This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/A1rC7bsUz-tDtHOpao4bcB0YnBE.roa File: A1rC7bsUz-tDtHOpao4bcB0YnBE.roa (raw, json) Hash identifier: yBEboQPVECasHJnPMyG6ovnxCIPuE9CgKTnlZ8wrU3Q= Subject key identifier: 03:5A:C2:ED:BB:14:CF:EB:43:B4:73:A9:6A:8E:1B:70:1D:18:9C:11 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019ADA6A913B01B8657E081A8AD18F5B6829 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/A1rC7bsUz-tDtHOpao4bcB0YnBE.roa Signing time: Mon 01 Dec 2025 14:56:48 +0000 ROA not before: Mon 01 Dec 2025 14:56:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42216 IP address blocks: 31.210.47.0/24 maxlen: 24 77.92.142.0/24 maxlen: 24 77.92.143.0/24 maxlen: 24 77.92.152.0/24 maxlen: 24 78.135.67.0/24 maxlen: 24 78.135.74.0/24 maxlen: 24 78.135.86.0/24 maxlen: 24 78.135.89.0/24 maxlen: 24 78.135.98.0/24 maxlen: 24 185.17.136.0/24 maxlen: 24 188.132.214.0/24 maxlen: 24 188.132.215.0/24 maxlen: 24 188.132.228.0/24 maxlen: 24 2a10:9440::/48 maxlen: 48 2a10:9440:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:6a:91:3b:01:b8:65:7e:08:1a:8a:d1:8f:5b:68:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Dec 1 14:56:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=035ac2edbb14cfeb43b473a96a8e1b701d189c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:be:9d:67:cb:e5:29:71:cd:d2:1f:e1:35:b7: c3:70:71:d3:8d:d5:b5:6f:8e:c6:5f:e1:53:3b:6d: 41:4a:87:2e:ae:00:bd:fa:76:71:ee:5d:9e:f8:a5: 6e:c7:25:9c:60:f5:9f:02:14:fa:30:b3:8e:af:fe: cb:e6:8d:0e:83:53:53:1e:74:62:6a:4c:fa:bd:be: ab:d9:b3:84:15:8b:f7:51:71:84:f7:59:86:1a:ef: 91:f2:92:a2:d2:ca:76:20:26:a9:ac:72:07:df:70: ec:b3:17:db:2f:ef:62:1b:09:aa:ed:6d:7e:b2:e2: 84:93:ee:c3:68:de:09:94:27:d4:aa:0d:f4:d9:d5: 6a:87:46:3e:49:92:65:9a:16:b7:d3:cd:bf:73:30: 65:f1:26:c0:c9:a9:b2:cd:95:73:db:93:b7:45:da: 02:bc:ae:77:ae:99:fd:66:b5:4e:2d:4a:c5:72:62: 97:65:63:79:e2:7e:8e:bf:9b:51:5e:90:27:08:e8: 53:11:b1:b9:22:2c:a9:ac:fe:54:ad:0c:29:48:91: bc:c8:d6:b1:41:ff:f3:a1:74:79:94:33:86:c5:25: c6:aa:e7:b7:35:9f:b2:16:1a:2f:db:d5:db:48:f1: 91:0d:b8:4f:f3:49:ff:67:86:d5:48:aa:86:43:86: f6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5A:C2:ED:BB:14:CF:EB:43:B4:73:A9:6A:8E:1B:70:1D:18:9C:11 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/A1rC7bsUz-tDtHOpao4bcB0YnBE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.47.0/24 77.92.142.0/23 77.92.152.0/24 78.135.67.0/24 78.135.74.0/24 78.135.86.0/24 78.135.89.0/24 78.135.98.0/24 185.17.136.0/24 188.132.214.0/23 188.132.228.0/24 IPv6: 2a10:9440::/47 Signature Algorithm: sha256WithRSAEncryption 5b:7b:c1:72:f1:64:b5:fc:24:ed:db:ad:46:20:04:d9:90:ee: 30:c1:01:a2:63:ee:0b:56:68:2c:81:1b:da:5d:06:64:10:58: 24:7d:fe:4e:d3:5c:1a:e8:10:45:83:28:79:72:85:64:a6:4f: 2f:ff:f9:8c:90:d5:8d:42:51:53:dd:88:d2:26:82:69:88:30: 30:ce:75:7a:17:f0:c7:a4:7c:ba:28:a0:ea:3d:0d:21:29:a6: 36:7f:65:1b:bb:ab:ca:e0:5e:0c:ab:37:d1:30:aa:af:8c:9d: 97:9d:c0:2e:0e:d3:f5:d3:b2:f3:26:3e:4c:5d:80:2a:a7:34: 8d:99:6e:a8:28:12:ae:3a:36:34:ce:f5:f3:af:0f:66:6f:04: 36:dc:f1:9f:9e:48:a5:2c:56:6f:83:8f:a7:16:06:c3:2b:68: 55:92:82:86:fa:91:d0:ac:dc:e8:4c:9d:d1:49:e7:55:33:ae: d6:0e:ad:d9:23:25:51:c1:28:e9:36:4e:b1:af:48:6f:59:94: b0:0f:7e:d9:9b:54:f5:02:82:10:11:c0:ff:a3:f3:78:c2:9b: 74:cc:6c:2b:64:f3:19:fc:82:d1:29:9e:ef:34:6a:63:ca:3f: ea:16:53:a1:91:3a:4a:29:e0:2b:78:b5:9e:5f:69:b0:ee:5c: 84:3d:98:ca -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgISAZraapE7AbhlfggaitGPW2gpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjUxMjAxMTQ1NjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzVhYzJlZGJiMTRjZmViNDNiNDczYTk2YThlMWI3MDFkMTg5YzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr6dZ8vlKXHN0h/hNbfDcHHTjdW1 b47GX+FTO21BSocurgC9+nZx7l2e+KVuxyWcYPWfAhT6MLOOr/7L5o0Og1NTHnRi akz6vb6r2bOEFYv3UXGE91mGGu+R8pKi0sp2ICaprHIH33DssxfbL+9iGwmq7W1+ suKEk+7DaN4JlCfUqg302dVqh0Y+SZJlmha3082/czBl8SbAyamyzZVz25O3RdoC vK53rpn9ZrVOLUrFcmKXZWN54n6Ov5tRXpAnCOhTEbG5IiyprP5UrQwpSJG8yNax Qf/zoXR5lDOGxSXGque3NZ+yFhov29XbSPGRDbhP80n/Z4bVSKqGQ4b2iQIDAQAB o4ICVjCCAlIwHQYDVR0OBBYEFANawu27FM/rQ7RzqWqOG3AdGJwRMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvQTFyQzdic1V6LXREdEhPcGFvNGJjQjBZbkJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzBIBAIAATBCAwQAH9IvAwQB TVyOAwQATVyYAwQATodDAwQATodKAwQATodWAwQATodZAwQATodiAwQAuRGIAwQB vITWAwQAvITkMA8EAgACMAkDBwEqEJRAAAAwDQYJKoZIhvcNAQELBQADggEBAFt7 wXLxZLX8JO3brUYgBNmQ7jDBAaJj7gtWaCyBG9pdBmQQWCR9/k7TXBroEEWDKHly hWSmTy//+YyQ1Y1CUVPdiNImgmmIMDDOdXoX8MekfLoooOo9DSEppjZ/ZRu7q8rg XgyrN9Ewqq+MnZedwC4O0/XTsvMmPkxdgCqnNI2ZbqgoEq46NjTO9fOvD2ZvBDbc 8Z+eSKUsVm+Dj6cWBsMraFWSgob6kdCs3OhMndFJ51UzrtYOrdkjJVHBKOk2TrGv SG9ZlLAPftmbVPUCghARwP+j83jCm3TMbCtk8xn8gtEpnu80amPKP+oWU6GROkop 4Ct4tZ5fabDuXIQ9mMo= -----END CERTIFICATE-----Generated at Sat Dec 6 09:48:33 2025 by rpki-client