This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/C47lvglUJPUc1uI67gUUufPEDSs.roa File: C47lvglUJPUc1uI67gUUufPEDSs.roa (raw, json) Hash identifier: E+7Tw0jGhEeXyLDUBjLwrw3FkNQ1C9Bm1zuyOyb3PzQ= Subject key identifier: 0B:8E:E5:BE:09:54:24:F5:1C:D6:E2:3A:EE:05:14:B9:F3:C4:0D:2B Certificate issuer: /CN=d0040765e474600e1bc7622a43663dd8d9fadc87 Certificate serial: 019AE3FAFFF001396FAF1600E7421302560F Authority key identifier: D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/C47lvglUJPUc1uI67gUUufPEDSs.roa Signing time: Wed 03 Dec 2025 11:31:08 +0000 ROA not before: Wed 03 Dec 2025 11:31:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209902 IP address blocks: 45.139.96.0/22 maxlen: 24 45.139.96.0/23 maxlen: 24 80.88.232.0/22 maxlen: 24 185.91.68.0/24 maxlen: 24 185.166.180.0/22 maxlen: 24 185.243.204.0/22 maxlen: 24 195.35.118.0/23 maxlen: 24 195.211.165.0/24 maxlen: 24 2a12:5140::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:fa:ff:f0:01:39:6f:af:16:00:e7:42:13:02:56:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0040765e474600e1bc7622a43663dd8d9fadc87 Validity Not Before: Dec 3 11:31:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0b8ee5be095424f51cd6e23aee0514b9f3c40d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:88:da:c4:6d:20:72:0f:08:af:9f:bd:06:9f: d4:57:73:d5:a5:38:e5:cb:01:55:fb:12:0d:82:58: a2:f9:43:f0:d1:97:68:c5:25:28:c1:80:af:fc:22: 6a:b1:de:20:08:4c:37:0f:1e:e7:ee:d2:86:ec:b3: 0e:cd:81:a3:86:58:3d:47:64:c8:a7:c6:38:cc:8c: 4d:9f:c2:b0:6e:ae:b5:09:92:1a:3f:68:97:cc:9b: f6:9c:b6:1a:de:bd:36:54:0f:9a:65:dd:ce:91:1b: e3:55:8a:50:00:36:14:75:1b:01:62:d9:b0:29:01: a9:a4:af:2b:b9:f0:4c:7c:0b:9a:6c:e4:02:a8:cf: 9c:20:4a:28:ac:29:33:af:b2:2d:38:2f:7b:0b:48: f1:64:7c:f0:0d:01:68:03:30:d0:ee:f6:8a:38:2d: 56:2d:a0:69:4e:8b:94:5c:f1:fb:0c:f7:65:e7:d7: 8a:0b:5b:ff:69:5d:6a:37:41:c0:73:b0:76:e0:36: ff:ee:b9:4a:ba:cd:d2:4d:59:c2:23:a1:49:96:83: fc:8b:9c:7b:0c:af:93:b6:8d:ce:01:cf:fb:aa:17: 77:34:85:f9:92:39:91:69:c9:63:c1:48:f6:da:08: 20:eb:30:d1:42:b3:08:fb:eb:58:e8:d9:fc:16:a3: 3f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8E:E5:BE:09:54:24:F5:1C:D6:E2:3A:EE:05:14:B9:F3:C4:0D:2B X509v3 Authority Key Identifier: keyid:D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/C47lvglUJPUc1uI67gUUufPEDSs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.96.0/22 80.88.232.0/22 185.91.68.0/24 185.166.180.0/22 185.243.204.0/22 195.35.118.0/23 195.211.165.0/24 IPv6: 2a12:5140::/32 Signature Algorithm: sha256WithRSAEncryption e2:4d:e6:0c:c0:fc:5f:ad:b7:46:6a:6a:2c:76:41:cf:0f:41: c0:7d:74:dc:a3:0c:91:71:ca:e3:49:ef:eb:ce:ec:63:37:21: 92:0a:a6:0d:dd:66:e7:45:06:f5:93:b6:00:0f:7d:24:c0:c4: 07:4d:25:3a:dc:0c:10:e6:e4:9f:58:4d:8f:b2:58:db:bd:d8: fd:a5:96:0d:41:b2:b2:57:6b:65:14:76:60:cc:c4:bc:80:90: 64:a7:7e:38:58:88:60:b4:8d:39:b2:9c:58:15:89:91:cb:06: a1:df:71:7d:37:be:14:33:5d:a6:a9:9a:35:32:d5:c0:85:37: 00:00:82:d4:b2:8d:27:d4:7a:0a:cb:bf:76:47:fa:94:10:fc: 39:46:b5:10:b6:ce:9a:8d:1f:6e:0f:58:f5:fb:12:c8:99:f5: d9:61:1e:84:20:39:50:70:3e:c8:09:81:57:0d:3b:4c:7b:ec: 79:64:4f:bd:c2:3a:b0:c9:b5:db:79:cd:91:67:89:fe:89:2d: 96:1a:d9:22:87:04:c2:be:26:92:c2:f6:74:33:f4:58:ce:ee: 5d:8a:c7:3b:b1:b0:f0:87:16:0d:39:e6:5c:f5:70:f2:a9:a2: 68:4c:a0:6f:49:6e:46:4d:fa:a5:b1:59:a8:9e:55:47:df:cb: 08:86:36:3a -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZrj+v/wATlvrxYA50ITAlYPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMDQwNzY1ZTQ3NDYwMGUxYmM3NjIyYTQzNjYzZGQ4ZDlm YWRjODcwHhcNMjUxMjAzMTEzMTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjhlZTViZTA5NTQyNGY1MWNkNmUyM2FlZTA1MTRiOWYzYzQwZDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YjaxG0gcg8Ir5+9Bp/UV3PVpTjl ywFV+xINglii+UPw0ZdoxSUowYCv/CJqsd4gCEw3Dx7n7tKG7LMOzYGjhlg9R2TI p8Y4zIxNn8Kwbq61CZIaP2iXzJv2nLYa3r02VA+aZd3OkRvjVYpQADYUdRsBYtmw KQGppK8rufBMfAuabOQCqM+cIEoorCkzr7ItOC97C0jxZHzwDQFoAzDQ7vaKOC1W LaBpTouUXPH7DPdl59eKC1v/aV1qN0HAc7B24Db/7rlKus3STVnCI6FJloP8i5x7 DK+Tto3OAc/7qhd3NIX5kjmRacljwUj22ggg6zDRQrMI++tY6Nn8FqM/nwIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFAuO5b4JVCT1HNbiOu4FFLnzxA0rMB8GA1UdIwQY MBaAFNAEB2XkdGAOG8diKkNmPdjZ+tyHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEFRSFplUjBZQTRieDJJcVEyWTkyTm42M0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yMmZjZGUtNzIwYi00ZjYzLTljMDIt NDdkMzA4NzEzN2Y0LzEvQzQ3bHZnbFVKUFVjMXVJNjdnVVV1ZlBFRFNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8yMmZjZGUtNzIwYi00ZjYzLTljMDItNDdkMzA4NzEzN2Y0 LzEvMEFRSFplUjBZQTRieDJJcVEyWTkyTm42M0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQCLYtgAwQC UFjoAwQAuVtEAwQCuaa0AwQCufPMAwQBwyN2AwQAw9OlMA0EAgACMAcDBQAqElFA MA0GCSqGSIb3DQEBCwUAA4IBAQDiTeYMwPxfrbdGamosdkHPD0HAfXTcowyRccrj Se/rzuxjNyGSCqYN3WbnRQb1k7YAD30kwMQHTSU63AwQ5uSfWE2Psljbvdj9pZYN QbKyV2tlFHZgzMS8gJBkp344WIhgtI05spxYFYmRywah33F9N74UM12mqZo1MtXA hTcAAILUso0n1HoKy792R/qUEPw5RrUQts6ajR9uD1j1+xLImfXZYR6EIDlQcD7I CYFXDTtMe+x5ZE+9wjqwybXbec2RZ4n+iS2WGtkihwTCviaSwvZ0M/RYzu5disc7 sbDwhxYNOeZc9XDyqaJoTKBvSW5GTfqlsVmonlVH38sIhjY6 -----END CERTIFICATE-----Generated at Sat Dec 6 14:55:04 2025 by rpki-client