This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4cKU0rNf1wffFr42OWn-mSpnLT8.roa File: 4cKU0rNf1wffFr42OWn-mSpnLT8.roa (raw, json) Hash identifier: RS+uwVJ5dWL2n5rkVS3qldgAsFvCQhqCKbMw27MQMmE= Subject key identifier: E1:C2:94:D2:B3:5F:D7:07:DF:16:BE:36:39:69:FE:99:2A:67:2D:3F Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B664A66927862445D8096C77FC0F39741 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4cKU0rNf1wffFr42OWn-mSpnLT8.roa Signing time: Sun 28 Dec 2025 18:48:30 +0000 ROA not before: Sun 28 Dec 2025 18:48:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 45.90.16.0/24 maxlen: 24 45.90.17.0/24 maxlen: 24 45.131.134.0/24 maxlen: 24 185.108.204.0/24 maxlen: 24 185.126.82.0/24 maxlen: 24 185.199.54.0/24 maxlen: 24 185.199.158.0/24 maxlen: 24 185.199.159.0/24 maxlen: 24 185.206.251.0/24 maxlen: 24 185.209.38.0/24 maxlen: 24 185.209.73.0/24 maxlen: 24 185.209.74.0/24 maxlen: 24 185.209.75.0/24 maxlen: 24 185.210.233.0/24 maxlen: 24 185.210.235.0/24 maxlen: 24 185.214.108.0/24 maxlen: 24 185.218.20.0/24 maxlen: 24 185.218.101.0/24 maxlen: 24 185.220.248.0/24 maxlen: 24 185.220.249.0/24 maxlen: 24 185.220.250.0/23 maxlen: 24 185.221.20.0/24 maxlen: 24 185.222.28.0/24 maxlen: 24 185.222.29.0/24 maxlen: 24 185.223.80.0/24 maxlen: 24 185.223.155.0/24 maxlen: 24 185.225.0.0/23 maxlen: 23 185.225.1.0/24 maxlen: 24 185.225.2.0/24 maxlen: 24 185.225.3.0/24 maxlen: 24 185.226.104.0/24 maxlen: 24 185.226.105.0/24 maxlen: 24 185.226.107.0/24 maxlen: 24 185.227.144.0/24 maxlen: 24 185.227.146.0/23 maxlen: 24 185.227.147.0/24 maxlen: 24 185.228.72.0/24 maxlen: 24 185.228.75.0/24 maxlen: 24 185.232.206.0/24 maxlen: 24 185.234.22.0/24 maxlen: 24 185.246.112.0/24 maxlen: 24 193.8.112.0/23 maxlen: 24 193.8.112.0/24 maxlen: 24 193.8.114.0/24 maxlen: 24 193.58.144.0/24 maxlen: 24 193.58.146.0/23 maxlen: 24 193.58.146.0/24 maxlen: 24 194.5.67.0/24 maxlen: 24 194.76.169.0/24 maxlen: 24 194.76.172.0/24 maxlen: 24 194.124.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 04:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:4a:66:92:78:62:44:5d:80:96:c7:7f:c0:f3:97:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Dec 28 18:48:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e1c294d2b35fd707df16be363969fe992a672d3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dc:9f:c7:8a:3c:41:72:26:cf:12:ca:3f:7c: 2d:43:9d:c4:da:9d:30:e1:25:f7:95:2b:b4:87:63: 43:65:64:03:53:64:cf:41:62:62:1b:da:7d:d9:52: bb:25:f4:ad:bc:6c:a5:e6:0f:ba:d5:42:5e:b7:ea: 29:ab:3f:42:71:67:0e:7c:d6:6d:6e:b7:11:45:06: 46:a3:a9:cd:00:79:5f:bf:e1:14:b7:80:63:ad:d3: 03:c8:db:ed:29:44:1d:e4:a8:e6:b1:51:b1:bc:75: d0:ea:4e:7c:f0:9b:9f:9e:99:b1:90:61:a5:76:8f: 99:54:41:c5:50:fb:d4:10:a9:09:1a:23:95:d6:43: 4d:b2:71:20:5e:9f:01:8a:80:17:35:7c:de:e6:db: 68:ed:67:20:49:85:0e:4f:b0:60:11:85:35:32:3f: 86:d7:05:0b:3c:60:d3:44:2b:2c:15:ce:16:cc:0a: b3:4a:90:73:c4:56:7a:89:c1:7c:ef:09:a2:d2:4a: 26:fd:89:e7:8e:d5:36:7a:bf:1a:db:9b:f4:57:2f: eb:ce:aa:9e:6e:33:ad:ac:7b:5f:2a:fb:0b:23:9a: a9:ba:69:96:aa:34:4d:15:42:af:45:a2:94:46:03: 41:82:98:89:2e:be:c9:76:43:aa:3c:82:d5:5b:b4: e1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C2:94:D2:B3:5F:D7:07:DF:16:BE:36:39:69:FE:99:2A:67:2D:3F X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4cKU0rNf1wffFr42OWn-mSpnLT8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.16.0/23 45.131.134.0/24 185.108.204.0/24 185.126.82.0/24 185.199.54.0/24 185.199.158.0/23 185.206.251.0/24 185.209.38.0/24 185.209.73.0-185.209.75.255 185.210.233.0/24 185.210.235.0/24 185.214.108.0/24 185.218.20.0/24 185.218.101.0/24 185.220.248.0/22 185.221.20.0/24 185.222.28.0/23 185.223.80.0/24 185.223.155.0/24 185.225.0.0/22 185.226.104.0/23 185.226.107.0/24 185.227.144.0/24 185.227.146.0/23 185.228.72.0/24 185.228.75.0/24 185.232.206.0/24 185.234.22.0/24 185.246.112.0/24 193.8.112.0-193.8.114.255 193.58.144.0/24 193.58.146.0/23 194.5.67.0/24 194.76.169.0/24 194.76.172.0/24 194.124.69.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:07:87:6f:1d:ff:ca:5f:dd:09:14:ff:12:9a:71:0e:7b:d8: ac:33:65:db:72:87:9d:88:04:5d:44:a5:f1:6b:ca:f3:00:64: 86:9f:ca:59:6b:ee:8c:3c:1b:c1:a2:39:c8:38:48:26:e5:b3: 6a:71:8a:a5:35:7f:1e:44:da:28:2b:88:23:a3:9c:ed:f6:d1: 51:56:69:97:55:82:a3:39:da:87:d5:b3:ce:20:f5:ce:08:a3: 6d:cc:94:86:88:29:0f:6f:3b:5a:e3:6c:7d:53:44:12:44:aa: af:9f:47:11:33:ff:11:d4:f2:30:14:09:d5:db:00:19:c2:3e: b2:46:15:b3:2d:9a:a8:33:ae:eb:2d:fb:ef:b9:ac:1b:61:f0: 8f:38:f0:db:ac:1f:ce:27:ee:a6:93:cd:1e:43:81:b0:99:66: 6f:63:73:fe:12:66:2d:f4:38:49:5b:bb:dd:07:66:eb:af:8c: 5d:22:fb:20:90:2b:cb:21:6e:2f:f5:bb:c7:30:5e:24:e2:a3: 5f:ec:00:a8:48:f8:c1:7c:fd:c7:76:28:63:34:41:1e:36:f0: a9:f6:9c:a9:a4:45:1c:80:9f:21:db:62:e4:3e:ce:8c:76:46: 2b:d2:5a:73:6d:7c:83:44:d1:9b:d5:e8:b3:bb:f2:d1:40:97: e5:26:25:20 -----BEGIN CERTIFICATE----- MIIF5TCCBM2gAwIBAgISAZtmSmaSeGJEXYCWx3/A85dBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjUxMjI4MTg0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWMyOTRkMmIzNWZkNzA3ZGYxNmJlMzYzOTY5ZmU5OTJhNjcyZDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9yfx4o8QXImzxLKP3wtQ53E2p0w 4SX3lSu0h2NDZWQDU2TPQWJiG9p92VK7JfStvGyl5g+61UJet+opqz9CcWcOfNZt brcRRQZGo6nNAHlfv+EUt4BjrdMDyNvtKUQd5KjmsVGxvHXQ6k588JufnpmxkGGl do+ZVEHFUPvUEKkJGiOV1kNNsnEgXp8BioAXNXze5tto7WcgSYUOT7BgEYU1Mj+G 1wULPGDTRCssFc4WzAqzSpBzxFZ6icF87wmi0kom/YnnjtU2er8a25v0Vy/rzqqe bjOtrHtfKvsLI5qpummWqjRNFUKvRaKURgNBgpiJLr7JdkOqPILVW7ThPQIDAQAB o4IC8TCCAu0wHQYDVR0OBBYEFOHClNKzX9cH3xa+Njlp/pkqZy0/MB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvNGNLVTByTmYxd2ZmRnI0Mk9Xbi1tU3BuTFQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBBQYIKwYBBQUHAQcBAf8EgfUwgfIwge8EAgABMIHoAwQB LVoQAwQALYOGAwQAuWzMAwQAuX5SAwQAucc2AwQBuceeAwQAuc77AwQAudEmMAwD BAC50UkDBAK50UgDBAC50ukDBAC50usDBAC51mwDBAC52hQDBAC52mUDBAK53PgD BAC53RQDBAG53hwDBAC531ADBAC535sDBAK54QADBAG54mgDBAC54msDBAC545AD BAG545IDBAC55EgDBAC55EsDBAC56M4DBAC56hYDBAC59nAwDAMEBMEIcAMEAMEI cgMEAME6kAMEAcE6kgMEAMIFQwMEAMJMqQMEAMJMrAMEAMJ8RTANBgkqhkiG9w0B AQsFAAOCAQEAnQeHbx3/yl/dCRT/EppxDnvYrDNl23KHnYgEXUSl8WvK8wBkhp/K WWvujDwbwaI5yDhIJuWzanGKpTV/HkTaKCuII6Oc7fbRUVZpl1WCoznah9WzziD1 zgijbcyUhogpD287WuNsfVNEEkSqr59HETP/EdTyMBQJ1dsAGcI+skYVsy2aqDOu 6y3777msG2Hwjzjw26wfzifuppPNHkOBsJlmb2Nz/hJmLfQ4SVu73Qdm66+MXSL7 IJAryyFuL/W7xzBeJOKjX+wAqEj4wXz9x3YoYzRBHjbwqfacqaRFHICfIdti5D7O jHZGK9Jac218g0TRm9Xos7vy0UCX5SYlIA== -----END CERTIFICATE-----Generated at Mon Dec 29 07:55:36 2025 by rpki-client