This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/_mL7hcF4ZPvPPXLAtzSeabjQS34.roa File: _mL7hcF4ZPvPPXLAtzSeabjQS34.roa (raw, json) Hash identifier: DBnna8FaIwhZ3GWldzYJcweUnTCSXyYKWo3RB/UTPD4= Subject key identifier: FE:62:FB:85:C1:78:64:FB:CF:3D:72:C0:B7:34:9E:69:B8:D0:4B:7E Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019AC961E880C0384DBA53251023693B9ED2 Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/_mL7hcF4ZPvPPXLAtzSeabjQS34.roa Signing time: Fri 28 Nov 2025 07:33:48 +0000 ROA not before: Fri 28 Nov 2025 07:33:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8311 IP address blocks: 194.143.192.0/24 maxlen: 24 194.143.193.0/24 maxlen: 24 194.143.194.0/24 maxlen: 24 194.143.195.0/24 maxlen: 24 194.143.196.0/24 maxlen: 24 194.143.197.0/24 maxlen: 24 194.143.198.0/24 maxlen: 24 194.143.199.0/24 maxlen: 24 194.143.200.0/24 maxlen: 24 194.143.201.0/24 maxlen: 24 194.143.202.0/24 maxlen: 24 194.143.204.0/24 maxlen: 24 194.143.208.0/24 maxlen: 24 194.143.211.0/24 maxlen: 24 194.143.212.0/23 maxlen: 23 194.143.214.0/24 maxlen: 24 194.143.215.0/24 maxlen: 24 194.143.216.0/24 maxlen: 24 194.143.219.0/24 maxlen: 24 194.143.220.0/24 maxlen: 24 195.114.192.0/24 maxlen: 24 195.114.195.0/24 maxlen: 24 195.114.202.0/24 maxlen: 24 213.220.1.0/24 maxlen: 24 213.220.10.0/24 maxlen: 24 213.220.12.0/24 maxlen: 24 213.220.15.0/24 maxlen: 24 213.220.17.0/24 maxlen: 24 213.220.19.0/24 maxlen: 24 213.220.20.0/24 maxlen: 24 213.220.21.0/24 maxlen: 24 213.220.22.0/23 maxlen: 23 213.220.24.0/21 maxlen: 24 213.220.32.0/22 maxlen: 22 213.220.36.0/23 maxlen: 23 213.220.38.0/24 maxlen: 24 213.220.40.0/24 maxlen: 24 213.220.43.0/24 maxlen: 24 213.220.44.0/22 maxlen: 22 213.220.48.0/23 maxlen: 23 213.220.52.0/23 maxlen: 23 213.220.55.0/24 maxlen: 24 213.220.56.0/23 maxlen: 23 213.220.59.0/24 maxlen: 24 213.220.60.0/23 maxlen: 24 213.220.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:61:e8:80:c0:38:4d:ba:53:25:10:23:69:3b:9e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Nov 28 07:33:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fe62fb85c17864fbcf3d72c0b7349e69b8d04b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:27:b8:60:c1:de:3b:bc:39:07:62:b6:89:c0: b0:2a:01:55:ce:34:75:cb:df:eb:de:fb:0d:a0:53: 07:c7:ef:25:9f:f0:3f:da:ae:9d:55:f7:65:15:a6: 2a:d2:ad:2a:32:d3:86:3a:fc:ec:18:9b:d4:87:c8: 53:91:b2:9a:18:0e:36:eb:b9:98:7b:de:a7:d8:97: 1c:13:4c:dc:f6:bf:db:0d:04:37:ac:62:03:5b:63: d7:31:9d:97:75:d5:2e:7e:24:96:51:6d:37:81:b9: 57:e8:ad:92:f2:8d:24:83:82:1a:b7:7d:d5:66:04: eb:00:5a:a4:4c:37:dd:c3:ef:9a:48:d3:31:84:4a: 11:b3:1f:44:fe:28:1f:4f:88:46:f5:16:23:46:15: b7:2d:70:27:3d:1f:a3:73:f5:92:d5:1b:8b:c9:7a: c0:12:de:cb:da:d0:9d:56:a8:ff:da:76:b0:a0:72: fa:b7:90:86:ad:01:04:6d:8e:3a:43:28:97:7a:80: ab:de:c6:ce:12:cd:e3:ec:71:36:6e:46:fd:8d:64: f0:ac:4a:0e:07:e1:7e:b9:b3:69:cc:e4:8b:32:23: 60:4f:eb:0e:12:ea:19:de:e2:9c:da:62:96:8d:aa: ec:23:8f:8b:ed:21:80:23:23:11:e3:81:35:60:2b: e2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:62:FB:85:C1:78:64:FB:CF:3D:72:C0:B7:34:9E:69:B8:D0:4B:7E X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/_mL7hcF4ZPvPPXLAtzSeabjQS34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.143.192.0-194.143.202.255 194.143.204.0/24 194.143.208.0/24 194.143.211.0-194.143.216.255 194.143.219.0-194.143.220.255 195.114.192.0/24 195.114.195.0/24 195.114.202.0/24 213.220.1.0/24 213.220.10.0/24 213.220.12.0/24 213.220.15.0/24 213.220.17.0/24 213.220.19.0-213.220.38.255 213.220.40.0/24 213.220.43.0-213.220.49.255 213.220.52.0/23 213.220.55.0-213.220.57.255 213.220.59.0-213.220.61.255 213.220.63.0/24 Signature Algorithm: sha256WithRSAEncryption 98:bd:8d:24:88:6a:96:b6:b6:c6:e8:44:cd:d3:4d:58:76:54: a7:cf:af:e2:61:2b:2c:d4:a8:1f:91:eb:9d:8d:1d:05:ba:61: 17:d6:ad:59:79:d2:79:54:a1:07:bd:5e:2e:c8:93:cf:55:78: 83:95:4f:6e:b4:1b:0d:c0:0c:c0:a0:2a:0a:ef:45:99:3c:e5: 5b:9b:81:d1:35:52:5e:ca:40:0b:2b:8c:f3:bc:87:df:2a:32: 4c:68:d4:95:71:5b:6b:90:7a:86:ad:22:c5:2d:59:a5:93:c8: e6:46:4d:b3:6c:a7:79:34:e5:fd:d2:86:d3:98:76:c9:47:0a: 94:3d:3f:6b:bd:90:3c:2b:e3:9a:ca:e5:d5:b4:83:86:85:f1: 3b:42:a1:a5:b7:6b:cb:da:89:e6:db:7c:e2:65:33:c4:b1:7c: ac:08:08:c6:1f:0d:7c:79:d8:f7:f3:46:ec:ba:03:96:bc:19: 8e:5f:34:18:91:34:23:a4:99:0e:71:5d:8b:0d:82:df:09:39: d9:11:07:a9:06:24:72:e0:2c:50:09:98:04:26:ba:fe:b9:16: f0:11:5a:85:61:88:f5:46:bd:6f:19:b5:52:51:a4:6b:85:96: df:93:b2:e4:67:14:3d:51:e3:36:ef:d8:9e:e8:1b:47:d2:4d: 78:1c:63:52 -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgISAZrJYeiAwDhNulMlECNpO57SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjUxMTI4MDczMzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTYyZmI4NWMxNzg2NGZiY2YzZDcyYzBiNzM0OWU2OWI4ZDA0YjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApye4YMHeO7w5B2K2icCwKgFVzjR1 y9/r3vsNoFMHx+8ln/A/2q6dVfdlFaYq0q0qMtOGOvzsGJvUh8hTkbKaGA4267mY e96n2JccE0zc9r/bDQQ3rGIDW2PXMZ2XddUufiSWUW03gblX6K2S8o0kg4Iat33V ZgTrAFqkTDfdw++aSNMxhEoRsx9E/igfT4hG9RYjRhW3LXAnPR+jc/WS1RuLyXrA Et7L2tCdVqj/2nawoHL6t5CGrQEEbY46QyiXeoCr3sbOEs3j7HE2bkb9jWTwrEoO B+F+ubNpzOSLMiNgT+sOEuoZ3uKc2mKWjarsI4+L7SGAIyMR44E1YCvihwIDAQAB o4ICuDCCArQwHQYDVR0OBBYEFP5i+4XBeGT7zz1ywLc0nmm40Et+MB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvX21MN2hjRjRaUHZQUFhMQXR6U2VhYmpRUzM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHNBggrBgEFBQcBBwEB/wSBvTCBujCBtwQCAAEwgbAwDAME BsKPwAMEAMKPygMEAMKPzAMEAMKP0DAMAwQAwo/TAwQAwo/YMAwDBADCj9sDBADC j9wDBADDcsADBADDcsMDBADDcsoDBADV3AEDBADV3AoDBADV3AwDBADV3A8DBADV 3BEwDAMEANXcEwMEANXcJgMEANXcKDAMAwQA1dwrAwQB1dwwAwQB1dw0MAwDBADV 3DcDBAHV3DgwDAMEANXcOwMEAdXcPAMEANXcPzANBgkqhkiG9w0BAQsFAAOCAQEA mL2NJIhqlra2xuhEzdNNWHZUp8+v4mErLNSoH5HrnY0dBbphF9atWXnSeVShB71e LsiTz1V4g5VPbrQbDcAMwKAqCu9FmTzlW5uB0TVSXspACyuM87yH3yoyTGjUlXFb a5B6hq0ixS1ZpZPI5kZNs2yneTTl/dKG05h2yUcKlD0/a72QPCvjmsrl1bSDhoXx O0Khpbdry9qJ5tt84mUzxLF8rAgIxh8NfHnY9/NG7LoDlrwZjl80GJE0I6SZDnFd iw2C3wk52REHqQYkcuAsUAmYBCa6/rkW8BFahWGI9Ua9bxm1UlGka4WW35Oy5GcU PVHjNu/YnugbR9JNeBxjUg== -----END CERTIFICATE-----Generated at Fri Dec 5 17:45:30 2025 by rpki-client