This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Ik19RRjyfHjJ96aag1tg9GHfyYs.roa File: Ik19RRjyfHjJ96aag1tg9GHfyYs.roa (raw, json) Hash identifier: OMp+kmye4OfcUJMJC7fA4xejXa2bwcRzzIV7LNwQJIA= Subject key identifier: 22:4D:7D:45:18:F2:7C:78:C9:F7:A6:9A:83:5B:60:F4:61:DF:C9:8B Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe Certificate serial: 019A54281042C8988AE8865AF15C5A680D21 Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Ik19RRjyfHjJ96aag1tg9GHfyYs.roa Signing time: Wed 05 Nov 2025 13:15:03 +0000 ROA not before: Wed 05 Nov 2025 13:15:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 19905 IP address blocks: 82.199.208.0/24 maxlen: 24 82.199.209.0/24 maxlen: 24 82.199.210.0/24 maxlen: 24 82.199.211.0/24 maxlen: 24 82.199.212.0/24 maxlen: 24 82.199.213.0/24 maxlen: 24 82.199.214.0/24 maxlen: 24 82.199.215.0/24 maxlen: 24 82.199.216.0/24 maxlen: 24 82.199.217.0/24 maxlen: 24 82.199.218.0/24 maxlen: 24 82.199.219.0/24 maxlen: 24 82.199.220.0/24 maxlen: 24 82.199.221.0/24 maxlen: 24 89.46.200.0/24 maxlen: 24 89.46.201.0/24 maxlen: 24 89.46.202.0/24 maxlen: 24 89.46.203.0/24 maxlen: 24 89.46.204.0/24 maxlen: 24 89.46.205.0/24 maxlen: 24 89.46.206.0/24 maxlen: 24 89.46.207.0/24 maxlen: 24 185.16.26.0/24 maxlen: 24 185.95.204.0/24 maxlen: 24 185.95.205.0/24 maxlen: 24 185.247.36.0/24 maxlen: 24 185.247.37.0/24 maxlen: 24 185.247.38.0/24 maxlen: 24 185.247.39.0/24 maxlen: 24 185.254.200.0/24 maxlen: 24 185.254.201.0/24 maxlen: 24 185.254.203.0/24 maxlen: 24 212.95.128.0/24 maxlen: 24 212.95.129.0/24 maxlen: 24 212.95.130.0/24 maxlen: 24 212.95.131.0/24 maxlen: 24 212.95.132.0/24 maxlen: 24 212.95.133.0/24 maxlen: 24 212.95.134.0/24 maxlen: 24 212.95.135.0/24 maxlen: 24 212.95.136.0/24 maxlen: 24 212.95.137.0/24 maxlen: 24 212.95.138.0/24 maxlen: 24 212.95.139.0/24 maxlen: 24 212.95.140.0/24 maxlen: 24 212.95.141.0/24 maxlen: 24 212.95.143.0/24 maxlen: 24 212.95.144.0/24 maxlen: 24 212.95.145.0/24 maxlen: 24 212.95.146.0/24 maxlen: 24 212.95.147.0/24 maxlen: 24 212.95.151.0/24 maxlen: 24 212.95.152.0/24 maxlen: 24 212.95.153.0/24 maxlen: 24 212.95.154.0/24 maxlen: 24 212.95.155.0/24 maxlen: 24 212.95.157.0/24 maxlen: 24 223.25.120.0/24 maxlen: 24 223.25.121.0/24 maxlen: 24 223.25.122.0/24 maxlen: 24 223.25.123.0/24 maxlen: 24 223.25.124.0/24 maxlen: 24 223.25.125.0/24 maxlen: 24 223.25.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:54:28:10:42:c8:98:8a:e8:86:5a:f1:5c:5a:68:0d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe Validity Not Before: Nov 5 13:15:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=224d7d4518f27c78c9f7a69a835b60f461dfc98b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e9:bd:a4:76:c2:e1:c1:74:31:4d:a9:e5:20: bc:4a:d2:6d:45:0a:04:9b:36:99:87:3f:06:d3:3e: 2c:f1:f8:40:e3:56:ce:56:3b:01:16:a5:a8:3d:df: b9:f5:6a:bd:54:1c:92:16:ab:cc:2b:2d:91:6e:57: 75:d5:23:48:e8:62:80:54:f8:36:4b:c6:26:da:3a: de:76:e9:7c:64:1f:46:ec:8e:b7:f3:27:29:00:54: 24:85:32:51:96:4b:7d:b6:2a:90:2d:3f:75:5d:17: 88:12:ad:ec:08:c9:dd:5a:fd:e4:10:5e:8a:1d:27: 99:13:91:46:75:25:34:b0:b4:83:13:24:2a:39:1d: fb:99:77:e0:46:de:ca:88:bb:8a:00:6b:95:70:97: ba:45:cf:b3:08:36:f0:58:6f:97:b0:16:fa:76:bd: a3:ee:b5:07:33:49:16:f3:d7:43:13:e0:15:00:45: 7f:d7:a5:95:70:de:b4:37:42:0b:91:d3:b5:9f:09: bf:6d:8c:ba:9e:cd:2d:6f:82:29:5c:92:4d:a7:18: f8:22:31:cb:d5:53:fa:1c:e7:9e:eb:8a:8e:9e:b9: 57:3c:8b:80:a4:1f:29:fc:13:99:5a:15:1e:af:95: e3:13:07:5e:73:3f:20:3b:34:23:51:97:42:09:3d: a2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4D:7D:45:18:F2:7C:78:C9:F7:A6:9A:83:5B:60:F4:61:DF:C9:8B X509v3 Authority Key Identifier: keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Ik19RRjyfHjJ96aag1tg9GHfyYs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.199.208.0-82.199.221.255 89.46.200.0/21 185.16.26.0/24 185.95.204.0/23 185.247.36.0/22 185.254.200.0/23 185.254.203.0/24 212.95.128.0-212.95.141.255 212.95.143.0-212.95.147.255 212.95.151.0-212.95.155.255 212.95.157.0/24 223.25.120.0-223.25.126.255 Signature Algorithm: sha256WithRSAEncryption 25:69:75:bf:7f:38:a1:56:be:d7:2d:14:b5:84:f1:9f:56:6c: 02:8f:ee:87:23:e5:54:40:ec:ae:2d:02:44:19:0b:92:00:da: 6f:7f:da:01:e8:68:88:98:d6:ae:51:8b:a2:d7:4d:66:6e:13: f5:94:eb:ec:9e:f3:90:4a:8d:38:13:ff:13:4d:9a:bf:22:3b: 4a:21:a9:b1:6c:57:1a:e0:63:34:f1:8d:53:a0:40:4e:bd:3b: 1d:e3:50:b9:83:57:a7:ca:ee:04:21:22:3a:1d:8e:35:69:d4: ed:bc:98:7a:62:83:cf:4a:bd:9b:26:dc:11:c6:04:b8:30:8e: f2:68:b0:49:c4:ab:ef:86:fe:fd:33:13:30:c0:23:d2:ea:28: 4e:61:90:e5:8b:ba:5b:c2:f1:e5:87:20:b6:e6:15:a6:55:4a: 27:b2:71:20:10:d5:92:24:27:07:c9:6e:38:db:35:9b:ff:f5: c8:47:cc:89:aa:a6:0d:96:05:df:fc:31:d8:1a:2d:35:c8:6b: 18:6a:43:47:41:73:f9:aa:99:1d:18:cd:ec:cc:93:76:7e:44: 06:0f:49:d1:41:87:63:52:03:2c:73:fa:a3:0a:43:73:4c:30: a4:e9:80:7c:ae:0d:41:17:bb:c5:4b:8a:6e:85:d2:e6:28:47: 67:31:c8:f7 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgISAZpUKBBCyJiK6IZa8VxaaA0hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZGQ4ZjFhNjJhNWQ3ZjgwMjEyZGUwZjNlZmU3NWIyZmEz MzhmZmUwHhcNMjUxMTA1MTMxNTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjRkN2Q0NTE4ZjI3Yzc4YzlmN2E2OWE4MzViNjBmNDYxZGZjOThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+m9pHbC4cF0MU2p5SC8StJtRQoE mzaZhz8G0z4s8fhA41bOVjsBFqWoPd+59Wq9VBySFqvMKy2Rbld11SNI6GKAVPg2 S8Ym2jredul8ZB9G7I638ycpAFQkhTJRlkt9tiqQLT91XReIEq3sCMndWv3kEF6K HSeZE5FGdSU0sLSDEyQqOR37mXfgRt7KiLuKAGuVcJe6Rc+zCDbwWG+XsBb6dr2j 7rUHM0kW89dDE+AVAEV/16WVcN60N0ILkdO1nwm/bYy6ns0tb4IpXJJNpxj4IjHL 1VP6HOee64qOnrlXPIuApB8p/BOZWhUer5XjEwdecz8gOzQjUZdCCT2iewIDAQAB o4ICdDCCAnAwHQYDVR0OBBYEFCJNfUUY8nx4yfemmoNbYPRh38mLMB8GA1UdIwQY MBaAFEndjxpipdf4AhLeDz7+dbL6M4/+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2Yt Y2VlYzQ5MTI0YzBmLzEvSWsxOVJSanlmSGpKOTZhYWcxdGc5R0hmeVlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2YtY2VlYzQ5MTI0YzBm LzEvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGJBggrBgEFBQcBBwEB/wR6MHgwdgQCAAEwcDAMAwQEUsfQ AwQBUsfcAwQDWS7IAwQAuRAaAwQBuV/MAwQCufckAwQBuf7IAwQAuf7LMAwDBAfU X4ADBAHUX4wwDAMEANRfjwMEAtRfkDAMAwQA1F+XAwQC1F+YAwQA1F+dMAwDBAPf GXgDBADfGX4wDQYJKoZIhvcNAQELBQADggEBACVpdb9/OKFWvtctFLWE8Z9WbAKP 7ocj5VRA7K4tAkQZC5IA2m9/2gHoaIiY1q5Ri6LXTWZuE/WU6+ye85BKjTgT/xNN mr8iO0ohqbFsVxrgYzTxjVOgQE69Ox3jULmDV6fK7gQhIjodjjVp1O28mHpig89K vZsm3BHGBLgwjvJosEnEq++G/v0zEzDAI9LqKE5hkOWLulvC8eWHILbmFaZVSiey cSAQ1ZIkJwfJbjjbNZv/9chHzImqpg2WBd/8MdgaLTXIaxhqQ0dBc/mqmR0YzezM k3Z+RAYPSdFBh2NSAyxz+qMKQ3NMMKTpgHyuDUEXu8VLim6F0uYoR2cxyPc= -----END CERTIFICATE-----Generated at Sat Dec 6 12:45:10 2025 by rpki-client