This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/4r5s9Mo-vxBbluV0eFMWLZ5DkEA.roa File: 4r5s9Mo-vxBbluV0eFMWLZ5DkEA.roa (raw, json) Hash identifier: eY3z/9PA/1Maeyu8ReLI6rg+bAfCtkuJMwcQbYm1xG0= Subject key identifier: E2:BE:6C:F4:CA:3E:BF:10:5B:96:E5:74:78:53:16:2D:9E:43:90:40 Certificate issuer: /CN=ef8c33a8a6201d40a60220bd639b5d352212673e Certificate serial: 019A7C670524576C9597D1586A3DB4478DEA Authority key identifier: EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/4r5s9Mo-vxBbluV0eFMWLZ5DkEA.roa Signing time: Thu 13 Nov 2025 08:48:37 +0000 ROA not before: Thu 13 Nov 2025 08:48:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21040 IP address blocks: 37.203.248.0/21 maxlen: 21 37.203.248.0/22 maxlen: 22 37.203.252.0/22 maxlen: 22 84.20.56.0/21 maxlen: 21 84.20.56.0/22 maxlen: 22 84.20.60.0/22 maxlen: 22 109.94.162.0/24 maxlen: 24 109.205.200.0/21 maxlen: 21 109.205.200.0/24 maxlen: 24 109.205.201.0/24 maxlen: 24 109.205.202.0/24 maxlen: 24 109.205.203.0/24 maxlen: 24 109.205.204.0/22 maxlen: 22 185.19.120.0/22 maxlen: 22 185.19.120.0/23 maxlen: 23 185.19.122.0/23 maxlen: 23 185.71.16.0/22 maxlen: 22 185.71.16.0/23 maxlen: 23 185.71.18.0/23 maxlen: 23 185.71.112.0/22 maxlen: 22 185.71.112.0/23 maxlen: 23 185.71.114.0/23 maxlen: 23 185.178.120.0/22 maxlen: 22 185.178.120.0/23 maxlen: 23 213.196.128.0/18 maxlen: 18 213.196.128.0/24 maxlen: 24 213.196.129.0/24 maxlen: 24 213.196.130.0/24 maxlen: 24 213.196.131.0/24 maxlen: 24 213.196.132.0/24 maxlen: 24 213.196.133.0/24 maxlen: 24 213.196.135.0/24 maxlen: 24 213.196.136.0/24 maxlen: 24 213.196.137.0/24 maxlen: 24 213.196.138.0/24 maxlen: 24 213.196.140.0/24 maxlen: 24 213.196.141.0/24 maxlen: 24 213.196.142.0/24 maxlen: 24 213.196.143.0/24 maxlen: 24 213.196.144.0/24 maxlen: 24 213.196.145.0/24 maxlen: 24 213.196.146.0/24 maxlen: 24 213.196.147.0/24 maxlen: 24 213.196.151.0/24 maxlen: 24 213.196.152.0/24 maxlen: 24 213.196.153.0/24 maxlen: 24 213.196.154.0/24 maxlen: 24 213.196.155.0/24 maxlen: 24 213.196.156.0/24 maxlen: 24 213.196.158.0/24 maxlen: 24 213.196.159.0/24 maxlen: 24 213.196.160.0/24 maxlen: 24 213.196.161.0/24 maxlen: 24 213.196.162.0/24 maxlen: 24 213.196.174.0/23 maxlen: 23 213.196.184.0/22 maxlen: 22 213.196.188.0/22 maxlen: 22 2a02:24e8::/29 maxlen: 29 2a11:2780::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7c:67:05:24:57:6c:95:97:d1:58:6a:3d:b4:47:8d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef8c33a8a6201d40a60220bd639b5d352212673e Validity Not Before: Nov 13 08:48:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e2be6cf4ca3ebf105b96e5747853162d9e439040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:63:1e:7f:5a:4a:bc:35:b8:22:92:ef:d9:55: 81:9d:63:83:a5:09:85:5c:e5:c7:b2:51:52:5c:59: 5d:21:74:59:e5:dc:95:8a:ae:04:64:e6:37:5f:3b: 61:c0:0e:1e:fb:e6:bf:94:f5:3d:a4:03:f5:75:aa: 53:aa:fd:34:63:c2:91:e5:8c:d2:52:1f:32:0f:54: 86:9a:97:86:08:e7:11:94:9b:fd:b6:de:64:de:ef: a3:eb:9e:01:91:0b:d0:57:bc:31:22:da:48:24:57: 85:9d:4b:3d:19:02:33:39:8f:40:ac:cd:a8:92:e7: 20:9a:7f:3d:85:40:01:6a:d2:86:29:fc:d4:40:bc: 2a:09:75:2d:14:82:f0:e5:ad:ed:2f:5b:21:de:42: 3d:a9:c8:b0:5c:5a:92:81:d3:34:de:53:97:dc:aa: 33:f9:e1:55:1e:58:cd:80:6d:45:56:ab:4d:b7:87: b0:64:91:80:2b:2c:b1:43:f6:c1:fb:c9:f6:2c:db: b7:26:99:2d:29:5d:c3:cb:7a:9b:29:85:be:06:be: 60:3d:e7:1b:5d:b2:10:ef:d2:9f:7c:86:5a:cb:82: cd:fa:44:29:d8:9c:90:47:b2:71:e2:9d:4a:b1:23: c0:6a:3f:30:a2:03:25:b7:34:f7:f8:c9:ec:b5:be: 85:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BE:6C:F4:CA:3E:BF:10:5B:96:E5:74:78:53:16:2D:9E:43:90:40 X509v3 Authority Key Identifier: keyid:EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/4r5s9Mo-vxBbluV0eFMWLZ5DkEA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.203.248.0/21 84.20.56.0/21 109.94.162.0/24 109.205.200.0/21 185.19.120.0/22 185.71.16.0/22 185.71.112.0/22 185.178.120.0/22 213.196.128.0/18 IPv6: 2a02:24e8::/29 2a11:2780::/29 Signature Algorithm: sha256WithRSAEncryption 1d:5c:ff:b6:7a:ad:54:e3:bf:47:d8:02:c1:27:61:03:9d:14: 3e:5b:a9:43:f8:e5:bd:73:ed:9d:0a:37:df:99:6e:89:38:82: 74:21:af:8c:79:94:1e:08:a9:35:6b:a7:1b:a4:d7:ad:45:87: 7d:07:c0:71:91:9d:b1:d7:4f:78:1c:34:df:5b:d2:3e:2c:a4: 34:3e:8b:91:b8:38:7a:74:41:5b:b8:40:e7:b1:7b:55:67:26: 9f:e9:b6:fd:b0:0e:05:ef:52:95:05:8d:ba:60:29:15:66:99: 76:b3:14:1f:b2:33:00:96:e7:f7:56:0f:44:db:e5:97:0a:e3: 82:6c:04:5d:fb:aa:48:6d:5c:f1:bf:e1:71:44:f3:3d:02:c3: 11:36:8b:57:9b:2e:fb:cf:ac:3b:90:91:92:5b:ed:1e:d5:cf: 8a:20:40:7f:cc:b0:ab:28:a4:7a:41:ac:f1:6e:50:7a:86:0a: 22:33:18:cc:63:e9:4f:f7:f8:38:6f:57:96:6e:a3:6b:9b:c0: c7:ab:9a:ff:ab:ad:a0:05:b8:ce:0a:90:e9:8a:3d:46:a3:f7: e5:a9:ef:42:9d:3a:8d:b6:e7:1c:bf:a7:5f:cd:a4:f2:55:60: 13:ea:8d:47:eb:f6:83:e0:1e:09:5f:26:6c:59:7b:a6:92:85: bb:83:be:6b -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZp8ZwUkV2yVl9FYaj20R43qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmOGMzM2E4YTYyMDFkNDBhNjAyMjBiZDYzOWI1ZDM1MjIx MjY3M2UwHhcNMjUxMTEzMDg0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmJlNmNmNGNhM2ViZjEwNWI5NmU1NzQ3ODUzMTYyZDllNDM5MDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGMef1pKvDW4IpLv2VWBnWODpQmF XOXHslFSXFldIXRZ5dyViq4EZOY3XzthwA4e++a/lPU9pAP1dapTqv00Y8KR5YzS Uh8yD1SGmpeGCOcRlJv9tt5k3u+j654BkQvQV7wxItpIJFeFnUs9GQIzOY9ArM2o kucgmn89hUABatKGKfzUQLwqCXUtFILw5a3tL1sh3kI9qciwXFqSgdM03lOX3Koz +eFVHljNgG1FVqtNt4ewZJGAKyyxQ/bB+8n2LNu3JpktKV3Dy3qbKYW+Br5gPecb XbIQ79KffIZay4LN+kQp2JyQR7Jx4p1KsSPAaj8wogMltzT3+Mnstb6FtwIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFOK+bPTKPr8QW5bldHhTFi2eQ5BAMB8GA1UdIwQY MBaAFO+MM6imIB1ApgIgvWObXTUiEmc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzR3enFLWWdIVUNtQWlDOVk1dGROU0lTWno0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iZmJlNWYtOTdjOC00MzQ3LThhOGMt ZTAxYmI0ODg2M2E5LzEvNHI1czlNby12eEJibHVWMGVGTVdMWjVEa0VBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9iZmJlNWYtOTdjOC00MzQ3LThhOGMtZTAxYmI0ODg2M2E5 LzEvNzR3enFLWWdIVUNtQWlDOVk1dGROU0lTWno0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDA8BAIAATA2AwQDJcv4AwQD VBQ4AwQAbV6iAwQDbc3IAwQCuRN4AwQCuUcQAwQCuUdwAwQCubJ4AwQG1cSAMBQE AgACMA4DBQMqAiToAwUDKhEngDANBgkqhkiG9w0BAQsFAAOCAQEAHVz/tnqtVOO/ R9gCwSdhA50UPlupQ/jlvXPtnQo335luiTiCdCGvjHmUHgipNWunG6TXrUWHfQfA cZGdsddPeBw031vSPiykND6Lkbg4enRBW7hA57F7VWcmn+m2/bAOBe9SlQWNumAp FWaZdrMUH7IzAJbn91YPRNvllwrjgmwEXfuqSG1c8b/hcUTzPQLDETaLV5su+8+s O5CRklvtHtXPiiBAf8ywqyikekGs8W5QeoYKIjMYzGPpT/f4OG9Xlm6ja5vAx6ua /6utoAW4zgqQ6Yo9RqP35anvQp06jbbnHL+nX82k8lVgE+qNR+v2g+AeCV8mbFl7 ppKFu4O+aw== -----END CERTIFICATE-----Generated at Sun Dec 7 07:32:47 2025 by rpki-client