This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/2k-tWqiR8vXhvoIUx4T2tpLcYQY.roa File: 2k-tWqiR8vXhvoIUx4T2tpLcYQY.roa (raw, json) Hash identifier: RINUBz4TPKPAxld7N3K5qo2+jhsi8pQ0CEb9qmH27yo= Subject key identifier: DA:4F:AD:5A:A8:91:F2:F5:E1:BE:82:14:C7:84:F6:B6:92:DC:61:06 Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019AEEFB7AEFF84600C31F169287CEDFEF68 Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/2k-tWqiR8vXhvoIUx4T2tpLcYQY.roa Signing time: Fri 05 Dec 2025 14:47:29 +0000 ROA not before: Fri 05 Dec 2025 14:47:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 14618 IP address blocks: 45.148.51.0/24 maxlen: 24 45.152.37.0/24 maxlen: 24 45.154.237.0/24 maxlen: 24 185.208.211.0/24 maxlen: 24 185.232.85.0/24 maxlen: 24 193.57.9.0/24 maxlen: 24 195.60.177.0/24 maxlen: 24 195.88.210.0/24 maxlen: 24 213.185.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:fb:7a:ef:f8:46:00:c3:1f:16:92:87:ce:df:ef:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Dec 5 14:47:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=da4fad5aa891f2f5e1be8214c784f6b692dc6106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ae:e5:3f:ed:ee:b6:47:6c:28:bb:b9:9f:e8: ac:53:67:e4:81:0a:ca:c6:31:7d:88:b7:ce:76:ae: 69:a1:20:b8:f8:93:0f:45:e1:d0:e1:09:bc:71:ff: 79:68:eb:ac:d4:57:37:02:65:b2:4c:8b:30:c8:a4: b2:61:b5:a2:37:b4:28:70:cc:03:72:de:cf:44:8f: d9:9b:ec:7b:c9:89:c3:de:ec:51:7d:e1:50:a0:9a: d0:73:9a:ce:d8:23:bc:96:7d:b1:13:f6:f9:c8:39: 71:b2:9b:38:c1:43:12:5f:bb:85:6d:5a:91:00:68: 4f:01:b9:11:61:74:0c:02:1d:f4:39:c4:66:1a:15: 82:55:de:c6:6c:fa:64:c2:65:47:37:21:a9:59:e6: 98:b2:8c:25:aa:13:4f:c4:7d:c6:dd:e7:38:24:0e: a1:17:41:1c:e8:de:6a:14:78:de:be:e8:e5:03:6c: 7d:e7:c1:bc:f7:8d:9a:4d:1a:77:e2:62:c6:f3:e1: 87:f6:94:12:e9:27:64:9f:b9:ce:2d:b9:b4:2c:b6: 66:2b:6a:9d:ff:df:a2:22:6d:0e:1e:3a:a5:d7:15: 0e:ca:63:bb:83:28:24:aa:c3:3d:c3:af:f1:5b:0d: 36:f0:fc:3c:12:31:32:ed:4a:c2:19:ad:fa:28:ca: 16:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:4F:AD:5A:A8:91:F2:F5:E1:BE:82:14:C7:84:F6:B6:92:DC:61:06 X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/2k-tWqiR8vXhvoIUx4T2tpLcYQY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.51.0/24 45.152.37.0/24 45.154.237.0/24 185.208.211.0/24 185.232.85.0/24 193.57.9.0/24 195.60.177.0/24 195.88.210.0/24 213.185.92.0/22 Signature Algorithm: sha256WithRSAEncryption 39:d3:e6:f9:d6:a9:87:8f:c9:3d:1a:25:66:f9:48:d0:ae:74: 0e:44:c0:52:60:db:2c:a2:6b:70:b8:d9:84:ad:29:81:d6:4d: 5e:5c:f0:78:76:53:c8:3f:c0:af:89:8b:f8:7a:3d:da:5d:f6: e5:25:b5:e3:6e:9b:dd:9d:6c:10:65:4b:2d:10:bb:36:0d:ba: 8b:54:92:da:f4:5a:55:b6:66:89:e9:7f:95:f2:f1:46:9d:69: 1e:f4:d8:58:fe:8e:8d:35:08:5b:8e:14:17:62:db:84:5d:a6: dd:86:e3:25:19:10:5f:c4:a4:19:fe:12:8c:6a:60:a0:7a:c9: 81:b5:cd:c2:1b:27:67:ad:65:fe:67:5f:74:4f:9e:e3:08:58: 31:5c:4f:bf:f9:48:02:32:34:5b:02:2d:8b:d6:20:58:e1:f1: b7:ad:d3:76:13:4c:5a:f7:44:f7:59:c3:ff:fe:bf:4e:27:99: 76:f9:2a:ea:da:3a:c9:8e:f3:d6:1e:bf:a7:85:87:92:18:19: 6c:32:64:f0:58:be:77:d5:ee:f2:22:1d:9e:9b:ec:38:05:50: 57:35:0c:4e:26:fa:95:0f:38:9c:88:f3:43:be:4a:af:25:14: b3:3f:0e:46:43:2e:6c:5e:b5:e2:be:18:03:1f:3d:1c:35:ff: e7:45:dd:9d -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZru+3rv+EYAwx8WkofO3+9oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjUxMjA1MTQ0NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTRmYWQ1YWE4OTFmMmY1ZTFiZTgyMTRjNzg0ZjZiNjkyZGM2MTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK7lP+3utkdsKLu5n+isU2fkgQrK xjF9iLfOdq5poSC4+JMPReHQ4Qm8cf95aOus1Fc3AmWyTIswyKSyYbWiN7QocMwD ct7PRI/Zm+x7yYnD3uxRfeFQoJrQc5rO2CO8ln2xE/b5yDlxsps4wUMSX7uFbVqR AGhPAbkRYXQMAh30OcRmGhWCVd7GbPpkwmVHNyGpWeaYsowlqhNPxH3G3ec4JA6h F0Ec6N5qFHjevujlA2x958G8942aTRp34mLG8+GH9pQS6Sdkn7nOLbm0LLZmK2qd /9+iIm0OHjql1xUOymO7gygkqsM9w6/xWw028Pw8EjEy7UrCGa36KMoWKwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFNpPrVqokfL14b6CFMeE9raS3GEGMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvMmstdFdxaVI4dlhodm9JVXg0VDJ0cExjWVFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQALZQzAwQA LZglAwQALZrtAwQAudDTAwQAuehVAwQAwTkJAwQAwzyxAwQAw1jSAwQC1blcMA0G CSqGSIb3DQEBCwUAA4IBAQA50+b51qmHj8k9GiVm+UjQrnQORMBSYNssomtwuNmE rSmB1k1eXPB4dlPIP8CviYv4ej3aXfblJbXjbpvdnWwQZUstELs2DbqLVJLa9FpV tmaJ6X+V8vFGnWke9NhY/o6NNQhbjhQXYtuEXabdhuMlGRBfxKQZ/hKMamCgesmB tc3CGydnrWX+Z190T57jCFgxXE+/+UgCMjRbAi2L1iBY4fG3rdN2E0xa90T3WcP/ /r9OJ5l2+Srq2jrJjvPWHr+nhYeSGBlsMmTwWL531e7yIh2em+w4BVBXNQxOJvqV DziciPNDvkqvJRSzPw5GQy5sXrXivhgDHz0cNf/nRd2d -----END CERTIFICATE-----Generated at Sat Dec 6 13:30:27 2025 by rpki-client