This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/tXnSihcOVuv_2vztUkyTSpycPTE.roa File: tXnSihcOVuv_2vztUkyTSpycPTE.roa (raw, json) Hash identifier: Efwtt1HweEQTgxpNm/AGYJZxdg/P+K7yWvvbsl//zEk= Subject key identifier: B5:79:D2:8A:17:0E:56:EB:FF:DA:FC:ED:52:4C:93:4A:9C:9C:3D:31 Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930 Certificate serial: 019A973C393D20C9ADB0B60CFEAE01214EA7 Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/tXnSihcOVuv_2vztUkyTSpycPTE.roa Signing time: Tue 18 Nov 2025 13:51:37 +0000 ROA not before: Tue 18 Nov 2025 13:51:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204601 IP address blocks: 45.14.12.0/24 maxlen: 24 45.14.13.0/24 maxlen: 24 45.14.15.0/24 maxlen: 24 80.89.228.0/23 maxlen: 23 80.89.230.0/24 maxlen: 24 80.89.234.0/23 maxlen: 23 80.89.238.0/23 maxlen: 23 85.208.184.0/22 maxlen: 22 85.208.184.0/24 maxlen: 24 85.208.185.0/24 maxlen: 24 85.208.187.0/24 maxlen: 24 89.105.198.0/24 maxlen: 24 185.80.234.0/24 maxlen: 24 185.92.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:3c:39:3d:20:c9:ad:b0:b6:0c:fe:ae:01:21:4e:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930 Validity Not Before: Nov 18 13:51:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b579d28a170e56ebffdafced524c934a9c9c3d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:46:a8:b0:69:f4:4e:85:37:c5:c3:fb:54:9f: f4:8b:64:03:a9:90:25:2d:89:61:be:02:25:bd:bf: 78:08:b1:2d:13:d4:3d:8b:b7:f1:8e:1b:bf:88:2b: b0:34:e5:1c:4c:32:37:04:74:e2:98:90:3b:79:3d: 72:19:ff:0d:94:47:b7:41:14:5a:7f:de:4e:02:c5: 82:7f:e7:71:df:65:6b:a7:2c:35:3e:e8:b4:6d:57: 77:4c:fa:d5:65:4c:3e:80:e8:56:75:83:e2:36:f3: ac:57:f9:b4:08:d2:48:1d:49:0d:87:dd:a3:74:ee: a1:fe:44:0d:bc:68:5f:66:20:a2:3a:44:bf:66:97: d8:36:89:30:d3:15:0d:04:8f:9e:c2:ea:3b:9d:f7: b8:7c:32:c6:0e:68:d0:d3:07:5e:c7:fc:7a:82:0a: e4:5c:dd:50:b4:fd:a5:55:81:5a:1c:88:80:7b:1b: b6:8a:b1:f5:e5:8e:9a:62:a2:36:e5:f3:e2:51:b9: 1a:74:d5:e4:be:5c:9c:25:c5:49:2d:fe:7f:62:8b: b8:5a:46:b7:91:31:8e:e7:a7:21:7b:7d:bc:6c:a0: 81:45:c7:4e:27:31:82:18:7b:bd:44:75:58:d8:25: 3c:77:27:35:a4:e7:5b:b8:61:ea:78:c8:4e:86:6c: 39:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:79:D2:8A:17:0E:56:EB:FF:DA:FC:ED:52:4C:93:4A:9C:9C:3D:31 X509v3 Authority Key Identifier: keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/tXnSihcOVuv_2vztUkyTSpycPTE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.12.0/23 45.14.15.0/24 80.89.228.0-80.89.230.255 80.89.234.0/23 80.89.238.0/23 85.208.184.0/22 89.105.198.0/24 185.80.234.0/24 185.92.148.0/22 Signature Algorithm: sha256WithRSAEncryption bd:78:5d:bf:99:85:b5:be:7d:92:db:ac:b1:ac:88:a1:0a:61: ef:8b:76:53:b6:83:df:e8:15:4f:49:64:22:1f:53:61:19:24: db:c6:ac:65:dd:f5:6b:07:a6:ea:5d:f7:71:ea:6c:f4:bc:85: d1:8b:99:c8:3b:ea:f3:94:b0:56:ce:81:5d:3f:90:3b:77:3f: 88:55:29:2b:92:6b:65:02:bb:5f:5a:72:92:bf:74:fc:05:36: 88:29:64:0b:f3:a1:7b:86:f9:e0:01:78:64:4f:5a:2d:f6:00: 71:9b:60:fd:b4:d9:a8:db:2b:81:c6:e3:c4:e2:98:5b:e4:2a: 0d:91:31:49:15:c7:6b:c2:bd:06:6a:89:45:94:02:b2:b6:75: 6b:a1:70:33:6e:00:31:d3:cd:a4:fb:3e:a0:79:ce:d6:d6:ff: 73:6f:a3:53:1b:44:ca:dc:b7:37:59:cc:d2:b3:a8:f3:96:46: 46:2d:93:a5:79:6d:e3:d3:4e:ce:27:3c:32:7b:2f:f1:6c:59: 50:64:b1:55:1a:3c:df:0e:f2:45:24:20:94:2f:3e:14:64:0c: ef:35:b5:03:4e:42:54:b7:6c:4c:21:06:c3:f7:6c:3f:af:52: 41:ec:1a:4e:ad:55:f3:67:7c:ec:15:c9:1e:54:a1:78:ab:8f: 6a:6b:ee:82 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZqXPDk9IMmtsLYM/q4BIU6nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjOTBlMGFlZTFlY2MzMTA2NmNiNzQ0ZjhhN2ZlZWRlZmIz Zjc5MzAwHhcNMjUxMTE4MTM1MTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTc5ZDI4YTE3MGU1NmViZmZkYWZjZWQ1MjRjOTM0YTljOWMzZDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEaosGn0ToU3xcP7VJ/0i2QDqZAl LYlhvgIlvb94CLEtE9Q9i7fxjhu/iCuwNOUcTDI3BHTimJA7eT1yGf8NlEe3QRRa f95OAsWCf+dx32Vrpyw1Pui0bVd3TPrVZUw+gOhWdYPiNvOsV/m0CNJIHUkNh92j dO6h/kQNvGhfZiCiOkS/ZpfYNokw0xUNBI+ewuo7nfe4fDLGDmjQ0wdex/x6ggrk XN1QtP2lVYFaHIiAexu2irH15Y6aYqI25fPiUbkadNXkvlycJcVJLf5/You4Wka3 kTGO56che328bKCBRcdOJzGCGHu9RHVY2CU8dyc1pOdbuGHqeMhOhmw5bwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFLV50ooXDlbr/9r87VJMk0qcnD0xMB8GA1UdIwQY MBaAFNyQ4K7h7MMQZst0T4p/7t77P3kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYt MDBiY2Q5YjkxYzFiLzEvdFhuU2loY09WdXZfMnZ6dFVreVRTcHljUFRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYtMDBiY2Q5YjkxYzFi LzEvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQBLQ4MAwQA LQ4PMAwDBAJQWeQDBABQWeYDBAFQWeoDBAFQWe4DBAJV0LgDBABZacYDBAC5UOoD BAK5XJQwDQYJKoZIhvcNAQELBQADggEBAL14Xb+ZhbW+fZLbrLGsiKEKYe+LdlO2 g9/oFU9JZCIfU2EZJNvGrGXd9WsHpupd93HqbPS8hdGLmcg76vOUsFbOgV0/kDt3 P4hVKSuSa2UCu19acpK/dPwFNogpZAvzoXuG+eABeGRPWi32AHGbYP202ajbK4HG 48TimFvkKg2RMUkVx2vCvQZqiUWUArK2dWuhcDNuADHTzaT7PqB5ztbW/3Nvo1Mb RMrctzdZzNKzqPOWRkYtk6V5bePTTs4nPDJ7L/FsWVBksVUaPN8O8kUkIJQvPhRk DO81tQNOQlS3bEwhBsP3bD+vUkHsGk6tVfNnfOwVyR5UoXirj2pr7oI= -----END CERTIFICATE-----Generated at Sat Dec 6 14:05:36 2025 by rpki-client