This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/G3M7wpCkzFutALW1xPv73nJCbQc.roa File: G3M7wpCkzFutALW1xPv73nJCbQc.roa (raw, json) Hash identifier: AfpZBku49cWSzi+wOddaAbZYily4EzQqgkPRwfDGKGI= Subject key identifier: 1B:73:3B:C2:90:A4:CC:5B:AD:00:B5:B5:C4:FB:FB:DE:72:42:6D:07 Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb Certificate serial: 019AE3C32773557E392FDD6DD87D9C3CA7CA Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/G3M7wpCkzFutALW1xPv73nJCbQc.roa Signing time: Wed 03 Dec 2025 10:30:08 +0000 ROA not before: Wed 03 Dec 2025 10:30:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60631 IP address blocks: 45.149.76.0/24 maxlen: 24 45.149.77.0/24 maxlen: 24 45.149.78.0/24 maxlen: 24 45.149.79.0/24 maxlen: 24 158.255.74.0/24 maxlen: 24 171.22.24.0/24 maxlen: 24 171.22.25.0/24 maxlen: 24 171.22.26.0/24 maxlen: 24 171.22.27.0/24 maxlen: 24 176.97.218.0/24 maxlen: 24 178.211.145.0/24 maxlen: 24 185.190.39.0/24 maxlen: 24 185.252.86.0/24 maxlen: 24 193.105.234.0/24 maxlen: 24 193.242.125.0/24 maxlen: 24 194.62.43.0/24 maxlen: 24 195.88.208.0/24 maxlen: 24 195.177.255.0/24 maxlen: 24 212.23.201.0/24 maxlen: 24 2a0e:b080::/32 maxlen: 32 2a0e:b081::/32 maxlen: 32 2a0e:b082::/32 maxlen: 32 2a0e:b083::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:c3:27:73:55:7e:39:2f:dd:6d:d8:7d:9c:3c:a7:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb Validity Not Before: Dec 3 10:30:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1b733bc290a4cc5bad00b5b5c4fbfbde72426d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2c:32:5b:3c:cb:44:9b:70:3d:b0:2b:8c:10: 47:5d:eb:de:6d:7e:74:a1:3c:97:ea:cf:b3:a3:56: a9:c0:ff:89:9d:bc:f7:1c:2f:20:54:42:93:60:79: a7:59:c9:62:f0:20:6f:f5:80:54:1c:47:87:6b:11: 04:33:81:48:89:03:1a:e7:86:8d:64:d3:63:bd:c7: 8d:67:3c:53:b8:c5:6a:43:86:49:2e:d8:86:d7:11: 9e:eb:45:f0:41:c3:8d:db:2e:8a:0e:de:45:51:38: 6a:dd:d4:69:cf:ef:65:78:ff:16:f4:a5:87:d7:17: 5c:8c:b1:a2:d8:13:1f:b7:1e:c0:a0:60:0b:22:62: 31:c0:fa:3c:b0:1b:ee:d9:35:6a:b0:65:2b:04:cd: b2:f1:5c:3a:e1:e1:71:41:c9:c0:d9:58:bc:0a:f6: cf:4b:f8:b3:2d:40:da:8b:2c:04:00:c5:51:72:d0: fe:8d:92:e7:d4:46:3f:ed:2b:ff:f1:8d:a0:b0:29: 01:50:65:ed:5a:76:05:29:f4:c8:a6:4e:e7:4f:1d: 39:31:f8:7c:bf:2d:7d:ae:0f:00:12:32:80:f3:76: ce:ee:59:4c:ec:9e:26:a1:3b:82:a0:a2:b7:42:70: ac:94:15:bf:1c:48:16:3d:6f:68:05:d6:9b:03:42: e7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:73:3B:C2:90:A4:CC:5B:AD:00:B5:B5:C4:FB:FB:DE:72:42:6D:07 X509v3 Authority Key Identifier: keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/G3M7wpCkzFutALW1xPv73nJCbQc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.76.0/22 158.255.74.0/24 171.22.24.0/22 176.97.218.0/24 178.211.145.0/24 185.190.39.0/24 185.252.86.0/24 193.105.234.0/24 193.242.125.0/24 194.62.43.0/24 195.88.208.0/24 195.177.255.0/24 212.23.201.0/24 IPv6: 2a0e:b080::/30 Signature Algorithm: sha256WithRSAEncryption 91:df:31:50:2c:a7:a2:c9:73:f6:ec:aa:65:79:e4:ee:e3:33: eb:67:25:e0:b5:d4:31:5e:bc:bf:a1:7a:7b:cd:cb:26:cb:a9: 53:15:99:cc:ae:6d:de:13:c6:f3:84:94:c3:8d:78:46:69:bf: 4a:61:4e:44:36:cd:2a:cd:87:79:2e:89:0c:99:4d:6a:33:37: bb:88:66:8b:24:b6:30:df:86:57:be:27:a9:93:3b:82:07:12: 91:a2:7f:47:62:8b:83:a4:fb:eb:cd:cf:03:be:6b:4b:a8:d3: 02:59:e7:e4:25:99:7e:ee:6d:8a:48:1e:ac:12:c8:dd:35:e0: b0:f6:b1:c1:3d:91:d6:69:b8:6a:f5:a5:b3:d7:e6:63:1c:ef: ad:59:8c:e4:13:59:a7:a4:b7:c7:35:64:24:31:cb:76:32:65: c4:7e:e7:a1:fa:01:3f:ad:73:77:fc:fc:6c:f3:34:50:84:d9: 30:6a:09:23:ae:4a:29:d4:ea:da:9f:36:fe:85:89:7c:f2:d1: ef:a0:5b:da:35:27:21:2a:cf:c9:48:74:b4:35:1b:68:c1:16: 6a:13:4c:ca:44:16:62:f3:e7:5b:72:b9:73:67:3f:58:25:0c: 85:d2:0f:8a:55:52:59:a2:5b:89:47:29:4c:3f:53:af:78:62: cf:9f:72:24 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgISAZrjwydzVX45L91t2H2cPKfKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkOGVmZjIwMTIxOGE1YTgyM2NiZTg1MzM2ODUzZTNkYjRk ZDE2ZWIwHhcNMjUxMjAzMTAzMDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjczM2JjMjkwYTRjYzViYWQwMGI1YjVjNGZiZmJkZTcyNDI2ZDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSwyWzzLRJtwPbArjBBHXevebX50 oTyX6s+zo1apwP+Jnbz3HC8gVEKTYHmnWcli8CBv9YBUHEeHaxEEM4FIiQMa54aN ZNNjvceNZzxTuMVqQ4ZJLtiG1xGe60XwQcON2y6KDt5FUThq3dRpz+9leP8W9KWH 1xdcjLGi2BMftx7AoGALImIxwPo8sBvu2TVqsGUrBM2y8Vw64eFxQcnA2Vi8CvbP S/izLUDaiywEAMVRctD+jZLn1EY/7Sv/8Y2gsCkBUGXtWnYFKfTIpk7nTx05Mfh8 vy19rg8AEjKA83bO7llM7J4moTuCoKK3QnCslBW/HEgWPW9oBdabA0LnTQIDAQAB o4ICYDCCAlwwHQYDVR0OBBYEFBtzO8KQpMxbrQC1tcT7+95yQm0HMB8GA1UdIwQY MBaAFP2O/yASGKWoI8voUzaFPj203RbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1k3X0lCSVlwYWdqeS1oVE5vVS1QYlRkRnVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85OWZkNDEtN2VkOC00YjI1LThkNTYt YzdhYzI2YmNjMmRhLzEvRzNNN3dwQ2t6RnV0QUxXMXhQdjczbkpDYlFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC85OWZkNDEtN2VkOC00YjI1LThkNTYtYzdhYzI2YmNjMmRh LzEvX1k3X0lCSVlwYWdqeS1oVE5vVS1QYlRkRnVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/BGcwZTBUBAIAATBOAwQCLZVMAwQA nv9KAwQCqxYYAwQAsGHaAwQAstORAwQAub4nAwQAufxWAwQAwWnqAwQAwfJ9AwQA wj4rAwQAw1jQAwQAw7H/AwQA1BfJMA0EAgACMAcDBQIqDrCAMA0GCSqGSIb3DQEB CwUAA4IBAQCR3zFQLKeiyXP27KpleeTu4zPrZyXgtdQxXry/oXp7zcsmy6lTFZnM rm3eE8bzhJTDjXhGab9KYU5ENs0qzYd5LokMmU1qMze7iGaLJLYw34ZXviepkzuC BxKRon9HYouDpPvrzc8DvmtLqNMCWefkJZl+7m2KSB6sEsjdNeCw9rHBPZHWabhq 9aWz1+ZjHO+tWYzkE1mnpLfHNWQkMct2MmXEfueh+gE/rXN3/Pxs8zRQhNkwagkj rkop1Oranzb+hYl88tHvoFvaNSchKs/JSHS0NRtowRZqE0zKRBZi8+dbcrlzZz9Y JQyF0g+KVVJZoluJRylMP1OveGLPn3Ik -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:30 2025 by rpki-client