d:8c:3e:a0:9b:3f: 5b:5d:4b:d6:6c:34:8a:cb:cb:0a:81:35:1c:b6:7d:cc:e4:76: b9:dd:52:f7:f4:bb:d1:d6:b0:e7:11:8a:32:2e:71:46:d2:b7: 07:e0:60:24:72:ec:51:4d:a9:92:62:39:df:ed:c0:2e:a9:8f: bf:2d:92:fb:bb:97:be:be:ad:46:2b:81:56:f7:6c:11:49:6c: 1a:56:44:ed:68:72:32:9e:fb:a2:1a:59:2b:ac:f0:db:a8:01: 64:78:07:2e:83:55:06:67:7a:9e:ce:9b:7e:97:21:04:b2:9a: 39:d5:49:dd:73:a6:1a:2a:68:ab:83:f7:ef:b6:52:fb:3b:49: 3c:f4:92:13:b0:1c:dc:1e:a6:81:fc:fd:01:49:b2:50:6f:42: 88:3b:de:59:e3:78:92:fb:ec:b4:00:97:48:dc:3a:ea:49:52: f5:88:ac:bd:93:7e:03:09:25:29:6a:04:7b:e4:bb:66:f8:5f: 14:18:a6:69 -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgISAZrJ4SqTVro6PbePNxIilXBCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNzNlZWI4ZDAyZjVmNjQ3ODhiM2ZkYzc4ZDZiYWI4YTU1 ZmQxNmEwHhcNMjUxMTI4MDk1MjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWFmNDg5MWRlYTE3NTNiNDZjYzQzOThlZDEwYmU0OWU0M2RjMTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fItToI420IglaMVrbwWMgLSy8+e H9GwXHfM2wuPdN4/0tKch/fl3Nn8b5XgDKhZXJuixDOEwRS+husFMNGLv+0ZvqiR YwSQ/SB4vgGRRt5tx9n3aySc/8xUpcgjeNQ/aTcW3S3PSSgeDUobPYWRVMpH7agu qNAdoY02RV/RuWMa26D0ZkxZPmX6lbS2dOYU9ZEprbNTeW2kIumuhf28Ygb2WkWc t2Ifm9lJsiTcX2bVoYiUfxpaARHi5Ea3z8nD268lPjsaOnDRHZcDyE0SGtAPZunq OK7MsGaj/LKCxfI89h1TEw4cxl/0ljja9DaJ+1A+yMIZ1DHh6VjngZ/dIwIDAQAB o4ICvjCCArowHQYDVR0OBBYEFDGvSJHeoXU7RsxDmO0QvknkPcFMMB8GA1UdIwQY MBaAFEFz7rjQL19keIs/3HjWurilX9FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmIt ZDgzZWQxNDBkMjhkLzEvTWE5SWtkNmhkVHRHekVPWTdSQy1TZVE5d1V3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmItZDgzZWQxNDBkMjhk LzEvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHTBggrBgEFBQcBBwEB/wSBwzCBwDCBvQQCAAEwgbYDBAAC OmIDBAIfgCAwDAMEASXpUgMEACXpVgMEAC1crgMEAi2C1AMEAC2JvAMEAC2RBQME AC2RowMEAC2RqAMEAC2YVwMEAC2cFAMEAC6tFAMEAE1J6QMEAE1J6wMEAE1J7gME AVPeFAMEAFkozAMEAVqc/gMEAVvajgMEA5vU4AMEALlN5wMEAMEW9AMEAMEXAwME AMHyagMEAMHybQMEAMIk0AMEAMJx0QMEANRK5wMEANWL5TANBgkqhkiG9w0BAQsF AAOCAQEAeevtPJiG7TkdUtOqJJ+ZFdPSGb/QhkjStxOrRBvEV+h+2OQOtzjjcSvi qa1k8tiCvln21wjXbAqkKsuoeQq+I56xXYw+oJs/W11L1mw0isvLCoE1HLZ9zOR2 ud1S9/S70daw5xGKMi5xRtK3B+BgJHLsUU2pkmI53+3ALqmPvy2S+7uXvr6tRiuB VvdsEUlsGlZE7WhyMp77ohpZK6zw26gBZHgHLoNVBmd6ns6bfpchBLKaOdVJ3XOm Gipoq4P377ZS+ztJPPSSE7Ac3B6mgfz9AUmyUG9CiDveWeN4kvvstACXSNw66klS 9YisvZN+AwklKWoEe+S7ZvhfFBimaQ== -----END CERTIFICATE-----Generated at Fri Dec 12 11:19:03 2025 by rpki-client