This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/3X4fLjQOSwkh1q7Lc1xfQdSqrOA.roa File: 3X4fLjQOSwkh1q7Lc1xfQdSqrOA.roa (raw, json) Hash identifier: AzHH5krqdSeT+1rrrFJs2C0Mi40aQNEqK7h23pXcpz4= Subject key identifier: DD:7E:1F:2E:34:0E:4B:09:21:D6:AE:CB:73:5C:5F:41:D4:AA:AC:E0 Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3 Certificate serial: 019A6E85DB9DABD2091CFF2AD49BFEAFC39F Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/3X4fLjQOSwkh1q7Lc1xfQdSqrOA.roa Signing time: Mon 10 Nov 2025 16:07:37 +0000 ROA not before: Mon 10 Nov 2025 16:07:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 2856 IP address blocks: 2.24.0.0/13 maxlen: 13 31.64.0.0/12 maxlen: 12 31.90.0.0/15 maxlen: 15 31.92.0.0/15 maxlen: 15 31.94.0.0/16 maxlen: 16 31.96.0.0/16 maxlen: 16 31.99.64.0/18 maxlen: 18 31.99.128.0/18 maxlen: 18 31.99.192.0/18 maxlen: 18 31.100.0.0/14 maxlen: 14 31.104.0.0/16 maxlen: 16 31.106.0.0/15 maxlen: 15 31.112.0.0/14 maxlen: 14 31.116.0.0/14 maxlen: 14 31.116.0.0/16 maxlen: 16 31.117.0.0/16 maxlen: 16 31.118.0.0/16 maxlen: 16 31.119.0.0/16 maxlen: 16 31.120.0.0/16 maxlen: 16 31.121.0.0/16 maxlen: 16 31.122.0.0/15 maxlen: 15 31.124.0.0/16 maxlen: 16 31.126.0.0/15 maxlen: 15 46.68.66.0/24 maxlen: 24 82.192.112.0/20 maxlen: 20 91.110.0.0/16 maxlen: 16 91.111.0.0/16 maxlen: 16 95.144.0.0/13 maxlen: 13 109.180.0.0/15 maxlen: 15 178.98.0.0/15 maxlen: 15 178.100.0.0/14 maxlen: 14 178.106.0.0/16 maxlen: 16 178.107.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 19:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6e:85:db:9d:ab:d2:09:1c:ff:2a:d4:9b:fe:af:c3:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b98127943e7175734964010c89ef821416a31b3 Validity Not Before: Nov 10 16:07:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dd7e1f2e340e4b0921d6aecb735c5f41d4aaace0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:bd:1f:21:af:c2:ed:49:40:a7:0b:5e:e8:d9: 25:99:85:a0:56:25:ac:8d:c6:1e:35:5b:26:86:c3: d5:54:e5:5c:03:fa:39:7f:d1:6f:9f:aa:57:7c:29: 0d:44:4e:2b:66:50:d8:db:8a:26:77:d1:b3:be:cd: 26:d3:89:ca:d1:e1:f5:e0:3a:a9:3f:96:ac:a9:a5: 2a:bb:7e:c5:1e:cf:01:52:c3:65:a8:c6:20:93:9b: 10:c3:56:a4:e7:80:90:f2:34:76:8a:75:70:e6:20: ee:be:03:cd:ef:31:37:e5:ed:90:d3:01:3b:1a:1e: fb:68:bd:ed:ca:8d:81:2c:8d:3f:c1:c1:fd:73:d4: b2:74:c8:23:c4:20:d3:8c:c7:7a:68:15:1f:f6:0f: eb:67:1d:c7:e8:94:fe:39:23:e2:67:dc:83:be:fc: 0b:aa:43:41:b4:f7:e7:b0:e4:89:4e:47:77:30:0f: 5f:3f:05:f4:98:21:77:62:f6:ba:34:18:1c:0e:6a: dd:86:6d:24:d7:ee:10:94:9c:f5:67:5d:02:6a:3f: 23:5f:e0:de:5d:89:ae:0d:cf:17:85:97:ba:e3:be: ae:16:98:0d:63:c6:3f:94:42:48:c4:6d:c0:bf:1b: d7:1f:1d:99:8a:b3:a4:2a:76:4a:f6:8b:80:d9:2e: d9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7E:1F:2E:34:0E:4B:09:21:D6:AE:CB:73:5C:5F:41:D4:AA:AC:E0 X509v3 Authority Key Identifier: keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/3X4fLjQOSwkh1q7Lc1xfQdSqrOA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.24.0.0/13 31.64.0.0/12 31.90.0.0-31.94.255.255 31.96.0.0/16 31.99.64.0-31.104.255.255 31.106.0.0/15 31.112.0.0-31.124.255.255 31.126.0.0/15 46.68.66.0/24 82.192.112.0/20 91.110.0.0/15 95.144.0.0/13 109.180.0.0/15 178.98.0.0-178.103.255.255 178.106.0.0/16 178.107.128.0/17 Signature Algorithm: sha256WithRSAEncryption 17:15:ec:0d:37:05:f4:16:3c:a8:b4:11:15:3c:6d:dd:5d:53: cc:62:95:ac:58:81:06:b6:e3:80:4c:52:6e:35:37:de:e8:0f: a8:01:16:70:8a:23:b3:14:2e:98:62:40:fb:8e:be:ca:9b:87: dc:53:f2:ec:2d:ea:48:41:d4:10:49:16:e6:45:c0:0b:dc:f1: c6:f1:2b:e0:27:ed:cc:1b:a6:a8:84:0d:e4:df:c1:7d:9a:19: 1d:1d:61:80:04:ba:cd:1c:2d:a5:7d:97:c2:5c:67:85:78:a6: 97:48:71:e9:ee:34:00:e6:40:f7:ea:41:a8:94:6f:f3:29:b8: 42:8f:8d:54:26:9e:be:a4:1f:59:a7:9e:c1:83:85:08:8a:76: 3a:33:ec:18:43:ff:24:ba:b7:0a:6e:8f:6a:1f:42:bd:1e:40: a8:9d:dc:10:dd:eb:46:f4:60:9e:91:31:50:ec:12:3d:e7:32: 97:16:b1:3e:0a:95:f4:63:a5:c4:4a:9a:88:7a:e8:69:cf:e9: 46:53:f9:ff:20:7a:69:b8:4e:68:c2:59:13:c8:0a:69:6f:d5: fe:d2:02:ef:0a:05:ea:45:0c:e8:e7:c1:20:0d:fe:6e:be:e8: 8c:5d:12:b9:65:f9:4b:f7:c9:c2:58:6f:65:77:96:c8:71:33: db:e4:e9:20 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgISAZpuhdudq9IJHP8q1Jv+r8OfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOTgxMjc5NDNlNzE3NTczNDk2NDAxMGM4OWVmODIxNDE2 YTMxYjMwHhcNMjUxMTEwMTYwNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDdlMWYyZTM0MGU0YjA5MjFkNmFlY2I3MzVjNWY0MWQ0YWFhY2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7r0fIa/C7UlApwte6NklmYWgViWs jcYeNVsmhsPVVOVcA/o5f9Fvn6pXfCkNRE4rZlDY24omd9Gzvs0m04nK0eH14Dqp P5asqaUqu37FHs8BUsNlqMYgk5sQw1ak54CQ8jR2inVw5iDuvgPN7zE35e2Q0wE7 Gh77aL3tyo2BLI0/wcH9c9SydMgjxCDTjMd6aBUf9g/rZx3H6JT+OSPiZ9yDvvwL qkNBtPfnsOSJTkd3MA9fPwX0mCF3Yva6NBgcDmrdhm0k1+4QlJz1Z10Caj8jX+De XYmuDc8XhZe6476uFpgNY8Y/lEJIxG3AvxvXHx2ZirOkKnZK9ouA2S7ZZwIDAQAB o4ICdDCCAnAwHQYDVR0OBBYEFN1+Hy40DksJIdauy3NcX0HUqqzgMB8GA1UdIwQY MBaAFEuYEnlD5xdXNJZAEMie+CFBajGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2Njgt NjIxNzkyZjdlNTZhLzEvM1g0ZkxqUU9Td2toMXE3TGMxeGZRZFNxck9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2NjgtNjIxNzkyZjdlNTZh LzEvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGJBggrBgEFBQcBBwEB/wR6MHgwdgQCAAEwcAMDAwIYAwME H0AwCgMDAR9aAwMAH14DAwAfYDALAwQGH2NAAwMAH2gDAwEfajAKAwMEH3ADAwAf fAMDAR9+AwQALkRCAwQEUsBwAwMBW24DAwNfkAMDAW20MAoDAwGyYgMDA7JgAwMA smoDBAeya4AwDQYJKoZIhvcNAQELBQADggEBABcV7A03BfQWPKi0ERU8bd1dU8xi laxYgQa244BMUm41N97oD6gBFnCKI7MULphiQPuOvsqbh9xT8uwt6khB1BBJFuZF wAvc8cbxK+An7cwbpqiEDeTfwX2aGR0dYYAEus0cLaV9l8JcZ4V4ppdIcenuNADm QPfqQaiUb/MpuEKPjVQmnr6kH1mnnsGDhQiKdjoz7BhD/yS6twpuj2ofQr0eQKid 3BDd60b0YJ6RMVDsEj3nMpcWsT4KlfRjpcRKmoh66GnP6UZT+f8gemm4TmjCWRPI Cmlv1f7SAu8KBepFDOjnwSAN/m6+6IxdErll+Uv3ycJYb2V3lshxM9vk6SA= -----END CERTIFICATE-----Generated at Mon Dec 8 03:55:28 2025 by rpki-client