This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/pDcEYeot4lgy_bkjWpL92IIpXPQ.roa File: pDcEYeot4lgy_bkjWpL92IIpXPQ.roa (raw, json) Hash identifier: vcGeqv8PVg2OoSc/Cr515xlb+m+AzD6T+7zvq9R7mH8= Subject key identifier: A4:37:04:61:EA:2D:E2:58:32:FD:B9:23:5A:92:FD:D8:82:29:5C:F4 Certificate issuer: /CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d Certificate serial: 019AB6A3206F74B53A680F35E86EB60CCAFF Authority key identifier: DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/pDcEYeot4lgy_bkjWpL92IIpXPQ.roa Signing time: Mon 24 Nov 2025 16:12:15 +0000 ROA not before: Mon 24 Nov 2025 16:12:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49824 IP address blocks: 45.87.90.0/24 maxlen: 24 45.87.91.0/24 maxlen: 24 62.204.51.0/24 maxlen: 24 95.141.245.0/24 maxlen: 24 176.111.42.0/24 maxlen: 24 176.111.43.0/24 maxlen: 24 212.23.203.0/24 maxlen: 24 2a10:2f40::/48 maxlen: 48 2a10:2f40:1::/48 maxlen: 48 2a10:2f40:2::/48 maxlen: 48 2a10:2f40:3::/48 maxlen: 48 2a10:2f40:4::/48 maxlen: 48 2a10:2f40:5::/48 maxlen: 48 2a10:2f40:9::/48 maxlen: 48 2a10:2f40:a::/48 maxlen: 48 2a10:2f40:b::/48 maxlen: 48 2a10:2f40:c::/48 maxlen: 48 2a10:2f40:d::/48 maxlen: 48 2a10:2f40:1a::/48 maxlen: 48 2a10:2f40:d1::/48 maxlen: 48 2a10:2f40:d2::/48 maxlen: 48 2a10:2f40:d3::/48 maxlen: 48 2a10:2f40:d4::/48 maxlen: 48 2a14:7280::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:a3:20:6f:74:b5:3a:68:0f:35:e8:6e:b6:0c:ca:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d Validity Not Before: Nov 24 16:12:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a4370461ea2de25832fdb9235a92fdd882295cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:65:fb:a3:1b:4e:d3:53:ef:88:4c:51:fa:81: 21:58:2f:43:49:8b:22:98:82:1b:08:a8:99:fe:77: 84:8d:37:f5:29:16:53:0a:c7:66:51:6a:60:02:16: 1f:7a:30:3e:09:69:86:d1:6b:e8:a9:5e:ad:ab:95: 8a:e3:db:a1:89:d0:4f:93:72:32:5f:b4:08:01:f0: 86:10:5e:06:8f:79:73:86:05:1a:6c:4e:fc:fa:b4: 41:0a:63:9c:7a:73:13:95:c9:bb:64:e1:34:d2:a3: 12:49:f0:28:c5:9a:39:fa:4a:13:7c:29:d8:b3:d3: b9:1a:1f:1d:6a:ac:be:3b:be:99:9a:a2:19:2e:c6: d7:48:10:c4:29:bd:2e:01:3c:1b:99:0b:12:52:1a: 7b:c2:3f:7b:9d:e2:13:9c:08:67:af:93:dd:2f:b1: 4e:01:6e:94:18:9d:7e:ee:e5:73:dd:84:19:01:f7: 32:1c:98:58:66:23:71:e0:ba:90:81:b3:e6:9f:b3: 66:27:52:33:3f:4f:10:e6:7d:bf:be:47:85:91:9e: ea:25:54:d8:38:6b:c5:d4:75:11:02:b2:11:e1:b1: a5:ae:71:38:c6:4b:60:09:81:c6:d2:0d:2d:01:f4: d2:53:6a:46:b5:b4:23:75:85:a1:33:7f:f3:00:87: 03:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:37:04:61:EA:2D:E2:58:32:FD:B9:23:5A:92:FD:D8:82:29:5C:F4 X509v3 Authority Key Identifier: keyid:DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/pDcEYeot4lgy_bkjWpL92IIpXPQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.90.0/23 62.204.51.0/24 95.141.245.0/24 176.111.42.0/23 212.23.203.0/24 IPv6: 2a10:2f40::-2a10:2f40:5:ffff:ffff:ffff:ffff:ffff 2a10:2f40:9::-2a10:2f40:d:ffff:ffff:ffff:ffff:ffff 2a10:2f40:1a::/48 2a10:2f40:d1::-2a10:2f40:d4:ffff:ffff:ffff:ffff:ffff 2a14:7280::/29 Signature Algorithm: sha256WithRSAEncryption c3:6d:1e:75:c4:fc:a2:e9:a0:7f:6c:a3:45:a0:25:7d:ab:7c: 51:39:bb:25:0f:e2:47:8c:a2:46:57:b8:99:e9:a0:ef:b1:0c: c6:af:7e:3b:86:f4:41:b5:3f:7b:bc:59:6c:19:f1:0e:d1:a3: 9a:d3:12:95:ac:77:f0:cc:30:3a:b8:7b:1e:2a:5e:2c:f9:b2: 9c:74:97:5d:83:2b:b6:46:74:da:9f:46:42:8f:ad:87:d6:48: 86:d0:27:6c:28:a9:11:31:3d:50:c5:e6:0f:59:1c:46:1c:45: ad:54:12:f1:7d:f8:47:cb:c7:e0:8e:07:b3:8b:4a:61:fc:41: fc:03:99:5f:f0:99:44:d1:84:e7:e7:df:49:ba:a9:31:cd:6c: 2d:21:63:0a:18:35:da:b8:fe:f0:0c:d8:65:ff:01:da:ba:65: 1c:8d:54:06:53:24:13:77:b4:f3:1b:08:31:5e:17:a2:ab:90: 09:46:18:74:f9:14:a9:5c:7e:38:fe:61:00:41:4f:da:65:18: ca:b4:75:d0:ef:9a:e5:e4:64:e4:e7:a8:2f:8e:37:34:d0:89: 4d:d4:48:d2:99:57:e2:ad:2a:bd:36:60:a7:ee:a7:dd:cc:4d: c3:5a:73:cb:63:e3:6e:08:b7:24:02:d2:b2:b3:26:35:81:1b: a5:c5:19:58 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgISAZq2oyBvdLU6aA816G62DMr/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMGJkZTE0Njc4OTVjNmYzYTQ3MTk3ZWFjNThjYTEzYWU0 YmI3OGQwHhcNMjUxMTI0MTYxMjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDM3MDQ2MWVhMmRlMjU4MzJmZGI5MjM1YTkyZmRkODgyMjk1Y2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2X7oxtO01PviExR+oEhWC9DSYsi mIIbCKiZ/neEjTf1KRZTCsdmUWpgAhYfejA+CWmG0WvoqV6tq5WK49uhidBPk3Iy X7QIAfCGEF4Gj3lzhgUabE78+rRBCmOcenMTlcm7ZOE00qMSSfAoxZo5+koTfCnY s9O5Gh8daqy+O76ZmqIZLsbXSBDEKb0uATwbmQsSUhp7wj97neITnAhnr5PdL7FO AW6UGJ1+7uVz3YQZAfcyHJhYZiNx4LqQgbPmn7NmJ1IzP08Q5n2/vkeFkZ7qJVTY OGvF1HURArIR4bGlrnE4xktgCYHG0g0tAfTSU2pGtbQjdYWhM3/zAIcDZQIDAQAB o4ICdDCCAnAwHQYDVR0OBBYEFKQ3BGHqLeJYMv25I1qS/diCKVz0MB8GA1UdIwQY MBaAFNwL3hRniVxvOkcZfqxYyhOuS7eNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0F2ZUZHZUpYRzg2UnhsLXJGaktFNjVMdDQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jZjA2M2YtOTQ5My00NmYxLWFjZDEt MzFjN2ZiNDcxNWY2LzEvcERjRVllb3Q0bGd5X2JraldwTDkySUlwWFBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9jZjA2M2YtOTQ5My00NmYxLWFjZDEtMzFjN2ZiNDcxNWY2 LzEvM0F2ZUZHZUpYRzg2UnhsLXJGaktFNjVMdDQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGJBggrBgEFBQcBBwEB/wR6MHgwJAQCAAEwHgMEAS1XWgME AD7MMwMEAF+N9QMEAbBvKgMEANQXyzBQBAIAAjBKMBADBQYqEC9AAwcBKhAvQAAE MBIDBwAqEC9AAAkDBwEqEC9AAAwDBwAqEC9AABowEgMHACoQL0AA0QMHACoQL0AA 1AMFAyoUcoAwDQYJKoZIhvcNAQELBQADggEBAMNtHnXE/KLpoH9so0WgJX2rfFE5 uyUP4keMokZXuJnpoO+xDMavfjuG9EG1P3u8WWwZ8Q7Ro5rTEpWsd/DMMDq4ex4q Xiz5spx0l12DK7ZGdNqfRkKPrYfWSIbQJ2woqRExPVDF5g9ZHEYcRa1UEvF9+EfL x+COB7OLSmH8QfwDmV/wmUTRhOfn30m6qTHNbC0hYwoYNdq4/vAM2GX/Adq6ZRyN VAZTJBN3tPMbCDFeF6KrkAlGGHT5FKlcfjj+YQBBT9plGMq0ddDvmuXkZOTnqC+O NzTQiU3USNKZV+KtKr02YKfup93MTcNac8tj424ItyQC0rKzJjWBG6XFGVg= -----END CERTIFICATE-----Generated at Sat Dec 6 18:23:37 2025 by rpki-client