This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4D0hVz7lw-NvU_fulnpRL7ST07s.roa File: 4D0hVz7lw-NvU_fulnpRL7ST07s.roa (raw, json) Hash identifier: 9uHCN3sQUsW5ycKj8nd/jhHEiBtw/WMphotxws0smH8= Subject key identifier: E0:3D:21:57:3E:E5:C3:E3:6F:53:F7:EE:96:7A:51:2F:B4:93:D3:BB Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B45A0E30E58ADD46EAE1CFF606C9E427D Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4D0hVz7lw-NvU_fulnpRL7ST07s.roa Signing time: Mon 22 Dec 2025 10:35:30 +0000 ROA not before: Mon 22 Dec 2025 10:35:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50053 IP address blocks: 45.90.236.0/24 maxlen: 24 185.121.13.0/24 maxlen: 24 185.121.14.0/24 maxlen: 24 185.196.41.0/24 maxlen: 24 185.202.207.0/24 maxlen: 24 185.218.19.0/24 maxlen: 24 185.232.204.0/24 maxlen: 24 185.236.24.0/24 maxlen: 24 185.239.141.0/24 maxlen: 24 185.239.142.0/24 maxlen: 24 185.250.181.0/24 maxlen: 24 185.254.158.0/24 maxlen: 24 193.17.182.0/24 maxlen: 24 194.48.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 19:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:a0:e3:0e:58:ad:d4:6e:ae:1c:ff:60:6c:9e:42:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Dec 22 10:35:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e03d21573ee5c3e36f53f7ee967a512fb493d3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:61:b6:12:1f:73:39:0b:5c:7e:49:89:b0:16: 56:b2:45:7b:e9:36:a7:77:6b:65:a4:39:b5:1a:2c: 1b:d5:e1:1a:66:9b:47:24:f5:73:5c:a4:81:58:bc: 3d:5a:05:ab:1e:6f:6e:cb:c3:c1:a8:3a:44:82:11: 26:09:6c:20:84:60:af:32:1b:6c:d8:6a:4a:ea:29: 33:c7:cb:67:76:cd:09:5b:e8:95:e4:e3:d5:83:fc: 04:c0:5d:7b:83:ea:c3:68:ba:ba:b8:ec:86:a4:18: f5:d7:6e:f1:b0:a4:48:89:8a:00:17:09:75:d2:fd: 85:ab:c4:5d:f1:2d:4a:6d:96:d8:6c:4f:67:87:3d: 1b:55:cb:e7:ac:a3:f7:c9:e3:64:97:88:b3:15:c3: 93:af:b9:59:28:ba:fa:06:69:60:03:de:2c:38:cd: 6e:fe:04:de:40:99:e9:14:4a:76:5a:8a:03:e1:41: 98:89:dd:33:3e:17:6a:0b:63:e0:66:3b:f2:b5:68: 0e:88:73:d0:43:16:14:f1:27:1b:4c:3a:ad:36:21: 40:c6:6c:de:4a:c6:08:0c:5e:91:1e:43:16:b1:af: fe:1e:a9:c8:b1:76:b0:7d:49:cd:a8:50:18:d9:12: 46:74:fd:6a:9a:14:bf:da:50:d9:ae:36:08:5e:c2: ae:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:3D:21:57:3E:E5:C3:E3:6F:53:F7:EE:96:7A:51:2F:B4:93:D3:BB X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4D0hVz7lw-NvU_fulnpRL7ST07s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.236.0/24 185.121.13.0-185.121.14.255 185.196.41.0/24 185.202.207.0/24 185.218.19.0/24 185.232.204.0/24 185.236.24.0/24 185.239.141.0-185.239.142.255 185.250.181.0/24 185.254.158.0/24 193.17.182.0/24 194.48.140.0/23 Signature Algorithm: sha256WithRSAEncryption c0:90:dd:f9:19:30:d0:e8:a3:7f:f7:04:bd:22:0b:a0:ef:e3: 9f:59:22:3a:2d:41:ea:23:1f:f5:f3:6c:af:94:72:d8:e0:e3: fa:10:9d:ca:0d:c2:a3:4a:99:b9:fa:9d:ad:82:ce:5c:be:ff: 23:9a:54:e4:42:04:13:8f:80:9a:c5:3e:0f:bb:4f:7a:ca:18: c2:74:b7:5b:d9:59:03:7b:4e:9c:7a:cb:c6:f0:d8:f5:a5:cf: 2e:4a:f6:d7:4a:3b:77:da:c1:02:c4:ca:f3:7c:2a:52:f6:10: a3:67:46:03:08:b4:98:a1:95:52:e7:4e:89:be:91:cd:f9:e6: 1a:0b:4a:fe:bf:f2:94:bb:35:2d:8e:4b:fd:52:d7:d5:65:be: c1:20:3d:2e:77:59:94:b9:fe:77:09:c7:45:82:6e:43:a6:e1: a9:46:95:f0:0c:f6:88:57:38:a6:12:0d:a2:b4:af:ed:d6:34: a5:54:00:41:0d:40:2f:03:50:08:f2:2e:ae:5b:05:ec:a6:e2: 39:a4:25:da:e7:81:28:8f:e0:84:b7:6d:50:c8:57:4a:9f:9c: 1c:73:65:c7:e8:a7:c3:32:94:f3:27:50:de:75:08:91:d7:f2: 44:48:01:1d:f3:f4:d3:5c:9c:5a:f3:6b:13:c5:9a:67:e3:50: 3e:58:ff:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgISAZtFoOMOWK3Ubq4c/2BsnkJ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjUxMjIyMTAzNTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDNkMjE1NzNlZTVjM2UzNmY1M2Y3ZWU5NjdhNTEyZmI0OTNkM2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2G2Eh9zOQtcfkmJsBZWskV76Tan d2tlpDm1Giwb1eEaZptHJPVzXKSBWLw9WgWrHm9uy8PBqDpEghEmCWwghGCvMhts 2GpK6ikzx8tnds0JW+iV5OPVg/wEwF17g+rDaLq6uOyGpBj1127xsKRIiYoAFwl1 0v2Fq8Rd8S1KbZbYbE9nhz0bVcvnrKP3yeNkl4izFcOTr7lZKLr6BmlgA94sOM1u /gTeQJnpFEp2WooD4UGYid0zPhdqC2PgZjvytWgOiHPQQxYU8ScbTDqtNiFAxmze SsYIDF6RHkMWsa/+HqnIsXawfUnNqFAY2RJGdP1qmhS/2lDZrjYIXsKu2QIDAQAB o4ICWzCCAlcwHQYDVR0OBBYEFOA9IVc+5cPjb1P37pZ6US+0k9O7MB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvNEQwaFZ6N2x3LU52VV9mdWxucFJMN1NUMDdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDBeBAIAATBYAwQALVrsMAwD BAC5eQ0DBAC5eQ4DBAC5xCkDBAC5ys8DBAC52hMDBAC56MwDBAC57BgwDAMEALnv jQMEALnvjgMEALn6tQMEALn+ngMEAMERtgMEAcIwjDANBgkqhkiG9w0BAQsFAAOC AQEAwJDd+Rkw0Oijf/cEvSILoO/jn1kiOi1B6iMf9fNsr5Ry2ODj+hCdyg3Co0qZ ufqdrYLOXL7/I5pU5EIEE4+AmsU+D7tPesoYwnS3W9lZA3tOnHrLxvDY9aXPLkr2 10o7d9rBAsTK83wqUvYQo2dGAwi0mKGVUudOib6RzfnmGgtK/r/ylLs1LY5L/VLX 1WW+wSA9LndZlLn+dwnHRYJuQ6bhqUaV8Az2iFc4phINorSv7dY0pVQAQQ1ALwNQ CPIurlsF7KbiOaQl2ueBKI/ghLdtUMhXSp+cHHNlx+inwzKU8ydQ3nUIkdfyREgB HfP001ycWvNrE8WaZ+NQPlj/1g== -----END CERTIFICATE-----Generated at Tue Dec 23 04:07:50 2025 by rpki-client