This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/ArduW9RyhkgTaVNtmygI54aFcIA.roa File: ArduW9RyhkgTaVNtmygI54aFcIA.roa (raw, json) Hash identifier: H1GsuB1vIqvoIr6LSF93O4XBAfU4yiaPJMNktGfUc10= Subject key identifier: 02:B7:6E:5B:D4:72:86:48:13:69:53:6D:9B:28:08:E7:86:85:70:80 Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1 Certificate serial: 019B03CAC5357A366C05513E90C4EBB49489 Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/ArduW9RyhkgTaVNtmygI54aFcIA.roa Signing time: Tue 09 Dec 2025 15:46:18 +0000 ROA not before: Tue 09 Dec 2025 15:46:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48014 IP address blocks: 31.41.33.0/24 maxlen: 24 45.88.89.0/24 maxlen: 24 84.54.48.0/24 maxlen: 24 2001:3783::/32 maxlen: 32 2001:3787::/32 maxlen: 32 2a12:4040::/32 maxlen: 32 2a12:4045::/32 maxlen: 32 2a12:4047::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:ca:c5:35:7a:36:6c:05:51:3e:90:c4:eb:b4:94:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1 Validity Not Before: Dec 9 15:46:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=02b76e5bd47286481369536d9b2808e786857080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b6:8e:ca:fe:1c:34:62:3c:e9:52:f3:d1:37: 41:d1:ae:54:b6:7c:62:c1:7d:d2:c7:13:e8:ef:b2: cf:10:ae:18:51:93:64:fb:c8:fe:e2:9a:b7:1e:7a: 1c:13:5c:95:c8:59:65:29:2b:fd:7e:81:a5:eb:44: 8a:b1:48:ba:c2:01:f2:21:b0:d5:59:47:8d:2c:08: bb:61:d1:4b:aa:40:9f:55:ff:b5:b5:51:20:a8:21: 39:75:96:3d:67:35:52:8b:a2:0d:e9:e2:f7:69:99: c8:b7:0d:51:2d:9e:6e:3a:6d:8f:15:54:0b:62:6e: dd:cc:68:ef:98:84:91:f1:ff:9d:f3:43:73:96:33: 23:43:a7:15:f6:7e:73:d1:47:4d:b5:b5:a6:9e:de: 85:cd:ad:e5:75:39:13:bd:c7:97:11:5d:f1:8e:1e: 2b:2c:7b:a0:e7:a0:94:4a:a6:a0:e6:90:de:94:48: b5:11:19:a7:1c:4a:cc:b3:a7:1c:46:4b:78:3c:9b: a5:0f:d4:2b:0e:64:8b:2d:f9:b1:56:7f:b3:bb:64: bf:60:fe:54:dc:c9:57:7a:6e:37:d9:f2:70:05:32: 1b:b9:b7:95:13:63:80:53:c3:84:1c:33:59:74:b0: 3f:bf:3a:e6:ac:c5:7f:7c:32:07:34:01:44:ef:43: 71:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B7:6E:5B:D4:72:86:48:13:69:53:6D:9B:28:08:E7:86:85:70:80 X509v3 Authority Key Identifier: keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/ArduW9RyhkgTaVNtmygI54aFcIA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.41.33.0/24 45.88.89.0/24 84.54.48.0/24 IPv6: 2001:3783::/32 2001:3787::/32 2a12:4040::/32 2a12:4045::/32 2a12:4047::/32 Signature Algorithm: sha256WithRSAEncryption 8e:76:35:86:ec:a3:12:ba:7f:ae:4a:f0:1c:37:97:e3:93:83: 08:ed:05:87:a8:c0:f0:a6:13:46:6b:55:72:3c:13:88:3c:36: ad:3b:03:37:19:19:b6:2b:7a:c7:b7:00:4f:32:d1:16:82:0d: c4:13:5c:01:c2:8d:d1:41:18:25:75:f5:48:82:27:1f:b2:5a: ea:c7:ba:40:6f:cc:ed:89:f8:45:dd:b8:9b:09:8b:80:fd:74: 95:10:8c:ea:75:5c:fd:5b:19:df:a6:c6:a0:c8:25:5c:0d:3e: 28:88:0b:ca:23:fd:47:ef:37:33:17:4f:e9:31:d4:82:48:0c: 13:24:8e:ba:c8:2c:8d:82:32:85:05:4b:f6:05:30:36:dd:36: ba:78:06:0b:83:06:e1:53:34:20:4f:60:5d:34:e0:c9:a0:9b: 80:31:b7:56:86:f4:69:0f:49:25:28:f7:26:92:11:c7:f9:cb: 7e:31:a5:6b:ae:08:86:02:c7:7c:44:2c:1c:24:19:fc:34:53: 4b:39:82:8c:7c:51:bf:3a:1c:1c:8c:a0:ca:25:66:ff:fd:e6: 02:4a:c8:12:c6:31:ae:fa:6e:6d:d9:2e:ee:0f:7d:b4:ef:a0: 55:b9:c6:7e:86:92:c8:dd:31:b4:1d:7b:be:03:c3:39:0e:6c: a3:6d:df:7f -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgISAZsDysU1ejZsBVE+kMTrtJSJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYzkwNTE4ZGY3MGIxM2Q3MDZiZmUyMzdhYTVhNzY5MjZh NTc2ZDEwHhcNMjUxMjA5MTU0NjE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmI3NmU1YmQ0NzI4NjQ4MTM2OTUzNmQ5YjI4MDhlNzg2ODU3MDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLaOyv4cNGI86VLz0TdB0a5Utnxi wX3SxxPo77LPEK4YUZNk+8j+4pq3HnocE1yVyFllKSv9foGl60SKsUi6wgHyIbDV WUeNLAi7YdFLqkCfVf+1tVEgqCE5dZY9ZzVSi6IN6eL3aZnItw1RLZ5uOm2PFVQL Ym7dzGjvmISR8f+d80NzljMjQ6cV9n5z0UdNtbWmnt6Fza3ldTkTvceXEV3xjh4r LHug56CUSqag5pDelEi1ERmnHErMs6ccRkt4PJulD9QrDmSLLfmxVn+zu2S/YP5U 3MlXem432fJwBTIbubeVE2OAU8OEHDNZdLA/vzrmrMV/fDIHNAFE70NxmwIDAQAB o4ICQDCCAjwwHQYDVR0OBBYEFAK3blvUcoZIE2lTbZsoCOeGhXCAMB8GA1UdIwQY MBaAFF/JBRjfcLE9cGv+I3qlp2kmpXbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEt YzgzMDJlODJlYTIyLzEvQXJkdVc5Unloa2dUYVZOdG15Z0k1NGFGY0lBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEtYzgzMDJlODJlYTIy LzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTAYBAIAATASAwQAHykhAwQA LVhZAwQAVDYwMCkEAgACMCMDBQAgATeDAwUAIAE3hwMFACoSQEADBQAqEkBFAwUA KhJARzANBgkqhkiG9w0BAQsFAAOCAQEAjnY1huyjErp/rkrwHDeX45ODCO0Fh6jA 8KYTRmtVcjwTiDw2rTsDNxkZtit6x7cATzLRFoINxBNcAcKN0UEYJXX1SIInH7Ja 6se6QG/M7Yn4Rd24mwmLgP10lRCM6nVc/VsZ36bGoMglXA0+KIgLyiP9R+83MxdP 6THUgkgMEySOusgsjYIyhQVL9gUwNt02ungGC4MG4VM0IE9gXTTgyaCbgDG3Vob0 aQ9JJSj3JpIRx/nLfjGla64IhgLHfEQsHCQZ/DRTSzmCjHxRvzocHIygyiVm//3m AkrIEsYxrvpubdku7g99tO+gVbnGfoaSyN0xtB17vgPDOQ5so23ffw== -----END CERTIFICATE-----Generated at Sun Dec 14 21:30:46 2025 by rpki-client