This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/hh03zFpevYjY3E83dBgNmLTmAnY.roa File: hh03zFpevYjY3E83dBgNmLTmAnY.roa (raw, json) Hash identifier: jMJgwZh9RPXCIiUSToKAvjp/ihJCeCstbqBegzy2I2M= Subject key identifier: 86:1D:37:CC:5A:5E:BD:88:D8:DC:4F:37:74:18:0D:98:B4:E6:02:76 Certificate issuer: /CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff Certificate serial: 019AE34CBC48CE01676F97AF8C308B8FE105 Authority key identifier: 4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/hh03zFpevYjY3E83dBgNmLTmAnY.roa Signing time: Wed 03 Dec 2025 08:20:48 +0000 ROA not before: Wed 03 Dec 2025 08:20:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57752 IP address blocks: 45.10.45.0/24 maxlen: 24 45.10.46.0/23 maxlen: 23 45.88.68.0/22 maxlen: 24 45.89.152.0/22 maxlen: 22 45.91.144.0/22 maxlen: 22 45.91.146.0/24 maxlen: 24 45.130.236.0/22 maxlen: 22 45.130.236.0/24 maxlen: 24 45.130.237.0/24 maxlen: 24 45.130.238.0/24 maxlen: 24 45.130.239.0/24 maxlen: 24 83.136.148.0/23 maxlen: 23 83.136.150.0/23 maxlen: 23 91.206.10.0/24 maxlen: 24 109.205.64.0/21 maxlen: 21 176.118.172.0/22 maxlen: 22 185.17.56.0/22 maxlen: 22 185.17.56.0/24 maxlen: 24 185.17.57.0/24 maxlen: 24 185.54.36.0/22 maxlen: 22 185.167.220.0/22 maxlen: 22 185.234.48.0/22 maxlen: 22 185.234.49.0/24 maxlen: 24 195.12.37.0/24 maxlen: 24 2a03:dc00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:4c:bc:48:ce:01:67:6f:97:af:8c:30:8b:8f:e1:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff Validity Not Before: Dec 3 08:20:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=861d37cc5a5ebd88d8dc4f3774180d98b4e60276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:59:01:2b:ce:6a:87:2a:13:8d:a5:5b:ab:79: 26:36:f2:e6:50:e7:74:59:3b:69:03:5c:3b:d0:ec: ee:5d:e4:b2:13:fb:cb:f1:af:19:5a:8d:07:1f:49: df:d7:95:8f:d2:cb:2c:26:d9:e1:f9:43:51:fa:58: a2:14:4e:e6:6b:1e:62:cd:e9:65:32:57:f9:85:c4: 2b:ea:b9:e7:04:be:c2:f8:37:7a:84:82:c8:fa:e9: 44:7c:93:71:0f:17:78:70:1b:e3:64:e8:3b:19:d1: af:b5:43:b3:f5:df:a4:55:cc:89:43:69:47:13:27: da:a8:0d:7f:58:16:24:b8:8c:d0:61:27:1a:02:b8: 5b:0a:63:d7:ef:5d:ab:c5:fe:73:af:f8:6c:71:2d: d8:52:6d:a6:4c:59:5c:1a:12:42:60:87:1f:ff:de: 9d:3b:25:fb:32:8b:f5:71:17:4e:4a:c1:8b:d9:fa: 29:a6:72:ab:f0:cd:50:d6:48:4d:af:f6:56:99:7c: 75:1e:5a:2c:cf:0a:45:f6:a3:36:81:9b:22:15:5a: 1f:8c:d1:bf:90:21:14:33:dc:39:45:c4:ca:a4:23: e2:b2:cd:1a:10:6e:35:83:f9:45:ba:65:7b:55:d9: 34:81:9d:a6:52:fd:83:56:95:36:b7:58:f5:f0:31: 16:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1D:37:CC:5A:5E:BD:88:D8:DC:4F:37:74:18:0D:98:B4:E6:02:76 X509v3 Authority Key Identifier: keyid:4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/hh03zFpevYjY3E83dBgNmLTmAnY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.45.0-45.10.47.255 45.88.68.0/22 45.89.152.0/22 45.91.144.0/22 45.130.236.0/22 83.136.148.0/22 91.206.10.0/24 109.205.64.0/21 176.118.172.0/22 185.17.56.0/22 185.54.36.0/22 185.167.220.0/22 185.234.48.0/22 195.12.37.0/24 IPv6: 2a03:dc00::/32 Signature Algorithm: sha256WithRSAEncryption 44:32:be:3a:93:e7:2c:88:d5:5a:32:d5:bb:1f:47:60:ad:2b: 32:d9:0f:c3:0c:46:08:f1:2a:35:8c:3d:bd:32:65:94:96:69: cc:8d:a2:ee:48:38:61:3e:a7:f5:76:26:ac:54:7d:f5:e5:c3: 83:d9:ea:5a:67:f3:5c:b8:13:fd:76:7c:33:f7:c8:62:3e:a7: 40:15:de:c6:bf:ce:88:12:e3:e5:54:06:92:32:23:79:f1:08: c0:2a:bd:f5:4e:36:59:7f:82:5e:92:79:78:53:ac:72:c9:03: 9d:81:cc:9b:70:69:c8:f5:09:52:d0:b3:b8:06:e1:f9:01:1f: 19:be:b5:00:f4:1d:9f:ea:17:7b:0d:65:43:c9:ac:3c:1d:df: 05:1c:64:e9:d9:c0:c7:43:90:e0:f9:ca:99:34:6a:2f:01:8b: eb:81:e6:18:5e:87:43:a9:64:f6:09:52:fe:6f:f7:68:18:57: 64:99:27:55:dd:88:ce:52:60:1c:23:48:43:76:e9:03:d9:0c: 6d:e6:fa:cc:59:e4:46:2a:c5:c1:ec:55:a1:ee:b1:c9:36:b8: 94:34:35:02:bc:51:7a:bf:dd:4e:cb:ee:23:29:d7:f4:48:33: ec:39:79:d0:c0:30:de:a0:c1:19:e9:42:55:ca:dc:95:58:dd: 12:2d:21:09 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgISAZrjTLxIzgFnb5evjDCLj+EFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOTllNGVhZTQ4YTAxYzc4MWZhYWQxMWY2ZDgxYTkxZWEz M2JkZmYwHhcNMjUxMjAzMDgyMDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjFkMzdjYzVhNWViZDg4ZDhkYzRmMzc3NDE4MGQ5OGI0ZTYwMjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1kBK85qhyoTjaVbq3kmNvLmUOd0 WTtpA1w70OzuXeSyE/vL8a8ZWo0HH0nf15WP0sssJtnh+UNR+liiFE7max5izell Mlf5hcQr6rnnBL7C+Dd6hILI+ulEfJNxDxd4cBvjZOg7GdGvtUOz9d+kVcyJQ2lH EyfaqA1/WBYkuIzQYScaArhbCmPX712rxf5zr/hscS3YUm2mTFlcGhJCYIcf/96d OyX7Mov1cRdOSsGL2foppnKr8M1Q1khNr/ZWmXx1HloszwpF9qM2gZsiFVofjNG/ kCEUM9w5RcTKpCPiss0aEG41g/lFumV7Vdk0gZ2mUv2DVpU2t1j18DEWnQIDAQAB o4ICbzCCAmswHQYDVR0OBBYEFIYdN8xaXr2I2NxPN3QYDZi05gJ2MB8GA1UdIwQY MBaAFE+Z5OrkigHHgfqtEfbYGpHqM73/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDVuazZ1U0tBY2VCLXEwUjl0Z2FrZW96dmY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xOWQzMTMtNzc3Yi00MDQ0LWEyMzgt OGI4ZjNmOGQ3MzAzLzEvaGgwM3pGcGV2WWpZM0U4M2RCZ05tTFRtQW5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8xOWQzMTMtNzc3Yi00MDQ0LWEyMzgtOGI4ZjNmOGQ3MzAz LzEvVDVuazZ1U0tBY2VCLXEwUjl0Z2FrZW96dmY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwYgQCAAEwXDAMAwQALQot AwQELQogAwQCLVhEAwQCLVmYAwQCLVuQAwQCLYLsAwQCU4iUAwQAW84KAwQDbc1A AwQCsHasAwQCuRE4AwQCuTYkAwQCuafcAwQCueowAwQAwwwlMA0EAgACMAcDBQAq A9wAMA0GCSqGSIb3DQEBCwUAA4IBAQBEMr46k+csiNVaMtW7H0dgrSsy2Q/DDEYI 8So1jD29MmWUlmnMjaLuSDhhPqf1diasVH315cOD2epaZ/NcuBP9dnwz98hiPqdA Fd7Gv86IEuPlVAaSMiN58QjAKr31TjZZf4Jeknl4U6xyyQOdgcybcGnI9QlS0LO4 BuH5AR8ZvrUA9B2f6hd7DWVDyaw8Hd8FHGTp2cDHQ5Dg+cqZNGovAYvrgeYYXodD qWT2CVL+b/doGFdkmSdV3YjOUmAcI0hDdukD2Qxt5vrMWeRGKsXB7FWh7rHJNriU NDUCvFF6v91Oy+4jKdf0SDPsOXnQwDDeoMEZ6UJVytyVWN0SLSEJ -----END CERTIFICATE-----Generated at Sat Dec 6 14:16:06 2025 by rpki-client