This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/8b4d2klO2jMJm4pfasglioeJ3zs.roa File: 8b4d2klO2jMJm4pfasglioeJ3zs.roa (raw, json) Hash identifier: MbXQr1OR+HZS5qgq3KIg+75V2FbX66DMTH+OOBbZqGM= Subject key identifier: F1:BE:1D:DA:49:4E:DA:33:09:9B:8A:5F:6A:C8:25:8A:87:89:DF:3B Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B130D7ED398FD73B46CC59637E6E8B007 Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/8b4d2klO2jMJm4pfasglioeJ3zs.roa Signing time: Fri 12 Dec 2025 14:53:30 +0000 ROA not before: Fri 12 Dec 2025 14:53:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208258 IP address blocks: 45.141.204.0/23 maxlen: 24 45.144.244.0/23 maxlen: 24 45.144.246.0/24 maxlen: 24 45.151.156.0/23 maxlen: 24 45.151.156.0/24 maxlen: 24 45.151.158.0/24 maxlen: 24 45.151.159.0/24 maxlen: 24 45.154.238.0/24 maxlen: 24 45.154.239.0/24 maxlen: 24 45.159.192.0/23 maxlen: 23 45.159.194.0/24 maxlen: 24 109.206.248.0/22 maxlen: 22 185.208.208.0/24 maxlen: 24 185.208.209.0/24 maxlen: 24 185.208.210.0/24 maxlen: 24 185.227.82.0/24 maxlen: 24 185.228.83.0/24 maxlen: 24 185.243.112.0/24 maxlen: 24 185.243.113.0/24 maxlen: 24 194.146.48.0/24 maxlen: 24 195.26.6.0/24 maxlen: 24 195.26.7.0/24 maxlen: 24 195.88.226.0/23 maxlen: 23 213.185.86.0/23 maxlen: 23 213.185.88.0/22 maxlen: 22 2a0b:3c40:1::/48 maxlen: 48 2a0b:3c40:9::/48 maxlen: 48 2a0b:3c40:11::/48 maxlen: 48 2a0b:3c40:12::/48 maxlen: 48 2a0b:3c40:15::/48 maxlen: 48 2a0b:3c40:16::/48 maxlen: 48 2a0b:3c40:17::/48 maxlen: 48 2a0b:3c40:20::/48 maxlen: 48 2a0b:3c40:21::/48 maxlen: 48 2a0b:3c40:25::/48 maxlen: 48 2a0b:3c40:f1::/48 maxlen: 48 2a0b:3c40:fca6::/48 maxlen: 48 2a0e:5540::/48 maxlen: 48 2a0e:5540:10::/48 maxlen: 48 2a0e:5540:11::/48 maxlen: 48 2a0e:5540:12::/48 maxlen: 48 2a0e:5540:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:0d:7e:d3:98:fd:73:b4:6c:c5:96:37:e6:e8:b0:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Dec 12 14:53:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f1be1dda494eda33099b8a5f6ac8258a8789df3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:06:7a:d6:66:28:98:1c:a2:fe:f9:f4:de:d5: 7b:66:7b:a8:8c:6c:ed:ae:96:c6:e7:36:89:33:f9: 06:f4:dd:16:54:53:51:cc:15:dc:98:76:0b:9d:d3: c6:6e:50:49:7c:5d:34:80:b3:40:67:4c:fe:38:ca: ac:9b:ab:28:5a:1e:c9:59:25:59:f6:83:17:8f:6a: ef:7a:ba:4e:5d:6c:2e:ad:c8:23:f6:b5:dd:73:08: da:66:5c:28:6e:0b:51:9e:e2:2f:a2:d2:62:16:05: a3:69:fe:81:5f:12:49:ae:87:c3:7a:49:f3:d1:ea: d2:d3:64:c2:4c:8c:5e:4a:98:38:3c:7c:c0:c7:2f: d0:de:5f:d8:71:8f:2f:9d:47:89:29:66:46:55:39: fa:6a:03:d8:f0:ae:3a:ed:d0:d6:ac:ee:a0:b8:ba: 5b:c7:66:1a:4c:63:2d:3f:32:9f:00:55:95:73:e6: ae:2c:db:4a:ad:2a:6f:18:81:cf:40:02:c3:20:4a: 22:77:96:63:b3:8a:4f:b1:2f:7d:78:f9:ce:65:e4: d5:58:7e:2e:10:1f:e3:8c:9d:68:f8:af:1f:00:8c: e2:00:15:d9:b9:e2:e9:6d:45:9e:cb:fc:c9:99:d7: 27:10:b5:92:7b:96:79:46:82:e2:c3:25:a5:d9:91: fc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:BE:1D:DA:49:4E:DA:33:09:9B:8A:5F:6A:C8:25:8A:87:89:DF:3B X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/8b4d2klO2jMJm4pfasglioeJ3zs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.204.0/23 45.144.244.0-45.144.246.255 45.151.156.0/22 45.154.238.0/23 45.159.192.0-45.159.194.255 109.206.248.0/22 185.208.208.0-185.208.210.255 185.227.82.0/24 185.228.83.0/24 185.243.112.0/23 194.146.48.0/24 195.26.6.0/23 195.88.226.0/23 213.185.86.0-213.185.91.255 IPv6: 2a0b:3c40:1::/48 2a0b:3c40:9::/48 2a0b:3c40:11::-2a0b:3c40:12:ffff:ffff:ffff:ffff:ffff 2a0b:3c40:15::-2a0b:3c40:17:ffff:ffff:ffff:ffff:ffff 2a0b:3c40:20::/47 2a0b:3c40:25::/48 2a0b:3c40:f1::/48 2a0b:3c40:fca6::/48 2a0e:5540::/48 2a0e:5540:10::-2a0e:5540:12:ffff:ffff:ffff:ffff:ffff 2a0e:5540:100::/48 Signature Algorithm: sha256WithRSAEncryption 2a:f1:26:09:95:8a:52:f3:d3:4e:85:19:39:7c:de:b9:ee:dd: 3f:0d:ec:5c:b2:07:ad:b5:f8:f7:47:03:c4:f3:9c:f6:1e:50: 50:5a:ae:24:68:d2:ec:25:a7:d6:56:e3:f1:27:68:67:2a:9a: 4f:09:75:ae:62:ca:98:18:8d:cf:26:48:91:99:86:49:9f:d3: 5e:e6:f3:c4:27:8b:4c:bf:d9:be:dc:97:26:05:97:5c:8d:5e: f6:e0:ec:fd:b7:93:fc:7b:d0:18:b8:56:72:1c:35:c8:72:6b: bd:ed:80:2a:77:89:b2:b5:02:07:11:b9:4e:27:09:5f:a5:83: 85:39:e2:85:94:d9:44:77:c9:03:d8:f1:a0:f6:43:64:b9:94: 91:8f:ec:11:83:89:76:49:ec:56:0a:82:7e:a1:76:05:75:87: 79:d1:03:bf:bf:b5:4a:4b:5d:29:8d:45:8c:37:59:37:9b:59: 5d:36:ab:77:40:12:f8:f9:93:c6:71:4c:30:c3:0a:f1:73:5e: db:3c:6d:14:2c:1d:40:6f:23:a6:67:e5:34:b7:bf:9b:bb:77: fc:ea:61:87:2a:84:8a:43:7f:bc:d4:65:89:91:94:1e:8c:0d: 02:cf:30:ea:bd:5e:5e:34:2c:aa:60:4f:69:6d:d9:f7:e3:b9: b2:e3:3f:56 -----BEGIN CERTIFICATE----- MIIF/zCCBOegAwIBAgISAZsTDX7TmP1ztGzFljfm6LAHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjUxMjEyMTQ1MzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWJlMWRkYTQ5NGVkYTMzMDk5YjhhNWY2YWM4MjU4YTg3ODlkZjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAZ61mYomByi/vn03tV7ZnuojGzt rpbG5zaJM/kG9N0WVFNRzBXcmHYLndPGblBJfF00gLNAZ0z+OMqsm6soWh7JWSVZ 9oMXj2rverpOXWwurcgj9rXdcwjaZlwobgtRnuIvotJiFgWjaf6BXxJJrofDeknz 0erS02TCTIxeSpg4PHzAxy/Q3l/YcY8vnUeJKWZGVTn6agPY8K467dDWrO6guLpb x2YaTGMtPzKfAFWVc+auLNtKrSpvGIHPQALDIEoid5Zjs4pPsS99ePnOZeTVWH4u EB/jjJ1o+K8fAIziABXZueLpbUWey/zJmdcnELWSe5Z5RoLiwyWl2ZH8AQIDAQAB o4IDCzCCAwcwHQYDVR0OBBYEFPG+HdpJTtozCZuKX2rIJYqHid87MB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvOGI0ZDJrbE8yak1KbTRwZmFzZ2xpb2VKM3pzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBHwYIKwYBBQUHAQcBAf8EggEOMIIBCjB6BAIAATB0AwQB LY3MMAwDBAItkPQDBAAtkPYDBAItl5wDBAEtmu4wDAMEBi2fwAMEAC2fwgMEAm3O +DAMAwQEudDQAwQAudDSAwQAueNSAwQAueRTAwQBufNwAwQAwpIwAwQBwxoGAwQB w1jiMAwDBAHVuVYDBALVuVgwgYsEAgACMIGEAwcAKgs8QAABAwcAKgs8QAAJMBID BwAqCzxAABEDBwAqCzxAABIwEgMHACoLPEAAFQMHAyoLPEAAEAMHASoLPEAAIAMH ACoLPEAAJQMHACoLPEAA8QMHACoLPED8pgMHACoOVUAAADASAwcEKg5VQAAQAwcA Kg5VQAASAwcAKg5VQAEAMA0GCSqGSIb3DQEBCwUAA4IBAQAq8SYJlYpS89NOhRk5 fN657t0/Dexcsgettfj3RwPE85z2HlBQWq4kaNLsJafWVuPxJ2hnKppPCXWuYsqY GI3PJkiRmYZJn9Ne5vPEJ4tMv9m+3JcmBZdcjV724Oz9t5P8e9AYuFZyHDXIcmu9 7YAqd4mytQIHEblOJwlfpYOFOeKFlNlEd8kD2PGg9kNkuZSRj+wRg4l2SexWCoJ+ oXYFdYd50QO/v7VKS10pjUWMN1k3m1ldNqt3QBL4+ZPGcUwwwwrxc17bPG0ULB1A byOmZ+U0t7+bu3f86mGHKoSKQ3+81GWJkZQejA0CzzDqvV5eNCyqYE9pbdn347my 4z9W -----END CERTIFICATE-----Generated at Wed Dec 17 20:07:46 2025 by rpki-client