This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TY7mSqIKbLBiyYwK7m1R8phK17E.roa File: TY7mSqIKbLBiyYwK7m1R8phK17E.roa (raw, json) Hash identifier: U+8iocHuRlagOjaMcDg5tGoasQOPnT/Kp3VN0CScYCU= Subject key identifier: 4D:8E:E6:4A:A2:0A:6C:B0:62:C9:8C:0A:EE:6D:51:F2:98:4A:D7:B1 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019AC72A49B7DC8094E9A4BE1C5AD22FC8E9 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TY7mSqIKbLBiyYwK7m1R8phK17E.roa Signing time: Thu 27 Nov 2025 21:13:48 +0000 ROA not before: Thu 27 Nov 2025 21:13:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 7029 IP address blocks: 45.86.15.0/24 maxlen: 24 45.87.240.0/24 maxlen: 24 45.129.124.0/24 maxlen: 24 45.137.60.0/24 maxlen: 24 45.151.101.0/24 maxlen: 24 45.151.102.0/24 maxlen: 24 103.91.146.0/24 maxlen: 24 2a06:1181:2::/48 maxlen: 48 2a09:17c0:22::/48 maxlen: 48 2a09:17c7:10::/48 maxlen: 48 2a0a:2940::/29 maxlen: 32 2a0a:2d07:9a::/48 maxlen: 48 2a0c:7886:22::/48 maxlen: 48 2a0d:1140::/29 maxlen: 32 2a0e:15c0:4::/48 maxlen: 48 2a0e:1a80:1::/48 maxlen: 48 2a0e:1a80:1312::/48 maxlen: 48 2a0e:2240::/29 maxlen: 32 2a0e:c785:1::/48 maxlen: 48 2a0e:c785:273::/48 maxlen: 48 2a0e:e980::/29 maxlen: 32 2a0e:f200::/48 maxlen: 48 2a0e:f500::/29 maxlen: 32 2a0e:f604:10::/48 maxlen: 48 2a0f:1200:2::/48 maxlen: 48 2a0f:1587:100::/48 maxlen: 48 2a0f:1e80:d9a8::/48 maxlen: 48 2a0f:1e84:3f::/48 maxlen: 48 2a0f:1e86:100::/48 maxlen: 48 2a0f:3047:fc1d::/48 maxlen: 48 2a0f:3940::/29 maxlen: 32 2a0f:3d80:bac::/48 maxlen: 48 2a0f:3d86:77::/48 maxlen: 48 2a0f:7d06:102::/48 maxlen: 48 2a0f:7d06:9c8a::/48 maxlen: 48 2a0f:bc00:100::/48 maxlen: 48 2a0f:df45:fc78::/48 maxlen: 48 2a0f:df47:200::/48 maxlen: 48 2a0f:e202:55::/48 maxlen: 48 2a0f:e640::/29 maxlen: 32 2a0f:e6c6:5532::/48 maxlen: 48 2a0f:e7c5:f8f9::/48 maxlen: 48 2a0f:e847:77::/48 maxlen: 48 2a0f:e847:acab::/48 maxlen: 48 2a10:3640::/29 maxlen: 32 2a10:5c00::/29 maxlen: 32 2a10:67c2:3::/48 maxlen: 48 2a10:7d00::/29 maxlen: 32 2a11:1200::/29 maxlen: 32 2a11:5200::/29 maxlen: 29 2a11:b200::/29 maxlen: 32 2a12:2c80::/29 maxlen: 32 2a12:ac43:1::/48 maxlen: 48 2a12:ac44:1312::/48 maxlen: 48 2a12:dc00::/29 maxlen: 32 2a12:ecc3:2::/48 maxlen: 48 2a13:cc0::/29 maxlen: 32 2a13:18c0:2::/48 maxlen: 48 2a13:18c0:22::/48 maxlen: 48 2a13:1940::/29 maxlen: 32 2a13:8c82:1::/48 maxlen: 48 2a13:9281:100::/48 maxlen: 48 2a13:c900:fd1a::/48 maxlen: 48 2a13:e107:99::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 22:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c7:2a:49:b7:dc:80:94:e9:a4:be:1c:5a:d2:2f:c8:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Nov 27 21:13:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4d8ee64aa20a6cb062c98c0aee6d51f2984ad7b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4b:fe:99:cb:e1:3b:30:82:75:e1:aa:b5:5a: f3:fd:36:6e:a3:4e:f8:6b:79:b2:00:ce:0c:c7:86: e4:d7:93:bb:07:85:62:00:79:e1:f1:4c:85:6c:9d: 28:b1:4f:4a:e3:68:b8:20:b3:d9:83:2e:f4:ad:90: b6:15:6c:95:4b:8a:cc:ea:dd:13:f1:0c:5d:fa:72: ac:eb:db:0c:20:e3:58:78:8a:6a:c3:6a:a1:5f:60: 6c:a9:f5:5f:5d:6c:92:56:a8:fe:7a:8b:05:b1:25: d1:ba:9b:49:96:28:3f:ce:48:59:10:3b:35:96:7f: 68:4a:6a:40:14:0e:eb:1a:4d:49:c1:fc:11:a9:ce: 0e:02:4c:5e:38:7e:16:a8:d2:a4:9c:ca:4e:b2:dd: 34:5e:4f:a7:e2:c1:d3:40:b2:76:66:82:6e:82:e0: 70:27:e2:45:c3:66:e6:6a:42:b6:8a:ee:b8:74:0e: 0a:88:59:4e:bf:40:d4:b6:31:9d:de:da:31:33:f5: e1:21:b9:9e:3a:14:07:5c:8b:90:27:41:de:d2:a4: 32:6b:16:ba:3e:05:b0:59:27:70:17:12:35:17:24: 0a:05:5b:f3:1f:06:cc:f9:02:79:8b:68:1c:10:88: 88:93:a5:dd:80:f5:4c:fa:a3:f0:77:1b:66:a4:16: dd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8E:E6:4A:A2:0A:6C:B0:62:C9:8C:0A:EE:6D:51:F2:98:4A:D7:B1 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TY7mSqIKbLBiyYwK7m1R8phK17E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.15.0/24 45.87.240.0/24 45.129.124.0/24 45.137.60.0/24 45.151.101.0-45.151.102.255 103.91.146.0/24 IPv6: 2a06:1181:2::/48 2a09:17c0:22::/48 2a09:17c7:10::/48 2a0a:2940::/29 2a0a:2d07:9a::/48 2a0c:7886:22::/48 2a0d:1140::/29 2a0e:15c0:4::/48 2a0e:1a80:1::/48 2a0e:1a80:1312::/48 2a0e:2240::/29 2a0e:c785:1::/48 2a0e:c785:273::/48 2a0e:e980::/29 2a0e:f200::/48 2a0e:f500::/29 2a0e:f604:10::/48 2a0f:1200:2::/48 2a0f:1587:100::/48 2a0f:1e80:d9a8::/48 2a0f:1e84:3f::/48 2a0f:1e86:100::/48 2a0f:3047:fc1d::/48 2a0f:3940::/29 2a0f:3d80:bac::/48 2a0f:3d86:77::/48 2a0f:7d06:102::/48 2a0f:7d06:9c8a::/48 2a0f:bc00:100::/48 2a0f:df45:fc78::/48 2a0f:df47:200::/48 2a0f:e202:55::/48 2a0f:e640::/29 2a0f:e6c6:5532::/48 2a0f:e7c5:f8f9::/48 2a0f:e847:77::/48 2a0f:e847:acab::/48 2a10:3640::/29 2a10:5c00::/29 2a10:67c2:3::/48 2a10:7d00::/29 2a11:1200::/29 2a11:5200::/29 2a11:b200::/29 2a12:2c80::/29 2a12:ac43:1::/48 2a12:ac44:1312::/48 2a12:dc00::/29 2a12:ecc3:2::/48 2a13:cc0::/29 2a13:18c0:2::/48 2a13:18c0:22::/48 2a13:1940::/29 2a13:8c82:1::/48 2a13:9281:100::/48 2a13:c900:fd1a::/48 2a13:e107:99::/48 Signature Algorithm: sha256WithRSAEncryption 04:b1:71:e6:32:d6:73:ae:09:45:da:b8:b2:c2:f0:ef:a2:af: 80:ed:0e:46:f9:87:2e:4c:df:3e:a4:0d:a5:9f:e8:f6:7a:d7: c3:a5:4d:cd:cc:40:bb:95:14:1e:a4:82:0a:a9:e6:d6:26:65: 2b:88:b3:bb:db:93:b4:ae:96:ee:21:77:af:2a:03:5c:e4:8e: 04:f9:c9:30:03:f2:00:3a:66:43:04:43:50:57:d9:23:93:0c: 9f:16:71:1d:88:db:4d:d9:4d:8a:8b:dc:16:5a:aa:40:52:89: 13:0f:96:fe:f0:16:76:8e:d7:9f:c7:d8:7f:cb:63:ed:a3:10: fa:82:a4:7b:2c:a1:31:a5:95:76:3b:26:75:fc:66:9e:34:0f: 91:fb:12:3a:93:c9:26:ad:c4:9a:65:43:1e:79:c0:2f:e7:af: b0:2d:83:8e:73:01:b9:06:97:c8:7e:2a:9a:1b:4c:90:f7:e6: cd:57:bc:0a:9a:35:3a:47:39:82:e4:0d:20:70:6b:bb:2d:74: 70:04:a2:58:85:c1:ff:37:6c:25:54:48:f1:78:6e:cc:9d:a5: 23:ef:a4:a3:ca:3e:77:26:90:bf:9d:c4:4f:c0:ef:c2:f0:7f: 73:2e:88:7c:78:27:49:c4:22:c4:e6:99:46:34:42:13:60:65: b6:41:68:f6 -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgISAZrHKkm33ICU6aS+HFrSL8jpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMTI3MjExMzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDhlZTY0YWEyMGE2Y2IwNjJjOThjMGFlZTZkNTFmMjk4NGFkN2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0v+mcvhOzCCdeGqtVrz/TZuo074 a3myAM4Mx4bk15O7B4ViAHnh8UyFbJ0osU9K42i4ILPZgy70rZC2FWyVS4rM6t0T 8Qxd+nKs69sMIONYeIpqw2qhX2BsqfVfXWySVqj+eosFsSXRuptJlig/zkhZEDs1 ln9oSmpAFA7rGk1JwfwRqc4OAkxeOH4WqNKknMpOst00Xk+n4sHTQLJ2ZoJuguBw J+JFw2bmakK2iu64dA4KiFlOv0DUtjGd3toxM/XhIbmeOhQHXIuQJ0He0qQyaxa6 PgWwWSdwFxI1FyQKBVvzHwbM+QJ5i2gcEIiIk6XdgPVM+qPwdxtmpBbdgQIDAQAB o4IEIDCCBBwwHQYDVR0OBBYEFE2O5kqiCmywYsmMCu5tUfKYStexMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvVFk3bVNxSUtiTEJpeVl3SzdtMVI4cGhLMTdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICNAYIKwYBBQUHAQcBAf8EggIjMIICHzAyBAIAATAsAwQA LVYPAwQALVfwAwQALYF8AwQALYk8MAwDBAAtl2UDBAAtl2YDBABnW5IwggHnBAIA AjCCAd8DBwAqBhGBAAIDBwAqCRfAACIDBwAqCRfHABADBQMqCilAAwcAKgotBwCa AwcAKgx4hgAiAwUDKg0RQAMHACoOFcAABAMHACoOGoAAAQMHACoOGoATEgMFAyoO IkADBwAqDseFAAEDBwAqDseFAnMDBQMqDumAAwcAKg7yAAAAAwUDKg71AAMHACoO 9gQAEAMHACoPEgAAAgMHACoPFYcBAAMHACoPHoDZqAMHACoPHoQAPwMHACoPHoYB AAMHACoPMEf8HQMFAyoPOUADBwAqDz2AC6wDBwAqDz2GAHcDBwAqD30GAQIDBwAq D30GnIoDBwAqD7wAAQADBwAqD99F/HgDBwAqD99HAgADBwAqD+ICAFUDBQMqD+ZA AwcAKg/mxlUyAwcAKg/nxfj5AwcAKg/oRwB3AwcAKg/oR6yrAwUDKhA2QAMFAyoQ XAADBwAqEGfCAAMDBQMqEH0AAwUDKhESAAMFAyoRUgADBQMqEbIAAwUDKhIsgAMH ACoSrEMAAQMHACoSrEQTEgMFAyoS3AADBwAqEuzDAAIDBQMqEwzAAwcAKhMYwAAC AwcAKhMYwAAiAwUDKhMZQAMHACoTjIIAAQMHACoTkoEBAAMHACoTyQD9GgMHACoT 4QcAmTANBgkqhkiG9w0BAQsFAAOCAQEABLFx5jLWc64JRdq4ssLw76KvgO0ORvmH LkzfPqQNpZ/o9nrXw6VNzcxAu5UUHqSCCqnm1iZlK4izu9uTtK6W7iF3ryoDXOSO BPnJMAPyADpmQwRDUFfZI5MMnxZxHYjbTdlNiovcFlqqQFKJEw+W/vAWdo7Xn8fY f8tj7aMQ+oKkeyyhMaWVdjsmdfxmnjQPkfsSOpPJJq3EmmVDHnnAL+evsC2DjnMB uQaXyH4qmhtMkPfmzVe8Cpo1Okc5guQNIHBruy10cASiWIXB/zdsJVRI8XhuzJ2l I++ko8o+dyaQv53ET8DvwvB/cy6IfHgnScQixOaZRjRCE2BltkFo9g== -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:30 2025 by rpki-client