This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/m4vwb_vLvLwWZv59QfZMuAiiFNs.roa File: m4vwb_vLvLwWZv59QfZMuAiiFNs.roa (raw, json) Hash identifier: AwAbQWg0+7hyRgYG8ZOhFhixr4yr2ULlCvoBBwWvoDo= Subject key identifier: 9B:8B:F0:6F:FB:CB:BC:BC:16:66:FE:7D:41:F6:4C:B8:08:A2:14:DB Certificate issuer: /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43 Certificate serial: 019A92FE685DFCD58E2D20F02D9D56857F6A Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/m4vwb_vLvLwWZv59QfZMuAiiFNs.roa Signing time: Mon 17 Nov 2025 18:05:37 +0000 ROA not before: Mon 17 Nov 2025 18:05:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29014 IP address blocks: 45.139.156.0/22 maxlen: 24 45.139.158.0/23 maxlen: 23 85.158.0.0/22 maxlen: 24 85.158.0.0/24 maxlen: 24 85.158.4.0/23 maxlen: 23 85.158.6.0/24 maxlen: 24 85.158.7.0/24 maxlen: 24 93.92.128.0/21 maxlen: 24 93.92.128.0/23 maxlen: 23 93.92.130.0/23 maxlen: 23 93.92.132.0/24 maxlen: 24 93.92.133.0/24 maxlen: 24 93.92.134.0/23 maxlen: 23 185.8.8.0/22 maxlen: 24 185.8.8.0/24 maxlen: 24 192.42.65.0/24 maxlen: 24 193.41.116.0/23 maxlen: 24 194.126.239.0/24 maxlen: 24 195.177.232.0/23 maxlen: 24 195.177.233.0/24 maxlen: 24 2a00:12e8::/32 maxlen: 40 2a00:12e8::/40 maxlen: 40 2a00:12e8:100::/40 maxlen: 40 2a00:12e8:200::/40 maxlen: 40 2a00:12e8:300::/40 maxlen: 40 2a00:12e8:400::/40 maxlen: 40 2a00:12e8:500::/40 maxlen: 40 2a00:12e8:600::/40 maxlen: 40 2a00:12e8:700::/40 maxlen: 40 2a00:12e8:800::/40 maxlen: 48 2a00:12e8:800::/48 maxlen: 48 2a00:12e8:801::/48 maxlen: 48 2a00:12e8:802::/48 maxlen: 48 2a00:12e8:900::/40 maxlen: 40 2a00:12e8:f111::/48 maxlen: 48 2a00:12e8:f122::/48 maxlen: 48 2a00:12e8:f123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:92:fe:68:5d:fc:d5:8e:2d:20:f0:2d:9d:56:85:7f:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43 Validity Not Before: Nov 17 18:05:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9b8bf06ffbcbbcbc1666fe7d41f64cb808a214db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:59:a5:37:62:c7:df:0e:89:2f:03:1e:f2:20: b2:5f:92:a8:cf:23:2f:3b:20:dc:98:51:73:b1:75: 2b:9d:02:87:8c:90:47:2e:9b:ef:eb:61:8d:1f:4f: bf:1e:c7:ef:15:0c:eb:e7:73:6d:15:c0:41:58:68: 7a:0a:e0:d3:96:77:bf:dc:b8:2d:fc:a3:b7:03:44: 27:50:ff:2c:29:9f:2f:4c:2c:45:8b:a9:b2:c7:63: 17:4c:c2:75:9c:be:01:42:8c:ff:fc:fa:64:2e:b5: 64:29:5b:26:67:03:98:d9:02:b9:24:a8:f1:e7:75: 99:e1:bf:62:62:3f:11:74:83:fd:92:90:ac:b2:21: 45:cd:19:9d:0d:9f:dd:d1:4b:3a:ba:9d:9f:d4:ac: 9f:fc:47:0a:31:f0:4d:29:0b:23:06:f1:96:6e:95: db:46:fb:57:f7:3a:2a:a3:c6:c7:b8:43:e6:36:66: 35:09:b9:fe:3e:76:66:98:0f:09:44:7a:b3:8d:75: 4c:7d:f7:86:b6:4e:61:dd:2a:98:52:36:d7:4d:f7: 47:bb:c7:1a:48:46:50:1a:cb:dc:f7:b4:fb:ef:08: 8e:28:3f:8c:bc:ba:62:93:0d:2b:8c:46:2a:81:a6: 07:68:a4:2c:2b:3b:e0:cf:d8:06:cb:d5:b4:4b:19: 03:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8B:F0:6F:FB:CB:BC:BC:16:66:FE:7D:41:F6:4C:B8:08:A2:14:DB X509v3 Authority Key Identifier: keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/m4vwb_vLvLwWZv59QfZMuAiiFNs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.156.0/22 85.158.0.0/21 93.92.128.0/21 185.8.8.0/22 192.42.65.0/24 193.41.116.0/23 194.126.239.0/24 195.177.232.0/23 IPv6: 2a00:12e8::/32 Signature Algorithm: sha256WithRSAEncryption 80:59:8e:5e:f7:c7:1f:0f:7d:4a:75:9d:67:c8:d2:87:8b:fa: 70:92:6d:69:6e:9d:e8:ea:89:e5:14:64:53:5d:30:00:04:41: 68:4d:d8:30:c0:13:b1:02:a4:36:3c:10:78:bc:b6:1f:a5:44: 91:71:80:05:9f:21:f9:38:0c:9e:77:c7:58:df:22:4a:1b:6b: fb:62:d1:b8:d1:f4:df:32:4f:24:83:c2:48:7f:c4:46:4b:f1: 3b:b9:21:82:96:a0:58:ec:44:3f:53:e0:ba:db:bc:09:d3:db: 38:9e:39:fa:51:ce:59:dd:09:1d:46:6d:b5:f7:67:a6:34:16: 15:3b:d8:b0:56:c5:8f:9a:21:0a:a5:fd:3b:07:51:ef:36:fc: 00:31:45:cc:1e:c2:01:18:0d:33:94:be:3a:f4:de:d2:13:7b: 51:c9:fe:26:00:ab:f7:e4:e9:d8:f5:03:f8:25:25:9a:73:e1: 6e:f3:cf:fb:c3:d6:84:17:d8:11:5d:14:98:14:c9:df:94:13: 38:06:31:94:1d:71:28:85:6f:25:72:aa:f6:0f:19:b6:d4:db: 98:fb:0b:35:a2:b1:74:ab:2a:49:1e:3b:00:01:ca:0c:0d:60: 58:21:ce:d7:55:cf:8c:6c:cc:1c:c7:67:20:0d:ab:dc:7d:b6: e8:bd:80:76 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZqS/mhd/NWOLSDwLZ1WhX9qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxYjhjMmYzN2JkOGQ3ZTA0ZTc2OTg1YTRjZWQ0NTU5ZDc2 NTFjNDMwHhcNMjUxMTE3MTgwNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjhiZjA2ZmZiY2JiY2JjMTY2NmZlN2Q0MWY2NGNiODA4YTIxNGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1mlN2LH3w6JLwMe8iCyX5KozyMv OyDcmFFzsXUrnQKHjJBHLpvv62GNH0+/HsfvFQzr53NtFcBBWGh6CuDTlne/3Lgt /KO3A0QnUP8sKZ8vTCxFi6myx2MXTMJ1nL4BQoz//PpkLrVkKVsmZwOY2QK5JKjx 53WZ4b9iYj8RdIP9kpCssiFFzRmdDZ/d0Us6up2f1Kyf/EcKMfBNKQsjBvGWbpXb RvtX9zoqo8bHuEPmNmY1Cbn+PnZmmA8JRHqzjXVMffeGtk5h3SqYUjbXTfdHu8ca SEZQGsvc97T77wiOKD+MvLpikw0rjEYqgaYHaKQsKzvgz9gGy9W0SxkD7wIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFJuL8G/7y7y8Fmb+fUH2TLgIohTbMB8GA1UdIwQY MBaAFEG4wvN72NfgTnaYWkztRVnXZRxDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWJqQzgzdlkxLUJPZHBoYVRPMUZXZGRsSEVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8zZTNiNGItZjgyNy00MzQ3LTkwMjIt MjgxOGY2NTc4ZDFiLzEvbTR2d2Jfdkx2THdXWnY1OVFmWk11QWlpRk5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8zZTNiNGItZjgyNy00MzQ3LTkwMjItMjgxOGY2NTc4ZDFi LzEvUWJqQzgzdlkxLUJPZHBoYVRPMUZXZGRsSEVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQCLYucAwQD VZ4AAwQDXVyAAwQCuQgIAwQAwCpBAwQBwSl0AwQAwn7vAwQBw7HoMA0EAgACMAcD BQAqABLoMA0GCSqGSIb3DQEBCwUAA4IBAQCAWY5e98cfD31KdZ1nyNKHi/pwkm1p bp3o6onlFGRTXTAABEFoTdgwwBOxAqQ2PBB4vLYfpUSRcYAFnyH5OAyed8dY3yJK G2v7YtG40fTfMk8kg8JIf8RGS/E7uSGClqBY7EQ/U+C627wJ09s4njn6Uc5Z3Qkd Rm2192emNBYVO9iwVsWPmiEKpf07B1HvNvwAMUXMHsIBGA0zlL469N7SE3tRyf4m AKv35OnY9QP4JSWac+Fu88/7w9aEF9gRXRSYFMnflBM4BjGUHXEohW8lcqr2Dxm2 1NuY+ws1orF0qypJHjsAAcoMDWBYIc7XVc+MbMwcx2cgDavcfbbovYB2 -----END CERTIFICATE-----Generated at Sat Dec 6 14:35:16 2025 by rpki-client