This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/9iyjaSQbF6jKB3Gb1VnuXEoBZLg.roa File: 9iyjaSQbF6jKB3Gb1VnuXEoBZLg.roa (raw, json) Hash identifier: j/V5Umb1miTw21lhsGrYTA9zeaPaOH/4dpmK/3EuXK4= Subject key identifier: F6:2C:A3:69:24:1B:17:A8:CA:07:71:9B:D5:59:EE:5C:4A:01:64:B8 Certificate issuer: /CN=331bce2ee806e93621112dbd618536f775f44fba Certificate serial: 019ADEC3D8B60A1FF55949668EB9C23B1CF3 Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/9iyjaSQbF6jKB3Gb1VnuXEoBZLg.roa Signing time: Tue 02 Dec 2025 11:12:48 +0000 ROA not before: Tue 02 Dec 2025 11:12:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212301 IP address blocks: 5.252.204.0/24 maxlen: 24 5.252.205.0/24 maxlen: 24 5.252.206.0/24 maxlen: 24 5.252.207.0/24 maxlen: 24 45.67.232.0/24 maxlen: 24 45.67.233.0/24 maxlen: 24 45.67.234.0/24 maxlen: 24 45.67.235.0/24 maxlen: 24 91.230.149.0/24 maxlen: 24 185.122.200.0/24 maxlen: 24 185.122.201.0/24 maxlen: 24 185.122.202.0/24 maxlen: 24 185.122.203.0/24 maxlen: 24 185.130.56.0/24 maxlen: 24 185.130.57.0/24 maxlen: 24 185.130.58.0/24 maxlen: 24 185.130.59.0/24 maxlen: 24 185.198.72.0/24 maxlen: 24 185.198.73.0/24 maxlen: 24 185.198.74.0/24 maxlen: 24 185.198.75.0/24 maxlen: 24 2a07:cd00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:c3:d8:b6:0a:1f:f5:59:49:66:8e:b9:c2:3b:1c:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba Validity Not Before: Dec 2 11:12:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f62ca369241b17a8ca07719bd559ee5c4a0164b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7e:69:7b:16:d5:b4:a7:ae:ff:07:6b:f0:9c: 9d:8f:50:62:2c:76:f7:ea:6b:c9:ee:24:3b:32:e0: 51:75:3b:36:05:37:ab:59:57:d6:82:12:e1:b0:5b: 6b:55:90:19:3c:e2:b2:90:3c:11:c0:1b:c4:35:48: ef:13:d0:c1:ce:77:ec:75:5e:5a:34:71:ee:a4:be: f8:8e:ed:00:f6:12:a1:ea:f2:8d:fb:76:64:29:71: f5:02:3d:96:bf:49:2d:44:59:66:0c:7f:7d:5b:09: 99:63:ae:c7:d2:b6:83:d9:90:95:4c:27:7f:e9:5e: b5:6d:88:1a:3e:6f:7b:fc:79:fb:e8:1d:8b:5e:c1: ae:6d:20:05:df:03:c8:58:dc:c7:90:b9:d4:29:36: 2b:ff:b4:b3:0e:e0:c2:be:ef:5b:00:d1:23:b2:f2: 5c:c2:54:a2:42:36:71:6a:48:a6:8e:49:0d:bb:00: bf:bd:62:56:83:55:60:f2:20:f0:39:71:66:1b:7f: 27:dc:ae:e2:27:ff:2f:36:59:fa:2c:8a:bd:c6:ba: 95:34:f1:09:5a:3c:a6:30:e6:4e:2d:64:3d:51:d2: d6:0c:ad:a6:2d:95:65:08:d1:a6:82:c9:87:d7:44: c3:89:83:fe:6a:c9:18:ef:17:54:b6:a8:fa:10:87: 18:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2C:A3:69:24:1B:17:A8:CA:07:71:9B:D5:59:EE:5C:4A:01:64:B8 X509v3 Authority Key Identifier: keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/9iyjaSQbF6jKB3Gb1VnuXEoBZLg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.204.0/22 45.67.232.0/22 91.230.149.0/24 185.122.200.0/22 185.130.56.0/22 185.198.72.0/22 IPv6: 2a07:cd00::/48 Signature Algorithm: sha256WithRSAEncryption a3:94:49:33:19:88:57:2a:b6:a2:f6:8c:ad:17:e6:7e:69:1e: 67:32:16:68:c8:03:56:66:35:60:d0:f3:d5:77:22:d3:16:49: 6b:a0:5e:65:91:e6:19:be:51:24:77:f2:21:6f:ec:5a:ad:88: 6e:b9:e8:84:5a:f8:71:f9:00:bc:c4:b2:8a:76:87:4f:af:7f: 97:36:cb:50:62:97:4a:a0:1e:2b:ab:df:6e:9a:13:6d:71:c6: 02:11:56:4e:ea:2b:a5:f5:ca:21:2d:e1:25:6d:12:40:c6:f0: 76:e7:f6:44:ca:50:0e:1f:0f:0b:8c:c9:9c:8e:22:58:61:ed: 15:99:ed:8e:64:40:a7:05:85:6b:ba:77:07:75:7e:89:81:07: 40:52:24:ac:96:8d:df:4a:1c:b7:2f:67:b2:b0:57:fc:89:d8: 77:60:76:36:22:6d:cc:b1:25:df:e0:f3:f8:bf:c3:4b:37:54: 9a:5d:1f:3a:78:0b:3c:58:1f:3a:72:49:dc:82:37:9b:83:bd: b0:6a:30:2f:cf:7e:83:c2:59:79:2b:61:98:68:e5:15:cb:b2: 01:e7:76:cc:04:84:65:6c:8d:9e:cd:71:8a:0e:91:89:34:52: d4:1f:1b:df:90:98:97:1e:74:48:6f:93:d6:2e:2c:e0:f8:68: 0d:a3:f0:82 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZrew9i2Ch/1WUlmjrnCOxzzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMWJjZTJlZTgwNmU5MzYyMTExMmRiZDYxODUzNmY3NzVm NDRmYmEwHhcNMjUxMjAyMTExMjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjJjYTM2OTI0MWIxN2E4Y2EwNzcxOWJkNTU5ZWU1YzRhMDE2NGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX5pexbVtKeu/wdr8Jydj1BiLHb3 6mvJ7iQ7MuBRdTs2BTerWVfWghLhsFtrVZAZPOKykDwRwBvENUjvE9DBznfsdV5a NHHupL74ju0A9hKh6vKN+3ZkKXH1Aj2Wv0ktRFlmDH99WwmZY67H0raD2ZCVTCd/ 6V61bYgaPm97/Hn76B2LXsGubSAF3wPIWNzHkLnUKTYr/7SzDuDCvu9bANEjsvJc wlSiQjZxakimjkkNuwC/vWJWg1Vg8iDwOXFmG38n3K7iJ/8vNln6LIq9xrqVNPEJ WjymMOZOLWQ9UdLWDK2mLZVlCNGmgsmH10TDiYP+askY7xdUtqj6EIcYlQIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFPYso2kkGxeoygdxm9VZ7lxKAWS4MB8GA1UdIwQY MBaAFDMbzi7oBuk2IREtvWGFNvd19E+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXh2T0x1Z0c2VFloRVMyOVlZVTI5M1gwVDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS80YmEzY2EtZDZmZC00MTE2LTkxNDYt YWVhYzE2MjI3YzI1LzEvOWl5amFTUWJGNmpLQjNHYjFWbnVYRW9CWkxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS80YmEzY2EtZDZmZC00MTE2LTkxNDYtYWVhYzE2MjI3YzI1 LzEvTXh2T0x1Z0c2VFloRVMyOVlZVTI5M1gwVDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAqBAIAATAkAwQCBfzMAwQC LUPoAwQAW+aVAwQCuXrIAwQCuYI4AwQCucZIMA8EAgACMAkDBwAqB80AAAAwDQYJ KoZIhvcNAQELBQADggEBAKOUSTMZiFcqtqL2jK0X5n5pHmcyFmjIA1ZmNWDQ89V3 ItMWSWugXmWR5hm+USR38iFv7FqtiG656IRa+HH5ALzEsop2h0+vf5c2y1Bil0qg Hiur326aE21xxgIRVk7qK6X1yiEt4SVtEkDG8Hbn9kTKUA4fDwuMyZyOIlhh7RWZ 7Y5kQKcFhWu6dwd1fomBB0BSJKyWjd9KHLcvZ7KwV/yJ2HdgdjYibcyxJd/g8/i/ w0s3VJpdHzp4CzxYHzpySdyCN5uDvbBqMC/PfoPCWXkrYZho5RXLsgHndswEhGVs jZ7NcYoOkYk0UtQfG9+QmJcedEhvk9YuLOD4aA2j8II= -----END CERTIFICATE-----Generated at Sat Dec 6 11:53:43 2025 by rpki-client