This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/9ejwWQEHHNI1YdD_RsqtNA-OVYU.roa File: 9ejwWQEHHNI1YdD_RsqtNA-OVYU.roa (raw, json) Hash identifier: 5u+qbYraqdpJHKl7Jy1Zt1xrrtHUz+DoyWxTCUV56Mk= Subject key identifier: F5:E8:F0:59:01:07:1C:D2:35:61:D0:FF:46:CA:AD:34:0F:8E:55:85 Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Certificate serial: 019B2C66F9342130FA1BC0F989772BECB2C0 Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/9ejwWQEHHNI1YdD_RsqtNA-OVYU.roa Signing time: Wed 17 Dec 2025 13:01:44 +0000 ROA not before: Wed 17 Dec 2025 13:01:44 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 64445 IP address blocks: 89.39.201.0/24 maxlen: 24 89.43.35.0/24 maxlen: 24 89.44.237.0/24 maxlen: 24 92.114.86.0/24 maxlen: 24 92.114.87.0/24 maxlen: 24 93.113.145.0/24 maxlen: 24 93.113.146.0/24 maxlen: 24 93.113.147.0/24 maxlen: 24 93.113.148.0/22 maxlen: 22 93.113.148.0/24 maxlen: 24 93.113.149.0/24 maxlen: 24 93.113.150.0/24 maxlen: 24 93.113.151.0/24 maxlen: 24 93.115.56.0/24 maxlen: 24 93.115.57.0/24 maxlen: 24 94.176.108.0/24 maxlen: 24 94.177.10.0/24 maxlen: 24 94.177.11.0/24 maxlen: 24 94.177.21.0/24 maxlen: 24 94.177.96.0/24 maxlen: 24 94.177.97.0/24 maxlen: 24 94.177.98.0/24 maxlen: 24 94.177.99.0/24 maxlen: 24 188.208.17.0/24 maxlen: 24 188.214.199.0/24 maxlen: 24 188.215.94.0/24 maxlen: 24 188.241.66.0/24 maxlen: 24 188.241.67.0/24 maxlen: 24 188.241.126.0/24 maxlen: 24 188.241.138.0/24 maxlen: 24 188.241.139.0/24 maxlen: 24 188.241.143.0/24 maxlen: 24 188.241.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:f9:34:21:30:fa:1b:c0:f9:89:77:2b:ec:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Validity Not Before: Dec 17 13:01:44 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f5e8f05901071cd23561d0ff46caad340f8e5585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fe:61:5f:c2:0d:a8:8d:22:43:42:28:7d:3f: bd:fb:8c:1b:d0:ab:05:a8:23:df:5a:63:63:35:b4: 8d:78:28:f0:aa:5f:00:e5:ea:94:74:ad:29:59:c1: 3e:f2:b8:7c:a5:62:2a:af:93:04:85:88:9a:ec:a9: de:45:73:6a:9c:e5:3d:11:3b:ab:a8:79:f4:01:a6: 0a:79:84:ed:84:a7:27:c8:d9:dd:35:84:41:ff:38: a0:5f:79:9c:f6:a1:ce:ca:c1:3b:e1:7c:f5:46:f2: 57:c0:39:7a:52:82:26:7e:fe:59:ca:30:4d:69:25: 0e:db:79:19:ad:a7:f7:57:83:0a:0b:e6:86:70:a4: 8f:f0:2a:f3:3c:c0:45:8a:81:e4:0d:49:19:d6:e5: 9c:ad:81:25:80:cd:76:9f:58:b8:f9:ac:1c:80:9d: 20:dd:ee:4c:2e:54:2c:98:1d:18:6e:5a:71:f4:03: cc:40:82:54:50:83:7f:f3:c9:d3:6f:eb:f0:37:9a: 7b:c1:88:4d:b9:b2:46:bd:d2:d6:a9:da:dc:4c:58: f3:bf:99:56:fd:d3:21:73:ae:0c:1c:0f:f6:54:75: d0:07:2c:54:b8:69:ba:53:d8:af:2d:f7:26:2e:95: b6:62:94:3f:0e:86:cf:73:cd:92:40:b9:30:30:64: ae:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E8:F0:59:01:07:1C:D2:35:61:D0:FF:46:CA:AD:34:0F:8E:55:85 X509v3 Authority Key Identifier: keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/9ejwWQEHHNI1YdD_RsqtNA-OVYU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.39.201.0/24 89.43.35.0/24 89.44.237.0/24 92.114.86.0/23 93.113.145.0-93.113.151.255 93.115.56.0/23 94.176.108.0/24 94.177.10.0/23 94.177.21.0/24 94.177.96.0/22 188.208.17.0/24 188.214.199.0/24 188.215.94.0/24 188.241.66.0/23 188.241.126.0/24 188.241.138.0/23 188.241.143.0/24 188.241.213.0/24 Signature Algorithm: sha256WithRSAEncryption 92:91:ae:96:85:65:ef:7f:bc:6e:b2:2f:59:bd:52:be:7f:99: ed:5f:92:de:b5:fc:01:b1:66:76:22:26:a6:72:a2:ba:e6:72: 08:da:61:f2:37:69:02:d3:84:4d:93:63:30:14:1d:f8:77:a2: be:8e:73:91:47:86:c6:15:ca:9f:87:de:0c:b9:17:f9:4d:f2: 79:ce:96:a1:83:8b:a1:a6:e8:7a:3a:2e:ab:1b:f6:ee:00:8c: c3:81:73:43:c1:22:d5:9c:df:8a:b5:5b:78:4d:ab:25:6a:d9: ee:05:ea:4b:25:ee:da:ff:01:bd:f6:fa:5c:b4:89:31:87:ac: ca:ef:86:8f:dd:44:5b:6d:2e:49:4e:71:0c:a7:6d:90:ab:ef: e1:68:74:de:ca:da:f8:39:f2:45:39:8b:83:9f:b9:6f:71:be: 6a:da:0d:69:b9:64:31:4f:4b:21:38:62:b2:09:b8:61:31:03: 39:bf:f4:f6:45:f1:8d:46:a7:76:70:3a:9c:f3:ad:22:f6:53: cb:8e:29:b5:2d:74:92:22:34:b1:7d:4c:4d:86:98:73:b1:b8: ff:f1:f3:c5:20:8e:da:7e:22:df:2b:ad:3f:f0:73:ea:cc:55: 03:a6:25:46:e3:69:b6:65:36:d9:3b:9f:0f:45:be:c5:d3:02: bd:f2:c9:bf -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgISAZssZvk0ITD6G8D5iXcr7LLAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3 NjA1MTkwHhcNMjUxMjE3MTMwMTQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWU4ZjA1OTAxMDcxY2QyMzU2MWQwZmY0NmNhYWQzNDBmOGU1NTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0f5hX8INqI0iQ0IofT+9+4wb0KsF qCPfWmNjNbSNeCjwql8A5eqUdK0pWcE+8rh8pWIqr5MEhYia7KneRXNqnOU9ETur qHn0AaYKeYTthKcnyNndNYRB/zigX3mc9qHOysE74Xz1RvJXwDl6UoImfv5ZyjBN aSUO23kZraf3V4MKC+aGcKSP8CrzPMBFioHkDUkZ1uWcrYElgM12n1i4+awcgJ0g 3e5MLlQsmB0Yblpx9APMQIJUUIN/88nTb+vwN5p7wYhNubJGvdLWqdrcTFjzv5lW /dMhc64MHA/2VHXQByxUuGm6U9ivLfcmLpW2YpQ/DobPc82SQLkwMGSuVQIDAQAB o4ICeDCCAnQwHQYDVR0OBBYEFPXo8FkBBxzSNWHQ/0bKrTQPjlWFMB8GA1UdIwQY MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt NzQwOGViOGJjNTg2LzEvOWVqd1dRRUhITkkxWWREX1JzcXROQS1PVllVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2 LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEAFknyQME AFkrIwMEAFks7QMEAVxyVjAMAwQAXXGRAwQDXXGQAwQBXXM4AwQAXrBsAwQBXrEK AwQAXrEVAwQCXrFgAwQAvNARAwQAvNbHAwQAvNdeAwQBvPFCAwQAvPF+AwQBvPGK AwQAvPGPAwQAvPHVMA0GCSqGSIb3DQEBCwUAA4IBAQCSka6WhWXvf7xusi9ZvVK+ f5ntX5LetfwBsWZ2IiamcqK65nII2mHyN2kC04RNk2MwFB34d6K+jnORR4bGFcqf h94MuRf5TfJ5zpahg4uhpuh6Oi6rG/buAIzDgXNDwSLVnN+KtVt4TaslatnuBepL Je7a/wG99vpctIkxh6zK74aP3URbbS5JTnEMp22Qq+/haHTeytr4OfJFOYuDn7lv cb5q2g1puWQxT0shOGKyCbhhMQM5v/T2RfGNRqd2cDqc860i9lPLjim1LXSSIjSx fUxNhphzsbj/8fPFII7afiLfK60/8HPqzFUDpiVG42m2ZTbZO58PRb7F0wK98sm/ -----END CERTIFICATE-----Generated at Wed Dec 17 19:31:16 2025 by rpki-client