This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/x5qW2OF7Y5nDoHmpuktuakwR9g4.roa File: x5qW2OF7Y5nDoHmpuktuakwR9g4.roa (raw, json) Hash identifier: /rnp35BJUcYCzF7eN3DbK+KO3ZjZC/QVwa6hdcfBad4= Subject key identifier: C7:9A:96:D8:E1:7B:63:99:C3:A0:79:A9:BA:4B:6E:6A:4C:11:F6:0E Certificate issuer: /CN=43e0a364131841056d48b2d788ea00ca4b91db56 Certificate serial: 019AF2AA7892658774C3588903BF2BAAC5D3 Authority key identifier: 43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/x5qW2OF7Y5nDoHmpuktuakwR9g4.roa Signing time: Sat 06 Dec 2025 07:57:29 +0000 ROA not before: Sat 06 Dec 2025 07:57:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48254 IP address blocks: 45.8.224.0/24 maxlen: 24 45.8.225.0/24 maxlen: 24 45.8.226.0/24 maxlen: 24 45.8.227.0/24 maxlen: 24 46.247.89.0/24 maxlen: 24 46.247.90.0/24 maxlen: 24 185.146.164.0/24 maxlen: 24 185.146.165.0/24 maxlen: 24 185.146.166.0/24 maxlen: 24 185.146.167.0/24 maxlen: 24 185.151.28.0/24 maxlen: 24 185.151.29.0/24 maxlen: 24 185.151.30.0/24 maxlen: 24 185.151.31.0/24 maxlen: 24 193.176.16.0/24 maxlen: 24 193.176.17.0/24 maxlen: 24 194.38.52.0/24 maxlen: 24 194.38.53.0/24 maxlen: 24 194.38.54.0/24 maxlen: 24 2a07:7800::/29 maxlen: 48 2a07:7800::/48 maxlen: 48 2a07:7800:1::/48 maxlen: 48 2a07:7800:2::/48 maxlen: 48 2a07:7800:3::/48 maxlen: 48 2a07:7800:4::/48 maxlen: 48 2a07:7800:5::/48 maxlen: 48 2a07:7800:6::/48 maxlen: 48 2a07:7800:7::/48 maxlen: 48 2a07:7800:8::/48 maxlen: 48 2a07:7800:9::/48 maxlen: 48 2a07:7800:10::/48 maxlen: 48 2a07:7800:11::/48 maxlen: 48 2a07:7800:12::/48 maxlen: 48 2a07:7800:13::/48 maxlen: 48 2a07:7800:14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:aa:78:92:65:87:74:c3:58:89:03:bf:2b:aa:c5:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43e0a364131841056d48b2d788ea00ca4b91db56 Validity Not Before: Dec 6 07:57:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c79a96d8e17b6399c3a079a9ba4b6e6a4c11f60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b2:db:45:96:ea:80:94:dd:88:a4:9d:97:f3: 1e:84:04:71:79:ce:c7:79:f1:2c:d3:58:73:bb:c3: 2b:b5:fc:b9:5d:32:02:9b:cd:fc:34:53:2d:cf:56: 84:02:32:95:53:be:97:e3:42:98:45:27:2f:8e:85: 5f:b6:a1:80:a3:a7:c5:64:fa:da:1c:3e:30:c1:ed: fe:4c:1f:16:f3:89:68:23:c4:b0:93:5c:46:66:fd: ab:ac:94:ca:27:b6:28:d4:bf:cd:b3:92:64:06:35: c7:8a:bc:66:17:c0:a6:5a:74:1d:64:34:d1:a5:ae: 12:48:e9:16:d8:90:35:3c:83:31:57:48:be:18:77: fb:84:54:70:1c:f0:aa:71:d2:32:86:a5:67:06:48: 13:c9:9f:1d:2c:ed:64:15:71:17:0d:31:c9:27:70: b2:05:20:05:f3:d3:fd:41:fb:f7:91:0a:72:15:d7: be:ad:ab:80:7c:0d:c3:df:ac:a1:73:14:e0:5a:bd: 55:73:7e:f2:a0:fb:96:3f:40:a1:73:dc:ac:fc:b2: f5:b1:35:63:3a:c6:87:6c:6b:23:63:9a:a3:46:f9: f3:e1:6f:9e:21:ba:67:7c:43:09:92:f4:84:70:30: 60:38:f0:45:9a:ed:8b:e0:6e:bc:10:fc:21:5f:a6: b0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9A:96:D8:E1:7B:63:99:C3:A0:79:A9:BA:4B:6E:6A:4C:11:F6:0E X509v3 Authority Key Identifier: keyid:43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/x5qW2OF7Y5nDoHmpuktuakwR9g4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.224.0/22 46.247.89.0-46.247.90.255 185.146.164.0/22 185.151.28.0/22 193.176.16.0/23 194.38.52.0-194.38.54.255 IPv6: 2a07:7800::/29 Signature Algorithm: sha256WithRSAEncryption b9:da:ba:94:69:79:db:7e:21:69:00:db:34:d0:50:56:fb:02: 2a:55:f9:91:2d:38:0b:2e:b7:48:57:96:8f:ab:b0:a0:68:4e: a0:22:4a:8b:21:8f:4a:e0:10:85:6d:f5:50:67:d0:bd:01:b9: 66:ec:a8:7d:9f:27:22:f6:dd:ec:5d:73:70:6d:56:0b:2e:cf: 85:b2:2e:8e:09:cd:3a:9d:0a:01:5f:8e:dc:a6:bf:f5:42:7d: 96:63:69:70:cb:5b:95:d2:17:56:96:8c:85:16:3d:2d:99:d8: fd:98:6f:b5:d0:1b:3a:f2:09:17:76:12:09:17:f6:3d:e9:ae: 39:da:83:7e:28:e0:67:21:61:44:53:fe:72:80:ee:0e:24:73: c9:42:c8:8d:d9:9f:8b:20:48:e1:71:0e:71:86:47:ec:d8:88: 63:95:c1:46:73:8f:66:36:0b:56:5d:55:66:55:2d:d9:68:e8: 23:26:f5:ba:83:35:59:8b:6c:b0:0a:d0:06:78:b3:17:08:e1: 95:c5:1c:c6:08:cd:d8:ed:d3:00:63:3a:2d:60:cf:ad:40:59: a5:4b:56:45:e0:5b:1e:a5:58:eb:1c:06:40:9a:0d:01:0c:cd: 40:18:31:04:61:fb:11:c0:11:b0:1d:fe:0b:dd:c5:07:2d:95: 40:63:b4:dc -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgISAZryqniSZYd0w1iJA78rqsXTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZTBhMzY0MTMxODQxMDU2ZDQ4YjJkNzg4ZWEwMGNhNGI5 MWRiNTYwHhcNMjUxMjA2MDc1NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzlhOTZkOGUxN2I2Mzk5YzNhMDc5YTliYTRiNmU2YTRjMTFmNjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7LbRZbqgJTdiKSdl/MehARxec7H efEs01hzu8Mrtfy5XTICm838NFMtz1aEAjKVU76X40KYRScvjoVftqGAo6fFZPra HD4wwe3+TB8W84loI8Swk1xGZv2rrJTKJ7Yo1L/Ns5JkBjXHirxmF8CmWnQdZDTR pa4SSOkW2JA1PIMxV0i+GHf7hFRwHPCqcdIyhqVnBkgTyZ8dLO1kFXEXDTHJJ3Cy BSAF89P9Qfv3kQpyFde+rauAfA3D36yhcxTgWr1Vc37yoPuWP0Chc9ys/LL1sTVj OsaHbGsjY5qjRvnz4W+eIbpnfEMJkvSEcDBgOPBFmu2L4G68EPwhX6awTQIDAQAB o4ICRjCCAkIwHQYDVR0OBBYEFMealtjhe2OZw6B5qbpLbmpMEfYOMB8GA1UdIwQY MBaAFEPgo2QTGEEFbUiy14jqAMpLkdtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUS1DalpCTVlRUVZ0U0xMWGlPb0F5a3VSMjFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi85Y2JiMDYtYjRkYS00Yzk0LWI0MTgt NGIwODFjYzJiMzlhLzEveDVxVzJPRjdZNW5Eb0htcHVrdHVha3dSOWc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi85Y2JiMDYtYjRkYS00Yzk0LWI0MTgtNGIwODFjYzJiMzlh LzEvUS1DalpCTVlRUVZ0U0xMWGlPb0F5a3VSMjFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFwGCCsGAQUFBwEHAQH/BE0wSzA6BAIAATA0AwQCLQjgMAwD BAAu91kDBAAu91oDBAK5kqQDBAK5lxwDBAHBsBAwDAMEAsImNAMEAMImNjANBAIA AjAHAwUDKgd4ADANBgkqhkiG9w0BAQsFAAOCAQEAudq6lGl5234haQDbNNBQVvsC KlX5kS04Cy63SFeWj6uwoGhOoCJKiyGPSuAQhW31UGfQvQG5ZuyofZ8nIvbd7F1z cG1WCy7PhbIujgnNOp0KAV+O3Ka/9UJ9lmNpcMtbldIXVpaMhRY9LZnY/ZhvtdAb OvIJF3YSCRf2PemuOdqDfijgZyFhRFP+coDuDiRzyULIjdmfiyBI4XEOcYZH7NiI Y5XBRnOPZjYLVl1VZlUt2WjoIyb1uoM1WYtssArQBnizFwjhlcUcxgjN2O3TAGM6 LWDPrUBZpUtWReBbHqVY6xwGQJoNAQzNQBgxBGH7EcARsB3+C93FBy2VQGO03A== -----END CERTIFICATE-----Generated at Sun Dec 7 08:08:44 2025 by rpki-client