This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/6aThY8uvIN1XwAgY6N5w4VlQU8g.roa File: 6aThY8uvIN1XwAgY6N5w4VlQU8g.roa (raw, json) Hash identifier: 75zQwEncUuBW4DVfhnIiHwP51JmTTN+DyyniesvlQVg= Subject key identifier: E9:A4:E1:63:CB:AF:20:DD:57:C0:08:18:E8:DE:70:E1:59:50:53:C8 Certificate issuer: /CN=de2e917315f0a878b21fc139d49a821aaddc3c97 Certificate serial: 019A6A14C65D915D4046B84BDFE7FE76ACA6 Authority key identifier: DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/6aThY8uvIN1XwAgY6N5w4VlQU8g.roa Signing time: Sun 09 Nov 2025 19:25:37 +0000 ROA not before: Sun 09 Nov 2025 19:25:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39351 IP address blocks: 45.83.220.0/24 maxlen: 24 45.83.221.0/24 maxlen: 24 45.83.222.0/23 maxlen: 24 45.129.56.0/24 maxlen: 24 45.129.59.0/24 maxlen: 24 141.98.252.0/24 maxlen: 24 141.98.253.0/24 maxlen: 24 141.98.254.0/24 maxlen: 24 141.98.255.0/24 maxlen: 24 185.65.132.0/24 maxlen: 24 185.65.133.0/24 maxlen: 24 185.65.134.0/24 maxlen: 24 185.65.135.0/24 maxlen: 24 185.195.232.0/24 maxlen: 24 185.195.233.0/24 maxlen: 24 185.209.196.0/24 maxlen: 24 185.209.197.0/24 maxlen: 24 185.209.198.0/24 maxlen: 24 185.209.199.0/24 maxlen: 24 185.213.152.0/24 maxlen: 24 185.213.153.0/24 maxlen: 24 185.213.154.0/24 maxlen: 24 185.213.155.0/24 maxlen: 24 193.32.126.0/24 maxlen: 24 193.32.127.0/24 maxlen: 24 193.32.248.0/24 maxlen: 24 193.32.249.0/24 maxlen: 24 193.138.216.0/22 maxlen: 22 195.54.182.0/24 maxlen: 24 195.54.183.0/24 maxlen: 24 2a03:1b20:1::/48 maxlen: 48 2a03:1b20:2::/48 maxlen: 48 2a03:1b20:3::/48 maxlen: 48 2a03:1b20:4::/48 maxlen: 48 2a03:1b20:5::/48 maxlen: 48 2a03:1b20:6::/48 maxlen: 48 2a03:1b20:7::/48 maxlen: 48 2a03:1b20:8::/48 maxlen: 48 2a03:1b20:9::/48 maxlen: 48 2a03:1b20:a::/48 maxlen: 48 2a03:1b20:b::/48 maxlen: 48 2a03:1b20:c::/48 maxlen: 48 2a03:1b20:901::/48 maxlen: 48 2a03:1b20:bef1::/48 maxlen: 48 2a03:1b20:bef2::/48 maxlen: 48 2a03:1b21:100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 04:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6a:14:c6:5d:91:5d:40:46:b8:4b:df:e7:fe:76:ac:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de2e917315f0a878b21fc139d49a821aaddc3c97 Validity Not Before: Nov 9 19:25:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e9a4e163cbaf20dd57c00818e8de70e1595053c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3a:6a:c9:b5:76:22:93:fe:ff:b2:ef:33:25: 8a:64:3c:ba:5b:29:0e:5d:4a:c3:fb:4c:47:aa:93: cf:18:f8:5c:25:4b:7a:25:cf:db:af:09:9e:6d:12: 46:fd:6e:21:28:56:a3:c3:b9:6e:45:e3:ba:44:87: ee:3f:ac:7f:ac:78:52:ca:2c:50:3d:8c:bd:67:ab: 83:00:1d:bf:8e:52:82:3e:85:28:b5:68:b9:8f:c7: 6c:ef:42:fd:75:37:1b:70:ab:da:13:d8:6f:5a:b2: 75:07:b6:06:3b:a6:b4:0e:e8:66:45:ee:c0:60:62: a6:52:95:52:57:e7:f4:d2:bb:f0:a3:1f:b6:87:9d: 2c:c1:83:65:48:77:7b:a9:6c:a0:b8:c8:fc:fa:bf: ef:14:ef:43:22:98:8f:1f:aa:ab:c2:33:f3:c9:4b: 73:47:0a:80:0d:d6:c1:a7:ea:2f:db:cb:32:a4:47: 4c:01:17:05:15:08:62:d1:00:2c:0d:87:0b:c5:75: f2:94:05:1b:b9:3b:b0:f7:49:49:cf:99:34:fd:af: c4:8d:04:f3:75:f1:51:7a:1d:e3:bf:f1:f2:85:b7: fa:85:7c:fd:8e:aa:99:57:8c:02:ba:da:6b:33:c5: 74:86:7f:f1:e1:42:c3:1d:85:6f:f5:5e:0f:e8:97: e5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A4:E1:63:CB:AF:20:DD:57:C0:08:18:E8:DE:70:E1:59:50:53:C8 X509v3 Authority Key Identifier: keyid:DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/6aThY8uvIN1XwAgY6N5w4VlQU8g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.220.0/22 45.129.56.0/24 45.129.59.0/24 141.98.252.0/22 185.65.132.0/22 185.195.232.0/23 185.209.196.0/22 185.213.152.0/22 193.32.126.0/23 193.32.248.0/23 193.138.216.0/22 195.54.182.0/23 IPv6: 2a03:1b20:1::-2a03:1b20:c:ffff:ffff:ffff:ffff:ffff 2a03:1b20:901::/48 2a03:1b20:bef1::-2a03:1b20:bef2:ffff:ffff:ffff:ffff:ffff 2a03:1b21:100::/40 Signature Algorithm: sha256WithRSAEncryption 41:62:08:25:d2:a7:74:87:38:ed:2d:99:64:16:84:81:be:7d: 77:a6:bc:0a:15:94:de:94:2b:96:71:a6:84:b1:3c:84:18:cf: 5b:8b:1f:bf:8d:44:62:d6:7d:48:f6:22:58:8b:a2:ac:a0:4f: 0c:62:56:41:09:78:bf:b3:5a:fb:99:00:a4:06:57:75:d5:5f: 30:60:b5:9f:33:fc:0f:66:a8:d0:d1:0a:8c:fb:50:b3:36:35: 12:0d:b5:68:2d:97:0a:45:7a:46:ba:cc:6d:66:59:25:96:ab: 76:14:00:db:b5:68:f9:2f:3f:2d:66:95:56:df:85:1e:0c:ca: 29:df:9d:fc:eb:bb:e3:7b:be:70:b4:89:d3:9b:49:47:0a:25: b8:b5:2c:eb:d8:1b:56:47:35:ac:52:a7:b9:9b:71:06:4d:17: 6d:fd:56:2b:31:ad:ec:ca:15:83:b5:2f:80:38:03:4a:0f:25: 30:9d:f7:c6:a0:06:c4:2c:c4:d4:e9:40:ea:e9:07:15:c3:25: 05:59:0a:21:1f:7c:4b:94:b5:3f:1a:0e:bc:89:9c:2f:dd:73: a6:64:6c:4b:e5:5a:7a:7e:ad:54:94:8b:5a:a9:4b:94:cc:f6: 9e:89:67:1a:fb:b2:38:55:25:fe:7f:b9:a2:cb:69:ad:66:00: c2:6e:38:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgISAZpqFMZdkV1ARrhL3+f+dqymMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMmU5MTczMTVmMGE4NzhiMjFmYzEzOWQ0OWE4MjFhYWRk YzNjOTcwHhcNMjUxMTA5MTkyNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWE0ZTE2M2NiYWYyMGRkNTdjMDA4MThlOGRlNzBlMTU5NTA1M2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzpqybV2IpP+/7LvMyWKZDy6WykO XUrD+0xHqpPPGPhcJUt6Jc/brwmebRJG/W4hKFajw7luReO6RIfuP6x/rHhSyixQ PYy9Z6uDAB2/jlKCPoUotWi5j8ds70L9dTcbcKvaE9hvWrJ1B7YGO6a0DuhmRe7A YGKmUpVSV+f00rvwox+2h50swYNlSHd7qWyguMj8+r/vFO9DIpiPH6qrwjPzyUtz RwqADdbBp+ov28sypEdMARcFFQhi0QAsDYcLxXXylAUbuTuw90lJz5k0/a/EjQTz dfFReh3jv/Hyhbf6hXz9jqqZV4wCutprM8V0hn/x4ULDHYVv9V4P6JflQwIDAQAB o4ICjzCCAoswHQYDVR0OBBYEFOmk4WPLryDdV8AIGOjecOFZUFPIMB8GA1UdIwQY MBaAFN4ukXMV8Kh4sh/BOdSaghqt3DyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2k2UmN4WHdxSGl5SDhFNTFKcUNHcTNjUEpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yZDViYzgtNWQ5My00YjBhLWE4YjYt ZjhkNjVjOTgzNzQ0LzEvNmFUaFk4dXZJTjFYd0FnWTZONXc0VmxRVThnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yZDViYzgtNWQ5My00YjBhLWE4YjYtZjhkNjVjOTgzNzQ0 LzEvM2k2UmN4WHdxSGl5SDhFNTFKcUNHcTNjUEpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGkBggrBgEFBQcBBwEB/wSBlDCBkTBOBAIAATBIAwQCLVPc AwQALYE4AwQALYE7AwQCjWL8AwQCuUGEAwQBucPoAwQCudHEAwQCudWYAwQBwSB+ AwQBwSD4AwQCwYrYAwQBwza2MD8EAgACMDkwEgMHACoDGyAAAQMHACoDGyAADAMH ACoDGyAJATASAwcAKgMbIL7xAwcAKgMbIL7yAwYAKgMbIQEwDQYJKoZIhvcNAQEL BQADggEBAEFiCCXSp3SHOO0tmWQWhIG+fXemvAoVlN6UK5ZxpoSxPIQYz1uLH7+N RGLWfUj2IliLoqygTwxiVkEJeL+zWvuZAKQGV3XVXzBgtZ8z/A9mqNDRCoz7ULM2 NRINtWgtlwpFeka6zG1mWSWWq3YUANu1aPkvPy1mlVbfhR4Myinfnfzru+N7vnC0 idObSUcKJbi1LOvYG1ZHNaxSp7mbcQZNF239VisxrezKFYO1L4A4A0oPJTCd98ag BsQsxNTpQOrpBxXDJQVZCiEffEuUtT8aDryJnC/dc6ZkbEvlWnp+rVSUi1qpS5TM 9p6JZxr7sjhVJf5/uaLLaa1mAMJuOHI= -----END CERTIFICATE-----Generated at Sun Dec 7 13:10:27 2025 by rpki-client