This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/9Q2RHv269wPiesXqtuAqx5hcH88.roa File: 9Q2RHv269wPiesXqtuAqx5hcH88.roa (raw, json) Hash identifier: wl+INHVpEi+t5QzVsEqpFRnOOYgn09RgHODGqfcm7so= Subject key identifier: F5:0D:91:1E:FD:BA:F7:03:E2:7A:C5:EA:B6:E0:2A:C7:98:5C:1F:CF Certificate issuer: /CN=014efdfd0647ccba734b2a05660124eb8c067567 Certificate serial: 019AA550510F6AB88E956E5E3A4282FF7CB8 Authority key identifier: 01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/9Q2RHv269wPiesXqtuAqx5hcH88.roa Signing time: Fri 21 Nov 2025 07:28:15 +0000 ROA not before: Fri 21 Nov 2025 07:28:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48940 IP address blocks: 46.148.96.0/20 maxlen: 20 46.148.96.0/21 maxlen: 21 46.148.104.0/21 maxlen: 21 62.122.96.0/21 maxlen: 21 62.122.96.0/22 maxlen: 22 62.122.100.0/22 maxlen: 22 94.231.160.0/20 maxlen: 20 94.231.160.0/21 maxlen: 21 94.231.168.0/21 maxlen: 21 176.115.32.0/19 maxlen: 24 176.115.32.0/21 maxlen: 21 176.115.40.0/21 maxlen: 21 176.115.48.0/21 maxlen: 21 176.115.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:50:51:0f:6a:b8:8e:95:6e:5e:3a:42:82:ff:7c:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=014efdfd0647ccba734b2a05660124eb8c067567 Validity Not Before: Nov 21 07:28:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f50d911efdbaf703e27ac5eab6e02ac7985c1fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d5:4b:6e:cb:9c:d9:f1:ee:9f:f6:72:4c:b0: 51:49:39:d3:44:37:a9:63:c4:64:17:c9:05:31:da: 60:c9:c0:87:95:c9:8c:be:0b:c7:1f:8f:4c:83:74: 5a:80:a0:b1:6e:fa:49:e6:90:34:b7:18:78:8d:88: c7:b4:c4:bc:40:d3:e2:2e:73:db:b1:63:48:b0:f1: 73:3e:4f:6a:58:48:4e:30:49:17:8a:70:f3:9b:e6: ca:08:35:09:46:b3:ff:22:ab:ed:33:39:5a:0b:09: 74:92:45:e5:05:89:49:34:6f:22:7d:4a:23:bf:50: 7c:b6:d6:fc:78:fe:fe:8c:cd:d9:3f:27:17:48:98: 27:19:69:f8:c3:da:99:b8:4a:2e:24:e7:ee:94:90: 7f:7f:01:4e:23:01:fd:02:4b:44:77:c5:7c:98:a7: 76:bf:b4:b9:14:35:95:14:b7:a4:a4:cc:2d:a0:32: e2:fe:7f:b3:c2:7f:2e:ca:f5:1f:71:94:c5:ae:aa: 7f:68:f9:15:b3:34:cc:4a:0e:37:52:c9:4e:73:cf: 0d:ce:b4:71:dd:d7:7c:27:78:5a:a1:2f:3c:54:22: bc:ad:a0:bd:c5:14:b2:a0:72:9a:0b:81:6d:5b:64: 35:c1:47:3d:67:01:4f:78:b2:bc:7c:5d:5e:e0:ac: 87:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0D:91:1E:FD:BA:F7:03:E2:7A:C5:EA:B6:E0:2A:C7:98:5C:1F:CF X509v3 Authority Key Identifier: keyid:01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/9Q2RHv269wPiesXqtuAqx5hcH88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.148.96.0/20 62.122.96.0/21 94.231.160.0/20 176.115.32.0/19 Signature Algorithm: sha256WithRSAEncryption b1:8f:54:05:3b:d8:b0:db:3a:6d:c3:8d:65:4a:41:05:56:79: ae:fa:eb:06:a5:2a:4c:9f:1f:5c:97:77:48:76:27:80:b9:d3: 93:ae:e9:b5:57:88:18:9f:4c:c1:aa:f5:a1:36:b9:70:cb:70: e2:8b:3b:ad:8e:7f:56:34:4b:74:67:b6:ed:0a:b0:61:42:ab: 3a:c4:6b:50:c5:9c:82:77:2c:cd:f5:20:b0:ca:27:73:29:12: fb:44:c7:c9:79:93:61:36:24:3f:43:f8:6d:36:0c:81:dc:eb: 04:4e:85:c0:88:0d:a3:f4:3f:13:2d:fc:dc:b3:45:91:3f:28: f7:4f:64:62:aa:31:34:ac:de:81:f3:23:ba:01:9b:08:15:80: 50:38:b7:7e:53:3f:db:55:63:0d:1d:4e:53:08:50:87:ac:0c: 11:b6:f2:9d:50:3d:55:81:a8:dd:e2:2d:50:c2:9a:38:21:26: d7:ca:b0:8e:5b:2a:a1:cf:8a:40:d0:ba:f0:14:32:48:ae:fa: 99:eb:f3:8b:07:00:4e:04:ae:22:09:69:ae:cd:e5:ab:e1:92: 90:bd:64:f1:17:d6:67:18:f0:f4:3d:6c:3a:19:1e:e2:46:a1: e8:12:d2:e7:88:1d:fd:3a:70:16:eb:59:31:6a:3a:c9:d8:38: fb:6a:dd:8c -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZqlUFEPariOlW5eOkKC/3y4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNGVmZGZkMDY0N2NjYmE3MzRiMmEwNTY2MDEyNGViOGMw Njc1NjcwHhcNMjUxMTIxMDcyODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTBkOTExZWZkYmFmNzAzZTI3YWM1ZWFiNmUwMmFjNzk4NWMxZmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtVLbsuc2fHun/ZyTLBRSTnTRDep Y8RkF8kFMdpgycCHlcmMvgvHH49Mg3RagKCxbvpJ5pA0txh4jYjHtMS8QNPiLnPb sWNIsPFzPk9qWEhOMEkXinDzm+bKCDUJRrP/IqvtMzlaCwl0kkXlBYlJNG8ifUoj v1B8ttb8eP7+jM3ZPycXSJgnGWn4w9qZuEouJOfulJB/fwFOIwH9AktEd8V8mKd2 v7S5FDWVFLekpMwtoDLi/n+zwn8uyvUfcZTFrqp/aPkVszTMSg43UslOc88NzrRx 3dd8J3haoS88VCK8raC9xRSyoHKaC4FtW2Q1wUc9ZwFPeLK8fF1e4KyHpwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPUNkR79uvcD4nrF6rbgKseYXB/PMB8GA1UdIwQY MBaAFAFO/f0GR8y6c0sqBWYBJOuMBnVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVU3OV9RWkh6THB6U3lvRlpnRWs2NHdHZFdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9mOWM3NmItNGM2Ni00MzQ2LThhZGUt ZmM2Y2RhYWYyNTBiLzEvOVEyUkh2MjY5d1BpZXNYcXR1QXF4NWhjSDg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9mOWM3NmItNGM2Ni00MzQ2LThhZGUtZmM2Y2RhYWYyNTBi LzEvQVU3OV9RWkh6THB6U3lvRlpnRWs2NHdHZFdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQELpRgAwQD PnpgAwQEXuegAwQFsHMgMA0GCSqGSIb3DQEBCwUAA4IBAQCxj1QFO9iw2zptw41l SkEFVnmu+usGpSpMnx9cl3dIdieAudOTrum1V4gYn0zBqvWhNrlwy3Diizutjn9W NEt0Z7btCrBhQqs6xGtQxZyCdyzN9SCwyidzKRL7RMfJeZNhNiQ/Q/htNgyB3OsE ToXAiA2j9D8TLfzcs0WRPyj3T2RiqjE0rN6B8yO6AZsIFYBQOLd+Uz/bVWMNHU5T CFCHrAwRtvKdUD1Vgajd4i1Qwpo4ISbXyrCOWyqhz4pA0LrwFDJIrvqZ6/OLBwBO BK4iCWmuzeWr4ZKQvWTxF9ZnGPD0PWw6GR7iRqHoEtLniB39OnAW61kxajrJ2Dj7 at2M -----END CERTIFICATE-----Generated at Sat Dec 6 16:52:03 2025 by rpki-client