This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/r0N3U-zrvFhTjBVltikszWwNgAQ.roa File: r0N3U-zrvFhTjBVltikszWwNgAQ.roa (raw, json) Hash identifier: xF4Koy+yFEXplhuyQLut02ooRfs85dFGHYb0KhnfzS4= Subject key identifier: AF:43:77:53:EC:EB:BC:58:53:8C:15:65:B6:29:2C:CD:6C:0D:80:04 Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094 Certificate serial: 019ADB6F7D2675DCFFDFC7AAF9B88C66190C Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/r0N3U-zrvFhTjBVltikszWwNgAQ.roa Signing time: Mon 01 Dec 2025 19:41:48 +0000 ROA not before: Mon 01 Dec 2025 19:41:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29226 IP address blocks: 155.212.245.0/24 maxlen: 24 155.212.246.0/24 maxlen: 24 155.212.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:db:6f:7d:26:75:dc:ff:df:c7:aa:f9:b8:8c:66:19:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094 Validity Not Before: Dec 1 19:41:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=af437753ecebbc58538c1565b6292ccd6c0d8004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:92:22:f6:fa:d3:ac:64:89:bc:a1:c5:58:97: cd:5e:35:95:12:3a:fc:ed:70:f1:25:53:e9:3b:d8: c4:ce:b3:a6:aa:09:1c:c2:91:8b:f3:0a:e2:e5:ae: af:88:ef:3d:e1:0e:0b:22:b0:26:9b:f7:82:1e:05: 59:05:7f:a0:88:d7:8d:45:ff:32:f1:7c:f5:e8:c6: 34:c3:52:b5:a3:4f:bf:93:4b:cb:8b:34:36:7c:91: 12:9b:8f:0c:fc:f0:d8:37:81:68:aa:5a:59:67:7d: dc:6a:be:17:b5:45:28:cb:26:2f:4a:e2:e5:fc:9a: c8:32:b3:ce:63:b6:7c:2e:cc:c1:16:c9:98:24:33: aa:4e:59:32:ae:98:cf:a4:1a:bb:f3:25:18:f1:e3: da:f8:47:bf:71:b5:32:92:d4:d3:40:19:1a:8c:4d: c7:a8:51:44:9c:ab:60:fa:41:cb:54:c5:0d:15:0d: 1b:b2:82:11:7a:de:b9:80:a7:7c:70:74:ee:17:a0: 44:1d:3f:8e:bf:12:f1:e0:67:74:d2:f7:f1:3a:b0: e5:ff:a2:35:7a:22:6a:51:a9:c3:00:f6:1d:52:93: 49:3b:1f:d2:a7:f1:df:c4:c4:42:70:d9:2c:44:5a: c8:06:0f:29:0f:cd:31:17:6b:30:56:13:bf:a7:29: 44:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:43:77:53:EC:EB:BC:58:53:8C:15:65:B6:29:2C:CD:6C:0D:80:04 X509v3 Authority Key Identifier: keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/r0N3U-zrvFhTjBVltikszWwNgAQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.212.245.0-155.212.247.255 Signature Algorithm: sha256WithRSAEncryption 13:ca:6f:e6:f2:da:dd:99:1c:42:4f:8d:3a:25:f6:77:4f:30: 2d:e4:de:a7:75:fb:2f:5f:eb:50:8f:11:06:84:c9:50:7b:5b: 4f:9f:c7:18:92:e8:32:9a:5a:e7:40:2a:cb:71:9b:40:49:dd: fd:98:6e:41:09:fd:40:0f:ca:7e:ed:7e:5a:c7:bb:16:f0:9f: 48:bc:56:45:f6:24:b3:73:76:47:70:b0:85:90:cb:91:61:70: 63:e9:15:9a:a3:1f:3e:39:68:63:ff:0c:dd:c6:d5:92:07:a4: c6:a9:af:16:46:35:36:ec:a0:17:42:e8:72:23:69:c6:cb:d0: 00:c3:ff:57:8e:14:f3:8c:ca:3a:54:b4:3c:45:e6:1c:0a:94: 63:a3:c8:5e:c3:29:a9:1e:15:8d:66:1e:f8:42:55:25:84:98: b8:55:ce:89:fa:0b:f2:16:c6:5f:1a:9f:b2:36:3d:3a:e7:25: 25:d5:5b:7e:46:7d:a1:32:4d:96:2e:69:b8:76:36:7c:b0:44: 29:b0:53:d2:3e:d7:f2:b2:14:4a:91:d5:dc:1a:38:95:27:63: 06:60:5c:d1:74:fc:3e:f2:01:13:31:e5:97:3b:e3:5d:ce:03: 0d:d0:28:e7:f3:36:1d:61:40:2f:21:b4:6f:18:54:83:c1:3f: 76:a2:29:49 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZrbb30mddz/38eq+biMZhkMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYmU2NWFlMjNmMjA3ZmE2OTUyNTVmNTVhOTA3YWMxNjA4 YmUwOTQwHhcNMjUxMjAxMTk0MTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjQzNzc1M2VjZWJiYzU4NTM4YzE1NjViNjI5MmNjZDZjMGQ4MDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05Ii9vrTrGSJvKHFWJfNXjWVEjr8 7XDxJVPpO9jEzrOmqgkcwpGL8wri5a6viO894Q4LIrAmm/eCHgVZBX+giNeNRf8y 8Xz16MY0w1K1o0+/k0vLizQ2fJESm48M/PDYN4FoqlpZZ33car4XtUUoyyYvSuLl /JrIMrPOY7Z8LszBFsmYJDOqTlkyrpjPpBq78yUY8ePa+Ee/cbUyktTTQBkajE3H qFFEnKtg+kHLVMUNFQ0bsoIRet65gKd8cHTuF6BEHT+OvxLx4Gd00vfxOrDl/6I1 eiJqUanDAPYdUpNJOx/Sp/HfxMRCcNksRFrIBg8pD80xF2swVhO/pylEqQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFK9Dd1Ps67xYU4wVZbYpLM1sDYAEMB8GA1UdIwQY MBaAFF++Za4j8gf6aVJV9VqQesFgi+CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUt NDkyYWIzNzI2ODlkLzEvcjBOM1UtenJ2RmhUakJWbHRpa3N6V3dOZ0FRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUtNDkyYWIzNzI2ODlk LzEvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACb1PUD BAOb1PAwDQYJKoZIhvcNAQELBQADggEBABPKb+by2t2ZHEJPjTol9ndPMC3k3qd1 +y9f61CPEQaEyVB7W0+fxxiS6DKaWudAKstxm0BJ3f2YbkEJ/UAPyn7tflrHuxbw n0i8VkX2JLNzdkdwsIWQy5FhcGPpFZqjHz45aGP/DN3G1ZIHpMaprxZGNTbsoBdC 6HIjacbL0ADD/1eOFPOMyjpUtDxF5hwKlGOjyF7DKakeFY1mHvhCVSWEmLhVzon6 C/IWxl8an7I2PTrnJSXVW35GfaEyTZYuabh2NnywRCmwU9I+1/KyFEqR1dwaOJUn YwZgXNF0/D7yARMx5Zc7413OAw3QKOfzNh1hQC8htG8YVIPBP3aiKUk= -----END CERTIFICATE-----Generated at Sat Dec 6 12:43:56 2025 by rpki-client