This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/rcDj_gzVqEGnWxyFh2uHR9qUtN4.roa File: rcDj_gzVqEGnWxyFh2uHR9qUtN4.roa (raw, json) Hash identifier: vMZLTAcjN1T2lc6mDfUwyn2YTO5QFTYoYEhTJHBI/0s= Subject key identifier: AD:C0:E3:FE:0C:D5:A8:41:A7:5B:1C:85:87:6B:87:47:DA:94:B4:DE Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019ADAD783A54CBF2F73E8828A127589D99C Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/rcDj_gzVqEGnWxyFh2uHR9qUtN4.roa Signing time: Mon 01 Dec 2025 16:55:48 +0000 ROA not before: Mon 01 Dec 2025 16:55:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48146 IP address blocks: 45.86.224.0/22 maxlen: 24 45.136.32.0/22 maxlen: 24 81.22.232.0/22 maxlen: 24 92.118.248.0/22 maxlen: 24 94.103.244.0/22 maxlen: 24 151.237.59.0/24 maxlen: 24 151.237.131.0/24 maxlen: 24 185.25.52.0/22 maxlen: 24 185.87.63.0/24 maxlen: 24 185.148.52.0/22 maxlen: 24 185.189.225.0/24 maxlen: 24 185.189.226.0/23 maxlen: 24 185.192.72.0/22 maxlen: 24 185.192.116.0/22 maxlen: 24 185.195.36.0/22 maxlen: 24 185.198.108.0/22 maxlen: 24 185.209.8.0/22 maxlen: 24 185.210.60.0/22 maxlen: 24 185.210.72.0/22 maxlen: 24 185.240.22.0/24 maxlen: 24 185.240.23.0/24 maxlen: 24 185.255.72.0/22 maxlen: 24 188.240.236.0/22 maxlen: 24 193.228.194.0/23 maxlen: 24 193.228.204.0/23 maxlen: 24 194.36.104.0/22 maxlen: 24 194.147.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:d7:83:a5:4c:bf:2f:73:e8:82:8a:12:75:89:d9:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Dec 1 16:55:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=adc0e3fe0cd5a841a75b1c85876b8747da94b4de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a3:43:50:0e:1b:e7:b2:86:42:84:fd:84:bc: 6e:b2:f7:0b:4a:26:75:5a:56:20:82:a2:14:2b:b2: 2e:a3:5c:9d:51:d3:6d:3d:7d:90:a9:53:f7:b8:ee: c2:05:7a:5a:f3:00:6b:3c:a0:c8:17:b0:51:95:a8: c4:1d:2a:83:98:1b:ac:3e:e4:d2:7d:44:db:4c:7a: 18:86:81:c0:27:29:23:71:6d:b5:61:53:af:8d:eb: 59:98:fc:8c:fc:26:03:1a:97:f4:8d:fd:5d:07:c1: 1b:10:bc:1c:81:e5:06:3c:98:67:5d:86:ab:fb:b0: ad:bb:ef:7e:cf:83:58:37:29:85:1b:3c:af:be:6a: e1:57:9c:d3:6f:72:22:c0:d1:93:42:0a:80:5f:d3: 9a:26:4f:0e:63:24:d5:b8:82:9c:ed:a3:76:4b:1b: 6f:4b:93:bf:35:ab:b1:5a:16:11:8c:2a:c4:91:de: 68:1d:12:18:01:68:68:a9:ae:19:1f:ee:44:20:ff: 80:de:e8:6d:09:20:6c:09:07:c3:dd:cc:6b:0f:2c: c7:64:8e:ed:e0:20:00:17:92:d1:e3:fa:18:99:a3: d4:dc:6d:90:4c:b3:52:3f:34:b2:ad:dd:fe:ed:c4: 2f:69:d9:06:9a:b7:d8:8e:91:82:41:b9:65:5d:03: 1e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C0:E3:FE:0C:D5:A8:41:A7:5B:1C:85:87:6B:87:47:DA:94:B4:DE X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/rcDj_gzVqEGnWxyFh2uHR9qUtN4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.224.0/22 45.136.32.0/22 81.22.232.0/22 92.118.248.0/22 94.103.244.0/22 151.237.59.0/24 151.237.131.0/24 185.25.52.0/22 185.87.63.0/24 185.148.52.0/22 185.189.225.0-185.189.227.255 185.192.72.0/22 185.192.116.0/22 185.195.36.0/22 185.198.108.0/22 185.209.8.0/22 185.210.60.0/22 185.210.72.0/22 185.240.22.0/23 185.255.72.0/22 188.240.236.0/22 193.228.194.0/23 193.228.204.0/23 194.36.104.0/22 194.147.144.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:6b:6d:fa:84:ff:93:c8:af:f6:a0:c4:bf:bc:e8:e3:e2:9b: b2:77:fb:cf:26:c4:0e:2f:64:78:b7:51:85:c5:7e:a1:fb:fe: 22:0a:b3:e5:89:74:39:be:09:aa:0a:d6:0e:23:af:27:c3:d6: 60:08:6a:8b:9c:eb:b5:83:30:8f:55:94:89:a7:7c:60:b2:46: 52:fa:f9:8f:9c:45:bd:b0:43:8d:b8:40:ed:52:64:4c:e0:db: dc:7d:3f:14:bf:16:ff:a2:bc:71:9b:11:9c:33:af:8d:98:c7: f4:fe:85:89:91:3f:3b:5e:b1:00:f0:8a:c4:b3:57:ca:54:d0: 86:92:b4:3b:35:d4:9f:77:f8:54:e4:8b:a1:67:ee:07:a5:96: 7c:33:4e:2c:17:1c:64:67:a4:b0:ec:9f:5a:07:e2:bf:d2:f2: e5:53:d6:d3:13:47:3b:61:75:80:dc:c4:db:5f:de:9d:aa:8a: 45:d6:ba:a2:c7:9f:e8:5b:bd:9a:ac:15:a3:e5:ae:60:57:b4: 9d:e3:39:41:88:7e:0e:03:25:fe:5d:74:ed:bd:31:d0:c2:54: 7c:4f:b2:d1:63:a3:6d:e6:29:28:68:10:fb:4b:3d:ec:0b:1d: 04:47:02:de:45:52:d7:68:f8:06:c3:ad:c3:28:61:f3:84:06: 5e:9c:d0:56 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZra14OlTL8vc+iCihJ1idmcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjUxMjAxMTY1NTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGMwZTNmZTBjZDVhODQxYTc1YjFjODU4NzZiODc0N2RhOTRiNGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKNDUA4b57KGQoT9hLxusvcLSiZ1 WlYggqIUK7Iuo1ydUdNtPX2QqVP3uO7CBXpa8wBrPKDIF7BRlajEHSqDmBusPuTS fUTbTHoYhoHAJykjcW21YVOvjetZmPyM/CYDGpf0jf1dB8EbELwcgeUGPJhnXYar +7Ctu+9+z4NYNymFGzyvvmrhV5zTb3IiwNGTQgqAX9OaJk8OYyTVuIKc7aN2Sxtv S5O/NauxWhYRjCrEkd5oHRIYAWhoqa4ZH+5EIP+A3uhtCSBsCQfD3cxrDyzHZI7t 4CAAF5LR4/oYmaPU3G2QTLNSPzSyrd3+7cQvadkGmrfYjpGCQbllXQMeGwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFK3A4/4M1ahBp1schYdrh0falLTeMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvcmNEal9nelZxRUduV3h5RmgydUhSOXFVdE40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG7BggrBgEFBQcBBwEB/wSBqzCBqDCBpQQCAAEwgZ4DBAIt VuADBAItiCADBAJRFugDBAJcdvgDBAJeZ/QDBACX7TsDBACX7YMDBAK5GTQDBAC5 Vz8DBAK5lDQwDAMEALm94QMEArm94AMEArnASAMEArnAdAMEArnDJAMEArnGbAME ArnRCAMEArnSPAMEArnSSAMEAbnwFgMEArn/SAMEArzw7AMEAcHkwgMEAcHkzAME AsIkaAMEAsKTkDANBgkqhkiG9w0BAQsFAAOCAQEAP2tt+oT/k8iv9qDEv7zo4+Kb snf7zybEDi9keLdRhcV+ofv+Igqz5Yl0Ob4JqgrWDiOvJ8PWYAhqi5zrtYMwj1WU iad8YLJGUvr5j5xFvbBDjbhA7VJkTODb3H0/FL8W/6K8cZsRnDOvjZjH9P6FiZE/ O16xAPCKxLNXylTQhpK0OzXUn3f4VOSLoWfuB6WWfDNOLBccZGeksOyfWgfiv9Ly 5VPW0xNHO2F1gNzE21/enaqKRda6osef6Fu9mqwVo+WuYFe0neM5QYh+DgMl/l10 7b0x0MJUfE+y0WOjbeYpKGgQ+0s97AsdBEcC3kVS12j4BsOtwyhh84QGXpzQVg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:15:16 2025 by rpki-client