This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/SK64q6IOo6mWG6GKDJh2tKc5K6o.roa File: SK64q6IOo6mWG6GKDJh2tKc5K6o.roa (raw, json) Hash identifier: qgKUE1YLTRWnqfYllOlTbd1qqKiMATJhnj7zQQUJZ7A= Subject key identifier: 48:AE:B8:AB:A2:0E:A3:A9:96:1B:A1:8A:0C:98:76:B4:A7:39:2B:AA Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Certificate serial: 019B16E3D907FFA03A18FE50AAFE0AF8385B Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/SK64q6IOo6mWG6GKDJh2tKc5K6o.roa Signing time: Sat 13 Dec 2025 08:46:29 +0000 ROA not before: Sat 13 Dec 2025 08:46:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12444 IP address blocks: 84.17.66.0/24 maxlen: 24 84.17.67.0/24 maxlen: 24 84.17.68.0/24 maxlen: 24 84.17.70.0/24 maxlen: 24 84.17.71.0/24 maxlen: 24 84.17.75.0/24 maxlen: 24 84.17.83.0/24 maxlen: 24 84.17.84.0/24 maxlen: 24 84.17.86.0/24 maxlen: 24 84.17.87.0/24 maxlen: 24 84.17.89.0/24 maxlen: 24 84.17.90.0/24 maxlen: 24 84.17.91.0/24 maxlen: 24 84.17.93.0/24 maxlen: 24 185.118.176.0/24 maxlen: 24 185.118.177.0/24 maxlen: 24 185.118.178.0/24 maxlen: 24 185.118.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:e3:d9:07:ff:a0:3a:18:fe:50:aa:fe:0a:f8:38:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Validity Not Before: Dec 13 08:46:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=48aeb8aba20ea3a9961ba18a0c9876b4a7392baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0c:da:f0:9d:58:5b:71:b3:27:4f:b4:2d:83: 12:cb:b5:4a:67:8a:04:69:f6:69:46:43:8b:02:f7: 6e:ac:81:31:e9:8d:3f:2e:26:83:74:17:68:ed:5e: 74:22:85:6c:d0:ca:fb:4c:c9:43:ec:60:ae:3d:6a: 41:03:5f:c3:fb:1d:ca:44:fe:c7:52:66:7e:4c:b5: 58:bc:4d:d3:94:10:f7:11:ef:7c:54:1d:a8:fe:dd: 3f:38:c6:92:91:68:34:a3:0b:f7:90:99:a0:c3:1e: 16:c7:db:6b:e7:c8:1f:20:e1:5b:d5:06:e6:34:9a: 55:b1:5d:c9:16:6f:a5:86:ca:2d:a5:15:c8:67:d6: 2b:99:f0:ea:c9:3d:e9:9b:24:71:a7:0f:78:9e:2e: db:d4:33:ab:c6:08:44:3b:a4:70:62:67:ad:ce:64: 12:8b:c4:42:b1:8a:77:37:1b:ce:09:bd:ad:fa:d5: 1a:4e:ca:72:b4:a2:12:63:90:b5:a1:9e:ed:dd:39: 13:b7:7b:d8:bd:3c:80:4c:89:55:89:f6:9b:d8:66: b3:b3:60:e2:0f:50:0f:ee:08:0b:dd:2c:71:b9:92: e4:ae:37:ec:86:7c:96:84:5d:e1:d8:7b:77:df:31: a6:a4:65:a0:f8:00:ef:15:6e:a6:08:2d:0e:ca:a3: f6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AE:B8:AB:A2:0E:A3:A9:96:1B:A1:8A:0C:98:76:B4:A7:39:2B:AA X509v3 Authority Key Identifier: keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/SK64q6IOo6mWG6GKDJh2tKc5K6o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.17.66.0-84.17.68.255 84.17.70.0/23 84.17.75.0/24 84.17.83.0-84.17.84.255 84.17.86.0/23 84.17.89.0-84.17.91.255 84.17.93.0/24 185.118.176.0/22 Signature Algorithm: sha256WithRSAEncryption 53:cc:99:bf:5f:58:44:4c:51:1a:2e:2e:11:b0:ea:a1:de:0b: c7:c7:99:6e:ac:f2:04:9c:25:d0:df:31:8d:c6:e3:1a:cd:b5: 3c:86:6d:5a:1f:3a:c1:03:33:78:4a:0e:d6:01:68:64:2a:41: 89:66:a9:df:40:10:dd:71:ba:37:25:14:b6:7a:b3:cf:d5:46: 13:40:97:62:0a:90:26:3b:00:9e:2f:0f:07:c7:ac:6a:34:3e: 2d:c8:73:8f:ff:7d:26:b8:d9:36:c9:ec:b5:f2:dc:cd:b4:84: c8:29:95:f4:a5:e0:c0:1d:6d:8d:ea:4d:81:52:b3:4b:b6:ec: 8c:da:65:38:6d:8d:9b:0b:4c:bb:f2:90:32:18:a3:bd:ee:f7: 97:57:30:1b:21:98:e0:1e:1d:8f:4a:bc:8a:af:82:27:df:be: 4d:76:6b:a8:4f:bc:23:eb:a1:ba:58:cb:6c:55:dd:79:14:87: 03:33:e1:81:1c:2a:3f:ac:3d:90:80:a1:78:19:42:a9:2f:ba: 24:01:30:4c:fb:ce:90:0f:0b:b3:b3:c8:1d:37:2d:1b:aa:8f: a8:7b:74:bc:31:03:82:13:81:3d:72:fa:9e:18:40:3d:30:00: 03:a5:60:67:a9:e3:8c:8b:f4:d8:5d:39:9d:7a:dc:4c:53:ae: 53:5f:c5:1c -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZsW49kH/6A6GP5Qqv4K+DhbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2Mjk1MGViNzkxNjY2OGJiZmE4ZDFiODcwNTYwYjFj YTc3MzkwHhcNMjUxMjEzMDg0NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGFlYjhhYmEyMGVhM2E5OTYxYmExOGEwYzk4NzZiNGE3MzkyYmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Aza8J1YW3GzJ0+0LYMSy7VKZ4oE afZpRkOLAvdurIEx6Y0/LiaDdBdo7V50IoVs0Mr7TMlD7GCuPWpBA1/D+x3KRP7H UmZ+TLVYvE3TlBD3Ee98VB2o/t0/OMaSkWg0owv3kJmgwx4Wx9tr58gfIOFb1Qbm NJpVsV3JFm+lhsotpRXIZ9YrmfDqyT3pmyRxpw94ni7b1DOrxghEO6RwYmetzmQS i8RCsYp3NxvOCb2t+tUaTspytKISY5C1oZ7t3TkTt3vYvTyATIlVifab2Gazs2Di D1AP7ggL3SxxuZLkrjfshnyWhF3h2Ht33zGmpGWg+ADvFW6mCC0OyqP2oQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEiuuKuiDqOplhuhigyYdrSnOSuqMB8GA1UdIwQY MBaAFPS3YpUOt5FmaLv6jRuHBWCxync5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAt MmY4ZGYxODdmOThiLzEvU0s2NHE2SU9vNm1XRzZHS0RKaDJ0S2M1SzZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAtMmY4ZGYxODdmOThi LzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIMAwDBAFUEUID BABUEUQDBAFUEUYDBABUEUswDAMEAFQRUwMEAFQRVAMEAVQRVjAMAwQAVBFZAwQC VBFYAwQAVBFdAwQCuXawMA0GCSqGSIb3DQEBCwUAA4IBAQBTzJm/X1hETFEaLi4R sOqh3gvHx5lurPIEnCXQ3zGNxuMazbU8hm1aHzrBAzN4Sg7WAWhkKkGJZqnfQBDd cbo3JRS2erPP1UYTQJdiCpAmOwCeLw8Hx6xqND4tyHOP/30muNk2yey18tzNtITI KZX0peDAHW2N6k2BUrNLtuyM2mU4bY2bC0y78pAyGKO97veXVzAbIZjgHh2PSryK r4In375NdmuoT7wj66G6WMtsVd15FIcDM+GBHCo/rD2QgKF4GUKpL7okATBM+86Q Dwuzs8gdNy0bqo+oe3S8MQOCE4E9cvqeGEA9MAADpWBnqeOMi/TYXTmdetxMU65T X8Uc -----END CERTIFICATE-----Generated at Wed Dec 17 23:04:23 2025 by rpki-client