This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/040TsSTaomXmk-0H6b35Y5nsohA.roa File: 040TsSTaomXmk-0H6b35Y5nsohA.roa (raw, json) Hash identifier: ywLoOOPj8BHlaIbmhxcOt0xmd8oXL/QshjksxdsZgto= Subject key identifier: D3:8D:13:B1:24:DA:A2:65:E6:93:ED:07:E9:BD:F9:63:99:EC:A2:10 Certificate issuer: /CN=b66ea7359221c1b77d6cc006f7b6706a9a908299 Certificate serial: 019A822E8303F5342D06818B70048C0EFFC1 Authority key identifier: B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/040TsSTaomXmk-0H6b35Y5nsohA.roa Signing time: Fri 14 Nov 2025 11:44:37 +0000 ROA not before: Fri 14 Nov 2025 11:44:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 61272 IP address blocks: 85.206.160.0/22 maxlen: 32 85.206.164.0/22 maxlen: 32 85.206.166.58/32 maxlen: 32 85.206.168.0/22 maxlen: 32 85.206.172.0/22 maxlen: 32 85.206.240.0/22 maxlen: 32 88.119.160.0/21 maxlen: 32 88.119.168.0/24 maxlen: 32 88.119.169.0/24 maxlen: 32 88.119.170.0/24 maxlen: 32 88.119.171.0/24 maxlen: 32 88.119.173.0/24 maxlen: 32 88.119.174.0/24 maxlen: 32 88.119.175.0/24 maxlen: 32 91.216.163.0/24 maxlen: 32 185.25.48.0/22 maxlen: 32 185.64.104.0/22 maxlen: 32 213.252.228.0/24 maxlen: 32 213.252.229.0/24 maxlen: 32 213.252.230.0/24 maxlen: 32 213.252.231.0/24 maxlen: 32 213.252.232.0/24 maxlen: 32 213.252.233.0/24 maxlen: 32 213.252.238.0/24 maxlen: 32 2a04:2180::/32 maxlen: 64 2a04:2181:c010::/48 maxlen: 64 2a04:2181:c011::/48 maxlen: 64 2a04:2181:c012::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:82:2e:83:03:f5:34:2d:06:81:8b:70:04:8c:0e:ff:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b66ea7359221c1b77d6cc006f7b6706a9a908299 Validity Not Before: Nov 14 11:44:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d38d13b124daa265e693ed07e9bdf96399eca210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1d:0a:7f:ce:0c:cc:3e:30:14:5a:e9:3c:f0: 51:64:f5:20:10:5d:d3:df:4a:eb:3c:05:28:63:95: d4:ec:cd:66:d8:31:a5:9a:37:5d:d5:40:59:d1:95: 0d:f0:30:16:dc:44:b4:0f:a7:89:c5:16:d3:67:e5: 07:0e:99:47:43:45:9d:35:1b:75:18:3c:73:39:db: 22:cd:21:e0:ed:d2:f3:64:60:6d:fc:d5:b8:fd:cd: 92:16:ba:86:c7:5a:c9:6b:8e:7d:25:20:93:18:35: d2:7b:05:70:de:bd:b9:e6:5e:80:3d:d5:96:0a:3a: 8d:4d:e3:3b:d2:58:2e:7b:54:00:33:1d:d1:e5:52: 8b:b8:8a:89:d4:94:03:63:9c:e6:78:81:cd:42:35: 59:04:cb:33:54:87:75:5f:2d:54:8b:8f:11:fb:45: a4:31:d2:3b:19:8c:e9:7c:62:c8:a3:33:a0:28:59: a9:a5:8c:ce:87:62:78:e3:d6:4d:e1:b5:70:e8:c7: ae:4f:fe:ec:f6:30:fb:3c:8d:2d:72:90:b2:64:a2: 93:07:8e:fc:6e:ce:40:60:d6:34:a6:ae:e5:d8:9f: 51:dd:53:a9:e2:93:06:df:39:58:0c:3c:6b:85:4e: dc:a6:ae:49:12:e7:3f:a5:92:a2:a8:55:eb:87:5c: d8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8D:13:B1:24:DA:A2:65:E6:93:ED:07:E9:BD:F9:63:99:EC:A2:10 X509v3 Authority Key Identifier: keyid:B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/040TsSTaomXmk-0H6b35Y5nsohA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.206.160.0/20 85.206.240.0/22 88.119.160.0-88.119.171.255 88.119.173.0-88.119.175.255 91.216.163.0/24 185.25.48.0/22 185.64.104.0/22 213.252.228.0-213.252.233.255 213.252.238.0/24 IPv6: 2a04:2180::/32 2a04:2181:c010::-2a04:2181:c012:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 0b:a3:14:ac:96:47:40:b7:37:dd:cd:c6:26:93:27:72:f3:cc: 70:51:77:64:2c:ae:cb:46:ba:81:da:80:3d:27:f5:a5:f5:25: 05:21:90:ce:f1:50:ef:0d:7d:ad:88:23:e6:b3:a3:45:4e:30: fb:c6:97:1c:72:05:48:9b:7a:a1:4f:4b:d8:a0:0a:43:78:81: df:d3:19:1b:74:e2:ec:f6:5b:e0:42:7a:fd:63:35:19:37:3c: d1:fd:55:fc:af:71:0b:2e:90:a2:2e:49:1b:c8:fb:2a:3b:52: 05:8d:2b:97:8e:71:f5:6e:26:f6:61:66:08:69:d7:75:28:a2: c2:fc:bb:cd:d4:89:fa:4b:c7:04:38:4d:9d:be:de:f9:37:92: 65:90:9a:20:e2:ea:c2:e9:60:77:7d:ff:6e:f5:bd:3e:17:d8: 15:db:f4:d9:1a:dd:44:b3:f2:d3:ab:9a:ad:d8:38:34:4c:73: 94:59:4a:66:2b:01:27:c2:cd:8f:10:11:2e:b7:c2:d0:b8:99: e3:3e:3b:a4:6c:e2:1d:e5:59:4b:b1:28:39:99:39:ef:e6:b8: ff:59:75:fb:07:4d:1d:85:7c:da:d0:c4:8c:22:f5:f0:11:c3: f5:4d:3d:cd:a4:61:a4:92:54:b1:c1:bd:f8:4f:3d:85:ba:e0: ed:f5:f2:f9 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgISAZqCLoMD9TQtBoGLcASMDv/BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2NmVhNzM1OTIyMWMxYjc3ZDZjYzAwNmY3YjY3MDZhOWE5 MDgyOTkwHhcNMjUxMTE0MTE0NDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzhkMTNiMTI0ZGFhMjY1ZTY5M2VkMDdlOWJkZjk2Mzk5ZWNhMjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh0Kf84MzD4wFFrpPPBRZPUgEF3T 30rrPAUoY5XU7M1m2DGlmjdd1UBZ0ZUN8DAW3ES0D6eJxRbTZ+UHDplHQ0WdNRt1 GDxzOdsizSHg7dLzZGBt/NW4/c2SFrqGx1rJa459JSCTGDXSewVw3r255l6APdWW CjqNTeM70lgue1QAMx3R5VKLuIqJ1JQDY5zmeIHNQjVZBMszVId1Xy1Ui48R+0Wk MdI7GYzpfGLIozOgKFmppYzOh2J449ZN4bVw6MeuT/7s9jD7PI0tcpCyZKKTB478 bs5AYNY0pq7l2J9R3VOp4pMG3zlYDDxrhU7cpq5JEuc/pZKiqFXrh1zY9QIDAQAB o4ICdTCCAnEwHQYDVR0OBBYEFNONE7Ek2qJl5pPtB+m9+WOZ7KIQMB8GA1UdIwQY MBaAFLZupzWSIcG3fWzABve2cGqakIKZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG02bk5aSWh3YmQ5Yk1BRzk3WndhcHFRZ3BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mODdhMmUtNDZiMS00YTY2LWE5MGMt Njk5ODM1YzkyYmZlLzEvMDQwVHNTVGFvbVhtay0wSDZiMzVZNW5zb2hBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9mODdhMmUtNDZiMS00YTY2LWE5MGMtNjk5ODM1YzkyYmZl LzEvdG02bk5aSWh3YmQ5Yk1BRzk3WndhcHFRZ3BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGKBggrBgEFBQcBBwEB/wR7MHkwVAQCAAEwTgMEBFXOoAME AlXO8DAMAwQFWHegAwQCWHeoMAwDBABYd60DBARYd6ADBABb2KMDBAK5GTADBAK5 QGgwDAMEAtX85AMEAdX86AMEANX87jAhBAIAAjAbAwUAKgQhgDASAwcEKgQhgcAQ AwcAKgQhgcASMA0GCSqGSIb3DQEBCwUAA4IBAQALoxSslkdAtzfdzcYmkydy88xw UXdkLK7LRrqB2oA9J/Wl9SUFIZDO8VDvDX2tiCPms6NFTjD7xpcccgVIm3qhT0vY oApDeIHf0xkbdOLs9lvgQnr9YzUZNzzR/VX8r3ELLpCiLkkbyPsqO1IFjSuXjnH1 bib2YWYIadd1KKLC/LvN1In6S8cEOE2dvt75N5JlkJog4urC6WB3ff9u9b0+F9gV 2/TZGt1Es/LTq5qt2Dg0THOUWUpmKwEnws2PEBEut8LQuJnjPjukbOId5VlLsSg5 mTnv5rj/WXX7B00dhXza0MSMIvXwEcP1TT3NpGGkklSxwb34Tz2FuuDt9fL5 -----END CERTIFICATE-----Generated at Sat Dec 6 23:30:54 2025 by rpki-client