This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Id2wlZcLDEIbnk1mkWPbZPcnR0w.roa File: Id2wlZcLDEIbnk1mkWPbZPcnR0w.roa (raw, json) Hash identifier: kMCDmHex6LucVQAw5itR0e7jqxfuDOihCnutD9zHY5g= Subject key identifier: 21:DD:B0:95:97:0B:0C:42:1B:9E:4D:66:91:63:DB:64:F7:27:47:4C Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B2990BC9242E3204CF80B65CB84D1B81A Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Id2wlZcLDEIbnk1mkWPbZPcnR0w.roa Signing time: Tue 16 Dec 2025 23:48:29 +0000 ROA not before: Tue 16 Dec 2025 23:48:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5511 IP address blocks: 45.136.0.0/24 maxlen: 32 45.136.2.0/24 maxlen: 32 45.136.3.0/24 maxlen: 32 128.0.119.0/24 maxlen: 32 185.117.23.0/24 maxlen: 32 185.144.100.0/24 maxlen: 32 185.144.102.0/24 maxlen: 32 185.211.48.0/24 maxlen: 32 185.211.49.0/24 maxlen: 32 185.211.50.0/24 maxlen: 32 185.227.240.0/24 maxlen: 32 185.227.241.0/24 maxlen: 32 185.227.242.0/24 maxlen: 32 185.227.243.0/24 maxlen: 32 193.201.208.0/24 maxlen: 32 193.201.209.0/24 maxlen: 32 193.201.210.0/24 maxlen: 32 193.201.211.0/24 maxlen: 32 194.36.102.0/24 maxlen: 32 194.36.103.0/24 maxlen: 32 194.124.64.0/24 maxlen: 32 194.124.66.0/24 maxlen: 32 194.124.67.0/24 maxlen: 32 195.85.68.0/24 maxlen: 32 195.85.69.0/24 maxlen: 32 195.85.70.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:90:bc:92:42:e3:20:4c:f8:0b:65:cb:84:d1:b8:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Dec 16 23:48:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=21ddb095970b0c421b9e4d669163db64f727474c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:04:10:98:c0:78:a3:73:11:b8:27:8d:cd:b1: f8:26:a3:af:39:76:c3:03:18:f6:ca:8a:ff:cb:fa: a5:5e:fe:23:ab:c9:b6:e3:a4:53:68:d7:2e:f2:d8: ac:3c:cd:16:b4:2b:df:ed:fc:8b:f6:53:a6:78:09: 00:e6:5e:34:4b:e5:80:60:71:36:57:0d:c1:37:5f: 10:5d:ec:b1:ca:e7:b6:69:ac:b3:69:5e:00:e7:86: d4:e2:b0:56:39:28:87:ed:87:fb:e9:0e:36:1d:ef: a8:07:fc:56:c8:7b:b7:70:a1:82:72:a1:b2:26:f8: 1c:36:70:69:8c:a1:20:25:ee:e6:b6:03:ad:6a:ab: 96:12:7c:3e:4e:2c:e6:b3:f0:e7:0a:aa:94:6a:03: d0:77:c8:6c:76:33:42:fc:2c:97:ad:80:4b:83:3c: 14:58:41:1f:74:eb:f9:08:1f:1b:03:1c:24:e8:9f: 4b:f4:48:06:b6:86:9d:e8:71:1b:b7:ac:d1:5e:da: 98:55:20:4f:8a:c7:4d:95:51:98:b1:6a:58:31:9d: e1:5c:61:be:6c:ad:6f:e4:9e:b2:54:e4:26:bf:7b: ef:e2:48:2b:ac:17:df:60:79:61:25:fa:aa:92:6d: 85:7a:77:33:d2:ca:00:80:bb:4a:ca:99:0d:7c:89: e0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:DD:B0:95:97:0B:0C:42:1B:9E:4D:66:91:63:DB:64:F7:27:47:4C X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Id2wlZcLDEIbnk1mkWPbZPcnR0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.0.0/24 45.136.2.0/23 128.0.119.0/24 185.117.23.0/24 185.144.100.0/24 185.144.102.0/24 185.211.48.0-185.211.50.255 185.227.240.0/22 193.201.208.0/22 194.36.102.0/23 194.124.64.0/24 194.124.66.0/23 195.85.68.0-195.85.70.255 Signature Algorithm: sha256WithRSAEncryption 41:27:d1:41:51:c8:cb:1a:a5:87:d9:7c:f4:c0:1f:b1:fe:fc: 69:1a:de:e0:97:a1:21:7e:83:1f:c5:5b:70:09:a2:ad:42:ca: 6c:cb:fa:17:89:54:c2:a1:4e:b3:36:c1:dc:65:99:3d:98:b4: f8:9b:2d:8e:d8:0f:d5:9d:b9:16:dd:da:b3:9f:9b:d7:c7:5d: 37:6d:0f:d9:41:fb:59:0e:9f:52:97:92:65:e2:e8:0d:3b:9d: 37:70:ab:15:30:9b:ac:e3:70:37:88:b3:84:60:4f:5d:dd:9b: b7:57:b5:9a:f2:1b:7d:8c:fd:83:33:07:d1:6c:22:7f:d5:db: 3a:d0:1e:89:72:d1:f4:eb:98:6c:d1:84:9e:94:78:76:27:e2: 3e:bf:a0:9c:fd:5a:25:3b:0b:55:ed:e4:16:9a:51:a4:6d:fe: 79:f4:63:5a:fd:12:7d:17:42:74:71:92:c6:02:c6:85:80:54: 68:9f:e3:cb:6b:2d:f8:62:fe:13:0b:1e:f7:92:6f:e5:6c:21: d9:1e:4c:c9:ef:43:35:9e:99:c9:25:2f:b5:59:d0:0a:94:89: 0e:79:ca:46:17:f9:5f:c8:48:36:d9:37:ff:4a:76:fa:05:54: 73:81:29:b3:aa:be:db:60:ab:d5:f5:c1:96:38:ac:c7:51:dd: 9f:ba:42:1f -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgISAZspkLySQuMgTPgLZcuE0bgaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjUxMjE2MjM0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWRkYjA5NTk3MGIwYzQyMWI5ZTRkNjY5MTYzZGI2NGY3Mjc0NzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQQQmMB4o3MRuCeNzbH4JqOvOXbD Axj2yor/y/qlXv4jq8m246RTaNcu8tisPM0WtCvf7fyL9lOmeAkA5l40S+WAYHE2 Vw3BN18QXeyxyue2aayzaV4A54bU4rBWOSiH7Yf76Q42He+oB/xWyHu3cKGCcqGy JvgcNnBpjKEgJe7mtgOtaquWEnw+Tizms/DnCqqUagPQd8hsdjNC/CyXrYBLgzwU WEEfdOv5CB8bAxwk6J9L9EgGtoad6HEbt6zRXtqYVSBPisdNlVGYsWpYMZ3hXGG+ bK1v5J6yVOQmv3vv4kgrrBffYHlhJfqqkm2Fencz0soAgLtKypkNfIngOwIDAQAB o4ICYTCCAl0wHQYDVR0OBBYEFCHdsJWXCwxCG55NZpFj22T3J0dMMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvSWQyd2xaY0xERUlibmsxbWtXUGJaUGNuUjB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBkBAIAATBeAwQALYgAAwQB LYgCAwQAgAB3AwQAuXUXAwQAuZBkAwQAuZBmMAwDBAS50zADBAC50zIDBAK54/AD BALBydADBAHCJGYDBADCfEADBAHCfEIwDAMEAsNVRAMEAMNVRjANBgkqhkiG9w0B AQsFAAOCAQEAQSfRQVHIyxqlh9l89MAfsf78aRre4JehIX6DH8VbcAmirULKbMv6 F4lUwqFOszbB3GWZPZi0+JstjtgP1Z25Ft3as5+b18ddN20P2UH7WQ6fUpeSZeLo DTudN3CrFTCbrONwN4izhGBPXd2bt1e1mvIbfYz9gzMH0Wwif9XbOtAeiXLR9OuY bNGEnpR4difiPr+gnP1aJTsLVe3kFppRpG3+efRjWv0SfRdCdHGSxgLGhYBUaJ/j y2st+GL+Ewse95Jv5Wwh2R5Mye9DNZ6ZySUvtVnQCpSJDnnKRhf5X8hINtk3/0p2 +gVUc4Eps6q+22Cr1fXBljisx1Hdn7pCHw== -----END CERTIFICATE-----Generated at Wed Dec 17 20:07:27 2025 by rpki-client