This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/20kCKLbl2o795zXGCwb2bEtOXOU.roa File: 20kCKLbl2o795zXGCwb2bEtOXOU.roa (raw, json) Hash identifier: I2QPyve9wBBPGaAijy2vZxd6y8nw89JwHKacHC17N/M= Subject key identifier: DB:49:02:28:B6:E5:DA:8E:FD:E7:35:C6:0B:06:F6:6C:4B:4E:5C:E5 Certificate issuer: /CN=f6af433974df373b70abd76b13e1c70c775f554b Certificate serial: 019B1246D18D3ABA0ABB26E4047BA10B6145 Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/20kCKLbl2o795zXGCwb2bEtOXOU.roa Signing time: Fri 12 Dec 2025 11:16:29 +0000 ROA not before: Fri 12 Dec 2025 11:16:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200482 IP address blocks: 45.89.142.0/24 maxlen: 24 193.187.255.0/24 maxlen: 24 2a12:3e80::/38 maxlen: 48 2a12:3e80::/40 maxlen: 48 2a12:3e80:100::/48 maxlen: 48 2a12:3e80:200::/39 maxlen: 48 2a12:3e80:200::/40 maxlen: 40 2a12:3e80:300::/40 maxlen: 40 2a12:3e80:402::/48 maxlen: 48 2a12:3e80:404::/48 maxlen: 48 2a12:3e80:500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:46:d1:8d:3a:ba:0a:bb:26:e4:04:7b:a1:0b:61:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b Validity Not Before: Dec 12 11:16:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=db490228b6e5da8efde735c60b06f66c4b4e5ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:20:b4:04:68:be:c2:3f:70:a6:ef:3a:83:8f: d5:05:40:de:0c:1e:b7:e6:88:5c:35:4d:82:79:36: ec:95:56:fb:36:e0:9b:ed:b3:ca:99:ce:72:ef:4d: e8:6d:02:21:5d:45:fb:d7:3d:04:69:d0:d7:08:a0: 11:89:46:f4:fe:46:b5:b3:f6:40:a2:f8:19:29:1b: f6:a7:5c:51:00:f6:f1:d6:0a:be:b9:69:fd:a7:e8: f1:b0:ec:86:ff:bf:dd:d9:57:6f:92:d7:76:4f:e5: 1d:21:e1:89:23:ac:b9:10:12:07:60:02:da:17:7c: 15:f7:a0:ba:9c:99:55:42:b3:04:f1:e2:6b:af:ac: e9:97:1b:46:25:25:6d:f7:60:e8:4e:40:7a:9a:d0: ce:f0:ea:d9:33:28:f4:20:52:8e:48:72:a2:a6:0b: ba:bd:04:53:3e:e5:fe:ba:2e:db:d9:ca:79:58:30: b3:d7:ac:e2:5c:ca:7c:df:31:18:c7:29:9c:05:15: 54:31:41:09:c7:6c:b4:25:90:bb:8f:a9:00:59:0a: 4e:c7:28:f9:1b:a5:a0:37:62:76:fb:b9:97:77:8d: 95:d2:83:67:dd:43:89:58:c8:51:10:36:08:b0:e7: 07:07:3e:39:cc:d0:26:02:e6:c8:53:fc:3c:0e:d7: f8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:49:02:28:B6:E5:DA:8E:FD:E7:35:C6:0B:06:F6:6C:4B:4E:5C:E5 X509v3 Authority Key Identifier: keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/20kCKLbl2o795zXGCwb2bEtOXOU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.142.0/24 193.187.255.0/24 IPv6: 2a12:3e80::/38 2a12:3e80:402::/48 2a12:3e80:404::/48 2a12:3e80:500::/40 Signature Algorithm: sha256WithRSAEncryption 42:a1:29:92:23:41:56:f6:aa:4e:d3:d8:01:79:1d:e1:c8:57: e6:18:0e:f0:0f:84:a7:d4:8c:62:c1:fd:3f:bd:9d:63:07:d5: 31:01:89:5a:73:69:77:66:68:03:63:57:a9:7d:3e:63:e3:f2: 63:26:39:3c:24:52:d9:02:cd:50:3f:f8:e9:c0:36:83:fc:28: f4:dd:fe:fe:5b:7b:82:c5:6e:63:c7:f2:86:29:3b:b9:66:18: bb:82:61:42:26:89:7a:09:32:32:a4:ec:89:ff:d9:64:84:54: 2a:60:4d:d1:c1:d7:2e:32:ae:f2:99:42:b9:53:bf:61:ab:ee: d8:70:ea:a8:08:4f:95:06:89:41:6f:ea:83:4e:85:37:a0:5a: 25:cd:46:13:09:f0:ab:a1:05:26:e8:3e:b4:fa:bf:52:c2:21: cb:1c:9b:2a:73:1a:05:05:8c:d1:53:b7:d3:7e:e6:51:98:7c: 37:7b:64:df:dd:7b:b2:71:a1:67:00:2e:68:80:31:29:92:db: 54:7b:1f:9c:30:cd:78:28:84:1b:74:e3:58:c6:b0:cc:65:ab: 90:cf:08:c6:ee:06:25:98:dd:ca:b6:82:54:cd:ec:2c:2d:e9: a2:01:27:fb:7d:51:14:62:0c:3a:87:a9:61:2c:86:aa:77:a9: b2:8a:5a:e5 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZsSRtGNOroKuybkBHuhC2FFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YWY0MzM5NzRkZjM3M2I3MGFiZDc2YjEzZTFjNzBjNzc1 ZjU1NGIwHhcNMjUxMjEyMTExNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjQ5MDIyOGI2ZTVkYThlZmRlNzM1YzYwYjA2ZjY2YzRiNGU1Y2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSC0BGi+wj9wpu86g4/VBUDeDB63 5ohcNU2CeTbslVb7NuCb7bPKmc5y703obQIhXUX71z0EadDXCKARiUb0/ka1s/ZA ovgZKRv2p1xRAPbx1gq+uWn9p+jxsOyG/7/d2Vdvktd2T+UdIeGJI6y5EBIHYALa F3wV96C6nJlVQrME8eJrr6zplxtGJSVt92DoTkB6mtDO8OrZMyj0IFKOSHKipgu6 vQRTPuX+ui7b2cp5WDCz16ziXMp83zEYxymcBRVUMUEJx2y0JZC7j6kAWQpOxyj5 G6WgN2J2+7mXd42V0oNn3UOJWMhREDYIsOcHBz45zNAmAubIU/w8Dtf4qQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFNtJAii25dqO/ec1xgsG9mxLTlzlMB8GA1UdIwQY MBaAFPavQzl03zc7cKvXaxPhxwx3X1VLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2It YTI2YmM2NTNiMDZiLzEvMjBrQ0tMYmwybzc5NXpYR0N3YjJiRXRPWE9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2ItYTI2YmM2NTNiMDZi LzEvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjASBAIAATAMAwQALVmOAwQA wbv/MCgEAgACMCIDBgIqEj6AAAMHACoSPoAEAgMHACoSPoAEBAMGACoSPoAFMA0G CSqGSIb3DQEBCwUAA4IBAQBCoSmSI0FW9qpO09gBeR3hyFfmGA7wD4Sn1Ixiwf0/ vZ1jB9UxAYlac2l3ZmgDY1epfT5j4/JjJjk8JFLZAs1QP/jpwDaD/Cj03f7+W3uC xW5jx/KGKTu5Zhi7gmFCJol6CTIypOyJ/9lkhFQqYE3RwdcuMq7ymUK5U79hq+7Y cOqoCE+VBolBb+qDToU3oFolzUYTCfCroQUm6D60+r9SwiHLHJsqcxoFBYzRU7fT fuZRmHw3e2Tf3XuycaFnAC5ogDEpkttUex+cMM14KIQbdONYxrDMZauQzwjG7gYl mN3KtoJUzewsLemiASf7fVEUYgw6h6lhLIaqd6myilrl -----END CERTIFICATE-----Generated at Mon Dec 15 12:57:25 2025 by rpki-client