This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/iALFaO66XR7bzKvgq4B-T0dt4x4.roa File: iALFaO66XR7bzKvgq4B-T0dt4x4.roa (raw, json) Hash identifier: PA5b0zcAe+bx03MLbtIWhk9SgkBfHIkZikFyxJSWiS8= Subject key identifier: 88:02:C5:68:EE:BA:5D:1E:DB:CC:AB:E0:AB:80:7E:4F:47:6D:E3:1E Certificate issuer: /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9 Certificate serial: 019A82F948ECFEED823C4ECBA2BABF0A25C1 Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/iALFaO66XR7bzKvgq4B-T0dt4x4.roa Signing time: Fri 14 Nov 2025 15:26:06 +0000 ROA not before: Fri 14 Nov 2025 15:26:06 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21263 IP address blocks: 45.155.112.0/22 maxlen: 24 77.81.52.0/22 maxlen: 24 81.27.112.0/20 maxlen: 24 146.255.112.0/22 maxlen: 24 161.51.240.0/21 maxlen: 24 185.124.224.0/22 maxlen: 24 185.162.220.0/22 maxlen: 24 185.198.140.0/22 maxlen: 24 185.231.72.0/22 maxlen: 24 212.62.192.0/19 maxlen: 24 217.11.144.0/20 maxlen: 24 217.24.192.0/20 maxlen: 24 217.31.208.0/20 maxlen: 24 2a02:590::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:82:f9:48:ec:fe:ed:82:3c:4e:cb:a2:ba:bf:0a:25:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9 Validity Not Before: Nov 14 15:26:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8802c568eeba5d1edbccabe0ab807e4f476de31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3c:f4:f6:85:86:e9:42:a9:f2:f4:87:85:10: 5e:3b:13:c8:3c:cd:15:04:1a:c1:12:f8:8f:07:a7: c0:ae:13:9f:07:01:04:c0:2c:cf:bd:7e:81:4b:c8: 5b:73:15:75:f2:26:88:f2:ba:2f:c8:c1:89:06:7d: 9c:28:bb:1b:53:b9:6c:e4:eb:d7:cb:5e:b6:79:82: ef:1a:05:cb:c5:a6:2d:de:31:53:53:84:c8:c0:67: 7b:69:d4:a9:32:7b:7f:ff:8f:1a:45:b0:0d:c1:ab: db:8f:22:71:91:48:c3:1e:28:91:07:21:05:e1:2b: 47:56:b9:0e:ce:ce:25:b0:ea:e6:e2:7a:2c:90:45: 3c:1c:6c:a1:94:53:02:64:69:95:cf:3f:53:e0:b1: 19:46:5f:a7:7c:d0:56:22:9d:fa:20:ff:8f:a9:55: ce:cb:80:7d:71:7f:de:06:0c:b7:47:77:f6:e9:3a: 4b:e2:b8:8c:7d:dd:35:44:87:d4:57:80:96:53:75: 53:ca:a6:75:2e:60:dc:f2:fe:a9:aa:06:ac:f2:d5: cc:84:73:c2:6d:0e:0d:4b:8f:13:13:77:47:e2:c4: e7:d3:ff:af:18:c1:53:f1:1a:27:c9:8a:26:6f:3d: 2e:07:18:f0:21:ad:de:55:98:64:6f:71:d3:19:5a: 7e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:02:C5:68:EE:BA:5D:1E:DB:CC:AB:E0:AB:80:7E:4F:47:6D:E3:1E X509v3 Authority Key Identifier: keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/iALFaO66XR7bzKvgq4B-T0dt4x4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.112.0/22 77.81.52.0/22 81.27.112.0/20 146.255.112.0/22 161.51.240.0/21 185.124.224.0/22 185.162.220.0/22 185.198.140.0/22 185.231.72.0/22 212.62.192.0/19 217.11.144.0/20 217.24.192.0/20 217.31.208.0/20 IPv6: 2a02:590::/29 Signature Algorithm: sha256WithRSAEncryption 93:6b:8c:97:5b:23:21:6b:43:1c:c4:7b:07:6a:de:c8:15:19: 27:24:a9:70:7b:5a:23:dd:b3:25:bb:b7:1d:af:8a:0b:e7:7a: 5a:c6:35:94:56:68:56:16:23:31:4e:f4:72:8c:01:9d:b1:ce: 9c:41:fd:e6:74:0d:a1:6e:0b:ef:7b:b6:28:0c:41:6b:b3:53: 05:81:78:10:3f:25:52:54:45:4c:01:a9:b2:12:2c:f7:e3:35: 9c:97:41:e9:11:fa:89:53:c7:ce:d0:44:60:24:95:a8:88:a3: 64:74:6f:b7:58:c8:d8:fc:3f:9b:b0:7c:58:2f:76:47:c5:f2: 23:80:59:0c:1c:b4:01:35:88:a6:ec:ff:cc:94:61:2c:62:c6: 71:c2:b9:99:bd:d0:4d:6e:ce:7b:93:a8:df:64:05:1b:ad:cd: da:4b:20:59:97:fc:f5:dd:66:d7:43:f9:c2:5b:dc:c7:1e:3a: ab:1c:23:88:26:df:d9:81:af:93:70:fc:2b:37:d2:79:8c:e7: 02:f5:b3:e6:33:ab:38:e3:92:9f:2d:81:9f:df:cc:15:8e:9b: 04:60:03:ee:4b:fc:59:6d:4e:95:fb:a0:85:bd:b2:45:b7:b1: f9:81:b8:9a:f8:61:61:f8:56:0b:89:a3:70:87:83:a9:83:99: 42:2e:a8:70 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgISAZqC+Ujs/u2CPE7Lorq/CiXBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNjM5YWRmMWUwYjg0YjlmZjY0ZTRmOGViZTYzOGViYmY1 ZDI3YjkwHhcNMjUxMTE0MTUyNjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODAyYzU2OGVlYmE1ZDFlZGJjY2FiZTBhYjgwN2U0ZjQ3NmRlMzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTz09oWG6UKp8vSHhRBeOxPIPM0V BBrBEviPB6fArhOfBwEEwCzPvX6BS8hbcxV18iaI8rovyMGJBn2cKLsbU7ls5OvX y162eYLvGgXLxaYt3jFTU4TIwGd7adSpMnt//48aRbANwavbjyJxkUjDHiiRByEF 4StHVrkOzs4lsOrm4noskEU8HGyhlFMCZGmVzz9T4LEZRl+nfNBWIp36IP+PqVXO y4B9cX/eBgy3R3f26TpL4riMfd01RIfUV4CWU3VTyqZ1LmDc8v6pqgas8tXMhHPC bQ4NS48TE3dH4sTn0/+vGMFT8RonyYombz0uBxjwIa3eVZhkb3HTGVp+uQIDAQAB o4ICYDCCAlwwHQYDVR0OBBYEFIgCxWjuul0e28yr4KuAfk9HbeMeMB8GA1UdIwQY MBaAFKBjmt8eC4S5/2Tk+OvmOOu/XSe5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0dPYTN4NExoTG5fWk9UNDYtWTQ2NzlkSjdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYzM2M2MtMmQwZS00YmNhLWE5ZjIt ODEzYzVhYWI3ODNlLzEvaUFMRmFPNjZYUjdiekt2Z3E0Qi1UMGR0NHg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8wYzM2M2MtMmQwZS00YmNhLWE5ZjItODEzYzVhYWI3ODNl LzEvb0dPYTN4NExoTG5fWk9UNDYtWTQ2NzlkSjdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/BGcwZTBUBAIAATBOAwQCLZtwAwQC TVE0AwQEURtwAwQCkv9wAwQDoTPwAwQCuXzgAwQCuaLcAwQCucaMAwQCuedIAwQF 1D7AAwQE2QuQAwQE2RjAAwQE2R/QMA0EAgACMAcDBQMqAgWQMA0GCSqGSIb3DQEB CwUAA4IBAQCTa4yXWyMha0McxHsHat7IFRknJKlwe1oj3bMlu7cdr4oL53paxjWU VmhWFiMxTvRyjAGdsc6cQf3mdA2hbgvve7YoDEFrs1MFgXgQPyVSVEVMAamyEiz3 4zWcl0HpEfqJU8fO0ERgJJWoiKNkdG+3WMjY/D+bsHxYL3ZHxfIjgFkMHLQBNYim 7P/MlGEsYsZxwrmZvdBNbs57k6jfZAUbrc3aSyBZl/z13WbXQ/nCW9zHHjqrHCOI Jt/Zga+TcPwrN9J5jOcC9bPmM6s445KfLYGf38wVjpsEYAPuS/xZbU6V+6CFvbJF t7H5gbia+GFh+FYLiaNwh4Opg5lCLqhw -----END CERTIFICATE-----Generated at Sun Dec 7 00:10:31 2025 by rpki-client