This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/1-RxRYOWF8Da3pE3ZrbsP6R3Zj-0.roa File: 1-RxRYOWF8Da3pE3ZrbsP6R3Zj-0.roa (raw, json) Hash identifier: TsOzqhF2prS7qgWPaaNWV3WwD3aGAkIyffrH+VNvf1k= Subject key identifier: F9:1C:51:60:E5:85:F0:36:B7:A4:4D:D9:AD:BB:0F:E9:1D:D9:8F:ED Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978 Certificate serial: 019B07738572C27C266533A70D0272F1F800 Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/1-RxRYOWF8Da3pE3ZrbsP6R3Zj-0.roa Signing time: Wed 10 Dec 2025 08:49:29 +0000 ROA not before: Wed 10 Dec 2025 08:49:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6730 IP address blocks: 31.10.128.0/17 maxlen: 17 31.10.128.0/18 maxlen: 18 31.10.192.0/18 maxlen: 18 46.126.0.0/15 maxlen: 15 46.126.0.0/16 maxlen: 16 46.127.0.0/16 maxlen: 16 46.140.0.0/16 maxlen: 16 46.140.0.0/17 maxlen: 17 46.140.128.0/17 maxlen: 17 62.2.0.0/16 maxlen: 16 62.2.0.0/17 maxlen: 17 62.2.128.0/17 maxlen: 17 77.56.0.0/14 maxlen: 14 77.56.0.0/15 maxlen: 15 77.58.0.0/15 maxlen: 15 80.218.0.0/15 maxlen: 15 80.218.0.0/16 maxlen: 16 80.219.0.0/16 maxlen: 16 81.7.224.0/19 maxlen: 19 81.7.224.0/20 maxlen: 20 81.7.240.0/20 maxlen: 20 84.20.32.0/20 maxlen: 20 84.20.32.0/21 maxlen: 21 84.20.40.0/21 maxlen: 21 84.20.48.0/21 maxlen: 21 84.20.48.0/22 maxlen: 22 84.20.52.0/22 maxlen: 22 84.72.0.0/14 maxlen: 14 84.72.0.0/15 maxlen: 16 84.73.0.0/16 maxlen: 16 84.74.0.0/15 maxlen: 15 84.74.0.0/16 maxlen: 17 84.74.128.0/17 maxlen: 17 84.75.0.0/16 maxlen: 16 178.82.0.0/16 maxlen: 17 194.29.0.0/19 maxlen: 19 194.29.0.0/20 maxlen: 20 194.29.16.0/20 maxlen: 20 195.202.192.0/18 maxlen: 18 195.202.192.0/19 maxlen: 19 195.202.224.0/19 maxlen: 19 212.47.160.0/19 maxlen: 19 212.47.160.0/20 maxlen: 20 212.47.176.0/20 maxlen: 20 213.193.64.0/18 maxlen: 18 213.193.64.0/19 maxlen: 19 213.193.96.0/19 maxlen: 19 217.162.0.0/16 maxlen: 16 217.162.0.0/17 maxlen: 17 217.162.128.0/17 maxlen: 17 217.168.32.0/19 maxlen: 19 217.168.32.0/20 maxlen: 20 217.168.48.0/20 maxlen: 20 2a00:e2c0::/32 maxlen: 32 2a00:e2c0::/33 maxlen: 33 2a00:e2c0:8000::/33 maxlen: 33 2a02:aa00::/27 maxlen: 27 2a02:aa00::/28 maxlen: 28 2a02:aa10::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:73:85:72:c2:7c:26:65:33:a7:0d:02:72:f1:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978 Validity Not Before: Dec 10 08:49:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f91c5160e585f036b7a44dd9adbb0fe91dd98fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:14:54:f0:be:0a:7c:77:22:d6:5e:cf:9c:d6: fd:a1:ce:97:69:2a:a1:ba:82:75:18:bd:f6:4c:06: 57:25:d8:73:c5:63:2a:c4:8d:47:2b:3d:84:26:1a: bf:ac:6e:66:90:30:79:68:62:5d:68:8a:9c:18:dc: 11:5b:46:26:39:6d:46:41:b8:ca:c0:a3:84:87:16: a5:2e:20:41:1e:f5:17:5b:52:a4:12:87:9a:3b:87: 33:30:bd:52:77:18:44:e2:44:26:e3:b6:3a:da:5b: bd:fd:6b:fa:99:65:87:0b:76:20:e7:80:32:ef:ae: b8:79:5e:65:35:e1:b3:cd:d2:82:9c:ee:62:77:68: c1:7d:e0:a5:70:8c:6c:fe:51:a2:e3:78:34:95:79: 03:59:b8:38:4c:53:55:55:7a:7f:80:62:99:e3:75: 6b:34:b7:44:4c:c4:e5:47:8f:9a:ef:a4:f0:64:12: c0:25:b4:83:7d:9c:67:7c:11:14:8e:40:12:40:51: e0:27:cf:6b:95:db:55:79:d0:ad:cb:43:63:dd:c6: 5b:58:0b:b7:80:71:49:26:ed:bd:14:a0:19:fd:2e: 40:4b:56:79:0f:c2:19:60:d3:11:9c:ad:47:f9:7c: 0e:0b:63:c5:66:4b:7a:5c:ac:b0:65:bf:58:1d:87: 19:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1C:51:60:E5:85:F0:36:B7:A4:4D:D9:AD:BB:0F:E9:1D:D9:8F:ED X509v3 Authority Key Identifier: keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/1-RxRYOWF8Da3pE3ZrbsP6R3Zj-0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.10.128.0/17 46.126.0.0/15 46.140.0.0/16 62.2.0.0/16 77.56.0.0/14 80.218.0.0/15 81.7.224.0/19 84.20.32.0-84.20.55.255 84.72.0.0/14 178.82.0.0/16 194.29.0.0/19 195.202.192.0/18 212.47.160.0/19 213.193.64.0/18 217.162.0.0/16 217.168.32.0/19 IPv6: 2a00:e2c0::/32 2a02:aa00::/27 Signature Algorithm: sha256WithRSAEncryption 19:f4:3e:af:5e:8f:7b:78:29:bc:a3:f6:82:b2:a4:58:32:10: 3b:19:a3:81:14:c0:45:65:c8:81:ba:13:e6:1f:fb:cb:ff:4c: 3f:4b:bd:66:91:0b:d8:4d:ac:41:f3:72:df:e6:a7:1e:c6:91: 0b:3c:73:40:be:74:47:be:07:4f:d3:1a:ea:b4:8e:c0:fd:32: 37:16:1e:47:d4:87:e7:60:4d:69:a8:99:a1:49:e7:05:22:bb: 69:2e:64:25:1b:46:99:38:7f:a7:b9:4b:20:94:ea:dc:8a:41: ca:d6:85:e9:dc:ab:92:22:6e:14:6b:3d:a5:01:d5:1a:41:d7: 57:c7:a1:16:92:66:09:84:7b:11:fa:6c:c5:e9:3a:5f:fa:00: 79:a0:9b:9b:af:53:ca:17:14:21:06:52:7d:a7:81:47:d6:eb: 2a:cb:7e:3c:6b:28:1f:90:f7:3b:28:33:ae:56:ae:bc:12:4b: 76:7b:ac:76:cf:bf:38:76:bc:9a:fe:9b:c5:e8:e0:59:4b:ed: 7d:49:74:c5:74:4c:1e:31:ed:04:d6:43:0d:1b:9b:7d:99:bb: 62:5f:46:cc:4e:04:cb:e8:d0:6b:5f:f8:53:4c:f8:f1:ae:3b: 33:4f:a5:c4:b3:31:3e:c0:5f:21:75:cb:23:cb:24:39:ea:91: e4:73:a5:a9 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgISAZsHc4VywnwmZTOnDQJy8fgAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZDI0NDIxNGQ3NjQ2OGQzZmI3MmFiYWQxODkyZWYyM2Rl ZGU5NzgwHhcNMjUxMjEwMDg0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTFjNTE2MGU1ODVmMDM2YjdhNDRkZDlhZGJiMGZlOTFkZDk4ZmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxRU8L4KfHci1l7PnNb9oc6XaSqh uoJ1GL32TAZXJdhzxWMqxI1HKz2EJhq/rG5mkDB5aGJdaIqcGNwRW0YmOW1GQbjK wKOEhxalLiBBHvUXW1KkEoeaO4czML1SdxhE4kQm47Y62lu9/Wv6mWWHC3Yg54Ay 7664eV5lNeGzzdKCnO5id2jBfeClcIxs/lGi43g0lXkDWbg4TFNVVXp/gGKZ43Vr NLdETMTlR4+a76TwZBLAJbSDfZxnfBEUjkASQFHgJ89rldtVedCty0Nj3cZbWAu3 gHFJJu29FKAZ/S5AS1Z5D8IZYNMRnK1H+XwOC2PFZkt6XKywZb9YHYcZSQIDAQAB o4ICfDCCAngwHQYDVR0OBBYEFPkcUWDlhfA2t6RN2a27D+kd2Y/tMB8GA1UdIwQY MBaAFL3SRCFNdkaNP7cqutGJLvI97el4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmRKRUlVMTJSbzBfdHlxNjBZa3U4ajN0NlhnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83NTZlZWYtNjYyOS00NjNhLTk5ZmYt NDZhNDNlZjAyMjFiLzEvMS1SeFJZT1dGOERhM3BFM1pyYnNQNlIzWmotMC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZDQvNzU2ZWVmLTY2MjktNDYzYS05OWZmLTQ2YTQzZWYwMjIx Yi8xL3ZkSkVJVTEyUm8wX3R5cTYwWWt1OGozdDZYZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCBkAYIKwYBBQUHAQcBAf8EgYAwfjBmBAIAATBgAwQHHwqA AwMBLn4DAwAujAMDAD4CAwMCTTgDAwFQ2gMEBVEH4DAMAwQFVBQgAwQDVBQwAwMC VEgDAwCyUgMEBcIdAAMEBsPKwAMEBdQvoAMEBtXBQAMDANmiAwQF2aggMBQEAgAC MA4DBQAqAOLAAwUFKgKqADANBgkqhkiG9w0BAQsFAAOCAQEAGfQ+r16Pe3gpvKP2 grKkWDIQOxmjgRTARWXIgboT5h/7y/9MP0u9ZpEL2E2sQfNy3+anHsaRCzxzQL50 R74HT9Ma6rSOwP0yNxYeR9SH52BNaaiZoUnnBSK7aS5kJRtGmTh/p7lLIJTq3IpB ytaF6dyrkiJuFGs9pQHVGkHXV8ehFpJmCYR7Efpsxek6X/oAeaCbm69TyhcUIQZS faeBR9brKst+PGsoH5D3OygzrlauvBJLdnusds+/OHa8mv6bxejgWUvtfUl0xXRM HjHtBNZDDRubfZm7Yl9GzE4Ey+jQa1/4U0z48a47M0+lxLMxPsBfIXXLI8skOeqR 5HOlqQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:10:22 2025 by rpki-client