This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/_pMQhNHuZFKsXULOQ-Ks2G_g9eg.roa File: _pMQhNHuZFKsXULOQ-Ks2G_g9eg.roa (raw, json) Hash identifier: oA/vH6XeMgro0iohA1TCUTrJ8xj3T10hjUQgQuGLEjI= Subject key identifier: FE:93:10:84:D1:EE:64:52:AC:5D:42:CE:43:E2:AC:D8:6F:E0:F5:E8 Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019ABBE22CAA48A0F747DDC22EA2BDDD4DB8 Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/_pMQhNHuZFKsXULOQ-Ks2G_g9eg.roa Signing time: Tue 25 Nov 2025 16:39:12 +0000 ROA not before: Tue 25 Nov 2025 16:39:12 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44559 IP address blocks: 45.153.229.0/24 maxlen: 24 80.64.30.0/24 maxlen: 24 92.119.228.0/24 maxlen: 24 188.119.66.0/24 maxlen: 24 213.166.80.0/24 maxlen: 24 2a0d:1ac3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:e2:2c:aa:48:a0:f7:47:dd:c2:2e:a2:bd:dd:4d:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Nov 25 16:39:12 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fe931084d1ee6452ac5d42ce43e2acd86fe0f5e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d0:51:b7:87:de:f2:95:a2:d9:da:ff:2e:40: 6f:17:34:ee:bd:aa:8f:12:c4:1d:0e:72:0c:f7:e4: e7:0d:fc:6a:71:4e:1c:24:37:e4:9c:05:f5:21:ed: b4:e6:55:8d:0f:44:be:0a:97:e2:4a:e7:44:32:a1: 48:a4:3b:11:74:62:4a:47:9a:2d:51:4e:ce:ec:81: 8c:28:63:9b:db:30:d3:2d:7c:c1:bc:39:95:ae:b2: eb:7e:72:b2:f0:94:31:8a:07:76:00:65:89:20:2e: 68:14:92:2f:0f:4b:05:84:32:1e:f7:e0:cd:cf:bf: 7b:3d:a5:a9:a8:ab:ef:31:31:d3:d1:3c:38:08:39: 11:ba:45:ab:5c:0a:13:c1:2a:e8:0f:e4:57:4f:56: eb:22:b5:82:ab:47:6d:b4:b4:b9:59:7b:c8:d7:82: aa:1c:0f:5b:1a:e9:f7:a0:2b:d2:e2:a8:75:5d:2e: 81:2a:dc:93:9a:c1:b6:35:b8:42:e3:98:7e:f7:84: 86:31:c6:60:82:10:6b:a3:ca:05:58:9c:54:45:2b: 74:3d:86:de:0a:ef:a8:ee:9c:0a:cf:3d:6f:e8:7e: 8e:d0:06:44:05:e6:b0:61:8b:a7:91:f6:c4:f1:80: 91:f1:7c:cb:b6:a5:42:d2:b8:c1:47:8d:ff:a2:c1: fb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:93:10:84:D1:EE:64:52:AC:5D:42:CE:43:E2:AC:D8:6F:E0:F5:E8 X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/_pMQhNHuZFKsXULOQ-Ks2G_g9eg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.229.0/24 80.64.30.0/24 92.119.228.0/24 188.119.66.0/24 213.166.80.0/24 IPv6: 2a0d:1ac3::/32 Signature Algorithm: sha256WithRSAEncryption 53:68:92:14:d6:c7:c1:19:44:04:7b:82:38:ad:c6:29:f3:e7: 75:97:83:e1:cf:45:5f:42:0d:e0:45:90:4f:2b:a8:a5:8f:b1: b1:ee:63:1c:2c:54:8c:1c:af:40:95:72:06:a0:22:9d:0c:da: 8b:cb:d5:f3:8b:15:39:e4:17:04:56:ec:1f:4f:3f:60:38:83: 7b:19:de:8c:aa:63:fe:73:f9:eb:c4:0f:85:4b:44:f5:a5:6c: d5:c0:4b:98:80:33:11:9f:d3:4e:5c:ad:e4:95:9d:a9:1a:0a: 46:39:7e:c7:34:75:87:71:ac:7e:06:c4:dc:3e:8f:d0:8d:50: 5a:ce:6c:e4:73:90:f9:2f:be:53:cc:9a:fa:16:aa:ec:e5:01: a3:e8:fb:bb:00:68:ca:06:df:03:8e:00:69:2c:25:37:b5:a4: 82:9c:d4:18:17:af:c8:d3:ab:cd:44:91:73:85:5f:bf:7c:92: 96:56:11:cd:0e:c9:2b:44:c5:be:27:88:4f:89:58:6e:c5:32: 3a:7e:5f:3e:3c:c4:49:e0:78:32:fe:43:3c:02:a2:d7:34:40: 3b:86:fb:5b:53:84:99:3d:66:a5:06:43:b2:4c:1f:1c:53:48: 47:d7:0f:6d:e8:f1:5e:ca:92:43:c4:c9:bd:6a:58:8b:7b:e5: 93:f5:14:26 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZq74iyqSKD3R93CLqK93U24MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjUxMTI1MTYzOTEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTkzMTA4NGQxZWU2NDUyYWM1ZDQyY2U0M2UyYWNkODZmZTBmNWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tBRt4fe8pWi2dr/LkBvFzTuvaqP EsQdDnIM9+TnDfxqcU4cJDfknAX1Ie205lWND0S+CpfiSudEMqFIpDsRdGJKR5ot UU7O7IGMKGOb2zDTLXzBvDmVrrLrfnKy8JQxigd2AGWJIC5oFJIvD0sFhDIe9+DN z797PaWpqKvvMTHT0Tw4CDkRukWrXAoTwSroD+RXT1brIrWCq0dttLS5WXvI14Kq HA9bGun3oCvS4qh1XS6BKtyTmsG2NbhC45h+94SGMcZgghBro8oFWJxURSt0PYbe Cu+o7pwKzz1v6H6O0AZEBeawYYunkfbE8YCR8XzLtqVC0rjBR43/osH7/QIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFP6TEITR7mRSrF1CzkPirNhv4PXoMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvX3BNUWhOSHVaRktzWFVMT1EtS3MyR19nOWVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQALZnlAwQA UEAeAwQAXHfkAwQAvHdCAwQA1aZQMA0EAgACMAcDBQAqDRrDMA0GCSqGSIb3DQEB CwUAA4IBAQBTaJIU1sfBGUQEe4I4rcYp8+d1l4Phz0VfQg3gRZBPK6ilj7Gx7mMc LFSMHK9AlXIGoCKdDNqLy9XzixU55BcEVuwfTz9gOIN7Gd6MqmP+c/nrxA+FS0T1 pWzVwEuYgDMRn9NOXK3klZ2pGgpGOX7HNHWHcax+BsTcPo/QjVBazmzkc5D5L75T zJr6Fqrs5QGj6Pu7AGjKBt8DjgBpLCU3taSCnNQYF6/I06vNRJFzhV+/fJKWVhHN DskrRMW+J4hPiVhuxTI6fl8+PMRJ4Hgy/kM8AqLXNEA7hvtbU4SZPWalBkOyTB8c U0hH1w9t6PFeypJDxMm9aliLe+WT9RQm -----END CERTIFICATE-----Generated at Fri Dec 5 11:51:48 2025 by rpki-client