This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/56nNsQD5fhmKgW9wsztaFH2HQR0.roa File: 56nNsQD5fhmKgW9wsztaFH2HQR0.roa (raw, json) Hash identifier: ELMB3ISOh5rAiJ3WjaKpUk69zbZHQWDxYkfbd0e3MbM= Subject key identifier: E7:A9:CD:B1:00:F9:7E:19:8A:81:6F:70:B3:3B:5A:14:7D:87:41:1D Certificate issuer: /CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c Certificate serial: 019A7C74C05D18A735C9903527667FF28D73 Authority key identifier: EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/56nNsQD5fhmKgW9wsztaFH2HQR0.roa Signing time: Thu 13 Nov 2025 09:03:37 +0000 ROA not before: Thu 13 Nov 2025 09:03:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62214 IP address blocks: 46.29.136.0/21 maxlen: 21 79.139.56.0/21 maxlen: 21 85.155.240.0/21 maxlen: 21 92.119.120.0/22 maxlen: 22 109.122.216.0/21 maxlen: 21 185.43.204.0/22 maxlen: 22 185.80.48.0/22 maxlen: 22 185.187.72.0/22 maxlen: 22 193.39.12.0/22 maxlen: 22 193.201.184.0/21 maxlen: 21 194.176.123.0/24 maxlen: 24 194.180.12.0/24 maxlen: 24 194.180.16.0/24 maxlen: 24 194.180.19.0/24 maxlen: 24 2a01:6ee0::/32 maxlen: 32 2a01:6ee0::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7c:74:c0:5d:18:a7:35:c9:90:35:27:66:7f:f2:8d:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c Validity Not Before: Nov 13 09:03:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e7a9cdb100f97e198a816f70b33b5a147d87411d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:49:bd:85:60:69:48:f9:9e:6d:16:aa:a4:ba: 32:ca:87:d9:61:cf:f9:44:60:2b:9c:dc:f2:30:fe: 9d:e6:00:4e:90:cf:a6:99:39:dd:bd:6e:ec:23:bd: 73:c2:81:f9:93:85:e7:39:8b:d1:7c:b8:c3:4e:1a: 8c:fe:90:86:c4:ee:71:e8:7d:6e:d1:ee:87:90:89: bb:91:18:e8:d3:6d:a9:16:43:a8:9d:68:e4:85:67: be:6f:05:19:5a:51:28:7a:ed:1b:6c:94:37:18:75: e7:93:16:0c:79:d1:b8:15:cc:59:aa:76:68:c1:0f: df:9a:6c:6a:54:6d:d1:e2:cb:4b:65:40:cf:e7:7c: 11:d5:5e:aa:b9:27:ad:d1:c7:0e:60:a7:32:e5:30: b9:67:1f:a6:4c:4a:6c:25:f7:9a:b6:0f:09:6f:f8: 84:40:91:68:54:91:65:ca:66:f4:af:8e:29:f6:63: 58:2a:90:f3:40:30:bb:c3:df:0e:de:c2:cf:46:67: cc:a9:56:14:07:4a:6f:a6:78:c0:77:1b:73:ee:f6: 2c:6d:94:84:3b:0b:d9:28:e3:e2:16:45:df:52:15: ec:82:f2:a8:44:75:c0:e2:18:79:aa:5e:7b:93:db: b2:13:d5:79:fc:52:a3:f7:2d:4c:df:33:7f:66:7a: 42:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A9:CD:B1:00:F9:7E:19:8A:81:6F:70:B3:3B:5A:14:7D:87:41:1D X509v3 Authority Key Identifier: keyid:EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/56nNsQD5fhmKgW9wsztaFH2HQR0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.136.0/21 79.139.56.0/21 85.155.240.0/21 92.119.120.0/22 109.122.216.0/21 185.43.204.0/22 185.80.48.0/22 185.187.72.0/22 193.39.12.0/22 193.201.184.0/21 194.176.123.0/24 194.180.12.0/24 194.180.16.0/24 194.180.19.0/24 IPv6: 2a01:6ee0::/32 Signature Algorithm: sha256WithRSAEncryption 27:8d:5c:7d:92:4e:c3:54:39:f1:83:23:9b:12:05:b0:c2:de: fa:6e:94:24:a0:69:38:35:33:c0:d1:34:69:bb:26:43:f4:26: bb:7c:a2:51:e3:9e:69:b3:73:ba:e8:1a:0e:a1:f4:b0:5a:39: 38:22:4e:aa:19:a3:e5:b2:9c:90:a4:3a:e7:57:df:f7:b9:8b: 0f:03:fc:1a:c4:81:23:a4:b0:ac:47:09:72:7f:70:bb:40:4f: 82:a8:36:56:df:9d:21:64:7d:52:64:96:77:77:91:fb:f8:0b: 15:29:1b:b6:19:53:b8:00:f1:57:63:a5:ca:ec:e2:00:a1:3b: e6:a6:91:fa:b9:f4:7f:82:06:a4:c5:ad:b4:3f:20:d7:61:13: a2:c2:59:00:14:83:7a:2d:94:38:ab:45:37:46:0b:35:53:d2: dc:6f:9b:ce:fd:a7:63:b9:8b:23:b2:86:5d:25:d2:97:f3:e7: 8e:83:7a:b4:9d:1a:ac:31:5f:a4:66:75:9a:d3:97:e9:cb:e0: 2b:f1:bd:c9:cd:e0:a7:bc:5f:20:aa:6c:4d:80:95:0f:2b:91: b7:fe:33:23:a6:cc:e0:2e:96:49:56:fb:54:de:0f:c9:c9:c9: 44:89:b8:9f:00:ca:34:d7:47:36:37:5a:11:44:b8:cd:1a:e8: fd:c2:c7:30 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgISAZp8dMBdGKc1yZA1J2Z/8o1zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYjFlYTVhMTA1MGE4MjkyMjRlYTQ4NmMwZTIyZWJmYzc1 ZDY0MGMwHhcNMjUxMTEzMDkwMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2E5Y2RiMTAwZjk3ZTE5OGE4MTZmNzBiMzNiNWExNDdkODc0MTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6km9hWBpSPmebRaqpLoyyofZYc/5 RGArnNzyMP6d5gBOkM+mmTndvW7sI71zwoH5k4XnOYvRfLjDThqM/pCGxO5x6H1u 0e6HkIm7kRjo022pFkOonWjkhWe+bwUZWlEoeu0bbJQ3GHXnkxYMedG4FcxZqnZo wQ/fmmxqVG3R4stLZUDP53wR1V6quSet0ccOYKcy5TC5Zx+mTEpsJfeatg8Jb/iE QJFoVJFlymb0r44p9mNYKpDzQDC7w98O3sLPRmfMqVYUB0pvpnjAdxtz7vYsbZSE OwvZKOPiFkXfUhXsgvKoRHXA4hh5ql57k9uyE9V5/FKj9y1M3zN/ZnpCKwIDAQAB o4ICZjCCAmIwHQYDVR0OBBYEFOepzbEA+X4ZioFvcLM7WhR9h0EdMB8GA1UdIwQY MBaAFOyx6loQUKgpIk6khsDiLr/HXWQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0xIcVdoQlFxQ2tpVHFTR3dPSXV2OGRkWkF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8yMWE5MjctOGRkMy00OGY3LTkyY2Ut MDJmZmNlZmYxYWNjLzEvNTZuTnNRRDVmaG1LZ1c5d3N6dGFGSDJIUVIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8yMWE5MjctOGRkMy00OGY3LTkyY2UtMDJmZmNlZmYxYWNj LzEvN0xIcVdoQlFxQ2tpVHFTR3dPSXV2OGRkWkF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEHAQH/BG0wazBaBAIAATBUAwQDLh2IAwQD T4s4AwQDVZvwAwQCXHd4AwQDbXrYAwQCuSvMAwQCuVAwAwQCubtIAwQCwScMAwQD wcm4AwQAwrB7AwQAwrQMAwQAwrQQAwQAwrQTMA0EAgACMAcDBQAqAW7gMA0GCSqG SIb3DQEBCwUAA4IBAQAnjVx9kk7DVDnxgyObEgWwwt76bpQkoGk4NTPA0TRpuyZD 9Ca7fKJR455ps3O66BoOofSwWjk4Ik6qGaPlspyQpDrnV9/3uYsPA/waxIEjpLCs Rwlyf3C7QE+CqDZW350hZH1SZJZ3d5H7+AsVKRu2GVO4APFXY6XK7OIAoTvmppH6 ufR/ggakxa20PyDXYROiwlkAFIN6LZQ4q0U3Rgs1U9Lcb5vO/adjuYsjsoZdJdKX 8+eOg3q0nRqsMV+kZnWa05fpy+Ar8b3JzeCnvF8gqmxNgJUPK5G3/jMjpszgLpZJ VvtU3g/JyclEibifAMo010c2N1oRRLjNGuj9wscw -----END CERTIFICATE-----Generated at Sun Dec 7 11:58:47 2025 by rpki-client