This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/Gi85_7DMWY9jXXOuzzkHOPXs5NY.roa File: Gi85_7DMWY9jXXOuzzkHOPXs5NY.roa (raw, json) Hash identifier: 2ysGurwO2XMhFxA99TSTqYRnXBk3ZFcpHCvc97K37sw= Subject key identifier: 1A:2F:39:FF:B0:CC:59:8F:63:5D:73:AE:CF:39:07:38:F5:EC:E4:D6 Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb Certificate serial: 019B2C2DFB2FE61C058BF5971165C683CAD5 Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/Gi85_7DMWY9jXXOuzzkHOPXs5NY.roa Signing time: Wed 17 Dec 2025 11:59:29 +0000 ROA not before: Wed 17 Dec 2025 11:59:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60631 IP address blocks: 45.149.76.0/24 maxlen: 24 45.149.77.0/24 maxlen: 24 45.149.78.0/24 maxlen: 24 45.149.79.0/24 maxlen: 24 158.255.74.0/24 maxlen: 24 171.22.24.0/24 maxlen: 24 171.22.25.0/24 maxlen: 24 171.22.26.0/24 maxlen: 24 171.22.27.0/24 maxlen: 24 176.97.218.0/24 maxlen: 24 178.211.145.0/24 maxlen: 24 185.190.39.0/24 maxlen: 24 185.204.197.0/24 maxlen: 24 185.252.86.0/24 maxlen: 24 193.105.234.0/24 maxlen: 24 193.242.125.0/24 maxlen: 24 194.62.43.0/24 maxlen: 24 195.88.208.0/24 maxlen: 24 195.177.255.0/24 maxlen: 24 212.23.201.0/24 maxlen: 24 2a0e:b080::/32 maxlen: 32 2a0e:b081::/32 maxlen: 32 2a0e:b082::/32 maxlen: 32 2a0e:b083::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2d:fb:2f:e6:1c:05:8b:f5:97:11:65:c6:83:ca:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb Validity Not Before: Dec 17 11:59:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1a2f39ffb0cc598f635d73aecf390738f5ece4d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8d:8b:9f:ae:25:f6:a2:f4:7a:04:1e:87:b6: 6e:dd:4c:60:18:81:02:4d:53:09:8d:85:e5:7f:dc: a2:97:ac:d2:ac:07:9e:31:4b:5b:da:a9:dc:cd:f5: eb:4e:e8:18:52:a9:84:55:fa:32:90:55:ec:17:85: 6f:65:d9:a2:dc:63:2e:c7:e1:d6:40:e0:95:eb:ff: 70:7a:61:a6:79:e2:23:c6:80:0f:f9:c0:1f:86:a4: 13:f7:39:f2:a3:1e:6f:07:28:dd:be:4d:40:54:33: 0e:18:30:21:60:99:b6:92:78:bb:65:b5:fd:58:bc: a9:04:43:14:b1:d8:45:9a:6f:e7:ab:98:fc:4f:49: 9d:7b:d9:67:70:bb:61:60:5c:79:3e:8c:09:b2:de: ca:8b:bf:15:88:29:80:7d:1f:97:c2:12:ed:e6:3f: 03:c7:59:33:4d:23:e1:e7:0d:e0:d3:19:6e:a0:fd: 79:14:ff:c8:d2:d9:f7:36:e2:e2:83:98:35:2f:24: ef:d7:64:0d:77:dc:f1:12:98:da:30:36:69:2d:1f: c1:af:0d:db:37:42:9c:09:d3:31:8f:1b:58:7a:8a: d8:bd:ed:ab:3d:e4:23:68:b6:04:58:72:e2:0a:1a: a6:4b:2c:77:a2:ce:8b:86:bd:3e:dd:c7:57:b3:9d: d6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2F:39:FF:B0:CC:59:8F:63:5D:73:AE:CF:39:07:38:F5:EC:E4:D6 X509v3 Authority Key Identifier: keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/Gi85_7DMWY9jXXOuzzkHOPXs5NY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.76.0/22 158.255.74.0/24 171.22.24.0/22 176.97.218.0/24 178.211.145.0/24 185.190.39.0/24 185.204.197.0/24 185.252.86.0/24 193.105.234.0/24 193.242.125.0/24 194.62.43.0/24 195.88.208.0/24 195.177.255.0/24 212.23.201.0/24 IPv6: 2a0e:b080::/30 Signature Algorithm: sha256WithRSAEncryption 19:c9:5b:d1:dc:ed:c4:52:57:70:5d:f2:2f:f3:b3:31:a2:dc: bc:33:87:b4:29:c7:c6:26:06:a8:f3:cd:e8:c8:56:f7:a4:a4: 23:16:3e:fb:f4:b7:01:94:3f:8f:7e:cf:33:74:74:ad:55:af: e0:87:27:9d:df:2a:3d:1b:8e:b8:8c:1d:f3:01:4d:ad:a8:bc: b1:1e:03:af:90:ee:7f:c6:9c:f6:50:15:5c:bf:32:eb:23:43: 80:36:7e:37:04:34:27:5e:57:06:ed:fb:a1:eb:43:33:cc:30: 82:9e:75:49:5d:06:9d:66:ce:82:8a:7e:31:09:5f:c1:33:43: 4d:12:74:06:5c:3a:44:fe:bf:d8:dd:9a:11:87:12:0f:7b:09: 8a:69:6f:45:f9:1c:f7:be:b0:13:06:4b:f5:66:2b:0f:c9:83: 57:27:a2:71:eb:3c:e8:bd:c6:6f:a8:47:b2:e8:b2:b0:72:1b: 44:36:e3:ea:d0:24:6f:a2:e4:df:a6:eb:d7:05:0a:5f:19:56: 91:ad:a5:0d:ab:5b:a8:da:48:41:a5:e5:8f:db:87:b9:c6:54: f8:8f:bf:3b:66:46:57:b4:01:cd:a5:8b:bf:a9:46:54:f2:a0: d7:0a:f9:87:d4:2d:04:e8:12:d7:9a:36:cf:6e:6c:23:e2:4c: 2a:b1:04:68 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgISAZssLfsv5hwFi/WXEWXGg8rVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkOGVmZjIwMTIxOGE1YTgyM2NiZTg1MzM2ODUzZTNkYjRk ZDE2ZWIwHhcNMjUxMjE3MTE1OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTJmMzlmZmIwY2M1OThmNjM1ZDczYWVjZjM5MDczOGY1ZWNlNGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6o2Ln64l9qL0egQeh7Zu3UxgGIEC TVMJjYXlf9yil6zSrAeeMUtb2qnczfXrTugYUqmEVfoykFXsF4VvZdmi3GMux+HW QOCV6/9wemGmeeIjxoAP+cAfhqQT9znyox5vByjdvk1AVDMOGDAhYJm2kni7ZbX9 WLypBEMUsdhFmm/nq5j8T0mde9lncLthYFx5PowJst7Ki78ViCmAfR+XwhLt5j8D x1kzTSPh5w3g0xluoP15FP/I0tn3NuLig5g1LyTv12QNd9zxEpjaMDZpLR/Brw3b N0KcCdMxjxtYeorYve2rPeQjaLYEWHLiChqmSyx3os6Lhr0+3cdXs53W/QIDAQAB o4ICZjCCAmIwHQYDVR0OBBYEFBovOf+wzFmPY11zrs85Bzj17OTWMB8GA1UdIwQY MBaAFP2O/yASGKWoI8voUzaFPj203RbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1k3X0lCSVlwYWdqeS1oVE5vVS1QYlRkRnVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85OWZkNDEtN2VkOC00YjI1LThkNTYt YzdhYzI2YmNjMmRhLzEvR2k4NV83RE1XWTlqWFhPdXp6a0hPUFhzNU5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC85OWZkNDEtN2VkOC00YjI1LThkNTYtYzdhYzI2YmNjMmRh LzEvX1k3X0lCSVlwYWdqeS1oVE5vVS1QYlRkRnVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEHAQH/BG0wazBaBAIAATBUAwQCLZVMAwQA nv9KAwQCqxYYAwQAsGHaAwQAstORAwQAub4nAwQAuczFAwQAufxWAwQAwWnqAwQA wfJ9AwQAwj4rAwQAw1jQAwQAw7H/AwQA1BfJMA0EAgACMAcDBQIqDrCAMA0GCSqG SIb3DQEBCwUAA4IBAQAZyVvR3O3EUldwXfIv87Mxoty8M4e0KcfGJgao883oyFb3 pKQjFj779LcBlD+Pfs8zdHStVa/ghyed3yo9G464jB3zAU2tqLyxHgOvkO5/xpz2 UBVcvzLrI0OANn43BDQnXlcG7fuh60MzzDCCnnVJXQadZs6Cin4xCV/BM0NNEnQG XDpE/r/Y3ZoRhxIPewmKaW9F+Rz3vrATBkv1ZisPyYNXJ6Jx6zzovcZvqEey6LKw chtENuPq0CRvouTfpuvXBQpfGVaRraUNq1uo2khBpeWP24e5xlT4j787ZkZXtAHN pYu/qUZU8qDXCvmH1C0E6BLXmjbPbmwj4kwqsQRo -----END CERTIFICATE-----Generated at Wed Dec 17 18:38:10 2025 by rpki-client