This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/s4hytmC2G21PHEbd4LTjQfhFZcs.roa File: s4hytmC2G21PHEbd4LTjQfhFZcs.roa (raw, json) Hash identifier: Pnwoi9rBFykVBo/ThZ/v0+2Dp+7Heq2e7rNM+trE81Q= Subject key identifier: B3:88:72:B6:60:B6:1B:6D:4F:1C:46:DD:E0:B4:E3:41:F8:45:65:CB Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Certificate serial: 019A9E2A2D4CF54617A664B8F8C67C3A3201 Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/s4hytmC2G21PHEbd4LTjQfhFZcs.roa Signing time: Wed 19 Nov 2025 22:09:15 +0000 ROA not before: Wed 19 Nov 2025 22:09:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59504 IP address blocks: 45.142.208.0/24 maxlen: 24 45.142.209.0/24 maxlen: 24 45.142.211.0/24 maxlen: 24 45.151.136.0/22 maxlen: 22 45.151.136.0/24 maxlen: 24 45.151.137.0/24 maxlen: 24 80.76.40.0/24 maxlen: 24 81.22.193.0/24 maxlen: 24 83.171.240.0/24 maxlen: 24 84.54.37.0/24 maxlen: 24 84.54.39.0/24 maxlen: 24 95.215.108.0/23 maxlen: 23 95.215.110.0/23 maxlen: 23 185.42.26.0/24 maxlen: 24 185.118.64.0/22 maxlen: 22 185.118.64.0/24 maxlen: 24 185.118.65.0/24 maxlen: 24 185.118.66.0/23 maxlen: 23 185.118.66.0/24 maxlen: 24 185.118.67.0/24 maxlen: 24 185.156.176.0/22 maxlen: 22 185.156.176.0/24 maxlen: 24 185.156.177.0/24 maxlen: 24 185.156.178.0/23 maxlen: 23 185.156.178.0/24 maxlen: 24 185.156.179.0/24 maxlen: 24 185.177.113.0/24 maxlen: 24 185.177.115.0/24 maxlen: 24 185.197.72.0/24 maxlen: 24 185.197.73.0/24 maxlen: 24 185.220.32.0/24 maxlen: 24 185.220.33.0/24 maxlen: 24 185.220.34.0/24 maxlen: 24 185.220.35.0/24 maxlen: 24 185.230.140.0/23 maxlen: 23 185.230.142.0/24 maxlen: 24 185.246.116.0/24 maxlen: 24 185.246.117.0/24 maxlen: 24 185.246.119.0/24 maxlen: 24 185.254.188.0/24 maxlen: 24 185.254.189.0/24 maxlen: 24 185.254.190.0/24 maxlen: 24 193.38.232.0/23 maxlen: 23 193.38.234.0/24 maxlen: 24 193.150.70.0/24 maxlen: 24 194.26.210.0/24 maxlen: 24 194.113.104.0/24 maxlen: 24 194.113.104.114/32 maxlen: 32 194.113.107.0/24 maxlen: 24 2a05:fb41::/32 maxlen: 32 2a05:fb42::/32 maxlen: 32 2a05:fb44::/32 maxlen: 32 2a05:fb45::/32 maxlen: 32 2a07:14c0::/48 maxlen: 48 2a07:14c0:1::/48 maxlen: 48 2a07:14c0:1000::/36 maxlen: 36 2a07:14c0:3000::/36 maxlen: 36 2a07:14c0:4000::/36 maxlen: 36 2a07:14c0:5000::/36 maxlen: 36 2a07:14c0:6000::/36 maxlen: 36 2a07:14c0:d000::/36 maxlen: 36 2a07:14c1::/32 maxlen: 32 2a07:14c2::/32 maxlen: 32 2a07:14c6::/32 maxlen: 32 2a07:14c7::/32 maxlen: 32 2a0a:4780::/32 maxlen: 32 2a0a:4781::/32 maxlen: 32 2a0a:4782::/32 maxlen: 32 2a0a:4783::/32 maxlen: 32 2a0a:4784::/32 maxlen: 32 2a0a:4785::/32 maxlen: 32 2a0c:2103::/32 maxlen: 32 2a0c:5241::/32 maxlen: 32 2a0c:5245::/32 maxlen: 32 2a0c:5247:7000::/36 maxlen: 36 2a0c:5247:c000::/36 maxlen: 36 2a0c:5247:d000::/36 maxlen: 36 2a0c:5247:e000::/36 maxlen: 36 2a0c:5247:f000::/36 maxlen: 36 2a0d:60c0::/32 maxlen: 32 2a0d:60c1::/32 maxlen: 32 2a0d:60c3::/32 maxlen: 32 2a0d:7740::/32 maxlen: 32 2a0d:7747::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9e:2a:2d:4c:f5:46:17:a6:64:b8:f8:c6:7c:3a:32:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Validity Not Before: Nov 19 22:09:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b38872b660b61b6d4f1c46dde0b4e341f84565cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:be:89:4f:a8:3b:74:87:3f:db:31:1a:a9:96: b3:92:d8:27:7e:17:86:73:03:ba:f7:19:c8:38:32: 94:95:68:12:cf:2f:07:82:10:77:11:89:7e:40:fd: 2e:fb:a0:29:91:84:aa:10:96:34:de:fb:9d:0b:af: 9f:2c:0c:eb:c0:52:e9:3d:59:76:c0:df:dc:b0:2b: c4:74:5c:2b:a3:69:5e:32:a2:74:71:ed:f1:f9:a7: 5e:db:19:be:5f:fd:b2:f8:82:75:f7:6c:1e:a8:f0: f2:b0:c1:0f:88:de:21:a9:5f:70:d6:b4:c4:9a:7a: ae:2b:21:4b:62:c7:bd:77:e5:33:76:58:0f:47:d4: fd:be:50:01:96:aa:59:72:44:8e:75:9c:f0:37:9f: 7f:54:eb:03:28:82:89:eb:0c:7b:96:f6:f7:65:51: bf:ae:7e:fa:97:6e:70:18:d3:bb:70:aa:27:2d:73: c8:84:94:9a:68:f9:08:c6:b8:cb:12:fc:52:fd:a2: 74:4d:d5:13:c5:8f:0f:0e:cd:65:80:62:23:61:e3: ee:39:03:75:6a:5b:48:d6:26:6c:3e:62:53:f8:8d: cb:ab:40:83:a4:83:62:92:ee:3d:e5:f6:93:99:3f: 41:07:b4:28:71:e4:1c:6d:3c:57:ca:82:30:43:b7: e1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:88:72:B6:60:B6:1B:6D:4F:1C:46:DD:E0:B4:E3:41:F8:45:65:CB X509v3 Authority Key Identifier: keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/s4hytmC2G21PHEbd4LTjQfhFZcs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.208.0/23 45.142.211.0/24 45.151.136.0/22 80.76.40.0/24 81.22.193.0/24 83.171.240.0/24 84.54.37.0/24 84.54.39.0/24 95.215.108.0/22 185.42.26.0/24 185.118.64.0/22 185.156.176.0/22 185.177.113.0/24 185.177.115.0/24 185.197.72.0/23 185.220.32.0/22 185.230.140.0-185.230.142.255 185.246.116.0/23 185.246.119.0/24 185.254.188.0-185.254.190.255 193.38.232.0-193.38.234.255 193.150.70.0/24 194.26.210.0/24 194.113.104.0/24 194.113.107.0/24 IPv6: 2a05:fb41::-2a05:fb42:ffff:ffff:ffff:ffff:ffff:ffff 2a05:fb44::/31 2a07:14c0::/47 2a07:14c0:1000::/36 2a07:14c0:3000::-2a07:14c0:6fff:ffff:ffff:ffff:ffff:ffff 2a07:14c0:d000::/36 2a07:14c1::-2a07:14c2:ffff:ffff:ffff:ffff:ffff:ffff 2a07:14c6::/31 2a0a:4780::-2a0a:4785:ffff:ffff:ffff:ffff:ffff:ffff 2a0c:2103::/32 2a0c:5241::/32 2a0c:5245::/32 2a0c:5247:7000::/36 2a0c:5247:c000::/34 2a0d:60c0::/31 2a0d:60c3::/32 2a0d:7740::/32 2a0d:7747::/32 Signature Algorithm: sha256WithRSAEncryption 74:cf:de:e4:c1:5a:34:5d:7b:a4:4d:c2:30:5b:24:37:f0:5b: 3c:9e:a8:aa:22:28:ac:f3:0b:6f:ea:ec:81:bc:8f:78:45:ad: 0c:db:46:5b:45:2d:5d:ca:e4:c0:f1:2c:c7:a0:0f:60:f4:00: 0b:62:35:14:35:c4:4a:67:2b:c5:9a:0d:8b:bd:23:71:ec:42: fe:da:8a:10:eb:38:2f:56:6b:89:80:d8:f2:fa:16:96:66:77: b8:64:56:0c:1e:ef:11:0e:2b:92:49:a4:d9:81:60:da:c1:56: 12:00:32:d3:32:a6:da:9e:1e:ad:38:72:c2:83:05:69:9b:c6: 76:76:65:31:c3:bf:2b:c9:be:a8:9f:83:e2:0d:a4:f4:11:c9: 4b:8f:47:97:2a:b7:98:da:9a:e3:6c:52:8b:22:92:49:7b:21: 11:38:64:72:6b:c1:12:4b:94:23:7d:5c:20:ec:89:24:15:2a: c7:35:90:b7:6e:22:21:f1:1c:e4:d4:81:7d:74:56:5c:a9:bf: be:4c:cd:ed:9e:d0:8f:ea:51:88:34:d1:ba:f0:03:b4:d4:de: cd:2e:3c:1b:2b:1c:34:2d:de:4e:f6:54:9b:33:49:60:3f:cd: fc:7f:dd:be:ab:26:0a:90:cf:a8:79:29:51:50:e4:90:b1:60: 2a:d2:94:df -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgISAZqeKi1M9UYXpmS4+MZ8OjIBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3 NzliYjEwHhcNMjUxMTE5MjIwOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzg4NzJiNjYwYjYxYjZkNGYxYzQ2ZGRlMGI0ZTM0MWY4NDU2NWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq76JT6g7dIc/2zEaqZazktgnfheG cwO69xnIODKUlWgSzy8HghB3EYl+QP0u+6ApkYSqEJY03vudC6+fLAzrwFLpPVl2 wN/csCvEdFwro2leMqJ0ce3x+ade2xm+X/2y+IJ192weqPDysMEPiN4hqV9w1rTE mnquKyFLYse9d+UzdlgPR9T9vlABlqpZckSOdZzwN59/VOsDKIKJ6wx7lvb3ZVG/ rn76l25wGNO7cKonLXPIhJSaaPkIxrjLEvxS/aJ0TdUTxY8PDs1lgGIjYePuOQN1 altI1iZsPmJT+I3Lq0CDpINiku495faTmT9BB7QoceQcbTxXyoIwQ7fhvQIDAQAB o4IDbTCCA2kwHQYDVR0OBBYEFLOIcrZgthttTxxG3eC040H4RWXLMB8GA1UdIwQY MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt NmI0MzcyNjAyMDk2LzEvczRoeXRtQzJHMjFQSEViZDRMVGpRZmhGWmNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2 LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBgQYIKwYBBQUHAQcBAf8EggFwMIIBbDCBtQQCAAEwga4D BAEtjtADBAAtjtMDBAItl4gDBABQTCgDBABRFsEDBABTq/ADBABUNiUDBABUNicD BAJf12wDBAC5KhoDBAK5dkADBAK5nLADBAC5sXEDBAC5sXMDBAG5xUgDBAK53CAw DAMEArnmjAMEALnmjgMEAbn2dAMEALn2dzAMAwQCuf68AwQAuf6+MAwDBAPBJugD BADBJuoDBADBlkYDBADCGtIDBADCcWgDBADCcWswgbEEAgACMIGqMA4DBQAqBftB AwUAKgX7QgMFASoF+0QDBwEqBxTAAAADBgQqBxTAEDAQAwYEKgcUwDADBgQqBxTA YAMGBCoHFMDQMA4DBQAqBxTBAwUAKgcUwgMFASoHFMYwDgMFByoKR4ADBQEqCkeE AwUAKgwhAwMFACoMUkEDBQAqDFJFAwYEKgxSR3ADBgYqDFJHwAMFASoNYMADBQAq DWDDAwUAKg13QAMFACoNd0cwDQYJKoZIhvcNAQELBQADggEBAHTP3uTBWjRde6RN wjBbJDfwWzyeqKoiKKzzC2/q7IG8j3hFrQzbRltFLV3K5MDxLMegD2D0AAtiNRQ1 xEpnK8WaDYu9I3HsQv7aihDrOC9Wa4mA2PL6FpZmd7hkVgwe7xEOK5JJpNmBYNrB VhIAMtMyptqeHq04csKDBWmbxnZ2ZTHDvyvJvqifg+INpPQRyUuPR5cqt5jamuNs Uosikkl7IRE4ZHJrwRJLlCN9XCDsiSQVKsc1kLduIiHxHOTUgX10Vlypv75Mze2e 0I/qUYg00brwA7TU3s0uPBsrHDQt3k72VJszSWA/zfx/3b6rJgqQz6h5KVFQ5JCx YCrSlN8= -----END CERTIFICATE-----Generated at Sat Dec 6 18:47:19 2025 by rpki-client