This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/OL4z3_AH2R5VKDmV76KA4N0_DRs.roa File: OL4z3_AH2R5VKDmV76KA4N0_DRs.roa (raw, json) Hash identifier: RWSBH4V8NDE1BblMnSOrVq+idcHxW7APF8wIlUcgVPY= Subject key identifier: 38:BE:33:DF:F0:07:D9:1E:55:28:39:95:EF:A2:80:E0:DD:3F:0D:1B Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 019A6D532A2489DF01485BBFC9BEAE5368A2 Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/OL4z3_AH2R5VKDmV76KA4N0_DRs.roa Signing time: Mon 10 Nov 2025 10:32:38 +0000 ROA not before: Mon 10 Nov 2025 10:32:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 24877 IP address blocks: 84.55.24.0/21 maxlen: 24 84.55.38.0/23 maxlen: 23 84.55.40.0/21 maxlen: 21 84.55.40.0/22 maxlen: 22 84.55.44.0/23 maxlen: 23 84.55.46.0/23 maxlen: 23 88.222.0.0/17 maxlen: 17 88.222.128.0/18 maxlen: 18 88.222.192.0/20 maxlen: 20 88.222.216.0/24 maxlen: 24 88.222.224.0/20 maxlen: 20 88.222.248.0/22 maxlen: 22 88.223.64.0/20 maxlen: 20 88.223.64.0/21 maxlen: 21 88.223.72.0/21 maxlen: 21 88.223.100.0/22 maxlen: 22 88.223.132.0/22 maxlen: 22 88.223.136.0/23 maxlen: 23 88.223.136.0/24 maxlen: 24 88.223.139.0/24 maxlen: 24 88.223.140.0/22 maxlen: 22 88.223.156.0/22 maxlen: 22 88.223.179.0/24 maxlen: 24 88.223.182.0/24 maxlen: 24 95.173.40.0/21 maxlen: 21 213.164.112.0/22 maxlen: 22 217.147.32.0/23 maxlen: 24 217.147.32.0/24 maxlen: 24 217.147.33.0/24 maxlen: 24 217.147.39.0/24 maxlen: 24 217.147.42.0/23 maxlen: 23 2a01:7c80:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 00:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6d:53:2a:24:89:df:01:48:5b:bf:c9:be:ae:53:68:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Nov 10 10:32:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=38be33dff007d91e55283995efa280e0dd3f0d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3b:a0:6a:39:d7:96:11:bf:44:72:95:f0:77: 4b:5f:4a:15:b9:32:5a:d3:2d:7b:e2:dc:fc:fe:3d: 1f:cb:ae:21:59:14:18:e0:64:2b:9b:9c:dc:eb:9a: ab:9c:75:cf:28:10:78:ef:17:f9:02:cb:aa:aa:b5: 0e:06:dd:57:c7:56:4f:16:4a:f2:c8:d3:41:db:5a: d4:04:55:f0:44:ee:a1:fa:54:fe:4b:e8:69:b3:03: d7:87:61:20:0e:ec:74:1b:52:12:a5:08:6e:a8:c9: 6a:76:bb:9a:b0:f7:fd:c6:26:9a:2d:42:8d:d6:9d: 55:0a:e5:e9:83:77:ab:6e:65:3a:ce:a9:4c:7a:7a: 6d:79:6f:ef:7f:ba:a6:81:89:bd:2d:01:f1:3d:db: 4e:6f:73:bf:2e:dc:98:78:20:60:db:84:12:53:20: 3e:46:de:b9:d3:8e:86:63:cf:a0:d0:66:c1:a7:ad: 68:55:5e:c7:df:19:a2:7c:7b:7a:28:c8:15:ce:ba: cd:82:a8:ad:3d:bf:ee:68:00:bd:1c:ea:4d:1c:65: f6:8b:b0:08:1b:a8:dc:af:21:14:5e:aa:6f:da:73: fb:de:11:36:c7:09:5e:24:17:d9:ca:b4:aa:7f:24: f2:c8:f6:22:03:06:4a:8a:ac:90:ab:ac:58:26:46: 19:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BE:33:DF:F0:07:D9:1E:55:28:39:95:EF:A2:80:E0:DD:3F:0D:1B X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/OL4z3_AH2R5VKDmV76KA4N0_DRs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.55.24.0/21 84.55.38.0-84.55.47.255 88.222.0.0-88.222.207.255 88.222.216.0/24 88.222.224.0/20 88.222.248.0/22 88.223.64.0/20 88.223.100.0/22 88.223.132.0-88.223.137.255 88.223.139.0-88.223.143.255 88.223.156.0/22 88.223.179.0/24 88.223.182.0/24 95.173.40.0/21 213.164.112.0/22 217.147.32.0/23 217.147.39.0/24 217.147.42.0/23 IPv6: 2a01:7c80:8000::/33 Signature Algorithm: sha256WithRSAEncryption 6f:06:62:dc:a5:99:02:f3:f6:51:15:a5:c0:44:87:26:0d:55: b1:21:e6:49:15:95:6a:c2:4c:ff:cc:97:c3:86:5b:ac:93:5d: 60:65:f7:8e:b0:cf:0d:a6:16:c7:f4:3e:48:bc:89:3d:64:9f: d3:ad:49:63:d3:73:cb:e0:5e:7e:85:fa:93:21:75:fd:af:cf: 0b:66:ec:36:76:04:f2:1e:7b:a1:d3:de:16:3e:fd:98:9a:fa: 93:9c:2f:a1:9d:02:4e:92:1f:dc:31:83:b3:ce:6f:9d:d7:97: ae:68:31:33:c0:29:3a:64:3d:20:9e:ec:48:29:38:a5:8e:5c: e8:12:4b:ba:3f:6c:52:ab:e3:5c:63:6e:8b:a0:a8:94:56:44: 51:ca:33:a3:57:67:d2:a3:52:61:80:d0:b1:b2:a9:95:fa:c7: a5:bf:d4:c9:8d:0b:d9:a5:01:e0:fb:7a:5c:0c:e8:f8:59:d1: d2:2e:df:72:23:0f:6a:29:fa:67:d0:42:3e:41:c1:9b:0e:8b: 9c:b4:54:33:78:99:99:41:92:ef:72:db:f2:10:c6:e1:03:60: c3:0b:e5:1d:fe:fb:ec:2b:80:d8:ff:8f:cb:7c:83:bd:e1:2e: b7:28:b8:3b:d2:3e:41:34:3b:58:6b:72:a2:ae:4a:9a:68:cc: 5f:b8:0e:d0 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZptUyokid8BSFu/yb6uU2iiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjUxMTEwMTAzMjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGJlMzNkZmYwMDdkOTFlNTUyODM5OTVlZmEyODBlMGRkM2YwZDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zugajnXlhG/RHKV8HdLX0oVuTJa 0y174tz8/j0fy64hWRQY4GQrm5zc65qrnHXPKBB47xf5AsuqqrUOBt1Xx1ZPFkry yNNB21rUBFXwRO6h+lT+S+hpswPXh2EgDux0G1ISpQhuqMlqdruasPf9xiaaLUKN 1p1VCuXpg3erbmU6zqlMenpteW/vf7qmgYm9LQHxPdtOb3O/LtyYeCBg24QSUyA+ Rt65046GY8+g0GbBp61oVV7H3xmifHt6KMgVzrrNgqitPb/uaAC9HOpNHGX2i7AI G6jcryEUXqpv2nP73hE2xwleJBfZyrSqfyTyyPYiAwZKiqyQq6xYJkYZ0wIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFDi+M9/wB9keVSg5le+igODdPw0bMB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvT0w0ejNfQUgyUjVWS0RtVjc2S0E0TjBfRFJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG4BggrBgEFBQcBBwEB/wSBqDCBpTCBkgQCAAEwgYsDBANU NxgwDAMEAVQ3JgMEBFQ3IDALAwMBWN4DBARY3sADBABY3tgDBARY3uADBAJY3vgD BARY30ADBAJY32QwDAMEAljfhAMEAVjfiDAMAwQAWN+LAwQEWN+AAwQCWN+cAwQA WN+zAwQAWN+2AwQDX60oAwQC1aRwAwQB2ZMgAwQA2ZMnAwQB2ZMqMA4EAgACMAgD BgcqAXyAgDANBgkqhkiG9w0BAQsFAAOCAQEAbwZi3KWZAvP2URWlwESHJg1VsSHm SRWVasJM/8yXw4ZbrJNdYGX3jrDPDaYWx/Q+SLyJPWSf061JY9Nzy+BefoX6kyF1 /a/PC2bsNnYE8h57odPeFj79mJr6k5wvoZ0CTpIf3DGDs85vndeXrmgxM8ApOmQ9 IJ7sSCk4pY5c6BJLuj9sUqvjXGNui6ColFZEUcozo1dn0qNSYYDQsbKplfrHpb/U yY0L2aUB4Pt6XAzo+FnR0i7fciMPain6Z9BCPkHBmw6LnLRUM3iZmUGS73Lb8hDG 4QNgwwvlHf777CuA2P+Py3yDveEutyi4O9I+QTQ7WGtyoq5KmmjMX7gO0A== -----END CERTIFICATE-----Generated at Wed Dec 10 06:40:20 2025 by rpki-client