This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FV3diRNqdHzPeCAmbRVXLN6XnCU.roa File: FV3diRNqdHzPeCAmbRVXLN6XnCU.roa (raw, json) Hash identifier: INkDvR2aDR96jFnlMP/Ee85sD8d1+yEh7x5/bLqKcFs= Subject key identifier: 15:5D:DD:89:13:6A:74:7C:CF:78:20:26:6D:15:57:2C:DE:97:9C:25 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B2BDF430199D0AE6636FA5F80991A468C Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FV3diRNqdHzPeCAmbRVXLN6XnCU.roa Signing time: Wed 17 Dec 2025 10:33:30 +0000 ROA not before: Wed 17 Dec 2025 10:33:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 45.90.16.0/24 maxlen: 24 45.90.17.0/24 maxlen: 24 45.131.134.0/24 maxlen: 24 185.108.204.0/24 maxlen: 24 185.126.82.0/24 maxlen: 24 185.199.54.0/24 maxlen: 24 185.199.158.0/24 maxlen: 24 185.199.159.0/24 maxlen: 24 185.206.251.0/24 maxlen: 24 185.209.38.0/24 maxlen: 24 185.209.73.0/24 maxlen: 24 185.209.74.0/24 maxlen: 24 185.209.75.0/24 maxlen: 24 185.210.233.0/24 maxlen: 24 185.210.235.0/24 maxlen: 24 185.214.108.0/24 maxlen: 24 185.218.20.0/24 maxlen: 24 185.218.101.0/24 maxlen: 24 185.220.248.0/24 maxlen: 24 185.220.249.0/24 maxlen: 24 185.220.250.0/23 maxlen: 24 185.221.20.0/24 maxlen: 24 185.222.28.0/24 maxlen: 24 185.222.29.0/24 maxlen: 24 185.223.80.0/24 maxlen: 24 185.223.155.0/24 maxlen: 24 185.225.0.0/23 maxlen: 23 185.225.1.0/24 maxlen: 24 185.225.2.0/24 maxlen: 24 185.225.3.0/24 maxlen: 24 185.226.104.0/24 maxlen: 24 185.226.105.0/24 maxlen: 24 185.226.107.0/24 maxlen: 24 185.227.144.0/24 maxlen: 24 185.227.146.0/23 maxlen: 24 185.227.147.0/24 maxlen: 24 185.228.75.0/24 maxlen: 24 185.232.206.0/24 maxlen: 24 185.234.22.0/24 maxlen: 24 185.246.112.0/24 maxlen: 24 193.8.112.0/23 maxlen: 24 193.8.112.0/24 maxlen: 24 193.8.114.0/24 maxlen: 24 193.58.144.0/24 maxlen: 24 193.58.146.0/23 maxlen: 24 193.58.146.0/24 maxlen: 24 194.5.67.0/24 maxlen: 24 194.76.169.0/24 maxlen: 24 194.76.172.0/24 maxlen: 24 194.124.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:df:43:01:99:d0:ae:66:36:fa:5f:80:99:1a:46:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Dec 17 10:33:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=155ddd89136a747ccf7820266d15572cde979c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6d:3a:59:10:90:c6:2a:21:36:d7:e4:e0:4e: 28:0f:d2:66:eb:c1:be:d2:d8:e8:71:dd:b1:0a:9d: 27:b3:39:b3:4f:db:ce:f3:ab:44:be:05:dc:91:00: db:51:75:6b:bc:87:c6:db:79:13:8b:94:78:1d:46: 6f:a5:9d:65:21:70:90:26:b5:5e:63:55:2f:6f:28: 34:eb:87:50:52:21:76:ff:dd:48:63:f3:af:5f:fe: d1:ce:34:cf:fa:19:a2:c7:76:b1:df:ce:85:04:56: 00:aa:25:c6:dc:27:a5:6e:cc:83:1f:7d:ef:e7:8b: f1:ba:02:9d:a2:8d:ac:8f:6f:db:ba:ea:32:bf:c1: 8b:be:2b:58:7e:6d:da:5d:cd:cb:47:29:9a:fe:34: 60:35:c6:62:34:c5:ba:fe:5b:48:be:fa:9d:82:1c: 7d:70:47:b4:40:b9:fc:4d:1e:3b:bb:5a:8d:1d:b9: f5:bc:7a:d3:7b:13:7c:7b:ce:1e:8d:2d:6a:bf:89: fe:0c:32:5a:18:fb:a7:4b:39:bf:4e:24:17:ff:b7: cf:ae:e1:8b:8b:37:cf:e1:82:21:e2:c2:21:bf:d1: dd:3a:dd:e5:da:3b:6a:26:b0:77:e9:4a:9a:08:ba: cc:56:f7:9b:a8:91:da:0e:af:df:83:6f:b5:a5:33: e7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5D:DD:89:13:6A:74:7C:CF:78:20:26:6D:15:57:2C:DE:97:9C:25 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FV3diRNqdHzPeCAmbRVXLN6XnCU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.16.0/23 45.131.134.0/24 185.108.204.0/24 185.126.82.0/24 185.199.54.0/24 185.199.158.0/23 185.206.251.0/24 185.209.38.0/24 185.209.73.0-185.209.75.255 185.210.233.0/24 185.210.235.0/24 185.214.108.0/24 185.218.20.0/24 185.218.101.0/24 185.220.248.0/22 185.221.20.0/24 185.222.28.0/23 185.223.80.0/24 185.223.155.0/24 185.225.0.0/22 185.226.104.0/23 185.226.107.0/24 185.227.144.0/24 185.227.146.0/23 185.228.75.0/24 185.232.206.0/24 185.234.22.0/24 185.246.112.0/24 193.8.112.0-193.8.114.255 193.58.144.0/24 193.58.146.0/23 194.5.67.0/24 194.76.169.0/24 194.76.172.0/24 194.124.69.0/24 Signature Algorithm: sha256WithRSAEncryption 95:08:62:42:d2:4e:40:fb:a1:8b:7f:33:d4:d3:f2:61:68:c5: 01:fd:ca:61:68:ef:b9:77:d3:3d:df:73:98:ca:10:f4:91:7a: 5c:55:6f:c6:02:8d:ac:52:6f:e8:eb:6a:04:db:21:17:91:dc: f6:cb:ac:1b:d4:8e:61:c0:46:22:4f:b2:35:29:51:6a:56:67: a4:8a:ee:a4:0f:e6:99:53:a0:24:cc:77:0c:1e:91:dd:2c:0f: e5:a7:fb:18:29:0d:e0:23:fb:62:44:76:1a:35:a7:53:bf:bd: 68:4d:d5:10:3f:f5:4a:a1:f0:a9:0b:ab:24:ea:53:f0:5a:65: c2:c7:f8:d2:d1:cf:66:96:32:cd:01:39:6e:51:c0:2d:83:d0: 90:5e:93:fe:b4:e5:00:03:f1:e7:fe:93:5f:29:c7:c6:f5:87: 39:ef:ad:eb:25:bf:15:69:ee:46:d4:86:c0:5c:64:d8:6f:df: 14:5f:07:9e:82:de:9b:60:67:04:b4:15:d9:81:03:e4:ae:a0: e5:eb:3a:b5:a1:c2:31:b8:be:9f:98:c5:c5:4e:66:82:aa:80: d9:10:20:fc:00:f0:8b:15:8d:27:8d:06:0c:46:ef:0d:cc:0a: e9:4b:f8:38:0d:1e:dc:be:6e:f9:58:60:5c:24:59:0c:3c:c0: 0a:92:4b:95 -----BEGIN CERTIFICATE----- MIIF3jCCBMagAwIBAgISAZsr30MBmdCuZjb6X4CZGkaMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjUxMjE3MTAzMzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTVkZGQ4OTEzNmE3NDdjY2Y3ODIwMjY2ZDE1NTcyY2RlOTc5YzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW06WRCQxiohNtfk4E4oD9Jm68G+ 0tjocd2xCp0nszmzT9vO86tEvgXckQDbUXVrvIfG23kTi5R4HUZvpZ1lIXCQJrVe Y1Uvbyg064dQUiF2/91IY/OvX/7RzjTP+hmix3ax386FBFYAqiXG3CelbsyDH33v 54vxugKdoo2sj2/buuoyv8GLvitYfm3aXc3LRyma/jRgNcZiNMW6/ltIvvqdghx9 cEe0QLn8TR47u1qNHbn1vHrTexN8e84ejS1qv4n+DDJaGPunSzm/TiQX/7fPruGL izfP4YIh4sIhv9HdOt3l2jtqJrB36UqaCLrMVvebqJHaDq/fg2+1pTPnVwIDAQAB o4IC6jCCAuYwHQYDVR0OBBYEFBVd3YkTanR8z3ggJm0VVyzel5wlMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvRlYzZGlSTnFkSHpQZUNBbWJSVlhMTjZYbkNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH/BggrBgEFBQcBBwEB/wSB7zCB7DCB6QQCAAEwgeIDBAEt WhADBAAtg4YDBAC5bMwDBAC5flIDBAC5xzYDBAG5x54DBAC5zvsDBAC50SYwDAME ALnRSQMEArnRSAMEALnS6QMEALnS6wMEALnWbAMEALnaFAMEALnaZQMEArnc+AME ALndFAMEAbneHAMEALnfUAMEALnfmwMEArnhAAMEAbniaAMEALniawMEALnjkAME AbnjkgMEALnkSwMEALnozgMEALnqFgMEALn2cDAMAwQEwQhwAwQAwQhyAwQAwTqQ AwQBwTqSAwQAwgVDAwQAwkypAwQAwkysAwQAwnxFMA0GCSqGSIb3DQEBCwUAA4IB AQCVCGJC0k5A+6GLfzPU0/JhaMUB/cphaO+5d9M933OYyhD0kXpcVW/GAo2sUm/o 62oE2yEXkdz2y6wb1I5hwEYiT7I1KVFqVmekiu6kD+aZU6AkzHcMHpHdLA/lp/sY KQ3gI/tiRHYaNadTv71oTdUQP/VKofCpC6sk6lPwWmXCx/jS0c9mljLNATluUcAt g9CQXpP+tOUAA/Hn/pNfKcfG9Yc5763rJb8Vae5G1IbAXGTYb98UXweegt6bYGcE tBXZgQPkrqDl6zq1ocIxuL6fmMXFTmaCqoDZECD8APCLFY0njQYMRu8NzArpS/g4 DR7cvm75WGBcJFkMPMAKkkuV -----END CERTIFICATE-----Generated at Thu Dec 18 09:35:50 2025 by rpki-client