This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/REcuhoFutyP-YyVPcAnPgwvOxpk.roa File: REcuhoFutyP-YyVPcAnPgwvOxpk.roa (raw, json) Hash identifier: dwBs1o+a6wblc+zzrwzH1YLpD0Cw6cgDxBvorJz36jA= Subject key identifier: 44:47:2E:86:81:6E:B7:23:FE:63:25:4F:70:09:CF:83:0B:CE:C6:99 Certificate issuer: /CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3 Certificate serial: 019B228C790DF69BCFFB5954B6A67CEA6B0C Authority key identifier: DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/REcuhoFutyP-YyVPcAnPgwvOxpk.roa Signing time: Mon 15 Dec 2025 15:06:29 +0000 ROA not before: Mon 15 Dec 2025 15:06:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 40676 IP address blocks: 31.220.14.0/24 maxlen: 24 45.12.52.0/23 maxlen: 23 45.12.91.0/24 maxlen: 24 185.238.249.0/24 maxlen: 24 185.238.251.0/24 maxlen: 24 193.9.45.0/24 maxlen: 24 2a14:640:2::/48 maxlen: 48 2a14:640:3::/48 maxlen: 48 2a14:640:4::/48 maxlen: 48 2a14:640:5::/48 maxlen: 48 2a14:640:6::/48 maxlen: 48 2a14:640:7::/48 maxlen: 48 2a14:640:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:8c:79:0d:f6:9b:cf:fb:59:54:b6:a6:7c:ea:6b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3 Validity Not Before: Dec 15 15:06:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=44472e86816eb723fe63254f7009cf830bcec699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a0:e5:41:4b:c3:92:59:62:9a:e0:af:0d:d9: 53:3e:dc:ea:74:e1:8f:24:0a:1c:07:5a:91:da:7f: 32:4b:f4:28:44:fe:d0:b3:6d:2b:84:4c:f0:bd:94: 75:f0:21:1e:ce:5c:3f:f9:37:0a:02:bf:0f:64:2b: b5:2e:d4:6f:6a:cc:39:03:2d:63:43:c4:14:3f:1b: 55:93:8a:b4:cb:fd:fe:36:97:d5:a0:12:2e:ad:4a: ed:db:e6:cc:fd:55:ae:8f:19:86:59:a5:49:cd:96: 15:81:b9:6f:35:a2:76:40:9b:b8:82:ff:6f:c4:71: 8d:41:b1:c6:75:ff:09:bc:fc:ff:8f:67:20:b5:c4: e0:b2:cd:16:1a:26:b3:7a:03:8b:b7:4a:23:cc:3b: 49:f2:9d:39:c2:8e:f5:dc:21:cf:77:c9:3f:fa:b1: 3a:2b:7a:6e:36:89:92:94:1b:f4:18:ed:e4:09:59: ad:5c:27:5e:ef:7a:b2:fe:de:d0:c5:ca:35:22:dc: 01:93:4a:75:58:bb:4c:0b:cb:ce:38:bf:2b:02:6c: a3:c8:7c:44:70:4d:9e:24:b8:4f:ba:d7:2e:6c:57: 84:da:3a:fb:bd:df:bd:05:b3:9d:0e:9f:be:f9:16: ff:6f:cf:a0:06:c2:a9:c0:8d:ce:f6:b4:9d:2b:a8: bf:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:47:2E:86:81:6E:B7:23:FE:63:25:4F:70:09:CF:83:0B:CE:C6:99 X509v3 Authority Key Identifier: keyid:DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/REcuhoFutyP-YyVPcAnPgwvOxpk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.220.14.0/24 45.12.52.0/23 45.12.91.0/24 185.238.249.0/24 185.238.251.0/24 193.9.45.0/24 IPv6: 2a14:640:2::-2a14:640:8:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 07:61:f4:57:ef:a1:40:b9:5c:55:a9:73:ad:76:aa:5b:dd:b6: 98:59:2f:0c:20:41:cb:14:02:a8:78:22:c2:44:fe:86:c1:04: 9e:dc:14:0d:0d:7b:c4:1d:36:fe:88:99:98:60:91:1f:f0:97: 62:7b:c7:5a:e9:81:af:16:8e:78:08:fb:09:fa:f3:20:b3:9c: 45:4a:c6:c4:43:e6:29:6a:31:b9:21:2b:61:c8:bd:a1:9e:67: d1:d8:b3:54:10:87:b3:59:c6:79:da:c7:b3:8a:03:85:88:50: 53:22:8e:d7:09:25:36:06:bb:53:9e:9a:c5:4a:2a:1e:fc:db: ab:21:97:8e:0c:6b:07:c2:84:b1:3e:9f:00:e9:5e:93:07:f6: de:85:71:44:1e:d9:da:f0:42:e2:a6:31:11:ab:50:3c:c8:56: 90:31:f3:43:43:b5:3a:0f:c9:d1:d2:67:bf:a6:74:c3:94:ae: c8:be:c9:e0:44:bf:0e:20:f4:d7:0f:ae:87:b4:37:6b:c6:18: bf:79:56:69:a3:2b:80:0f:53:1c:54:90:12:c1:b7:4e:b6:a1: 9c:fc:1f:da:42:9e:c7:fd:44:f0:f1:02:85:49:ff:af:0e:9e: 62:76:eb:e4:eb:63:a8:a8:fb:c9:85:fd:c1:1f:19:48:04:6e: 43:1f:36:a3 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZsijHkN9pvP+1lUtqZ86msMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmM2ZkYzRiZjMzYmQ4MGZlMTI4ZDc1Njg0M2Y2MGIzOWQ1 YmVlZTMwHhcNMjUxMjE1MTUwNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDQ3MmU4NjgxNmViNzIzZmU2MzI1NGY3MDA5Y2Y4MzBiY2VjNjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKDlQUvDkllimuCvDdlTPtzqdOGP JAocB1qR2n8yS/QoRP7Qs20rhEzwvZR18CEezlw/+TcKAr8PZCu1LtRvasw5Ay1j Q8QUPxtVk4q0y/3+NpfVoBIurUrt2+bM/VWujxmGWaVJzZYVgblvNaJ2QJu4gv9v xHGNQbHGdf8JvPz/j2cgtcTgss0WGiazegOLt0ojzDtJ8p05wo713CHPd8k/+rE6 K3puNomSlBv0GO3kCVmtXCde73qy/t7Qxco1ItwBk0p1WLtMC8vOOL8rAmyjyHxE cE2eJLhPutcubFeE2jr7vd+9BbOdDp+++Rb/b8+gBsKpwI3O9rSdK6i/pwIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFERHLoaBbrcj/mMlT3AJz4MLzsaZMB8GA1UdIwQY MBaAFN8/3EvzO9gP4SjXVoQ/YLOdW+7jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3pfY1NfTTcyQV9oS05kV2hEOWdzNTFiN3VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zMjVjZDMtN2VkYi00MDI2LTg1ODMt YTQ3M2VjNTQxMGMzLzEvUkVjdWhvRnV0eVAtWXlWUGNBblBnd3ZPeHBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8zMjVjZDMtN2VkYi00MDI2LTg1ODMtYTQ3M2VjNTQxMGMz LzEvM3pfY1NfTTcyQV9oS05kV2hEOWdzNTFiN3VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAqBAIAATAkAwQAH9wOAwQB LQw0AwQALQxbAwQAue75AwQAue77AwQAwQktMBoEAgACMBQwEgMHASoUBkAAAgMH ACoUBkAACDANBgkqhkiG9w0BAQsFAAOCAQEAB2H0V++hQLlcValzrXaqW922mFkv DCBByxQCqHgiwkT+hsEEntwUDQ17xB02/oiZmGCRH/CXYnvHWumBrxaOeAj7Cfrz ILOcRUrGxEPmKWoxuSErYci9oZ5n0dizVBCHs1nGedrHs4oDhYhQUyKO1wklNga7 U56axUoqHvzbqyGXjgxrB8KEsT6fAOlekwf23oVxRB7Z2vBC4qYxEatQPMhWkDHz Q0O1Og/J0dJnv6Z0w5SuyL7J4ES/DiD01w+uh7Q3a8YYv3lWaaMrgA9THFSQEsG3 TrahnPwf2kKex/1E8PEChUn/rw6eYnbr5OtjqKj7yYX9wR8ZSARuQx82ow== -----END CERTIFICATE-----Generated at Mon Dec 15 19:46:30 2025 by rpki-client