This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/st0b1O0-bjiuGGzi-H9LR0sO764.roa File: st0b1O0-bjiuGGzi-H9LR0sO764.roa (raw, json) Hash identifier: uJrgF+7GvXh/HpkQsyhEWOws7eH0yXwnW7+DaDr/npQ= Subject key identifier: B2:DD:1B:D4:ED:3E:6E:38:AE:18:6C:E2:F8:7F:4B:47:4B:0E:EF:AE Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3 Certificate serial: 019B0771AFC85A93012B93F99F5B19C6D4A4 Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/st0b1O0-bjiuGGzi-H9LR0sO764.roa Signing time: Wed 10 Dec 2025 08:47:29 +0000 ROA not before: Wed 10 Dec 2025 08:47:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 2856 IP address blocks: 2.24.0.0/13 maxlen: 13 31.64.0.0/12 maxlen: 12 31.90.0.0/15 maxlen: 15 31.92.0.0/15 maxlen: 15 31.94.0.0/16 maxlen: 16 31.96.0.0/16 maxlen: 16 31.99.64.0/18 maxlen: 18 31.99.128.0/18 maxlen: 18 31.99.192.0/18 maxlen: 18 31.100.0.0/14 maxlen: 14 31.104.0.0/16 maxlen: 16 31.106.0.0/15 maxlen: 15 31.112.0.0/14 maxlen: 14 31.116.0.0/14 maxlen: 14 31.116.0.0/16 maxlen: 16 31.117.0.0/16 maxlen: 16 31.118.0.0/16 maxlen: 16 31.119.0.0/16 maxlen: 16 31.120.0.0/16 maxlen: 16 31.121.0.0/16 maxlen: 16 31.122.0.0/15 maxlen: 15 31.124.0.0/16 maxlen: 16 31.126.0.0/15 maxlen: 15 46.68.0.0/15 maxlen: 15 46.68.66.0/24 maxlen: 24 82.192.112.0/20 maxlen: 20 91.110.0.0/16 maxlen: 16 91.111.0.0/16 maxlen: 16 95.144.0.0/13 maxlen: 13 109.180.0.0/15 maxlen: 15 178.98.0.0/15 maxlen: 15 178.100.0.0/14 maxlen: 14 178.106.0.0/16 maxlen: 16 178.107.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 05:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:71:af:c8:5a:93:01:2b:93:f9:9f:5b:19:c6:d4:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b98127943e7175734964010c89ef821416a31b3 Validity Not Before: Dec 10 08:47:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b2dd1bd4ed3e6e38ae186ce2f87f4b474b0eefae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:36:aa:7d:0f:c2:06:d5:1d:43:ab:84:d2:dc: 21:1c:46:57:67:0e:53:f5:8b:f9:65:f7:d8:eb:17: 49:5b:3e:37:0f:85:cc:c0:4b:85:c9:eb:40:3a:7a: b2:77:ec:79:fb:08:fb:6d:61:28:22:48:8c:05:32: 59:82:8e:47:94:fd:b0:6d:14:f9:f2:ff:41:99:7b: 2b:7d:0f:6c:81:90:19:d2:26:d2:70:af:87:d2:8f: 13:a9:45:03:34:42:39:bf:a1:a5:69:77:21:91:bd: db:b0:5a:9a:8a:7d:ce:3e:c9:84:c1:a0:ab:29:ca: 25:72:5c:ca:21:f3:23:9e:d6:8b:44:87:e5:95:f9: bd:b5:3c:28:02:32:9f:4a:4d:b7:1c:1f:00:a1:43: b9:12:1c:c6:65:6a:e5:fe:ef:e3:9a:ff:52:e2:6f: 23:33:e6:e7:6c:ef:6e:86:9c:90:ac:ee:d4:3a:a0: bf:b9:ec:9f:3e:44:88:e1:4b:29:97:ce:76:eb:bc: 0e:a2:31:ba:17:84:11:ef:8a:68:bd:2e:2a:49:c4: 73:41:05:12:a7:d7:8d:3d:74:db:00:03:ab:bf:36: b8:3a:11:68:6b:5d:b5:11:9f:b3:03:28:8e:47:ae: 6f:84:3e:59:ff:b1:c6:f7:6c:46:ee:86:3d:09:b2: e7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DD:1B:D4:ED:3E:6E:38:AE:18:6C:E2:F8:7F:4B:47:4B:0E:EF:AE X509v3 Authority Key Identifier: keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/st0b1O0-bjiuGGzi-H9LR0sO764.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.24.0.0/13 31.64.0.0/12 31.90.0.0-31.94.255.255 31.96.0.0/16 31.99.64.0-31.104.255.255 31.106.0.0/15 31.112.0.0-31.124.255.255 31.126.0.0/15 46.68.0.0/15 82.192.112.0/20 91.110.0.0/15 95.144.0.0/13 109.180.0.0/15 178.98.0.0-178.103.255.255 178.106.0.0/16 178.107.128.0/17 Signature Algorithm: sha256WithRSAEncryption a4:a9:d0:5d:c3:b8:9e:86:34:cc:c1:8e:da:db:43:ff:c6:b8: 10:de:4f:c4:01:c3:14:9d:0d:e9:79:26:96:37:3d:21:d6:6a: 9d:3a:ba:d3:00:f2:f1:0c:40:ef:f1:bd:c2:ff:2f:a5:7a:7d: 0d:63:62:68:20:14:63:fb:5a:4b:33:59:eb:5a:07:33:f2:e2: d4:51:d5:57:67:ad:ae:b0:47:c7:2a:05:75:be:dd:e4:3b:b1: 5d:68:49:73:b7:20:2a:80:fd:be:a0:9b:d1:0e:06:79:88:9d: bc:0b:70:e3:7e:f5:02:88:97:67:0b:94:1f:c9:d9:06:f3:f0: bc:70:5f:fe:b7:89:36:e8:ce:d2:b8:61:ba:a8:61:7f:ee:2f: 2f:8f:3e:41:17:6e:fa:47:89:55:ef:d6:16:13:6a:04:b7:2d: b3:bf:4a:e5:93:4c:bf:c5:f3:26:7c:92:d5:1c:58:7a:0a:ee: a8:02:ca:3e:d6:f0:14:ac:0b:76:be:34:1d:5b:1e:6e:d4:d4: c0:49:c1:ce:82:b9:dd:5c:8f:9e:cb:2a:06:f4:86:e4:4a:53: b2:8f:c0:21:75:0a:ed:46:12:5d:16:c1:1b:a1:b6:5f:86:23: 46:b0:a8:fa:fe:2c:23:bf:0c:82:c9:d6:75:11:df:c2:47:7e: 8a:2a:31:7c -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgISAZsHca/IWpMBK5P5n1sZxtSkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOTgxMjc5NDNlNzE3NTczNDk2NDAxMGM4OWVmODIxNDE2 YTMxYjMwHhcNMjUxMjEwMDg0NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmRkMWJkNGVkM2U2ZTM4YWUxODZjZTJmODdmNGI0NzRiMGVlZmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTaqfQ/CBtUdQ6uE0twhHEZXZw5T 9Yv5ZffY6xdJWz43D4XMwEuFyetAOnqyd+x5+wj7bWEoIkiMBTJZgo5HlP2wbRT5 8v9BmXsrfQ9sgZAZ0ibScK+H0o8TqUUDNEI5v6GlaXchkb3bsFqain3OPsmEwaCr KcolclzKIfMjntaLRIfllfm9tTwoAjKfSk23HB8AoUO5EhzGZWrl/u/jmv9S4m8j M+bnbO9uhpyQrO7UOqC/ueyfPkSI4Uspl85267wOojG6F4QR74povS4qScRzQQUS p9eNPXTbAAOrvza4OhFoa121EZ+zAyiOR65vhD5Z/7HG92xG7oY9CbLnNQIDAQAB o4ICczCCAm8wHQYDVR0OBBYEFLLdG9TtPm44rhhs4vh/S0dLDu+uMB8GA1UdIwQY MBaAFEuYEnlD5xdXNJZAEMie+CFBajGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2Njgt NjIxNzkyZjdlNTZhLzEvc3QwYjFPMC1iaml1R0d6aS1IOUxSMHNPNzY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2NjgtNjIxNzkyZjdlNTZh LzEvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGIBggrBgEFBQcBBwEB/wR5MHcwdQQCAAEwbwMDAwIYAwME H0AwCgMDAR9aAwMAH14DAwAfYDALAwQGH2NAAwMAH2gDAwEfajAKAwMEH3ADAwAf fAMDAR9+AwMBLkQDBARSwHADAwFbbgMDA1+QAwMBbbQwCgMDAbJiAwMDsmADAwCy agMEB7JrgDANBgkqhkiG9w0BAQsFAAOCAQEApKnQXcO4noY0zMGO2ttD/8a4EN5P xAHDFJ0N6Xkmljc9IdZqnTq60wDy8QxA7/G9wv8vpXp9DWNiaCAUY/taSzNZ61oH M/Li1FHVV2etrrBHxyoFdb7d5DuxXWhJc7cgKoD9vqCb0Q4GeYidvAtw4371AoiX ZwuUH8nZBvPwvHBf/reJNujO0rhhuqhhf+4vL48+QRdu+keJVe/WFhNqBLcts79K 5ZNMv8XzJnyS1RxYegruqALKPtbwFKwLdr40HVsebtTUwEnBzoK53VyPnssqBvSG 5EpTso/AIXUK7UYSXRbBG6G2X4YjRrCo+v4sI78MgsnWdRHfwkd+iioxfA== -----END CERTIFICATE-----Generated at Fri Dec 12 14:39:49 2025 by rpki-client