This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/6su449BFDL9wbtNiHsGp9uByd5A.roa File: 6su449BFDL9wbtNiHsGp9uByd5A.roa (raw, json) Hash identifier: FxELoBod2FZxd21/i8JRxUZYOeBpv7ROxRXf1eDfWvI= Subject key identifier: EA:CB:B8:E3:D0:45:0C:BF:70:6E:D3:62:1E:C1:A9:F6:E0:72:77:90 Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 019A6939F77DD164708A5DD70AA3F3B5637F Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/6su449BFDL9wbtNiHsGp9uByd5A.roa Signing time: Sun 09 Nov 2025 15:26:37 +0000 ROA not before: Sun 09 Nov 2025 15:26:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25211 IP address blocks: 45.141.233.0/24 maxlen: 24 45.141.234.0/24 maxlen: 24 78.159.128.0/24 maxlen: 24 78.159.129.0/24 maxlen: 24 78.159.131.0/24 maxlen: 24 78.159.136.0/24 maxlen: 24 78.159.137.0/24 maxlen: 24 78.159.138.0/24 maxlen: 24 78.159.139.0/24 maxlen: 24 78.159.149.0/24 maxlen: 24 78.159.150.0/24 maxlen: 24 78.159.152.0/22 maxlen: 22 78.159.153.0/24 maxlen: 24 78.159.154.0/24 maxlen: 24 78.159.155.0/24 maxlen: 24 78.159.156.0/24 maxlen: 24 78.159.157.0/24 maxlen: 24 78.159.158.0/24 maxlen: 24 78.159.159.0/24 maxlen: 24 91.92.33.0/24 maxlen: 24 91.92.34.0/24 maxlen: 24 91.92.35.0/24 maxlen: 24 91.92.40.0/24 maxlen: 24 91.92.42.0/24 maxlen: 24 91.92.43.0/24 maxlen: 24 91.92.44.0/24 maxlen: 24 91.92.45.0/24 maxlen: 24 91.92.46.0/24 maxlen: 24 91.92.49.0/24 maxlen: 24 91.92.50.0/24 maxlen: 24 91.92.51.0/24 maxlen: 24 91.92.52.0/24 maxlen: 24 91.92.53.0/24 maxlen: 24 93.152.207.0/24 maxlen: 24 93.152.210.0/24 maxlen: 24 93.152.211.0/24 maxlen: 24 93.152.214.0/24 maxlen: 24 93.152.215.0/24 maxlen: 24 93.152.216.0/24 maxlen: 24 93.152.217.0/24 maxlen: 24 93.152.218.0/24 maxlen: 24 93.152.221.0/24 maxlen: 24 93.152.222.0/24 maxlen: 24 93.152.223.0/24 maxlen: 24 93.152.224.0/24 maxlen: 24 93.152.226.0/24 maxlen: 24 93.152.227.0/24 maxlen: 24 94.26.28.0/24 maxlen: 24 94.26.29.0/24 maxlen: 24 94.26.76.0/22 maxlen: 22 94.26.76.0/24 maxlen: 24 94.26.77.0/24 maxlen: 24 94.26.78.0/24 maxlen: 24 94.26.79.0/24 maxlen: 24 94.26.89.0/24 maxlen: 24 94.26.90.0/24 maxlen: 24 94.190.195.0/24 maxlen: 24 185.96.252.0/24 maxlen: 24 185.96.253.0/24 maxlen: 24 185.96.255.0/24 maxlen: 24 212.102.105.0/24 maxlen: 24 212.102.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:69:39:f7:7d:d1:64:70:8a:5d:d7:0a:a3:f3:b5:63:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Nov 9 15:26:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=eacbb8e3d0450cbf706ed3621ec1a9f6e0727790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:12:38:69:75:4f:1f:95:6c:a1:46:7f:63:6f: 53:ab:8c:f3:a3:ad:70:7f:de:aa:e6:15:e0:e1:5c: 94:fa:ef:b6:38:a7:f9:5f:47:4c:18:c9:5a:88:cd: d1:30:4e:1d:92:7b:b1:e2:e6:3a:d0:d8:11:9f:48: 1b:ad:d3:d4:6b:18:79:c9:3e:a9:83:5e:03:a0:32: 2e:7f:03:f1:f9:05:c8:23:60:03:18:7b:34:9c:1f: b3:94:9e:b2:17:30:5a:a7:1d:a9:56:88:7b:00:bb: ba:b2:70:86:48:2a:b1:03:0d:22:6c:bd:e4:fd:6c: d0:dd:7c:3c:3c:0c:78:81:9f:0b:c3:bb:02:b3:7d: 2b:4c:02:18:1e:e6:3b:b5:67:34:22:d3:68:79:be: 75:5b:53:06:cd:b2:c1:a7:a0:13:46:4a:8a:bf:20: 3e:5c:de:52:c8:51:7d:f7:1a:d3:d4:8a:a0:fe:ae: 30:c7:20:19:4e:75:b6:36:7b:35:9a:76:97:3a:89: 55:a3:67:9a:a0:83:0a:a1:11:c4:6d:a7:6f:42:f7: fb:02:f9:01:74:98:92:d5:0d:77:7d:9d:1c:3e:de: 80:00:46:bd:2a:fd:52:81:f4:e9:e3:92:81:87:9d: d2:a6:50:7e:2e:22:3f:02:c8:68:e9:9d:eb:5c:d8: 3d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:CB:B8:E3:D0:45:0C:BF:70:6E:D3:62:1E:C1:A9:F6:E0:72:77:90 X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/6su449BFDL9wbtNiHsGp9uByd5A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.233.0-45.141.234.255 78.159.128.0/23 78.159.131.0/24 78.159.136.0/22 78.159.149.0-78.159.150.255 78.159.152.0/21 91.92.33.0-91.92.35.255 91.92.40.0/24 91.92.42.0-91.92.46.255 91.92.49.0-91.92.53.255 93.152.207.0/24 93.152.210.0/23 93.152.214.0-93.152.218.255 93.152.221.0-93.152.224.255 93.152.226.0/23 94.26.28.0/23 94.26.76.0/22 94.26.89.0-94.26.90.255 94.190.195.0/24 185.96.252.0/23 185.96.255.0/24 212.102.105.0/24 212.102.107.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:4f:26:0d:fa:e7:fd:2a:37:00:26:b1:21:18:33:72:8e:8a: bf:87:bd:61:8b:ea:77:ef:a7:6a:38:b3:3d:38:2d:62:bc:6d: fd:ca:5a:42:40:35:aa:75:06:a4:77:5f:00:cf:52:2d:f3:de: e4:5c:fe:bd:34:0c:aa:1c:ce:33:fe:c1:39:d7:09:df:ef:da: a2:85:b1:1f:84:61:1e:12:8d:be:13:df:fa:f5:aa:15:36:be: 8f:e2:b5:7f:a8:f8:56:51:3c:36:ee:f9:ef:a3:7d:16:7c:74: 13:7d:d8:5e:3d:bc:ff:a3:22:97:e1:1f:4c:11:7e:b5:51:33: cf:25:94:79:ba:e2:58:6a:1e:57:dd:c2:d8:9b:17:64:aa:bb: 23:c7:a5:ae:e3:75:ed:76:20:c2:c2:15:ff:64:0d:db:8e:b7: 57:6e:42:3f:19:2a:65:9b:1c:44:ea:5e:79:9c:fa:d8:6e:09: f3:f8:6f:ca:78:d8:45:95:db:98:6f:ba:58:74:ab:51:54:aa: 18:43:36:f6:68:6f:9a:fb:a3:93:b6:02:c5:a9:46:21:7f:89: 98:0d:ae:b2:9b:d8:09:04:26:cb:31:04:26:89:c8:dc:e4:65: 3e:1a:f4:c2:de:e7:6e:69:e5:37:7b:01:5c:83:10:42:39:fe: 0c:ad:4b:43 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgISAZppOfd90WRwil3XCqPztWN/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjUxMTA5MTUyNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWNiYjhlM2QwNDUwY2JmNzA2ZWQzNjIxZWMxYTlmNmUwNzI3NzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxI4aXVPH5VsoUZ/Y29Tq4zzo61w f96q5hXg4VyU+u+2OKf5X0dMGMlaiM3RME4dknux4uY60NgRn0gbrdPUaxh5yT6p g14DoDIufwPx+QXII2ADGHs0nB+zlJ6yFzBapx2pVoh7ALu6snCGSCqxAw0ibL3k /WzQ3Xw8PAx4gZ8Lw7sCs30rTAIYHuY7tWc0ItNoeb51W1MGzbLBp6ATRkqKvyA+ XN5SyFF99xrT1Iqg/q4wxyAZTnW2Nns1mnaXOolVo2eaoIMKoRHEbadvQvf7AvkB dJiS1Q13fZ0cPt6AAEa9Kv1SgfTp45KBh53SplB+LiI/Asho6Z3rXNg9ywIDAQAB o4IC0jCCAs4wHQYDVR0OBBYEFOrLuOPQRQy/cG7TYh7BqfbgcneQMB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvNnN1NDQ5QkZETDl3YnROaUhzR3A5dUJ5ZDVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHnBggrBgEFBQcBBwEB/wSB1zCB1DCB0QQCAAEwgcowDAME AC2N6QMEAC2N6gMEAU6fgAMEAE6fgwMEAk6fiDAMAwQATp+VAwQATp+WAwQDTp+Y MAwDBABbXCEDBAJbXCADBABbXCgwDAMEAVtcKgMEAFtcLjAMAwQAW1wxAwQBW1w0 AwQAXZjPAwQBXZjSMAwDBAFdmNYDBABdmNowDAMEAF2Y3QMEAF2Y4AMEAV2Y4gME AV4aHAMEAl4aTDAMAwQAXhpZAwQAXhpaAwQAXr7DAwQBuWD8AwQAuWD/AwQA1GZp AwQA1GZrMA0GCSqGSIb3DQEBCwUAA4IBAQBKTyYN+uf9KjcAJrEhGDNyjoq/h71h i+p376dqOLM9OC1ivG39ylpCQDWqdQakd18Az1It897kXP69NAyqHM4z/sE51wnf 79qihbEfhGEeEo2+E9/69aoVNr6P4rV/qPhWUTw27vnvo30WfHQTfdhePbz/oyKX 4R9MEX61UTPPJZR5uuJYah5X3cLYmxdkqrsjx6Wu43XtdiDCwhX/ZA3bjrdXbkI/ GSplmxxE6l55nPrYbgnz+G/KeNhFlduYb7pYdKtRVKoYQzb2aG+a+6OTtgLFqUYh f4mYDa6ym9gJBCbLMQQmicjc5GU+GvTC3uduaeU3ewFcgxBCOf4MrUtD -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:29 2025 by rpki-client