This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/4Nx299_TQvy3DRbYA7iwzq7JjNc.roa File: 4Nx299_TQvy3DRbYA7iwzq7JjNc.roa (raw, json) Hash identifier: lqzptIVvbunLfULsQ2uHHm/+WtHXrvvhdJnhnZaxJSA= Subject key identifier: E0:DC:76:F7:DF:D3:42:FC:B7:0D:16:D8:03:B8:B0:CE:AE:C9:8C:D7 Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Certificate serial: 019B274238814746E7C9580B10AC315804FF Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/4Nx299_TQvy3DRbYA7iwzq7JjNc.roa Signing time: Tue 16 Dec 2025 13:03:29 +0000 ROA not before: Tue 16 Dec 2025 13:03:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 2a06:b442::/32 maxlen: 32 2a06:b443::/32 maxlen: 32 2a06:b444::/32 maxlen: 32 2a06:b445::/32 maxlen: 32 2a06:b446::/32 maxlen: 32 2a06:b447::/32 maxlen: 32 2a0e:7781::/32 maxlen: 32 2a0e:7782::/32 maxlen: 32 2a0e:7783::/32 maxlen: 32 2a0e:7784::/32 maxlen: 32 2a0e:7785::/32 maxlen: 32 2a0e:7786::/32 maxlen: 32 2a0e:7787::/32 maxlen: 32 2a0f:d481::/32 maxlen: 32 2a0f:d482::/32 maxlen: 32 2a0f:d483::/32 maxlen: 32 2a0f:d484::/32 maxlen: 32 2a0f:d485::/32 maxlen: 32 2a0f:d486::/32 maxlen: 32 2a0f:d487::/32 maxlen: 32 2a0f:e001::/32 maxlen: 32 2a0f:e002::/32 maxlen: 32 2a0f:e003::/32 maxlen: 32 2a0f:e004::/32 maxlen: 32 2a0f:e005::/32 maxlen: 32 2a0f:e006::/32 maxlen: 32 2a0f:e007::/32 maxlen: 32 2a11:2f40::/32 maxlen: 32 2a11:2f41::/32 maxlen: 32 2a11:2f42::/32 maxlen: 32 2a11:2f43::/32 maxlen: 32 2a11:2f44::/32 maxlen: 32 2a11:2f45::/32 maxlen: 32 2a11:2f46::/32 maxlen: 32 2a11:2f47::/32 maxlen: 32 2a11:3b41::/32 maxlen: 32 2a11:3b42::/32 maxlen: 32 2a11:3b43::/32 maxlen: 32 2a11:3b44::/32 maxlen: 32 2a11:3b45::/32 maxlen: 32 2a11:3b46::/32 maxlen: 32 2a11:3b47::/32 maxlen: 32 2a11:7240::/32 maxlen: 32 2a11:7241::/32 maxlen: 32 2a11:7242::/32 maxlen: 32 2a11:7243::/32 maxlen: 32 2a11:7244::/32 maxlen: 32 2a11:7245::/32 maxlen: 32 2a11:7246::/32 maxlen: 32 2a11:7247::/32 maxlen: 32 2a11:dcc1::/32 maxlen: 32 2a11:dcc2::/32 maxlen: 32 2a11:dcc3::/32 maxlen: 32 2a11:dcc4::/32 maxlen: 32 2a11:dcc5::/32 maxlen: 32 2a11:dcc6::/32 maxlen: 32 2a11:f241::/32 maxlen: 32 2a11:f242::/32 maxlen: 32 2a11:f243::/32 maxlen: 32 2a11:f244::/32 maxlen: 32 2a11:f245::/32 maxlen: 32 2a11:f246::/32 maxlen: 32 2a11:f247::/32 maxlen: 32 2a12:441::/32 maxlen: 32 2a12:442::/32 maxlen: 32 2a12:443::/32 maxlen: 32 2a12:444::/32 maxlen: 32 2a12:445::/32 maxlen: 32 2a12:446::/32 maxlen: 32 2a12:447::/32 maxlen: 32 2a12:6641::/32 maxlen: 32 2a12:6642::/32 maxlen: 32 2a12:6643::/32 maxlen: 32 2a12:6644::/32 maxlen: 32 2a12:6645::/32 maxlen: 32 2a12:6646::/32 maxlen: 32 2a12:6647::/32 maxlen: 32 2a12:6b81::/32 maxlen: 32 2a12:6b82::/32 maxlen: 32 2a12:6b83::/32 maxlen: 32 2a12:6b84::/32 maxlen: 32 2a12:6b85::/32 maxlen: 32 2a12:6b86::/32 maxlen: 32 2a12:6b87::/32 maxlen: 32 2a12:7740::/32 maxlen: 32 2a12:7741::/32 maxlen: 32 2a12:7742::/32 maxlen: 32 2a12:7743::/32 maxlen: 32 2a12:7744::/32 maxlen: 32 2a12:7745::/32 maxlen: 32 2a12:7746::/32 maxlen: 32 2a12:7747::/32 maxlen: 32 2a12:f0c1::/32 maxlen: 32 2a12:f0c2::/32 maxlen: 32 2a12:f0c3::/32 maxlen: 32 2a12:f0c4::/32 maxlen: 32 2a12:f0c5::/32 maxlen: 32 2a12:f0c6::/32 maxlen: 32 2a12:f0c7::/32 maxlen: 32 2a13:ba01::/32 maxlen: 32 2a13:ba02::/32 maxlen: 32 2a13:ba03::/32 maxlen: 32 2a13:ba04::/32 maxlen: 32 2a13:ba05::/32 maxlen: 32 2a13:ba06::/32 maxlen: 32 2a13:ba07::/32 maxlen: 32 2a13:dac1::/32 maxlen: 32 2a13:dac2::/32 maxlen: 32 2a13:dac3::/32 maxlen: 32 2a13:dac4::/32 maxlen: 32 2a13:dac5::/32 maxlen: 32 2a13:dac6::/32 maxlen: 32 2a13:dac7::/32 maxlen: 32 2a14:c1::/32 maxlen: 32 2a14:c2::/32 maxlen: 32 2a14:c3::/32 maxlen: 32 2a14:c4::/32 maxlen: 32 2a14:c5::/32 maxlen: 32 2a14:c6::/32 maxlen: 32 2a14:c7::/32 maxlen: 32 2a14:1c1::/32 maxlen: 32 2a14:1c2::/32 maxlen: 32 2a14:1c3::/32 maxlen: 32 2a14:1c4::/32 maxlen: 32 2a14:1c5::/32 maxlen: 32 2a14:1c6::/32 maxlen: 32 2a14:1c7::/32 maxlen: 32 2a14:801::/32 maxlen: 32 2a14:802::/32 maxlen: 32 2a14:803::/32 maxlen: 32 2a14:804::/32 maxlen: 32 2a14:805::/32 maxlen: 32 2a14:806::/32 maxlen: 32 2a14:807::/32 maxlen: 32 2a14:7e01::/32 maxlen: 32 2a14:7e02::/32 maxlen: 32 2a14:7e03::/32 maxlen: 32 2a14:7e04::/32 maxlen: 32 2a14:7e05::/32 maxlen: 32 2a14:7e06::/32 maxlen: 32 2a14:7e07::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:42:38:81:47:46:e7:c9:58:0b:10:ac:31:58:04:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Validity Not Before: Dec 16 13:03:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e0dc76f7dfd342fcb70d16d803b8b0ceaec98cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c6:52:a2:f3:93:34:b0:c0:ae:88:67:26:95: 97:49:af:22:0f:a0:12:65:ab:41:cf:8d:9d:e3:e7: 75:00:e6:42:ed:a2:77:3a:d7:35:df:56:9a:f4:8a: 6f:ed:aa:ba:84:0a:28:19:17:32:4b:88:dc:6f:eb: 99:11:f0:86:9a:2e:c1:64:6c:72:8a:98:30:e6:67: 20:52:5f:50:4a:79:c7:36:1e:2b:d4:0b:1c:2d:03: 18:61:b1:eb:f9:d6:c2:7b:83:12:fa:1f:c4:fd:79: d7:68:fd:56:19:95:8e:e2:e4:87:35:04:a4:61:44: 84:f3:4c:d9:b5:f3:49:5a:ca:5c:db:be:62:6d:d5: fb:bc:2d:d6:d9:3f:80:f9:fd:5d:6e:38:16:ac:4f: b3:f3:71:d0:1d:a0:39:5f:11:45:69:26:d2:48:e7: 2a:ee:5a:0c:fa:6d:f2:d7:9f:9d:ba:8d:a9:72:45: 44:b8:45:95:3d:17:87:31:67:4b:5c:dc:49:6d:8a: b6:e6:27:55:98:d6:ef:a4:c2:95:cc:91:bf:dd:e1: 6f:21:c8:b5:a7:fa:ed:09:e3:e1:9c:d4:9b:80:02: 7f:b6:19:7a:73:2d:82:5e:12:5a:83:15:e1:4f:79: 1b:ee:ef:46:60:c2:05:70:f1:93:4c:87:8f:35:5c: 69:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DC:76:F7:DF:D3:42:FC:B7:0D:16:D8:03:B8:B0:CE:AE:C9:8C:D7 X509v3 Authority Key Identifier: keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/4Nx299_TQvy3DRbYA7iwzq7JjNc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:b442::-2a06:b447:ffff:ffff:ffff:ffff:ffff:ffff 2a0e:7781::-2a0e:7787:ffff:ffff:ffff:ffff:ffff:ffff 2a0f:d481::-2a0f:d487:ffff:ffff:ffff:ffff:ffff:ffff 2a0f:e001::-2a0f:e007:ffff:ffff:ffff:ffff:ffff:ffff 2a11:2f40::/29 2a11:3b41::-2a11:3b47:ffff:ffff:ffff:ffff:ffff:ffff 2a11:7240::/29 2a11:dcc1::-2a11:dcc6:ffff:ffff:ffff:ffff:ffff:ffff 2a11:f241::-2a11:f247:ffff:ffff:ffff:ffff:ffff:ffff 2a12:441::-2a12:447:ffff:ffff:ffff:ffff:ffff:ffff 2a12:6641::-2a12:6647:ffff:ffff:ffff:ffff:ffff:ffff 2a12:6b81::-2a12:6b87:ffff:ffff:ffff:ffff:ffff:ffff 2a12:7740::/29 2a12:f0c1::-2a12:f0c7:ffff:ffff:ffff:ffff:ffff:ffff 2a13:ba01::-2a13:ba07:ffff:ffff:ffff:ffff:ffff:ffff 2a13:dac1::-2a13:dac7:ffff:ffff:ffff:ffff:ffff:ffff 2a14:c1::-2a14:c7:ffff:ffff:ffff:ffff:ffff:ffff 2a14:1c1::-2a14:1c7:ffff:ffff:ffff:ffff:ffff:ffff 2a14:801::-2a14:807:ffff:ffff:ffff:ffff:ffff:ffff 2a14:7e01::-2a14:7e07:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 11:1c:67:76:3e:c0:8f:46:48:63:7b:4e:18:39:09:28:99:9e: 1a:3e:23:16:2d:41:15:1f:fe:c8:2e:4b:d7:29:29:b5:b0:f6: 67:33:45:b5:0d:84:fa:a4:b6:7b:c1:07:88:ea:86:1a:2f:35: 32:f8:f4:cf:a2:f5:52:ed:90:f2:bb:08:e8:c8:88:04:9d:9e: 0d:59:66:7c:77:07:1c:9a:76:a2:18:b5:b1:c4:10:37:3f:38: 9a:98:9c:72:ec:63:50:7e:c7:2d:0e:66:b5:54:34:4e:e9:61: 6d:d9:e2:99:6d:2e:46:9c:03:14:bd:05:2f:9a:a8:01:4b:62: 86:d9:f6:13:f8:d1:fd:a4:2d:a9:5a:8d:32:cf:92:7a:da:32: 37:e7:f3:b6:61:96:b0:41:15:4a:70:79:ad:ad:8c:43:32:85: 98:a1:32:3a:67:b4:ea:03:04:21:13:a1:dc:dd:25:48:ff:1d: da:31:1b:55:e4:a6:8e:8a:53:3e:b4:6f:6a:da:6f:26:92:2f: bb:6f:8c:00:88:50:ee:b6:b5:7c:b0:b5:87:25:a2:8d:c4:0a: 82:83:e7:dd:cd:89:fb:44:be:6e:c2:5e:47:77:a4:6c:35:32: 85:7f:56:14:4c:ed:cf:cb:fe:12:45:1f:c6:0e:f5:07:17:05: fe:41:1d:91 -----BEGIN CERTIFICATE----- MIIGJjCCBQ6gAwIBAgISAZsnQjiBR0bnyVgLEKwxWAT/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz Mjc2ZTMwHhcNMjUxMjE2MTMwMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGRjNzZmN2RmZDM0MmZjYjcwZDE2ZDgwM2I4YjBjZWFlYzk4Y2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMZSovOTNLDArohnJpWXSa8iD6AS ZatBz42d4+d1AOZC7aJ3Otc131aa9Ipv7aq6hAooGRcyS4jcb+uZEfCGmi7BZGxy ipgw5mcgUl9QSnnHNh4r1AscLQMYYbHr+dbCe4MS+h/E/XnXaP1WGZWO4uSHNQSk YUSE80zZtfNJWspc275ibdX7vC3W2T+A+f1dbjgWrE+z83HQHaA5XxFFaSbSSOcq 7loM+m3y15+duo2pckVEuEWVPReHMWdLXNxJbYq25idVmNbvpMKVzJG/3eFvIci1 p/rtCePhnNSbgAJ/thl6cy2CXhJagxXhT3kb7u9GYMIFcPGTTIePNVxp3wIDAQAB o4IDMjCCAy4wHQYDVR0OBBYEFODcdvff00L8tw0W2AO4sM6uyYzXMB8GA1UdIwQY MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt YTJhNGM2YTYyMWNkLzEvNE54Mjk5X1RRdnkzRFJiWUE3aXd6cTdKak5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBRgYIKwYBBQUHAQcBAf8EggE1MIIBMTCCAS0EAgACMIIB JTAOAwUBKga0QgMFAyoGtEAwDgMFACoOd4EDBQMqDneAMA4DBQAqD9SBAwUDKg/U gDAOAwUAKg/gAQMFAyoP4AADBQMqES9AMA4DBQAqETtBAwUDKhE7QAMFAyoRckAw DgMFACoR3MEDBQAqEdzGMA4DBQAqEfJBAwUDKhHyQDAOAwUAKhIEQQMFAyoSBEAw DgMFACoSZkEDBQMqEmZAMA4DBQAqEmuBAwUDKhJrgAMFAyoSd0AwDgMFACoS8MED BQMqEvDAMA4DBQAqE7oBAwUDKhO6ADAOAwUAKhPawQMFAyoT2sAwDgMFACoUAMED BQMqFADAMA4DBQAqFAHBAwUDKhQBwDAOAwUAKhQIAQMFAyoUCAAwDgMFACoUfgED BQMqFH4AMA0GCSqGSIb3DQEBCwUAA4IBAQARHGd2PsCPRkhje04YOQkomZ4aPiMW LUEVH/7ILkvXKSm1sPZnM0W1DYT6pLZ7wQeI6oYaLzUy+PTPovVS7ZDyuwjoyIgE nZ4NWWZ8dwccmnaiGLWxxBA3PziamJxy7GNQfsctDma1VDRO6WFt2eKZbS5GnAMU vQUvmqgBS2KG2fYT+NH9pC2pWo0yz5J62jI35/O2YZawQRVKcHmtrYxDMoWYoTI6 Z7TqAwQhE6Hc3SVI/x3aMRtV5KaOilM+tG9q2m8mki+7b4wAiFDutrV8sLWHJaKN xAqCg+fdzYn7RL5uwl5Hd6RsNTKFf1YUTO3Py/4SRR/GDvUHFwX+QR2R -----END CERTIFICATE-----Generated at Sat Dec 20 10:38:03 2025 by rpki-client