This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/4YJZgp7xTWFiJLAAYmAdYMX-8jw.roa File: 4YJZgp7xTWFiJLAAYmAdYMX-8jw.roa (raw, json) Hash identifier: R7iC2oeDJte4OQeOXE0fKY5JFdMXKkWYo6RK+dbq0eg= Subject key identifier: E1:82:59:82:9E:F1:4D:61:62:24:B0:00:62:60:1D:60:C5:FE:F2:3C Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019A9D5C864F0D6AF4EEA04028A4772E962C Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/4YJZgp7xTWFiJLAAYmAdYMX-8jw.roa Signing time: Wed 19 Nov 2025 18:24:37 +0000 ROA not before: Wed 19 Nov 2025 18:24:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215402 IP address blocks: 45.150.66.0/24 maxlen: 24 138.124.181.0/24 maxlen: 24 2a0e:4005:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9d:5c:86:4f:0d:6a:f4:ee:a0:40:28:a4:77:2e:96:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Nov 19 18:24:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e18259829ef14d616224b00062601d60c5fef23c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:06:8a:db:fe:e4:70:af:2d:7c:c7:8d:76:52: f2:f8:a4:97:a4:94:bb:e8:82:99:18:f1:92:df:4f: 00:27:c8:45:90:25:a6:b7:d6:3e:90:fd:f8:48:31: ae:ce:0c:03:f2:66:51:e7:a1:b0:5b:1a:74:ad:0c: 0b:ee:38:24:ed:30:25:48:d7:97:ac:98:4a:f1:e1: a0:b9:f5:5d:b4:f5:e6:31:88:86:40:4e:72:65:8c: 5d:6e:82:81:3f:3c:a5:e3:c3:12:75:2f:e4:4f:fe: 92:0b:8a:7e:05:a2:ae:c3:67:fc:da:1d:b1:07:d5: b2:9e:35:09:ec:83:3a:90:ed:e1:91:31:16:a7:e5: eb:f9:45:ed:ed:7a:73:d1:74:ea:1f:58:35:a9:80: 94:c3:24:4c:cd:42:c2:39:ba:c1:29:00:66:b6:b0: 14:9a:df:cb:b9:3a:d5:f0:fa:bf:35:28:c3:06:30: f9:76:32:e1:de:c0:07:b0:1e:cb:0a:94:d1:57:b0: d0:61:08:b1:b8:76:04:60:91:fc:04:8a:e3:e8:73: f5:50:40:99:7d:45:23:a7:21:d6:30:57:10:81:de: 8f:ec:a3:ec:e7:a8:ed:a6:4c:eb:99:96:0e:ce:66: f7:ba:d6:6e:9e:16:d3:b2:c6:b2:00:8d:83:e4:f4: dc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:82:59:82:9E:F1:4D:61:62:24:B0:00:62:60:1D:60:C5:FE:F2:3C X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/4YJZgp7xTWFiJLAAYmAdYMX-8jw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.66.0/24 138.124.181.0/24 IPv6: 2a0e:4005:1000::/48 Signature Algorithm: sha256WithRSAEncryption b4:67:69:61:96:5f:de:ef:23:ad:a7:1d:a0:72:4c:f2:d5:f0: 49:73:19:9e:f5:51:78:24:3c:22:4f:04:42:fd:69:92:9f:bb: e5:00:7f:25:e5:91:e5:90:c3:dd:1e:2a:af:5e:13:51:b2:6a: fd:e1:cf:96:3b:62:24:7f:c1:a6:db:f2:80:23:75:05:b6:d4: 56:87:c8:0b:69:8f:8c:a1:38:44:31:30:9a:eb:e4:f7:66:48: de:b4:5a:dd:9e:18:0b:01:d1:3c:b4:37:13:ff:0e:c2:47:35: d1:95:9d:97:f2:40:d0:a3:b5:99:f9:e8:af:4d:2a:f3:d8:44: 36:4d:e7:83:13:57:62:fe:5a:a3:e2:25:3f:dc:ad:5c:31:8e: 92:4e:1f:19:04:1d:13:87:f1:de:9d:20:4b:0e:ff:8d:0f:13: 00:f1:e1:06:b1:35:38:2b:9d:c0:7b:31:f6:d5:0d:10:d4:dc: f2:ac:04:0f:9d:db:ed:1d:d4:5a:b7:6f:92:72:00:8c:08:c2: a8:4f:73:9d:c9:60:eb:09:77:44:8e:0c:86:b8:eb:4c:3d:ac: c6:16:7a:60:60:2d:d2:ee:6a:24:0d:eb:55:5d:db:f1:8a:f6: 99:b2:5f:a4:88:84:4e:1a:ef:c9:ca:42:f9:83:de:e0:0b:a6: b5:b2:3b:f7 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZqdXIZPDWr07qBAKKR3LpYsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjUxMTE5MTgyNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTgyNTk4MjllZjE0ZDYxNjIyNGIwMDA2MjYwMWQ2MGM1ZmVmMjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswaK2/7kcK8tfMeNdlLy+KSXpJS7 6IKZGPGS308AJ8hFkCWmt9Y+kP34SDGuzgwD8mZR56GwWxp0rQwL7jgk7TAlSNeX rJhK8eGgufVdtPXmMYiGQE5yZYxdboKBPzyl48MSdS/kT/6SC4p+BaKuw2f82h2x B9WynjUJ7IM6kO3hkTEWp+Xr+UXt7Xpz0XTqH1g1qYCUwyRMzULCObrBKQBmtrAU mt/LuTrV8Pq/NSjDBjD5djLh3sAHsB7LCpTRV7DQYQixuHYEYJH8BIrj6HP1UECZ fUUjpyHWMFcQgd6P7KPs56jtpkzrmZYOzmb3utZunhbTssayAI2D5PTcSwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFOGCWYKe8U1hYiSwAGJgHWDF/vI8MB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvNFlKWmdwN3hUV0ZpSkxBQVltQWRZTVgtOGp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQALZZCAwQA iny1MA8EAgACMAkDBwAqDkAFEAAwDQYJKoZIhvcNAQELBQADggEBALRnaWGWX97v I62nHaByTPLV8ElzGZ71UXgkPCJPBEL9aZKfu+UAfyXlkeWQw90eKq9eE1Gyav3h z5Y7YiR/wabb8oAjdQW21FaHyAtpj4yhOEQxMJrr5PdmSN60Wt2eGAsB0Ty0NxP/ DsJHNdGVnZfyQNCjtZn56K9NKvPYRDZN54MTV2L+WqPiJT/crVwxjpJOHxkEHROH 8d6dIEsO/40PEwDx4QaxNTgrncB7MfbVDRDU3PKsBA+d2+0d1Fq3b5JyAIwIwqhP c53JYOsJd0SODIa460w9rMYWemBgLdLuaiQN61Vd2/GK9pmyX6SIhE4a78nKQvmD 3uALprWyO/c= -----END CERTIFICATE-----Generated at Sat Dec 6 23:19:00 2025 by rpki-client