This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/4gPKsx2fIOZtlkfKlKxlvm_TrhU.roa File: 4gPKsx2fIOZtlkfKlKxlvm_TrhU.roa (raw, json) Hash identifier: cu90EUfwXsPst+1hskPleqdcOiyoaLou/rqwBvRVVSU= Subject key identifier: E2:03:CA:B3:1D:9F:20:E6:6D:96:47:CA:94:AC:65:BE:6F:D3:AE:15 Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Certificate serial: 019AB9DDD9ED6C3002B3505F1AFB3504B08A Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/4gPKsx2fIOZtlkfKlKxlvm_TrhU.roa Signing time: Tue 25 Nov 2025 07:15:15 +0000 ROA not before: Tue 25 Nov 2025 07:15:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 34450 IP address blocks: 86.106.80.0/24 maxlen: 24 86.106.104.0/24 maxlen: 24 89.34.8.0/21 maxlen: 21 89.37.136.0/24 maxlen: 24 89.44.209.0/24 maxlen: 24 93.113.158.0/24 maxlen: 24 93.114.55.0/24 maxlen: 24 93.114.99.0/24 maxlen: 24 93.114.171.0/24 maxlen: 24 93.114.187.0/24 maxlen: 24 188.213.18.0/24 maxlen: 24 188.215.72.0/23 maxlen: 24 188.215.73.0/24 maxlen: 24 188.215.95.0/24 maxlen: 24 188.240.14.0/24 maxlen: 24 2a05:b680:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b9:dd:d9:ed:6c:30:02:b3:50:5f:1a:fb:35:04:b0:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Validity Not Before: Nov 25 07:15:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e203cab31d9f20e66d9647ca94ac65be6fd3ae15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:96:e2:34:e1:06:71:40:a4:10:3e:09:8a:a2: a8:37:03:80:25:b2:03:61:38:dc:e0:74:2c:aa:9f: c8:31:86:95:7e:ab:a5:5f:a7:87:7d:14:7b:6f:13: b1:30:bc:d8:6a:a8:1b:c2:07:88:7d:fc:54:b6:4f: 2c:72:e7:7c:fe:26:52:d3:a1:2f:22:00:5f:9e:66: d9:52:e3:32:de:ff:73:be:be:de:12:bd:e9:e0:82: ce:33:6e:f0:64:69:53:52:7a:62:26:20:31:bd:29: 15:4d:18:e9:c7:50:fa:0a:c0:bb:c4:8b:5d:08:c1: 54:f1:9c:be:d4:ab:28:6c:c7:54:07:ca:15:d0:76: 25:a4:77:8e:b3:bf:0b:18:de:1d:fd:68:dc:e4:a7: 3f:76:7f:fb:db:5d:89:e9:fd:70:56:1c:0e:75:af: b9:a2:9b:5e:6d:b9:b7:56:1e:2a:20:08:f7:4d:71: a3:3f:cc:f6:db:de:ff:25:bf:cc:24:78:e2:7d:54: c1:61:eb:33:d9:d8:32:fd:ed:9e:1b:00:57:d6:e9: 86:e2:12:b9:ca:38:20:3b:fe:87:ee:f8:d3:0f:b3: 35:20:17:d3:03:df:30:00:8b:71:ba:3d:18:ac:6e: 3c:92:1a:60:9e:0d:ca:8d:09:38:d0:e7:a3:d2:42: 20:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:03:CA:B3:1D:9F:20:E6:6D:96:47:CA:94:AC:65:BE:6F:D3:AE:15 X509v3 Authority Key Identifier: keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/4gPKsx2fIOZtlkfKlKxlvm_TrhU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.106.80.0/24 86.106.104.0/24 89.34.8.0/21 89.37.136.0/24 89.44.209.0/24 93.113.158.0/24 93.114.55.0/24 93.114.99.0/24 93.114.171.0/24 93.114.187.0/24 188.213.18.0/24 188.215.72.0/23 188.215.95.0/24 188.240.14.0/24 IPv6: 2a05:b680:1::/48 Signature Algorithm: sha256WithRSAEncryption 9d:f4:f3:70:9b:45:03:dd:74:4c:a2:0a:7a:2d:0b:0c:c0:42: 27:1e:5d:65:56:28:37:42:ae:65:31:67:f7:e0:c7:75:3a:0c: 4f:c4:4f:b7:47:8f:1a:6b:b3:a1:92:52:65:92:9e:89:9d:48: 39:6a:04:84:4f:14:6b:3d:08:4e:ea:a1:98:4f:47:49:01:33: aa:9d:be:d8:db:2b:28:d7:64:36:30:d4:5c:c6:04:23:fd:c0: 96:67:5e:85:73:ee:58:37:00:5c:ae:2e:27:a0:fb:ae:4a:9b: 60:84:40:64:0e:e0:ca:1d:32:e8:d0:9f:1c:72:c3:57:41:8b: 53:e7:48:de:28:6c:c7:67:59:53:55:b2:04:4a:24:c5:77:f7: ab:ac:65:90:8a:63:f0:2d:70:e9:45:68:d8:e7:7d:00:f2:d9: e8:d9:a5:c1:a6:82:4f:3f:f6:60:3c:77:5c:70:4e:eb:c3:5b: e7:8a:c7:ff:73:61:07:60:21:f2:5b:2d:ce:e2:d5:1b:3b:53: 58:b6:9d:4f:e6:d6:43:1a:c4:5e:76:2b:d3:76:cb:5c:e5:c9: 91:02:6d:94:01:fd:6f:af:e2:15:08:11:ce:1f:19:43:b9:45: df:9f:a1:9a:89:21:fe:50:60:08:e0:5e:15:4a:1d:5b:2b:d3: 7a:e4:9c:fa -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgISAZq53dntbDACs1BfGvs1BLCKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5 M2FlYjkwHhcNMjUxMTI1MDcxNTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjAzY2FiMzFkOWYyMGU2NmQ5NjQ3Y2E5NGFjNjViZTZmZDNhZTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5biNOEGcUCkED4JiqKoNwOAJbID YTjc4HQsqp/IMYaVfqulX6eHfRR7bxOxMLzYaqgbwgeIffxUtk8scud8/iZS06Ev IgBfnmbZUuMy3v9zvr7eEr3p4ILOM27wZGlTUnpiJiAxvSkVTRjpx1D6CsC7xItd CMFU8Zy+1KsobMdUB8oV0HYlpHeOs78LGN4d/Wjc5Kc/dn/7212J6f1wVhwOda+5 optebbm3Vh4qIAj3TXGjP8z2297/Jb/MJHjifVTBYesz2dgy/e2eGwBX1umG4hK5 yjggO/6H7vjTD7M1IBfTA98wAItxuj0YrG48khpgng3KjQk40Oej0kIg7QIDAQAB o4ICaDCCAmQwHQYDVR0OBBYEFOIDyrMdnyDmbZZHypSsZb5v064VMB8GA1UdIwQY MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt NWQ0OGI2NWNlNTczLzEvNGdQS3N4MmZJT1p0bGtmS2xLeGx2bV9UcmhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH4GCCsGAQUFBwEHAQH/BG8wbTBaBAIAATBUAwQAVmpQAwQA VmpoAwQDWSIIAwQAWSWIAwQAWSzRAwQAXXGeAwQAXXI3AwQAXXJjAwQAXXKrAwQA XXK7AwQAvNUSAwQBvNdIAwQAvNdfAwQAvPAOMA8EAgACMAkDBwAqBbaAAAEwDQYJ KoZIhvcNAQELBQADggEBAJ3083CbRQPddEyiCnotCwzAQiceXWVWKDdCrmUxZ/fg x3U6DE/ET7dHjxprs6GSUmWSnomdSDlqBIRPFGs9CE7qoZhPR0kBM6qdvtjbKyjX ZDYw1FzGBCP9wJZnXoVz7lg3AFyuLieg+65Km2CEQGQO4ModMujQnxxyw1dBi1Pn SN4obMdnWVNVsgRKJMV396usZZCKY/AtcOlFaNjnfQDy2ejZpcGmgk8/9mA8d1xw TuvDW+eKx/9zYQdgIfJbLc7i1Rs7U1i2nU/m1kMaxF52K9N2y1zlyZECbZQB/W+v 4hUIEc4fGUO5Rd+foZqJIf5QYAjgXhVKHVsr03rknPo= -----END CERTIFICATE-----Generated at Sat Dec 6 21:30:20 2025 by rpki-client