This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/1-w_Sx8LRPBvLvkJLZOQlFfGluOo.roa File: 1-w_Sx8LRPBvLvkJLZOQlFfGluOo.roa (raw, json) Hash identifier: jW6TH6eaQc46mg+HMpMqf3iTbPrehVKAIBq6ffyUgyg= Subject key identifier: FB:0F:D2:C7:C2:D1:3C:1B:CB:BE:42:4B:64:E4:25:15:F1:A5:B8:EA Certificate issuer: /CN=91c1c85bf5c53471a997ef9fa999d0c16be85444 Certificate serial: 019A62654E5FC7FC8F64AA5F56ABE71DC0BC Authority key identifier: 91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/1-w_Sx8LRPBvLvkJLZOQlFfGluOo.roa Signing time: Sat 08 Nov 2025 07:36:37 +0000 ROA not before: Sat 08 Nov 2025 07:36:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51185 IP address blocks: 45.157.64.0/24 maxlen: 24 45.157.65.0/24 maxlen: 24 45.157.66.0/24 maxlen: 24 45.157.67.0/24 maxlen: 24 94.124.64.0/21 maxlen: 21 94.124.64.0/24 maxlen: 24 94.124.65.0/24 maxlen: 24 94.124.66.0/24 maxlen: 24 94.124.67.0/24 maxlen: 24 94.124.68.0/24 maxlen: 24 94.124.69.0/24 maxlen: 24 94.124.70.0/24 maxlen: 24 94.124.71.0/24 maxlen: 24 178.248.48.0/24 maxlen: 24 178.248.49.0/24 maxlen: 24 178.248.50.0/24 maxlen: 24 178.248.51.0/24 maxlen: 24 178.248.52.0/24 maxlen: 24 178.248.53.0/24 maxlen: 24 178.248.54.0/24 maxlen: 24 178.248.55.0/24 maxlen: 24 185.45.208.0/24 maxlen: 24 185.45.209.0/24 maxlen: 24 185.45.210.0/24 maxlen: 24 185.45.211.0/24 maxlen: 24 185.187.156.0/24 maxlen: 24 185.187.157.0/24 maxlen: 24 185.187.158.0/24 maxlen: 24 185.187.159.0/24 maxlen: 24 2a02:2890::/48 maxlen: 48 2a02:2890:efff::/48 maxlen: 48 2a02:2890:ffff::/48 maxlen: 48 2a02:2891::/48 maxlen: 48 2a02:2891:1::/48 maxlen: 48 2a02:2891:2::/48 maxlen: 48 2a02:2891:4::/48 maxlen: 48 2a02:2891:9::/48 maxlen: 48 2a02:2891:10::/48 maxlen: 48 2a02:2891:11::/48 maxlen: 48 2a02:2891:12::/48 maxlen: 48 2a02:2891:13::/48 maxlen: 48 2a02:2891:15::/48 maxlen: 48 2a02:2891:16::/48 maxlen: 48 2a02:2891:18::/48 maxlen: 48 2a02:2891:29::/48 maxlen: 48 2a02:2891:ff::/48 maxlen: 48 2a02:2891:157::/48 maxlen: 48 2a02:2891:160::/48 maxlen: 48 2a02:2892:32::/48 maxlen: 48 2a02:2892:40::/48 maxlen: 48 2a02:2892:53::/48 maxlen: 48 2a02:2893:158::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:62:65:4e:5f:c7:fc:8f:64:aa:5f:56:ab:e7:1d:c0:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91c1c85bf5c53471a997ef9fa999d0c16be85444 Validity Not Before: Nov 8 07:36:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fb0fd2c7c2d13c1bcbbe424b64e42515f1a5b8ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ed:d2:31:ff:5d:de:0b:7d:f1:33:88:59:bf: cd:ea:b8:37:a8:0a:e3:7a:60:f5:85:90:0e:bd:36: 21:d9:54:19:df:8d:d2:e8:84:99:2f:ea:0e:b7:d4: f0:59:7b:36:8a:69:89:22:c1:7f:11:57:d3:f5:06: bd:f0:d3:e5:41:11:bc:50:74:47:8e:63:89:c8:9f: e4:a1:40:e7:9b:95:14:15:9b:76:e1:ee:31:17:aa: ee:02:ee:d7:f8:89:19:d1:99:aa:58:ed:1f:21:f8: 13:fc:46:21:04:3b:f8:73:98:34:c2:42:6d:90:fe: 74:98:70:d3:90:ae:61:64:d6:33:e2:21:cb:e6:58: df:00:93:2b:b7:c7:6c:8d:12:ab:8b:11:11:c0:fa: 36:f9:2d:29:e9:e2:c6:ce:0b:c5:42:ea:31:5f:8b: 36:3a:c9:38:23:9c:93:68:e7:4c:e7:d5:42:25:21: 14:88:d7:a1:ad:bf:99:c4:aa:73:5f:36:51:8f:5b: 66:cb:5a:42:77:37:82:da:bf:54:23:c6:ae:c0:91: f0:b2:02:a0:46:ae:f3:13:a4:a2:f2:e7:3f:5c:05: a0:2d:d1:af:b5:2e:80:1c:5b:bf:05:84:98:9d:92: 0c:8c:d3:a6:63:70:3a:f0:95:aa:68:fa:1d:f4:b9: 79:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:0F:D2:C7:C2:D1:3C:1B:CB:BE:42:4B:64:E4:25:15:F1:A5:B8:EA X509v3 Authority Key Identifier: keyid:91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/1-w_Sx8LRPBvLvkJLZOQlFfGluOo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.64.0/22 94.124.64.0/21 178.248.48.0/21 185.45.208.0/22 185.187.156.0/22 IPv6: 2a02:2890::/48 2a02:2890:efff::/48 2a02:2890:ffff::-2a02:2891:2:ffff:ffff:ffff:ffff:ffff 2a02:2891:4::/48 2a02:2891:9::/48 2a02:2891:10::/46 2a02:2891:15::-2a02:2891:16:ffff:ffff:ffff:ffff:ffff 2a02:2891:18::/48 2a02:2891:29::/48 2a02:2891:ff::/48 2a02:2891:157::/48 2a02:2891:160::/48 2a02:2892:32::/48 2a02:2892:40::/48 2a02:2892:53::/48 2a02:2893:158::/48 Signature Algorithm: sha256WithRSAEncryption 48:54:e4:38:d5:62:71:54:70:d6:f5:d2:94:41:5d:d5:54:43: de:88:ba:35:55:d4:18:a8:da:57:7e:de:ea:4f:2a:20:3d:7f: f9:50:41:34:09:c8:66:97:19:dd:bd:bb:46:17:0c:b9:5c:6e: 4e:b9:a9:d3:48:97:b6:aa:76:0a:1d:3e:da:6c:82:ab:69:0a: 2b:40:58:f5:7f:3b:5b:36:ec:83:16:61:a9:de:1d:44:8c:48: e9:1c:d4:54:82:af:3f:d7:d9:30:18:40:c7:c2:80:74:3e:e0: 60:7b:fc:6f:1c:1b:03:98:61:81:57:58:59:d0:9c:44:99:f9: 5b:8e:63:1d:2d:5b:72:a0:ad:c3:ac:92:26:29:be:2b:93:38: 6a:a8:93:fd:7d:17:c3:ad:6c:d9:98:0c:23:a3:39:df:ac:6f: b6:42:9a:ff:18:f0:b7:86:18:a0:10:79:4a:fa:b2:c0:dc:98: af:44:61:44:60:ea:b0:5d:48:91:33:9c:78:39:58:6e:37:c6: 18:f5:24:12:d1:22:f1:07:93:82:11:3c:b7:34:a4:ff:68:23: ab:03:64:8b:5e:22:4a:5d:05:74:64:3e:be:89:c8:d9:51:df: fa:13:5b:7b:10:4d:bd:5f:5f:52:9d:94:87:6e:60:e2:f1:f1: 0d:6f:e9:62 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgISAZpiZU5fx/yPZKpfVqvnHcC8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxYzFjODViZjVjNTM0NzFhOTk3ZWY5ZmE5OTlkMGMxNmJl ODU0NDQwHhcNMjUxMTA4MDczNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjBmZDJjN2MyZDEzYzFiY2JiZTQyNGI2NGU0MjUxNWYxYTViOGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO3SMf9d3gt98TOIWb/N6rg3qArj emD1hZAOvTYh2VQZ343S6ISZL+oOt9TwWXs2immJIsF/EVfT9Qa98NPlQRG8UHRH jmOJyJ/koUDnm5UUFZt24e4xF6ruAu7X+IkZ0ZmqWO0fIfgT/EYhBDv4c5g0wkJt kP50mHDTkK5hZNYz4iHL5ljfAJMrt8dsjRKrixERwPo2+S0p6eLGzgvFQuoxX4s2 Osk4I5yTaOdM59VCJSEUiNehrb+ZxKpzXzZRj1tmy1pCdzeC2r9UI8auwJHwsgKg Rq7zE6Si8uc/XAWgLdGvtS6AHFu/BYSYnZIMjNOmY3A68JWqaPod9Ll5YwIDAQAB o4IC1TCCAtEwHQYDVR0OBBYEFPsP0sfC0Twby75CS2TkJRXxpbjqMB8GA1UdIwQY MBaAFJHByFv1xTRxqZfvn6mZ0MFr6FREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2NISVdfWEZOSEdwbC0tZnFablF3V3ZvVkVRLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wMzQ3ZDMtZTU0Yy00NGMwLThmN2Et NDUxNDM3NGU2ZmZhLzEvMS13X1N4OExSUEJ2THZrSkxaT1FsRmZHbHVPby5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDAvMDM0N2QzLWU1NGMtNDRjMC04ZjdhLTQ1MTQzNzRlNmZm YS8xL2tjSElXX1hGTkhHcGwtLWZxWm5Rd1d2b1ZFUS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCB6QYIKwYBBQUHAQcBAf8EgdkwgdYwJAQCAAEwHgMEAi2d QAMEA158QAMEA7L4MAMEArkt0AMEArm7nDCBrQQCAAIwgaYDBwAqAiiQAAADBwAq AiiQ7/8wEgMHACoCKJD//wMHACoCKJEAAgMHACoCKJEABAMHACoCKJEACQMHAioC KJEAEDASAwcAKgIokQAVAwcAKgIokQAWAwcAKgIokQAYAwcAKgIokQApAwcAKgIo kQD/AwcAKgIokQFXAwcAKgIokQFgAwcAKgIokgAyAwcAKgIokgBAAwcAKgIokgBT AwcAKgIokwFYMA0GCSqGSIb3DQEBCwUAA4IBAQBIVOQ41WJxVHDW9dKUQV3VVEPe iLo1VdQYqNpXft7qTyogPX/5UEE0CchmlxndvbtGFwy5XG5OuanTSJe2qnYKHT7a bIKraQorQFj1fztbNuyDFmGp3h1EjEjpHNRUgq8/19kwGEDHwoB0PuBge/xvHBsD mGGBV1hZ0JxEmflbjmMdLVtyoK3DrJImKb4rkzhqqJP9fRfDrWzZmAwjoznfrG+2 Qpr/GPC3hhigEHlK+rLA3JivRGFEYOqwXUiRM5x4OVhuN8YY9SQS0SLxB5OCETy3 NKT/aCOrA2SLXiJKXQV0ZD6+icjZUd/6E1t7EE29X19SnZSHbmDi8fENb+li -----END CERTIFICATE-----Generated at Sat Dec 6 08:17:26 2025 by rpki-client