This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/M4W4uWryEo_HfddT_AlFpyx_-QU.roa File: M4W4uWryEo_HfddT_AlFpyx_-QU.roa (raw, json) Hash identifier: ZQcu1jp7yrg3C7qwL3G3AXidULBmINV1yHbudKjEVWc= Subject key identifier: 33:85:B8:B9:6A:F2:12:8F:C7:7D:D7:53:FC:09:45:A7:2C:7F:F9:05 Certificate issuer: /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533 Certificate serial: 019A822E8304151E0D016E8B61BAA1B3B0F4 Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/M4W4uWryEo_HfddT_AlFpyx_-QU.roa Signing time: Fri 14 Nov 2025 11:44:37 +0000 ROA not before: Fri 14 Nov 2025 11:44:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204601 IP address blocks: 45.81.224.0/22 maxlen: 22 45.82.68.0/22 maxlen: 22 45.82.176.0/22 maxlen: 22 45.87.0.0/22 maxlen: 22 45.136.84.0/24 maxlen: 24 45.136.85.0/24 maxlen: 24 45.136.86.0/24 maxlen: 24 45.136.87.0/24 maxlen: 24 45.137.64.0/22 maxlen: 22 46.18.107.0/24 maxlen: 24 46.21.250.0/24 maxlen: 24 77.220.214.0/24 maxlen: 24 77.220.215.0/24 maxlen: 24 81.31.197.0/24 maxlen: 24 91.201.25.0/24 maxlen: 24 91.208.127.0/24 maxlen: 24 91.209.226.0/24 maxlen: 24 91.228.56.0/24 maxlen: 24 94.124.78.0/24 maxlen: 24 178.159.38.0/24 maxlen: 24 178.159.39.0/24 maxlen: 24 178.159.42.0/24 maxlen: 24 185.23.108.0/24 maxlen: 24 185.51.121.0/24 maxlen: 24 185.51.246.0/24 maxlen: 24 185.51.247.0/24 maxlen: 24 185.107.237.0/24 maxlen: 24 185.204.109.0/24 maxlen: 24 185.232.164.0/24 maxlen: 24 185.235.129.0/24 maxlen: 24 185.235.130.0/24 maxlen: 24 185.235.131.0/24 maxlen: 24 185.241.52.0/24 maxlen: 24 185.241.53.0/24 maxlen: 24 185.241.54.0/24 maxlen: 24 185.241.55.0/24 maxlen: 24 185.244.216.0/22 maxlen: 22 185.244.216.0/24 maxlen: 24 185.244.217.0/24 maxlen: 24 185.250.204.0/24 maxlen: 24 185.250.205.0/24 maxlen: 24 185.250.206.0/24 maxlen: 24 193.22.21.0/24 maxlen: 24 193.56.8.0/24 maxlen: 24 193.163.7.0/24 maxlen: 24 193.163.113.0/24 maxlen: 24 194.29.53.0/24 maxlen: 24 212.8.244.0/24 maxlen: 24 212.8.246.0/24 maxlen: 24 212.23.221.0/24 maxlen: 24 212.86.101.0/24 maxlen: 24 212.86.102.0/24 maxlen: 24 212.86.108.0/24 maxlen: 24 212.86.109.0/24 maxlen: 24 212.162.152.0/24 maxlen: 24 212.162.153.0/24 maxlen: 24 212.162.155.0/24 maxlen: 24 213.166.68.0/24 maxlen: 24 213.166.69.0/24 maxlen: 24 213.166.70.0/24 maxlen: 24 213.166.71.0/24 maxlen: 24 2a07:5980::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:82:2e:83:04:15:1e:0d:01:6e:8b:61:ba:a1:b3:b0:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533 Validity Not Before: Nov 14 11:44:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3385b8b96af2128fc77dd753fc0945a72c7ff905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e3:0e:59:58:b5:2e:1e:1a:6a:ca:78:82:ce: 2c:6f:6c:00:42:8c:4f:f8:e6:6a:f1:15:ae:89:db: b9:00:c9:40:77:a0:06:ec:cf:00:c6:ed:4b:46:30: 67:20:fb:96:c4:04:77:12:23:2c:2d:92:a5:79:25: 8a:c4:cb:bf:30:7a:7c:6c:40:99:3a:04:42:c3:72: d5:ab:c2:8a:23:d7:03:fc:d9:93:cf:44:f4:52:23: cb:03:7c:88:52:e0:3b:ec:ce:bb:46:96:a6:fe:a8: 89:25:85:f1:93:db:4e:61:b3:a1:b2:87:17:5b:bc: 1d:96:71:3b:45:9c:f4:46:a9:79:51:40:b4:72:fc: 6b:a0:f5:ad:a5:c7:81:b3:50:87:b2:c7:3a:3a:07: 6b:37:18:ec:c0:fc:89:ce:91:d0:a1:a8:7c:0a:94: bc:93:8b:e0:21:3b:8b:8b:51:08:13:af:d7:68:20: 4d:9c:cc:39:35:fd:23:ef:dd:69:3e:6a:e4:06:69: 08:f9:ad:dc:c7:7f:b7:6a:e4:d2:8a:9a:61:2a:f4: 44:dd:12:1f:93:40:b2:26:9d:46:ea:62:de:69:b3: 43:a2:95:98:a5:34:8e:dc:32:32:5b:e6:17:1b:8d: 9f:a0:4a:96:84:6a:95:e4:54:47:31:36:73:bd:44: 03:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:85:B8:B9:6A:F2:12:8F:C7:7D:D7:53:FC:09:45:A7:2C:7F:F9:05 X509v3 Authority Key Identifier: keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/M4W4uWryEo_HfddT_AlFpyx_-QU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.224.0/22 45.82.68.0/22 45.82.176.0/22 45.87.0.0/22 45.136.84.0/22 45.137.64.0/22 46.18.107.0/24 46.21.250.0/24 77.220.214.0/23 81.31.197.0/24 91.201.25.0/24 91.208.127.0/24 91.209.226.0/24 91.228.56.0/24 94.124.78.0/24 178.159.38.0/23 178.159.42.0/24 185.23.108.0/24 185.51.121.0/24 185.51.246.0/23 185.107.237.0/24 185.204.109.0/24 185.232.164.0/24 185.235.129.0-185.235.131.255 185.241.52.0/22 185.244.216.0/22 185.250.204.0-185.250.206.255 193.22.21.0/24 193.56.8.0/24 193.163.7.0/24 193.163.113.0/24 194.29.53.0/24 212.8.244.0/24 212.8.246.0/24 212.23.221.0/24 212.86.101.0-212.86.102.255 212.86.108.0/23 212.162.152.0/23 212.162.155.0/24 213.166.68.0/22 IPv6: 2a07:5980::/29 Signature Algorithm: sha256WithRSAEncryption 90:f6:5d:3d:c9:57:49:d1:44:9b:f0:d8:d6:be:f7:91:e3:c7: 05:52:96:c7:37:17:1f:80:7d:71:28:83:c4:a0:b1:6b:f3:f6: 1e:11:16:38:72:f8:74:af:2f:9d:84:8b:fa:bd:57:1e:b0:a4: 5c:da:6e:6a:14:69:8c:fb:47:6d:ed:41:cc:08:01:cb:b7:49: 5b:f4:70:f8:aa:c8:de:79:82:a4:76:72:76:d4:7c:19:89:5a: f0:93:fa:71:a6:43:af:39:b0:b4:85:69:06:f6:88:e9:47:91: dd:1c:d1:72:5e:fa:29:53:11:5a:02:7c:ae:a8:96:9c:2b:4d: d9:2a:60:56:b4:aa:10:79:05:ee:63:3e:22:f4:b6:4b:54:3d: 0e:e8:fe:ae:da:05:a3:a3:fd:58:b1:dd:aa:ce:99:f9:cf:45: 0f:a2:be:4f:f2:9d:a8:54:89:8a:c8:7e:89:21:3a:f0:0b:93: 29:3c:10:ff:e0:0e:ff:d5:94:70:ba:f5:7f:56:25:03:a2:ed: 59:f0:03:07:b1:1d:1b:7b:9e:3f:5b:e1:2a:08:0f:4a:a7:52: a6:ba:b9:7e:ad:51:8f:f4:8a:84:c3:3a:76:16:3f:33:73:31: d2:62:0e:94:66:6f:04:57:0a:41:be:53:96:0d:a4:fd:cd:b2: 32:f5:d7:19 -----BEGIN CERTIFICATE----- MIIGGDCCBQCgAwIBAgISAZqCLoMEFR4NAW6LYbqhs7D0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmY2FkODlkZjFiZjk5YTM2ZjI5MGNjM2VmMGYxZTdiNGQw Mjc1MzMwHhcNMjUxMTE0MTE0NDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzg1YjhiOTZhZjIxMjhmYzc3ZGQ3NTNmYzA5NDVhNzJjN2ZmOTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluMOWVi1Lh4aasp4gs4sb2wAQoxP +OZq8RWuidu5AMlAd6AG7M8Axu1LRjBnIPuWxAR3EiMsLZKleSWKxMu/MHp8bECZ OgRCw3LVq8KKI9cD/NmTz0T0UiPLA3yIUuA77M67Rpam/qiJJYXxk9tOYbOhsocX W7wdlnE7RZz0Rql5UUC0cvxroPWtpceBs1CHssc6OgdrNxjswPyJzpHQoah8CpS8 k4vgITuLi1EIE6/XaCBNnMw5Nf0j791pPmrkBmkI+a3cx3+3auTSipphKvRE3RIf k0CyJp1G6mLeabNDopWYpTSO3DIyW+YXG42foEqWhGqV5FRHMTZzvUQD1wIDAQAB o4IDJDCCAyAwHQYDVR0OBBYEFDOFuLlq8hKPx33XU/wJRacsf/kFMB8GA1UdIwQY MBaAFH/K2J3xv5mjbykMw+8PHntNAnUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjhyWW5mR19tYU52S1F6RDd3OGVlMDBDZFRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85ZjhiMTYtMjg0Zi00NTEyLWIzZGMt MDE1ZDlmMWI0YjUwLzEvTTRXNHVXcnlFb19IZmRkVF9BbEZweXhfLVFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85ZjhiMTYtMjg0Zi00NTEyLWIzZGMtMDE1ZDlmMWI0YjUw LzEvZjhyWW5mR19tYU52S1F6RDd3OGVlMDBDZFRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBOAYIKwYBBQUHAQcBAf8EggEnMIIBIzCCARAEAgABMIIB CAMEAi1R4AMEAi1SRAMEAi1SsAMEAi1XAAMEAi2IVAMEAi2JQAMEAC4SawMEAC4V +gMEAU3c1gMEAFEfxQMEAFvJGQMEAFvQfwMEAFvR4gMEAFvkOAMEAF58TgMEAbKf JgMEALKfKgMEALkXbAMEALkzeQMEAbkz9gMEALlr7QMEALnMbQMEALnopDAMAwQA ueuBAwQCueuAAwQCufE0AwQCufTYMAwDBAK5+swDBAC5+s4DBADBFhUDBADBOAgD BADBowcDBADBo3EDBADCHTUDBADUCPQDBADUCPYDBADUF90wDAMEANRWZQMEANRW ZgMEAdRWbAMEAdSimAMEANSimwMEAtWmRDANBAIAAjAHAwUDKgdZgDANBgkqhkiG 9w0BAQsFAAOCAQEAkPZdPclXSdFEm/DY1r73kePHBVKWxzcXH4B9cSiDxKCxa/P2 HhEWOHL4dK8vnYSL+r1XHrCkXNpuahRpjPtHbe1BzAgBy7dJW/Rw+KrI3nmCpHZy dtR8GYla8JP6caZDrzmwtIVpBvaI6UeR3RzRcl76KVMRWgJ8rqiWnCtN2SpgVrSq EHkF7mM+IvS2S1Q9Duj+rtoFo6P9WLHdqs6Z+c9FD6K+T/KdqFSJish+iSE68AuT KTwQ/+AO/9WUcLr1f1YlA6LtWfADB7EdG3ueP1vhKggPSqdSprq5fq1Rj/SKhMM6 dhY/M3Mx0mIOlGZvBFcKQb5Tlg2k/c2yMvXXGQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:05:57 2025 by rpki-client