This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3guU6bCnTJULbFlAiZ9AVFplLV4.roa File: 3guU6bCnTJULbFlAiZ9AVFplLV4.roa (raw, json) Hash identifier: DhGV/0AErsEIwC4KBu7JbGf2UucgiSaUU+HIugffmV0= Subject key identifier: DE:0B:94:E9:B0:A7:4C:95:0B:6C:59:40:89:9F:40:54:5A:65:2D:5E Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019AE45CF8525299EED057C344D4326C026F Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3guU6bCnTJULbFlAiZ9AVFplLV4.roa Signing time: Wed 03 Dec 2025 13:18:09 +0000 ROA not before: Wed 03 Dec 2025 13:18:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207461 IP address blocks: 45.86.245.0/24 maxlen: 24 45.86.247.0/24 maxlen: 24 45.92.168.0/24 maxlen: 24 45.92.169.0/24 maxlen: 24 45.92.170.0/24 maxlen: 24 45.92.171.0/24 maxlen: 24 45.92.247.0/24 maxlen: 24 45.94.36.0/24 maxlen: 24 45.94.37.0/24 maxlen: 24 45.94.38.0/24 maxlen: 24 45.94.39.0/24 maxlen: 24 45.94.46.0/24 maxlen: 24 45.94.47.0/24 maxlen: 24 45.95.98.0/23 maxlen: 23 45.95.99.0/24 maxlen: 24 45.128.24.0/24 maxlen: 24 45.130.124.0/24 maxlen: 24 45.130.127.0/24 maxlen: 24 45.130.254.0/24 maxlen: 24 45.131.213.0/24 maxlen: 24 45.133.209.0/24 maxlen: 24 45.133.210.0/24 maxlen: 24 45.136.172.0/23 maxlen: 23 45.137.40.0/24 maxlen: 24 45.137.41.0/24 maxlen: 24 45.137.42.0/23 maxlen: 23 45.140.14.0/24 maxlen: 24 45.145.12.0/24 maxlen: 24 45.145.13.0/24 maxlen: 24 45.145.14.0/24 maxlen: 24 45.147.28.0/24 maxlen: 24 45.152.198.0/24 maxlen: 24 192.166.153.0/24 maxlen: 24 193.5.65.0/24 maxlen: 24 193.27.19.0/24 maxlen: 24 2a0f:3d86:44::/48 maxlen: 48 2a0f:3d86:100::/48 maxlen: 48 2a0f:e1c0:a8b9::/48 maxlen: 48 2a13:8c86:120::/48 maxlen: 48 2a13:c900:99::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 19:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:5c:f8:52:52:99:ee:d0:57:c3:44:d4:32:6c:02:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 3 13:18:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=de0b94e9b0a74c950b6c5940899f40545a652d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:29:89:18:26:51:f6:36:ed:89:ca:d2:0b:35: 9a:1e:20:25:14:56:3a:28:d8:68:1e:aa:2f:93:a7: 2f:cc:e4:29:74:91:47:eb:0c:2e:86:c0:c4:e7:cf: 06:92:83:eb:ae:96:76:b2:a5:78:c9:13:04:53:fe: 2e:5a:a0:37:e0:da:60:0b:18:d9:b5:bc:82:9d:c9: 5a:a6:e1:c6:9f:d1:35:13:d4:d8:39:aa:24:3b:ca: db:d3:97:58:7f:48:ea:29:af:82:4c:e1:17:c1:af: cf:95:05:a0:73:11:52:bc:b3:73:68:79:a3:a1:3e: 7e:f9:80:eb:9e:5a:37:bd:2a:f5:56:ed:a2:68:f5: 55:b0:35:7d:59:14:fa:ed:92:4c:17:63:4c:39:e9: 65:90:3b:29:11:c4:b1:f0:5d:5d:8a:02:1e:cf:2c: 6d:f5:35:2b:90:e1:a0:a3:59:35:ac:57:58:1e:17: a8:33:fe:d7:6a:30:88:7b:5d:d7:84:4c:b2:b4:19: ff:58:12:a8:2b:19:d4:49:94:57:6c:66:03:44:9a: 06:2a:13:9c:44:18:30:c5:d4:18:17:21:03:e4:d0: 19:31:15:f0:5d:09:22:ec:c8:a4:70:f1:d6:03:2c: 36:90:7d:e8:c6:68:21:d8:ec:c1:97:67:84:dd:f8: 6f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:0B:94:E9:B0:A7:4C:95:0B:6C:59:40:89:9F:40:54:5A:65:2D:5E X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3guU6bCnTJULbFlAiZ9AVFplLV4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.245.0/24 45.86.247.0/24 45.92.168.0/22 45.92.247.0/24 45.94.36.0/22 45.94.46.0/23 45.95.98.0/23 45.128.24.0/24 45.130.124.0/24 45.130.127.0/24 45.130.254.0/24 45.131.213.0/24 45.133.209.0-45.133.210.255 45.136.172.0/23 45.137.40.0/22 45.140.14.0/24 45.145.12.0-45.145.14.255 45.147.28.0/24 45.152.198.0/24 192.166.153.0/24 193.5.65.0/24 193.27.19.0/24 IPv6: 2a0f:3d86:44::/48 2a0f:3d86:100::/48 2a0f:e1c0:a8b9::/48 2a13:8c86:120::/48 2a13:c900:99::/48 Signature Algorithm: sha256WithRSAEncryption 01:4f:6e:65:dd:da:b3:1d:52:92:72:2a:c8:1f:c5:f3:73:70: 50:7f:eb:5f:37:07:5e:fa:72:1b:62:bc:a3:7e:0c:4a:06:a3: 52:47:15:0e:e0:f6:7d:78:88:3f:7a:8a:63:6d:44:d5:a2:f1: f4:ae:e9:a2:19:6b:0b:6b:a9:64:42:3b:d1:de:f4:30:cf:0b: b6:84:37:34:45:41:a8:51:db:9b:55:ba:85:73:a3:d0:c5:38: d8:e9:0c:94:6c:49:b6:af:9c:92:91:13:52:59:4a:ff:67:5f: 59:4b:62:f6:9c:79:e9:ef:dd:0f:46:43:0c:5c:e3:93:c8:d7: 64:fc:fd:24:5d:c7:69:9c:ff:b2:c9:8e:47:a2:bb:78:ef:35: 05:a3:1e:5f:d4:33:c8:bc:1e:b7:99:de:88:5d:ff:4d:be:8d: 3a:dd:36:4a:e7:bb:4e:bc:cf:b6:95:6f:bd:4e:b7:0c:3d:19: 53:0a:22:27:ff:e6:dd:f0:42:36:6d:d5:89:7d:dd:b1:69:c2: 88:0f:ed:0c:c1:98:fe:01:cb:0e:9d:6f:c1:ea:51:b2:98:33: 3c:6b:ee:64:1b:69:0c:45:47:98:a6:a6:a2:50:f6:99:05:6d: 4e:e9:b9:9f:17:51:6d:cf:ab:83:83:cd:d3:08:63:51:18:26: dc:f4:ce:b9 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgISAZrkXPhSUpnu0FfDRNQybAJvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjAzMTMxODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTBiOTRlOWIwYTc0Yzk1MGI2YzU5NDA4OTlmNDA1NDVhNjUyZDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCmJGCZR9jbticrSCzWaHiAlFFY6 KNhoHqovk6cvzOQpdJFH6wwuhsDE588GkoPrrpZ2sqV4yRMEU/4uWqA34NpgCxjZ tbyCnclapuHGn9E1E9TYOaokO8rb05dYf0jqKa+CTOEXwa/PlQWgcxFSvLNzaHmj oT5++YDrnlo3vSr1Vu2iaPVVsDV9WRT67ZJMF2NMOellkDspEcSx8F1digIezyxt 9TUrkOGgo1k1rFdYHheoM/7XajCIe13XhEyytBn/WBKoKxnUSZRXbGYDRJoGKhOc RBgwxdQYFyED5NAZMRXwXQki7MikcPHWAyw2kH3oxmgh2OzBl2eE3fhvfQIDAQAB o4IC0TCCAs0wHQYDVR0OBBYEFN4LlOmwp0yVC2xZQImfQFRaZS1eMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvM2d1VTZiQ25USlVMYkZsQWlaOUFWRnBsTFY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHmBggrBgEFBQcBBwEB/wSB1jCB0zCBmwQCAAEwgZQDBAAt VvUDBAAtVvcDBAItXKgDBAAtXPcDBAItXiQDBAEtXi4DBAEtX2IDBAAtgBgDBAAt gnwDBAAtgn8DBAAtgv4DBAAtg9UwDAMEAC2F0QMEAC2F0gMEAS2IrAMEAi2JKAME AC2MDjAMAwQCLZEMAwQALZEOAwQALZMcAwQALZjGAwQAwKaZAwQAwQVBAwQAwRsT MDMEAgACMC0DBwAqDz2GAEQDBwAqDz2GAQADBwAqD+HAqLkDBwAqE4yGASADBwAq E8kAAJkwDQYJKoZIhvcNAQELBQADggEBAAFPbmXd2rMdUpJyKsgfxfNzcFB/6183 B176chtivKN+DEoGo1JHFQ7g9n14iD96imNtRNWi8fSu6aIZawtrqWRCO9He9DDP C7aENzRFQahR25tVuoVzo9DFONjpDJRsSbavnJKRE1JZSv9nX1lLYvaceenv3Q9G Qwxc45PI12T8/SRdx2mc/7LJjkeiu3jvNQWjHl/UM8i8HreZ3ohd/02+jTrdNkrn u068z7aVb71Otww9GVMKIif/5t3wQjZt1Yl93bFpwogP7QzBmP4Byw6db8HqUbKY Mzxr7mQbaQxFR5impqJQ9pkFbU7puZ8XUW3Pq4ODzdMIY1EYJtz0zrk= -----END CERTIFICATE-----Generated at Sat Dec 6 03:16:13 2025 by rpki-client