This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/sFFRVQ5bs175KjcdLrLPDxkS0e0.roa File: sFFRVQ5bs175KjcdLrLPDxkS0e0.roa (raw, json) Hash identifier: xckF55VIFRhlUbBtbTepg/8ockw5gaKMZ1KZ1D2VBGY= Subject key identifier: B0:51:51:55:0E:5B:B3:5E:F9:2A:37:1D:2E:B2:CF:0F:19:12:D1:ED Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019B09E2131E70C4B227CAEF0793542F73D3 Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/sFFRVQ5bs175KjcdLrLPDxkS0e0.roa Signing time: Wed 10 Dec 2025 20:09:29 +0000 ROA not before: Wed 10 Dec 2025 20:09:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209641 IP address blocks: 46.243.7.0/24 maxlen: 24 91.200.14.0/24 maxlen: 24 91.200.15.0/24 maxlen: 24 92.62.119.0/24 maxlen: 24 94.232.248.0/24 maxlen: 24 95.81.76.0/24 maxlen: 24 95.81.114.0/24 maxlen: 24 95.81.115.0/24 maxlen: 24 95.81.123.0/24 maxlen: 24 95.81.124.0/24 maxlen: 24 95.81.125.0/24 maxlen: 24 109.69.60.0/24 maxlen: 24 185.87.48.0/22 maxlen: 22 185.87.48.0/24 maxlen: 24 185.87.49.0/24 maxlen: 24 185.87.50.0/24 maxlen: 24 185.87.51.0/24 maxlen: 24 185.117.152.0/22 maxlen: 22 2a06:ddc0::/29 maxlen: 29 2a0b:d900::/29 maxlen: 29 2a0c:5d00:2001::/48 maxlen: 48 2a0c:6980::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 14:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:e2:13:1e:70:c4:b2:27:ca:ef:07:93:54:2f:73:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Dec 10 20:09:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b05151550e5bb35ef92a371d2eb2cf0f1912d1ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2e:c3:30:28:4b:6c:10:13:ca:f0:46:da:fb: f2:f1:eb:0f:e1:5a:aa:36:b8:f8:17:02:ed:71:7a: ae:c8:01:1f:83:3e:12:48:63:a8:24:df:9a:f0:1a: 85:00:cc:1d:57:cf:6d:51:2a:fa:9b:78:3b:2b:95: af:22:39:ba:36:7f:9c:06:65:ca:fb:f8:82:d1:ae: 98:79:00:48:2b:71:76:f7:0b:33:10:2a:28:f6:91: f2:00:3c:32:f2:8d:e5:83:23:5b:58:e5:0c:9c:e6: 46:cf:a1:6e:f1:d2:9a:2a:c9:7f:93:03:3a:94:85: 7d:a8:01:63:54:13:7e:3c:6d:5b:23:d6:7e:8c:ad: dc:66:04:61:92:63:ef:5e:9c:8c:4d:05:0d:d1:ed: 9f:aa:f9:30:86:ca:7d:7e:77:5f:40:e5:d9:e8:2c: fd:09:ca:7a:f5:20:65:2c:e7:8b:46:9e:3a:ee:02: bd:fe:5c:e7:a1:8d:55:91:c2:6c:cd:8a:f2:67:4d: 69:d4:a8:43:5d:a3:9a:2f:9e:8a:6d:a7:bc:10:71: 04:9a:4d:54:ab:59:38:57:6d:c8:85:69:8d:48:f0: 30:f9:68:82:fc:40:87:27:cc:f4:67:50:62:04:85: 16:48:d2:aa:7e:aa:89:a3:6f:8b:95:1e:0d:13:72: 95:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:51:51:55:0E:5B:B3:5E:F9:2A:37:1D:2E:B2:CF:0F:19:12:D1:ED X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/sFFRVQ5bs175KjcdLrLPDxkS0e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.7.0/24 91.200.14.0/23 92.62.119.0/24 94.232.248.0/24 95.81.76.0/24 95.81.114.0/23 95.81.123.0-95.81.125.255 109.69.60.0/24 185.87.48.0/22 185.117.152.0/22 IPv6: 2a06:ddc0::/29 2a0b:d900::/29 2a0c:5d00:2001::/48 2a0c:6980::/29 Signature Algorithm: sha256WithRSAEncryption 96:6e:73:b5:39:0e:f1:53:1d:35:6f:37:55:69:5e:70:71:e9: ee:81:97:84:c5:66:b6:46:f3:6b:97:fb:b6:4c:17:55:80:c1: 2a:05:31:cd:1a:47:7f:4a:d7:72:0d:46:40:75:95:47:26:25: c6:ed:8c:e4:2c:21:4d:35:78:00:30:e8:e7:58:90:26:ac:22: 2c:bd:73:15:8d:a3:99:aa:67:b5:0b:f1:e7:54:7f:ce:5d:5e: 4f:b6:5a:af:52:f7:31:04:ae:2f:7b:6f:ec:0d:68:43:c6:76: 8c:bb:fc:31:36:bb:d2:13:44:a2:e6:8f:9c:b1:d1:00:62:79: 18:c4:61:85:b5:60:18:57:26:03:5d:53:4a:a4:d2:fa:4c:da: b3:cf:ee:81:59:36:e5:f5:f7:d1:62:a6:4b:2a:8f:9b:bf:a1: 6f:b9:bc:e7:bd:34:b3:7a:bc:2e:02:cb:a7:f7:6d:dc:1e:8a: 8d:92:99:ae:b9:6b:ac:7a:8a:63:80:94:4a:fe:ca:d1:8f:14: e5:fd:4e:5d:e3:e6:cd:78:00:32:f4:fd:83:4e:2e:82:f1:63: fc:93:44:66:58:a9:16:31:c1:b3:9f:68:12:ae:74:09:f7:3e: 86:bb:9a:d4:d8:d1:2c:2e:e3:da:88:91:11:c1:0f:8e:4f:01: 82:03:16:e6 -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgISAZsJ4hMecMSyJ8rvB5NUL3PTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjUxMjEwMjAwOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDUxNTE1NTBlNWJiMzVlZjkyYTM3MWQyZWIyY2YwZjE5MTJkMWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS7DMChLbBATyvBG2vvy8esP4Vqq Nrj4FwLtcXquyAEfgz4SSGOoJN+a8BqFAMwdV89tUSr6m3g7K5WvIjm6Nn+cBmXK +/iC0a6YeQBIK3F29wszECoo9pHyADwy8o3lgyNbWOUMnOZGz6Fu8dKaKsl/kwM6 lIV9qAFjVBN+PG1bI9Z+jK3cZgRhkmPvXpyMTQUN0e2fqvkwhsp9fndfQOXZ6Cz9 Ccp69SBlLOeLRp467gK9/lznoY1VkcJszYryZ01p1KhDXaOaL56Kbae8EHEEmk1U q1k4V23IhWmNSPAw+WiC/ECHJ8z0Z1BiBIUWSNKqfqqJo2+LlR4NE3KVawIDAQAB o4ICbjCCAmowHQYDVR0OBBYEFLBRUVUOW7Ne+So3HS6yzw8ZEtHtMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvc0ZGUlZRNWJzMTc1S2pjZExyTFBEeGtTMGUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwSgQCAAEwRAMEAC7zBwME AVvIDgMEAFw+dwMEAF7o+AMEAF9RTAMEAV9RcjAMAwQAX1F7AwQBX1F8AwQAbUU8 AwQCuVcwAwQCuXWYMCQEAgACMB4DBQMqBt3AAwUDKgvZAAMHACoMXQAgAQMFAyoM aYAwDQYJKoZIhvcNAQELBQADggEBAJZuc7U5DvFTHTVvN1VpXnBx6e6Bl4TFZrZG 82uX+7ZMF1WAwSoFMc0aR39K13INRkB1lUcmJcbtjOQsIU01eAAw6OdYkCasIiy9 cxWNo5mqZ7UL8edUf85dXk+2Wq9S9zEEri97b+wNaEPGdoy7/DE2u9ITRKLmj5yx 0QBieRjEYYW1YBhXJgNdU0qk0vpM2rPP7oFZNuX199Fipksqj5u/oW+5vOe9NLN6 vC4Cy6f3bdweio2Sma65a6x6imOAlEr+ytGPFOX9Tl3j5s14ADL0/YNOLoLxY/yT RGZYqRYxwbOfaBKudAn3Poa7mtTY0Swu49qIkRHBD45PAYIDFuY= -----END CERTIFICATE-----Generated at Wed Dec 17 22:21:23 2025 by rpki-client