This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/0xa4mU5yRo1nzTt0AhMREexXLR4.roa File: 0xa4mU5yRo1nzTt0AhMREexXLR4.roa (raw, json) Hash identifier: V8/58Ec+nJB6D8SUXkgg5RfVldJgcq7giFR6HQKgRBM= Subject key identifier: D3:16:B8:99:4E:72:46:8D:67:CD:3B:74:02:13:11:11:EC:57:2D:1E Certificate issuer: /CN=dc4e453affe895b6452b84027437c5c00fd37067 Certificate serial: 019AB57F144EC2120F2BA619BCE148B5B21C Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/0xa4mU5yRo1nzTt0AhMREexXLR4.roa Signing time: Mon 24 Nov 2025 10:53:15 +0000 ROA not before: Mon 24 Nov 2025 10:53:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 31122 IP address blocks: 46.183.104.0/23 maxlen: 23 78.137.128.0/18 maxlen: 18 78.143.128.0/18 maxlen: 18 80.93.16.0/20 maxlen: 20 83.147.128.0/18 maxlen: 18 84.203.0.0/16 maxlen: 16 89.16.64.0/19 maxlen: 19 89.184.32.0/22 maxlen: 22 89.184.40.0/21 maxlen: 21 89.184.48.0/21 maxlen: 21 89.184.56.0/23 maxlen: 23 89.234.64.0/18 maxlen: 18 91.142.96.0/20 maxlen: 20 92.51.192.0/20 maxlen: 20 92.51.216.0/21 maxlen: 21 92.51.240.0/21 maxlen: 21 93.92.8.0/21 maxlen: 21 94.247.48.0/21 maxlen: 21 109.106.96.0/20 maxlen: 20 109.106.112.0/21 maxlen: 21 109.106.124.0/22 maxlen: 22 176.52.216.0/22 maxlen: 22 176.52.220.0/23 maxlen: 23 185.47.144.0/22 maxlen: 22 185.53.32.0/24 maxlen: 24 185.53.35.0/24 maxlen: 24 185.182.72.0/22 maxlen: 22 185.205.228.0/22 maxlen: 22 185.233.176.0/22 maxlen: 22 185.242.236.0/23 maxlen: 23 212.126.32.0/19 maxlen: 19 212.126.60.0/22 maxlen: 22 217.78.0.0/20 maxlen: 20 2a00:15b8::/32 maxlen: 32 2a00:15b8:400::/40 maxlen: 40 2a01:258::/32 maxlen: 32 2a01:8aa0::/32 maxlen: 32 2a02:220::/32 maxlen: 32 2a0a:e780::/29 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:7f:14:4e:c2:12:0f:2b:a6:19:bc:e1:48:b5:b2:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067 Validity Not Before: Nov 24 10:53:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d316b8994e72468d67cd3b7402131111ec572d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f4:7d:07:a2:3f:8d:6a:e2:7d:34:18:2a:82: 48:ee:07:48:a3:22:15:5c:ef:2a:08:16:f3:61:88: 20:e6:76:79:8f:7d:ad:ea:2a:7a:5c:39:23:70:c3: 8e:eb:0c:b6:a5:49:a5:2e:5a:60:11:ae:5e:3e:46: 24:92:4a:fa:cf:2f:df:24:ac:fc:cc:52:d7:ab:5e: a6:d6:e3:68:e1:43:eb:bb:cc:d1:2f:8a:5a:30:2a: 3a:66:24:5f:bc:bd:bb:49:a0:82:ca:06:18:3a:bf: 07:13:05:f4:57:fa:e7:7a:46:34:5e:1a:a0:13:ef: dc:15:a6:80:47:b9:c8:c3:d0:50:3a:c8:69:4c:48: c4:1b:ba:d9:8a:14:40:50:13:df:dd:d1:1a:0a:ae: 7e:09:29:f8:c6:2a:b5:51:4b:23:0b:f9:42:ca:69: e2:19:2a:9c:a9:49:14:32:58:8b:1c:c0:e0:16:38: 4c:64:4a:ea:a7:56:28:85:c0:68:14:60:af:52:bf: a9:f0:3a:64:a6:a1:b3:cf:a7:75:f8:d9:7c:d3:ac: c1:40:98:04:69:d0:55:f9:8b:3c:d4:11:ac:83:0f: b6:d9:7c:db:d4:44:f9:17:6d:80:65:0c:ed:0d:93: 9e:38:8c:1b:99:5c:40:00:7d:af:e5:50:78:42:48: 02:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:16:B8:99:4E:72:46:8D:67:CD:3B:74:02:13:11:11:EC:57:2D:1E X509v3 Authority Key Identifier: keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/0xa4mU5yRo1nzTt0AhMREexXLR4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.183.104.0/23 78.137.128.0/18 78.143.128.0/18 80.93.16.0/20 83.147.128.0/18 84.203.0.0/16 89.16.64.0/19 89.184.32.0/22 89.184.40.0-89.184.57.255 89.234.64.0/18 91.142.96.0/20 92.51.192.0/20 92.51.216.0/21 92.51.240.0/21 93.92.8.0/21 94.247.48.0/21 109.106.96.0-109.106.119.255 109.106.124.0/22 176.52.216.0-176.52.221.255 185.47.144.0/22 185.53.32.0/24 185.53.35.0/24 185.182.72.0/22 185.205.228.0/22 185.233.176.0/22 185.242.236.0/23 212.126.32.0/19 217.78.0.0/20 IPv6: 2a00:15b8::/32 2a01:258::/32 2a01:8aa0::/32 2a02:220::/32 2a0a:e780::/29 Signature Algorithm: sha256WithRSAEncryption 76:7b:5a:94:b7:56:9e:74:4e:d1:a1:cf:0e:ad:d6:7c:3a:a2: 23:5a:96:0a:1d:c6:17:ff:6d:e5:87:a2:86:ac:35:9c:76:4e: fe:14:19:33:a4:0c:a0:86:06:19:59:a4:0f:8f:0d:8f:08:a5: 39:c6:cc:0b:09:73:ac:fb:33:a5:13:9d:6f:2d:18:77:58:b7: a2:46:bf:94:c2:a5:4b:9a:f9:b4:84:1e:48:88:7b:76:1c:75: 25:b8:38:d5:4e:98:05:3d:41:17:34:4f:2f:7e:51:96:aa:1e: 11:a7:c9:ab:9e:92:61:cc:7e:0f:da:60:89:95:53:33:ce:b4: c7:31:9c:5c:f7:07:42:b7:72:08:59:f0:a3:a7:ee:5a:79:2f: 55:d3:af:8c:7c:fe:46:dd:25:92:e4:1c:1c:7c:e2:41:e9:89: 0e:7e:20:89:79:a8:32:e2:e7:e7:4e:8f:6c:40:ee:1b:41:bd: 75:44:a3:9e:81:f2:6a:48:26:2c:89:53:c7:7b:6b:7b:36:a5: aa:01:f5:cb:ce:0a:b2:9e:7c:bc:83:d5:7e:e2:bd:9f:b5:f6: a6:97:57:ec:0b:82:97:ef:c7:f0:df:00:b3:87:77:6d:a7:a4: 37:e7:17:fe:b8:c4:0a:f1:31:84:e7:47:ca:06:3d:b5:08:7b: 25:75:29:9d -----BEGIN CERTIFICATE----- MIIF5zCCBM+gAwIBAgISAZq1fxROwhIPK6YZvOFItbIcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNGU0NTNhZmZlODk1YjY0NTJiODQwMjc0MzdjNWMwMGZk MzcwNjcwHhcNMjUxMTI0MTA1MzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzE2Yjg5OTRlNzI0NjhkNjdjZDNiNzQwMjEzMTExMWVjNTcyZDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvR9B6I/jWrifTQYKoJI7gdIoyIV XO8qCBbzYYgg5nZ5j32t6ip6XDkjcMOO6wy2pUmlLlpgEa5ePkYkkkr6zy/fJKz8 zFLXq16m1uNo4UPru8zRL4paMCo6ZiRfvL27SaCCygYYOr8HEwX0V/rnekY0Xhqg E+/cFaaAR7nIw9BQOshpTEjEG7rZihRAUBPf3dEaCq5+CSn4xiq1UUsjC/lCymni GSqcqUkUMliLHMDgFjhMZErqp1YohcBoFGCvUr+p8DpkpqGzz6d1+Nl806zBQJgE adBV+Ys81BGsgw+22Xzb1ET5F22AZQztDZOeOIwbmVxAAH2v5VB4QkgCiQIDAQAB o4IC8zCCAu8wHQYDVR0OBBYEFNMWuJlOckaNZ807dAITERHsVy0eMB8GA1UdIwQY MBaAFNxORTr/6JW2RSuEAnQ3xcAP03BnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEt MTgyMjg2N2UxNTk2LzEvMHhhNG1VNXlSbzFuelR0MEFoTVJFZXhYTFI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEtMTgyMjg2N2UxNTk2 LzEvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBBwYIKwYBBQUHAQcBAf8EgfcwgfQwgcYEAgABMIG/AwQB LrdoAwQGTomAAwQGTo+AAwQEUF0QAwQGU5OAAwMAVMsDBAVZEEADBAJZuCAwDAME A1m4KAMEAVm4OAMEBlnqQAMEBFuOYAMEBFwzwAMEA1wz2AMEA1wz8AMEA11cCAME A173MDAMAwQFbWpgAwQDbWpwAwQCbWp8MAwDBAOwNNgDBAGwNNwDBAK5L5ADBAC5 NSADBAC5NSMDBAK5tkgDBAK5zeQDBAK56bADBAG58uwDBAXUfiADBATZTgAwKQQC AAIwIwMFACoAFbgDBQAqAQJYAwUAKgGKoAMFACoCAiADBQMqCueAMA0GCSqGSIb3 DQEBCwUAA4IBAQB2e1qUt1aedE7Roc8OrdZ8OqIjWpYKHcYX/23lh6KGrDWcdk7+ FBkzpAyghgYZWaQPjw2PCKU5xswLCXOs+zOlE51vLRh3WLeiRr+UwqVLmvm0hB5I iHt2HHUluDjVTpgFPUEXNE8vflGWqh4Rp8mrnpJhzH4P2mCJlVMzzrTHMZxc9wdC t3IIWfCjp+5aeS9V06+MfP5G3SWS5BwcfOJB6YkOfiCJeagy4ufnTo9sQO4bQb11 RKOegfJqSCYsiVPHe2t7NqWqAfXLzgqynny8g9V+4r2ftfaml1fsC4KX78fw3wCz h3dtp6Q35xf+uMQK8TGE50fKBj21CHsldSmd -----END CERTIFICATE-----Generated at Sat Dec 6 16:36:52 2025 by rpki-client