This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/fdFl2XiI4wH-piEVhk7zyyfq2eg.roa File: fdFl2XiI4wH-piEVhk7zyyfq2eg.roa (raw, json) Hash identifier: 5I2+lvYpLwq3Mh4GrkyhIlwpMSOtqZJ0BwNyT92NYLU= Subject key identifier: 7D:D1:65:D9:78:88:E3:01:FE:A6:21:15:86:4E:F3:CB:27:EA:D9:E8 Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d Certificate serial: 019AC5A943F0C698E89758763290AE9DD145 Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/fdFl2XiI4wH-piEVhk7zyyfq2eg.roa Signing time: Thu 27 Nov 2025 14:13:15 +0000 ROA not before: Thu 27 Nov 2025 14:13:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29314 IP address blocks: 31.6.128.0/18 maxlen: 18 31.6.192.0/19 maxlen: 19 31.6.218.0/24 maxlen: 24 31.42.16.0/20 maxlen: 20 37.131.128.0/19 maxlen: 19 37.190.128.0/17 maxlen: 17 37.190.144.0/20 maxlen: 20 37.190.224.0/20 maxlen: 20 46.186.48.0/20 maxlen: 20 46.186.64.0/19 maxlen: 19 62.61.32.0/19 maxlen: 19 62.141.192.0/18 maxlen: 18 80.244.128.0/19 maxlen: 19 80.245.176.0/20 maxlen: 20 81.190.0.0/16 maxlen: 16 82.115.64.0/19 maxlen: 19 83.68.64.0/19 maxlen: 19 84.38.80.0/20 maxlen: 20 85.117.0.0/19 maxlen: 19 87.116.192.0/18 maxlen: 18 89.17.224.0/19 maxlen: 19 89.228.0.0/16 maxlen: 16 89.229.0.0/16 maxlen: 16 89.229.32.0/20 maxlen: 20 89.229.64.0/19 maxlen: 19 89.229.192.0/20 maxlen: 20 89.230.0.0/16 maxlen: 16 89.231.0.0/16 maxlen: 16 89.231.96.0/19 maxlen: 19 92.42.112.0/21 maxlen: 21 93.94.184.0/21 maxlen: 21 94.78.128.0/18 maxlen: 18 94.251.128.0/17 maxlen: 17 94.251.168.0/24 maxlen: 24 95.129.224.0/21 maxlen: 21 95.174.32.0/19 maxlen: 19 176.107.112.0/21 maxlen: 21 176.221.96.0/19 maxlen: 19 185.31.184.0/22 maxlen: 22 193.43.240.0/22 maxlen: 22 193.106.76.0/22 maxlen: 22 193.200.118.0/23 maxlen: 23 194.116.132.0/23 maxlen: 23 194.149.240.0/24 maxlen: 24 195.93.134.0/23 maxlen: 23 195.93.222.0/23 maxlen: 23 213.136.224.0/19 maxlen: 19 217.70.48.0/20 maxlen: 20 217.75.48.0/20 maxlen: 20 217.144.192.0/19 maxlen: 19 217.172.224.0/19 maxlen: 19 2a00:bde0::/34 maxlen: 34 2a00:bde0:4000::/34 maxlen: 34 2a00:bde0:8000::/34 maxlen: 34 2a00:bde0:c000::/34 maxlen: 34 2a02:2a40::/32 maxlen: 32 2a02:2a40::/34 maxlen: 34 2a02:2a40:4000::/34 maxlen: 34 2a02:2a40:8000::/34 maxlen: 34 2a02:2a40:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c5:a9:43:f0:c6:98:e8:97:58:76:32:90:ae:9d:d1:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d Validity Not Before: Nov 27 14:13:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7dd165d97888e301fea62115864ef3cb27ead9e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ec:89:68:45:4f:d8:03:2a:28:59:68:2e:55: 4f:c6:79:9e:91:f3:03:68:78:46:28:37:22:5e:5c: 3a:d2:da:6c:fd:37:57:f1:a8:8e:02:85:ad:c6:b7: 4d:db:9e:ef:24:ea:7f:f6:ed:54:39:7e:f3:36:de: 9e:f6:f7:00:d8:c9:b0:6e:e3:61:05:64:9e:3a:43: 75:8a:fc:a8:f0:18:13:50:64:b9:fb:bf:4b:f9:69: 8d:06:af:d2:fa:7f:98:83:14:c1:00:08:79:b0:8e: 1b:95:e8:d3:48:dc:93:73:a7:d2:76:80:38:4f:e7: 5b:1c:2e:6c:d2:cf:d3:ad:c8:c1:2b:5f:77:32:95: 06:e1:20:68:84:2f:ef:22:0f:38:45:bc:73:dc:35: fd:cc:3b:fb:ab:0a:3e:4c:a4:cb:d7:c9:3f:3c:01: 1b:ef:27:dd:15:b7:56:16:30:ce:07:55:68:8b:68: 93:1e:f0:3a:ab:b4:ce:70:d6:50:36:58:07:42:0b: eb:32:4c:34:fd:03:0c:0b:b0:f4:05:39:e8:0e:09: 0d:d9:8a:75:55:8f:e0:d5:75:3c:7f:ae:3b:49:4b: 9a:88:83:72:bf:ac:aa:5a:81:8c:45:f3:37:95:ee: 98:ee:f2:f0:34:a5:72:3a:47:87:5a:c8:81:0a:88: 1f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D1:65:D9:78:88:E3:01:FE:A6:21:15:86:4E:F3:CB:27:EA:D9:E8 X509v3 Authority Key Identifier: keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/fdFl2XiI4wH-piEVhk7zyyfq2eg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.6.128.0-31.6.223.255 31.42.16.0/20 37.131.128.0/19 37.190.128.0/17 46.186.48.0-46.186.95.255 62.61.32.0/19 62.141.192.0/18 80.244.128.0/19 80.245.176.0/20 81.190.0.0/16 82.115.64.0/19 83.68.64.0/19 84.38.80.0/20 85.117.0.0/19 87.116.192.0/18 89.17.224.0/19 89.228.0.0/14 92.42.112.0/21 93.94.184.0/21 94.78.128.0/18 94.251.128.0/17 95.129.224.0/21 95.174.32.0/19 176.107.112.0/21 176.221.96.0/19 185.31.184.0/22 193.43.240.0/22 193.106.76.0/22 193.200.118.0/23 194.116.132.0/23 194.149.240.0/24 195.93.134.0/23 195.93.222.0/23 213.136.224.0/19 217.70.48.0/20 217.75.48.0/20 217.144.192.0/19 217.172.224.0/19 IPv6: 2a00:bde0::/32 2a02:2a40::/32 Signature Algorithm: sha256WithRSAEncryption 2b:7a:0c:86:2c:a8:9f:9d:06:62:27:7a:6b:a6:f1:be:68:30: c7:3b:c8:11:96:f5:84:42:2e:f1:37:7d:62:30:81:68:d9:32: e6:cf:72:2d:27:f6:ce:4d:dc:b0:89:a9:8c:7e:3d:e5:3e:b7: 21:1d:c1:24:0a:57:12:31:ff:ed:75:32:af:78:ea:33:e9:1e: 25:b6:1b:80:9e:a6:ea:fb:c2:89:ba:70:a3:0c:08:7c:bf:43: a6:a2:4c:df:ec:44:30:c3:47:02:6d:5a:68:12:5d:f0:8e:b4: 20:04:51:7f:b1:9e:d8:a9:dd:e2:bb:19:0c:3d:5c:20:f7:c5: a7:7e:f9:51:5b:64:d9:28:36:0b:8b:e2:31:79:ae:e4:cf:1a: 33:7b:e3:10:ff:17:51:6f:36:e7:3d:8d:9f:71:26:67:b8:e4: c8:fd:2e:b7:f8:38:7f:f7:16:00:db:43:7e:71:52:65:c1:e7: 64:38:a9:e2:4c:f4:ec:75:d3:e8:35:0c:68:8c:fa:9a:6e:fd: 5b:31:c5:76:46:84:13:d6:d9:f3:55:9a:b9:03:ec:19:43:49: 6b:15:9a:d8:88:df:63:7d:bd:c7:04:14:7a:ca:a9:53:2c:c8: 42:24:c0:29:50:3e:7e:7e:a5:47:e5:be:15:43:7e:88:9a:16: 0f:46:0d:0b -----BEGIN CERTIFICATE----- MIIGBzCCBO+gAwIBAgISAZrFqUPwxpjol1h2MpCundFFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMTVkZjY4OGMzYWVhZTNmNjg1ZWQ0NGIzOTZjMjE5ODM5 NTg2MWQwHhcNMjUxMTI3MTQxMzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGQxNjVkOTc4ODhlMzAxZmVhNjIxMTU4NjRlZjNjYjI3ZWFkOWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+yJaEVP2AMqKFloLlVPxnmekfMD aHhGKDciXlw60tps/TdX8aiOAoWtxrdN257vJOp/9u1UOX7zNt6e9vcA2MmwbuNh BWSeOkN1ivyo8BgTUGS5+79L+WmNBq/S+n+YgxTBAAh5sI4blejTSNyTc6fSdoA4 T+dbHC5s0s/TrcjBK193MpUG4SBohC/vIg84Rbxz3DX9zDv7qwo+TKTL18k/PAEb 7yfdFbdWFjDOB1Voi2iTHvA6q7TOcNZQNlgHQgvrMkw0/QMMC7D0BTnoDgkN2Yp1 VY/g1XU8f647SUuaiINyv6yqWoGMRfM3le6Y7vLwNKVyOkeHWsiBCogfeQIDAQAB o4IDEzCCAw8wHQYDVR0OBBYEFH3RZdl4iOMB/qYhFYZO88sn6tnoMB8GA1UdIwQY MBaAFE4V32iMOurj9oXtRLOWwhmDlYYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGhYZmFJdzY2dVAyaGUxRXM1YkNHWU9WaGgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wYmY3YWItNWFhYi00MzM3LWEwMmEt OGE2ZTU1NDE5NmJiLzEvZmRGbDJYaUk0d0gtcGlFVmhrN3p5eWZxMmVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wYmY3YWItNWFhYi00MzM3LWEwMmEtOGE2ZTU1NDE5NmJi LzEvVGhYZmFJdzY2dVAyaGUxRXM1YkNHWU9WaGgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBJwYIKwYBBQUHAQcBAf8EggEWMIIBEjCB+QQCAAEwgfIw DAMEBx8GgAMEBR8GwAMEBB8qEAMEBSWDgAMEByW+gDAMAwQELrowAwQFLrpAAwQF Pj0gAwQGPo3AAwQFUPSAAwQEUPWwAwMAUb4DBAVSc0ADBAVTREADBARUJlADBAVV dQADBAZXdMADBAVZEeADAwJZ5AMEA1wqcAMEA11euAMEBl5OgAMEB177gAMEA1+B 4AMEBV+uIAMEA7BrcAMEBbDdYAMEArkfuAMEAsEr8AMEAsFqTAMEAcHIdgMEAcJ0 hAMEAMKV8AMEAcNdhgMEAcNd3gMEBdWI4AMEBNlGMAMEBNlLMAMEBdmQwAMEBdms 4DAUBAIAAjAOAwUAKgC94AMFACoCKkAwDQYJKoZIhvcNAQELBQADggEBACt6DIYs qJ+dBmInemum8b5oMMc7yBGW9YRCLvE3fWIwgWjZMubPci0n9s5N3LCJqYx+PeU+ tyEdwSQKVxIx/+11Mq946jPpHiW2G4Cepur7wom6cKMMCHy/Q6aiTN/sRDDDRwJt WmgSXfCOtCAEUX+xntip3eK7GQw9XCD3xad++VFbZNkoNguL4jF5ruTPGjN74xD/ F1FvNuc9jZ9xJme45Mj9Lrf4OH/3FgDbQ35xUmXB52Q4qeJM9Ox10+g1DGiM+ppu /VsxxXZGhBPW2fNVmrkD7BlDSWsVmtiI32N9vccEFHrKqVMsyEIkwClQPn5+pUfl vhVDfoiaFg9GDQs= -----END CERTIFICATE-----Generated at Sat Dec 6 18:08:50 2025 by rpki-client