This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/3C4bE5EhpxTD8ntAfMb031Q4N7U.roa File: 3C4bE5EhpxTD8ntAfMb031Q4N7U.roa (raw, json) Hash identifier: mQejtPkSk7qOy5LIWKfdWmidqPBID43pSZaY4/inuG0= Subject key identifier: DC:2E:1B:13:91:21:A7:14:C3:F2:7B:40:7C:C6:F4:DF:54:38:37:B5 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019AA6F2B6CCD0100D6A5ADDEF6F8CF4ED0A Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/3C4bE5EhpxTD8ntAfMb031Q4N7U.roa Signing time: Fri 21 Nov 2025 15:05:15 +0000 ROA not before: Fri 21 Nov 2025 15:05:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 395092 IP address blocks: 45.95.16.0/22 maxlen: 22 45.155.36.0/22 maxlen: 22 85.155.112.0/22 maxlen: 24 94.124.160.0/24 maxlen: 24 168.222.248.0/22 maxlen: 24 185.93.220.0/22 maxlen: 24 193.17.56.0/22 maxlen: 22 213.108.246.0/23 maxlen: 23 213.139.204.0/22 maxlen: 22 217.195.152.0/22 maxlen: 22 2a0d:9ec0::/48 maxlen: 48 2a0d:9ec1::/48 maxlen: 48 2a0d:9ec2::/48 maxlen: 48 2a0d:9ec3::/48 maxlen: 48 2a0d:9ec4::/48 maxlen: 48 2a0d:9ec5::/48 maxlen: 48 2a0d:d8c0::/48 maxlen: 48 2a0d:d8c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:f2:b6:cc:d0:10:0d:6a:5a:dd:ef:6f:8c:f4:ed:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Nov 21 15:05:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dc2e1b139121a714c3f27b407cc6f4df543837b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:50:34:77:99:2a:f1:04:c7:91:54:d2:de:ed: e7:27:15:d5:55:11:e8:4e:0a:ef:b8:f3:12:31:2e: 0a:de:89:b3:0a:c4:e2:13:c1:3f:ee:f9:0d:27:cf: 91:f7:53:b1:dd:3e:a3:c4:29:2d:88:0f:ab:6f:00: 40:4d:f6:e7:6e:c4:38:c5:1a:f2:a2:7d:29:ae:57: 60:19:70:c2:d8:5e:2e:5a:4c:b5:f2:71:8a:4e:a8: f6:c7:c1:a2:b4:56:ce:c2:a2:56:dc:50:dc:f4:ae: 4b:92:8e:38:13:d1:71:9b:e7:3d:96:82:6c:07:54: fd:94:ae:da:14:67:f9:48:fc:8a:3b:f6:09:3d:f4: 94:10:bb:9d:c7:04:9e:fb:0e:15:8f:99:63:d5:28: e2:bf:3a:7a:11:59:fb:6e:64:59:4a:38:48:a7:23: 0c:eb:3d:8e:c8:28:2c:43:21:fd:3a:51:63:2b:48: a9:b1:93:49:ed:26:1f:9e:b7:c6:08:59:ca:41:2b: 43:02:63:a9:84:0b:b7:3b:04:e1:14:19:c5:b5:63: b2:b5:73:25:0c:39:71:4b:3f:01:7f:ba:11:f6:4e: 8e:7c:a0:c1:32:00:ff:72:e0:90:35:9d:d5:8b:37: 86:01:98:76:83:45:83:85:f1:43:21:e3:49:1a:03: 7e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:2E:1B:13:91:21:A7:14:C3:F2:7B:40:7C:C6:F4:DF:54:38:37:B5 X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/3C4bE5EhpxTD8ntAfMb031Q4N7U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.16.0/22 45.155.36.0/22 85.155.112.0/22 94.124.160.0/24 168.222.248.0/22 185.93.220.0/22 193.17.56.0/22 213.108.246.0/23 213.139.204.0/22 217.195.152.0/22 IPv6: 2a0d:9ec0::/48 2a0d:9ec1::/48 2a0d:9ec2::/48 2a0d:9ec3::/48 2a0d:9ec4::/48 2a0d:9ec5::/48 2a0d:d8c0::/47 Signature Algorithm: sha256WithRSAEncryption 18:e9:a6:7c:87:20:18:79:a8:1f:80:a9:aa:7d:56:c7:67:cb: 50:0e:00:88:bd:08:62:41:ca:04:59:28:8f:da:ed:a6:bf:00: 31:75:1c:b3:5c:9f:fc:76:43:8b:14:39:f0:bf:cd:ea:dd:aa: 92:fb:1e:1b:93:1e:c7:7f:54:49:34:bc:dc:62:7e:35:9f:5e: 4c:59:5e:3c:7b:6e:46:f2:d3:fc:fa:00:b3:f5:ec:5a:da:66: a4:f3:3d:e6:3b:84:0f:86:00:78:86:00:02:22:bd:9e:43:28: dc:55:6f:87:58:18:2e:68:52:3d:e3:6e:87:41:d3:a9:11:ef: 0a:cd:cf:78:2d:fc:a7:6c:78:f4:8a:1a:4c:b6:6a:f7:43:44: d5:1b:d5:dc:4e:d1:50:e2:7b:35:49:d7:6b:22:e7:b2:f8:62: 6c:16:fa:c5:dc:19:17:4b:c1:bb:a0:68:8b:c0:29:af:00:e8: fc:72:d0:80:31:93:21:eb:3c:71:59:e8:a9:52:0d:c8:fd:a1: 69:46:25:2b:f1:75:09:6b:64:52:b2:b4:0c:3c:34:c3:f0:11: a3:c3:09:ac:37:9d:5b:54:7d:21:1c:02:49:12:84:e2:ff:a2: 0b:3f:c0:f4:ce:fc:c1:27:cb:79:ff:a3:0c:4e:4f:76:19:be: 60:19:c6:1d -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgISAZqm8rbM0BANalrd72+M9O0KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjUxMTIxMTUwNTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzJlMWIxMzkxMjFhNzE0YzNmMjdiNDA3Y2M2ZjRkZjU0MzgzN2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lA0d5kq8QTHkVTS3u3nJxXVVRHo TgrvuPMSMS4K3omzCsTiE8E/7vkNJ8+R91Ox3T6jxCktiA+rbwBATfbnbsQ4xRry on0prldgGXDC2F4uWky18nGKTqj2x8GitFbOwqJW3FDc9K5Lko44E9Fxm+c9loJs B1T9lK7aFGf5SPyKO/YJPfSUELudxwSe+w4Vj5lj1Sjivzp6EVn7bmRZSjhIpyMM 6z2OyCgsQyH9OlFjK0ipsZNJ7SYfnrfGCFnKQStDAmOphAu3OwThFBnFtWOytXMl DDlxSz8Bf7oR9k6OfKDBMgD/cuCQNZ3VizeGAZh2g0WDhfFDIeNJGgN+xQIDAQAB o4ICiTCCAoUwHQYDVR0OBBYEFNwuGxORIacUw/J7QHzG9N9UODe1MB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvM0M0YkU1RWhweFREOG50QWZNYjAzMVE0TjdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGeBggrBgEFBQcBBwEB/wSBjjCBizBCBAIAATA8AwQCLV8Q AwQCLZskAwQCVZtwAwQAXnygAwQCqN74AwQCuV3cAwQCwRE4AwQB1Wz2AwQC1YvM AwQC2cOYMEUEAgACMD8DBwAqDZ7AAAADBwAqDZ7BAAADBwAqDZ7CAAADBwAqDZ7D AAADBwAqDZ7EAAADBwAqDZ7FAAADBwEqDdjAAAAwDQYJKoZIhvcNAQELBQADggEB ABjppnyHIBh5qB+Aqap9Vsdny1AOAIi9CGJBygRZKI/a7aa/ADF1HLNcn/x2Q4sU OfC/zerdqpL7HhuTHsd/VEk0vNxifjWfXkxZXjx7bkby0/z6ALP17FraZqTzPeY7 hA+GAHiGAAIivZ5DKNxVb4dYGC5oUj3jbodB06kR7wrNz3gt/KdsePSKGky2avdD RNUb1dxO0VDiezVJ12si57L4YmwW+sXcGRdLwbugaIvAKa8A6Pxy0IAxkyHrPHFZ 6KlSDcj9oWlGJSvxdQlrZFKytAw8NMPwEaPDCaw3nVtUfSEcAkkShOL/ogs/wPTO /MEny3n/owxOT3YZvmAZxh0= -----END CERTIFICATE-----Generated at Sat Dec 6 15:35:32 2025 by rpki-client