This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/8yMWV-BYRvr77OAzEy7JFJVcmyA.roa File: 8yMWV-BYRvr77OAzEy7JFJVcmyA.roa (raw, json) Hash identifier: xjx8Uo3Gz1pZnbztb/FJvzXMxr22qVETaOIP/mg500U= Subject key identifier: F3:23:16:57:E0:58:46:FA:FB:EC:E0:33:13:2E:C9:14:95:5C:9B:20 Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019A829C60EF5F40E6625A8D1FE6BA40E064 Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/8yMWV-BYRvr77OAzEy7JFJVcmyA.roa Signing time: Fri 14 Nov 2025 13:44:37 +0000 ROA not before: Fri 14 Nov 2025 13:44:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214785 IP address blocks: 45.134.144.0/24 maxlen: 24 45.155.224.0/24 maxlen: 24 103.211.100.0/24 maxlen: 24 103.211.102.0/24 maxlen: 24 172.110.212.0/24 maxlen: 24 172.110.213.0/24 maxlen: 24 172.110.214.0/24 maxlen: 24 185.245.1.0/24 maxlen: 24 185.245.2.0/24 maxlen: 24 193.107.216.0/24 maxlen: 24 194.120.144.0/24 maxlen: 24 194.120.164.0/24 maxlen: 24 194.145.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:82:9c:60:ef:5f:40:e6:62:5a:8d:1f:e6:ba:40:e0:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Nov 14 13:44:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f3231657e05846fafbece033132ec914955c9b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:38:0e:e8:e6:e3:6a:f7:de:ba:09:86:dd:c9: ce:97:71:ee:35:d9:e2:9d:06:42:f8:e6:93:de:76: 6e:dc:15:cd:ba:b9:c5:d4:96:fe:47:32:a5:45:47: 5c:ec:59:be:f3:ea:07:fa:ed:f4:61:81:9b:01:21: 03:23:cf:02:e0:3c:30:3e:6e:e2:8e:29:10:d5:7c: e1:c4:9c:0c:f2:40:97:a2:77:ee:51:bb:ed:38:32: b9:00:5f:ad:34:d6:50:7b:13:a5:11:b6:b5:c2:e7: ba:60:a7:1c:44:fd:81:67:4a:09:32:fd:8c:01:55: 37:d2:c6:b3:27:2f:5d:5d:10:05:89:43:11:ff:75: cd:aa:76:52:fe:73:03:79:bd:14:7b:cf:09:dd:78: 6e:0a:b6:4b:73:1c:e1:c4:e1:04:b5:bc:37:fe:fb: 8f:b6:a6:c8:1c:bc:a8:80:08:77:01:b6:8b:70:10: 95:18:56:2c:c0:bd:1b:07:37:eb:1f:c9:85:f8:67: 26:4a:89:2c:73:31:d8:3c:7c:93:40:29:2f:4c:bd: 9e:48:6a:94:ae:2e:66:a6:c1:23:d0:f2:f2:7c:e2: 3f:9e:8b:7d:9c:78:7b:3e:fa:1f:87:5b:f0:c3:96: b8:76:84:c5:cf:3c:a5:2c:3e:75:43:90:f3:fc:15: ed:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:23:16:57:E0:58:46:FA:FB:EC:E0:33:13:2E:C9:14:95:5C:9B:20 X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/8yMWV-BYRvr77OAzEy7JFJVcmyA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.144.0/24 45.155.224.0/24 103.211.100.0/24 103.211.102.0/24 172.110.212.0-172.110.214.255 185.245.1.0-185.245.2.255 193.107.216.0/24 194.120.144.0/24 194.120.164.0/24 194.145.237.0/24 Signature Algorithm: sha256WithRSAEncryption aa:9d:a1:9c:95:b3:54:d9:cf:54:fa:81:a6:06:95:cb:ac:6c: c6:25:1f:da:a2:69:e8:3a:53:27:29:98:27:85:c6:2d:e5:49: 0e:ec:94:dd:b8:2b:cc:d2:34:05:d2:17:d2:5b:e0:7f:91:61: e7:5b:8f:e8:60:e3:29:53:c0:25:0a:ec:cc:f0:56:b1:12:49: 07:b5:7e:5f:57:2c:67:9b:a4:10:8a:9c:5a:7d:d7:5b:fc:09: 5c:8e:ee:c9:64:71:92:ce:fa:17:79:89:73:91:df:bf:4b:79: 8d:ac:05:3e:42:1b:94:d2:06:08:9f:a1:85:06:cd:9a:05:a1: 2f:f6:f7:91:4e:21:8a:d1:cf:ac:b5:20:a2:00:6c:07:79:70: 0e:f1:77:99:0c:ae:0f:5d:c1:33:52:d3:e9:bd:29:5b:92:f2: 4b:f7:3e:74:36:6c:3f:5b:ab:b7:23:ad:20:77:82:b9:4f:c0: 71:8a:33:cc:50:f0:ad:b7:d4:7b:db:8f:4b:41:7a:9d:82:88: 45:00:8c:a4:f3:96:3d:b7:f7:e4:0a:e9:ac:71:d6:41:b9:9b: 62:95:7c:d5:21:77:2f:81:42:d2:88:58:df:9b:cb:46:d7:a2: ee:c3:0c:f3:a9:b3:c7:97:79:c9:81:5c:23:98:0d:2c:dc:b5: a2:a9:24:88 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZqCnGDvX0DmYlqNH+a6QOBkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjUxMTE0MTM0NDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzIzMTY1N2UwNTg0NmZhZmJlY2UwMzMxMzJlYzkxNDk1NWM5YjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTgO6ObjavfeugmG3cnOl3HuNdni nQZC+OaT3nZu3BXNurnF1Jb+RzKlRUdc7Fm+8+oH+u30YYGbASEDI88C4DwwPm7i jikQ1XzhxJwM8kCXonfuUbvtODK5AF+tNNZQexOlEba1wue6YKccRP2BZ0oJMv2M AVU30sazJy9dXRAFiUMR/3XNqnZS/nMDeb0Ue88J3XhuCrZLcxzhxOEEtbw3/vuP tqbIHLyogAh3AbaLcBCVGFYswL0bBzfrH8mF+GcmSoksczHYPHyTQCkvTL2eSGqU ri5mpsEj0PLyfOI/not9nHh7Pvofh1vww5a4doTFzzylLD51Q5Dz/BXt6QIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFPMjFlfgWEb6++zgMxMuyRSVXJsgMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvOHlNV1YtQllSdnI3N09BekV5N0pGSlZjbXlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQALYaQAwQA LZvgAwQAZ9NkAwQAZ9NmMAwDBAKsbtQDBACsbtYwDAMEALn1AQMEALn1AgMEAMFr 2AMEAMJ4kAMEAMJ4pAMEAMKR7TANBgkqhkiG9w0BAQsFAAOCAQEAqp2hnJWzVNnP VPqBpgaVy6xsxiUf2qJp6DpTJymYJ4XGLeVJDuyU3bgrzNI0BdIX0lvgf5Fh51uP 6GDjKVPAJQrszPBWsRJJB7V+X1csZ5ukEIqcWn3XW/wJXI7uyWRxks76F3mJc5Hf v0t5jawFPkIblNIGCJ+hhQbNmgWhL/b3kU4hitHPrLUgogBsB3lwDvF3mQyuD13B M1LT6b0pW5LyS/c+dDZsP1urtyOtIHeCuU/AcYozzFDwrbfUe9uPS0F6nYKIRQCM pPOWPbf35ArprHHWQbmbYpV81SF3L4FC0ohY35vLRtei7sMM86mzx5d5yYFcI5gN LNy1oqkkiA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:42:59 2025 by rpki-client