This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/3-YgdYJLPUpY1jl-BDPxwun_JGY.roa File: 3-YgdYJLPUpY1jl-BDPxwun_JGY.roa (raw, json) Hash identifier: QNX6RoWCe0pOBAGMcGA11EBqqIFhhW4S+4X17OIr4XM= Subject key identifier: DF:E6:20:75:82:4B:3D:4A:58:D6:39:7E:04:33:F1:C2:E9:FF:24:66 Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019AEEFB7C1882B233E0CA8C63D645EAB843 Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/3-YgdYJLPUpY1jl-BDPxwun_JGY.roa Signing time: Fri 05 Dec 2025 14:47:29 +0000 ROA not before: Fri 05 Dec 2025 14:47:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208258 IP address blocks: 45.141.204.0/23 maxlen: 24 45.144.244.0/23 maxlen: 24 45.144.246.0/24 maxlen: 24 45.151.156.0/23 maxlen: 24 45.151.158.0/24 maxlen: 24 45.154.238.0/24 maxlen: 24 45.154.239.0/24 maxlen: 24 185.208.208.0/24 maxlen: 24 185.208.209.0/24 maxlen: 24 185.208.210.0/24 maxlen: 24 185.227.82.0/24 maxlen: 24 185.228.83.0/24 maxlen: 24 185.243.112.0/24 maxlen: 24 185.243.113.0/24 maxlen: 24 194.146.48.0/24 maxlen: 24 195.26.6.0/24 maxlen: 24 195.26.7.0/24 maxlen: 24 2a0b:3c40:1::/48 maxlen: 48 2a0b:3c40:9::/48 maxlen: 48 2a0b:3c40:11::/48 maxlen: 48 2a0b:3c40:12::/48 maxlen: 48 2a0b:3c40:15::/48 maxlen: 48 2a0b:3c40:16::/48 maxlen: 48 2a0b:3c40:17::/48 maxlen: 48 2a0b:3c40:20::/48 maxlen: 48 2a0b:3c40:21::/48 maxlen: 48 2a0b:3c40:25::/48 maxlen: 48 2a0b:3c40:fca6::/48 maxlen: 48 2a0e:5540::/48 maxlen: 48 2a0e:5540:10::/48 maxlen: 48 2a0e:5540:11::/48 maxlen: 48 2a0e:5540:12::/48 maxlen: 48 2a0e:5540:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:fb:7c:18:82:b2:33:e0:ca:8c:63:d6:45:ea:b8:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Dec 5 14:47:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dfe62075824b3d4a58d6397e0433f1c2e9ff2466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cf:28:62:87:64:30:3d:90:98:0f:5e:18:6c: 3d:ae:e1:d7:96:dd:fc:42:80:26:d5:25:fd:5b:88: 1a:5f:f0:7e:d7:26:05:d3:12:05:2b:4a:21:ef:c8: 0b:fd:ec:42:48:7c:0e:2f:d9:bb:d5:67:bb:ec:88: 66:b0:b1:e9:91:6d:11:60:94:3f:44:df:b5:f9:5b: d7:e0:4e:1d:9d:af:14:23:c4:58:85:df:22:d9:74: f4:7d:6f:55:21:7f:98:90:e8:cf:cd:d6:f0:8b:18: 67:e9:43:17:2e:4c:6d:f9:09:80:f6:98:a9:db:be: d5:d6:d6:ec:88:8f:f2:94:cb:bf:c0:eb:eb:fd:b1: f8:9a:c0:6e:ea:f1:ee:e2:9d:83:f8:07:1b:5d:1a: cd:0f:98:50:85:d2:a3:38:a8:26:1d:37:cf:6d:49: d8:04:40:27:bd:80:c2:66:78:28:f8:52:91:c7:bd: fc:4f:ac:eb:76:1c:00:4d:0b:f0:cd:d6:b6:58:d5: a0:22:3e:36:6a:17:9d:99:fe:f0:42:75:d5:80:71: ae:70:ed:f0:d3:c5:e8:d5:32:6b:e1:06:9c:6e:ea: 35:37:da:8d:0b:2a:06:c0:76:3a:c4:66:30:84:af: 0a:af:ec:36:fd:11:8a:c4:37:a1:e7:79:2a:78:05: 1d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E6:20:75:82:4B:3D:4A:58:D6:39:7E:04:33:F1:C2:E9:FF:24:66 X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/3-YgdYJLPUpY1jl-BDPxwun_JGY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.204.0/23 45.144.244.0-45.144.246.255 45.151.156.0-45.151.158.255 45.154.238.0/23 185.208.208.0-185.208.210.255 185.227.82.0/24 185.228.83.0/24 185.243.112.0/23 194.146.48.0/24 195.26.6.0/23 IPv6: 2a0b:3c40:1::/48 2a0b:3c40:9::/48 2a0b:3c40:11::-2a0b:3c40:12:ffff:ffff:ffff:ffff:ffff 2a0b:3c40:15::-2a0b:3c40:17:ffff:ffff:ffff:ffff:ffff 2a0b:3c40:20::/47 2a0b:3c40:25::/48 2a0b:3c40:fca6::/48 2a0e:5540::/48 2a0e:5540:10::-2a0e:5540:12:ffff:ffff:ffff:ffff:ffff 2a0e:5540:100::/48 Signature Algorithm: sha256WithRSAEncryption ab:cd:ab:3d:3c:89:43:9e:e5:48:bf:b7:dd:c7:3e:21:27:28: f2:10:b2:22:77:16:b0:68:d4:d7:24:f9:36:3e:04:1a:a2:b6: 86:26:c5:9d:0c:9d:ec:98:9c:19:24:6a:a4:a9:8b:49:a7:4e: 8f:be:26:3f:67:9a:1e:da:be:c8:54:30:f7:7a:04:64:a1:c9: 1f:c8:fc:53:b8:0f:c4:cf:8c:69:bc:ec:23:fd:a7:6d:17:5b: a5:01:f7:8b:b6:9f:e1:69:0d:50:a5:4b:2d:12:7c:8e:2f:2e: 2d:e5:e5:ad:ea:a7:d8:0f:76:b2:00:9e:38:5e:02:6e:83:17: e9:76:86:60:26:0c:7c:92:9a:0b:65:33:7e:3c:bb:7c:0f:fc: ed:ee:21:38:8c:b6:d1:5c:ed:00:2c:71:f4:1e:09:c1:65:89: 00:dc:b2:60:93:ff:fe:3c:75:9a:1f:fd:86:51:ef:22:14:e0: 42:6b:3d:f7:50:b6:86:f0:42:d9:2d:d6:09:12:6f:c6:34:e6: b0:f2:43:e6:d7:38:f0:42:ea:84:93:87:7e:cc:3c:fc:36:49: 89:1d:66:79:f4:5b:76:44:75:b4:ab:5a:df:6f:90:8e:29:0c: 00:7d:56:04:51:75:c2:90:e0:31:52:4e:92:03:29:4c:e3:1c: 06:72:1a:70 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgISAZru+3wYgrIz4MqMY9ZF6rhDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjUxMjA1MTQ0NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmU2MjA3NTgyNGIzZDRhNThkNjM5N2UwNDMzZjFjMmU5ZmYyNDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt88oYodkMD2QmA9eGGw9ruHXlt38 QoAm1SX9W4gaX/B+1yYF0xIFK0oh78gL/exCSHwOL9m71We77IhmsLHpkW0RYJQ/ RN+1+VvX4E4dna8UI8RYhd8i2XT0fW9VIX+YkOjPzdbwixhn6UMXLkxt+QmA9pip 277V1tbsiI/ylMu/wOvr/bH4msBu6vHu4p2D+AcbXRrND5hQhdKjOKgmHTfPbUnY BEAnvYDCZngo+FKRx738T6zrdhwATQvwzda2WNWgIj42ahedmf7wQnXVgHGucO3w 08Xo1TJr4Qacbuo1N9qNCyoGwHY6xGYwhK8Kr+w2/RGKxDeh53kqeAUdDwIDAQAB o4IC3jCCAtowHQYDVR0OBBYEFN/mIHWCSz1KWNY5fgQz8cLp/yRmMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvMy1ZZ2RZSkxQVXBZMWpsLUJEUHh3dW5fSkdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHzBggrBgEFBQcBBwEB/wSB4zCB4DBaBAIAATBUAwQBLY3M MAwDBAItkPQDBAAtkPYwDAMEAi2XnAMEAC2XngMEAS2a7jAMAwQEudDQAwQAudDS AwQAueNSAwQAueRTAwQBufNwAwQAwpIwAwQBwxoGMIGBBAIAAjB7AwcAKgs8QAAB AwcAKgs8QAAJMBIDBwAqCzxAABEDBwAqCzxAABIwEgMHACoLPEAAFQMHAyoLPEAA EAMHASoLPEAAIAMHACoLPEAAJQMHACoLPED8pgMHACoOVUAAADASAwcEKg5VQAAQ AwcAKg5VQAASAwcAKg5VQAEAMA0GCSqGSIb3DQEBCwUAA4IBAQCrzas9PIlDnuVI v7fdxz4hJyjyELIidxawaNTXJPk2PgQaoraGJsWdDJ3smJwZJGqkqYtJp06PviY/ Z5oe2r7IVDD3egRkockfyPxTuA/Ez4xpvOwj/adtF1ulAfeLtp/haQ1QpUstEnyO Ly4t5eWt6qfYD3ayAJ44XgJugxfpdoZgJgx8kpoLZTN+PLt8D/zt7iE4jLbRXO0A LHH0HgnBZYkA3LJgk//+PHWaH/2GUe8iFOBCaz33ULaG8ELZLdYJEm/GNOaw8kPm 1zjwQuqEk4d+zDz8NkmJHWZ59Ft2RHW0q1rfb5COKQwAfVYEUXXCkOAxUk6SAylM 4xwGchpw -----END CERTIFICATE-----Generated at Sat Dec 6 19:59:25 2025 by rpki-client