This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cS2m6R7f2XCuvcAi1l2uYejBKgk.roa File: cS2m6R7f2XCuvcAi1l2uYejBKgk.roa (raw, json) Hash identifier: Cw4f+glQjhGQu/Yq+6qCf0hCM5NpEoEyL6SHwOM/4P8= Subject key identifier: 71:2D:A6:E9:1E:DF:D9:70:AE:BD:C0:22:D6:5D:AE:61:E8:C1:2A:09 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B30531899118C58064F6CB2C82B617255 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cS2m6R7f2XCuvcAi1l2uYejBKgk.roa Signing time: Thu 18 Dec 2025 07:18:30 +0000 ROA not before: Thu 18 Dec 2025 07:18:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 45.66.228.0/24 maxlen: 24 45.66.231.0/24 maxlen: 24 45.89.247.0/24 maxlen: 24 45.141.158.0/24 maxlen: 24 81.161.238.0/24 maxlen: 24 83.219.99.0/24 maxlen: 24 85.217.130.0/23 maxlen: 24 87.120.87.0/24 maxlen: 24 87.120.126.0/24 maxlen: 24 87.120.166.0/24 maxlen: 24 87.120.245.0/24 maxlen: 24 87.121.60.0/23 maxlen: 23 87.121.132.0/22 maxlen: 24 87.121.165.0/24 maxlen: 24 91.92.27.0/24 maxlen: 24 91.92.67.0/24 maxlen: 24 91.92.248.0/21 maxlen: 24 92.119.196.0/23 maxlen: 24 92.249.50.0/24 maxlen: 24 93.123.109.0/24 maxlen: 24 185.222.160.0/24 maxlen: 24 193.25.216.0/24 maxlen: 24 193.148.253.0/24 maxlen: 24 194.31.222.0/24 maxlen: 24 194.55.186.0/24 maxlen: 24 194.169.175.0/24 maxlen: 24 212.73.149.0/24 maxlen: 24 212.87.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:53:18:99:11:8c:58:06:4f:6c:b2:c8:2b:61:72:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Dec 18 07:18:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=712da6e91edfd970aebdc022d65dae61e8c12a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7f:25:c4:48:80:99:a4:f8:b4:f5:44:b2:3d: 5b:2f:c6:0a:dd:93:c1:64:43:0c:3a:6e:05:1a:47: 5f:c7:22:d2:04:1d:86:81:d6:16:46:41:f3:e1:05: 48:68:36:20:aa:36:60:92:a0:47:43:dc:af:ed:2b: 66:82:c7:da:1e:a0:bf:fa:ee:1a:49:14:de:be:e1: fb:23:44:60:ec:78:34:2f:ff:f8:07:2d:93:c4:af: 13:92:8b:7b:f1:f5:a5:0c:1d:9e:4d:4e:93:ea:ba: 03:19:ea:82:19:21:70:99:1d:fa:69:4a:30:e1:76: 83:2f:a5:67:bf:7c:5d:89:01:bb:e8:33:c3:df:72: a0:31:45:cb:f1:b6:83:3a:06:95:38:0a:34:3b:a2: 0e:76:da:05:62:55:4d:af:1f:4d:a0:a8:7d:9c:54: 82:fe:e1:40:e6:fc:18:b4:c5:64:b2:7f:36:d0:7b: a9:ba:58:20:08:29:81:45:0a:3c:fb:2f:9d:f9:5e: 40:8d:84:1e:d6:ef:67:d1:cb:b0:bd:1f:dd:16:53: cd:43:73:d0:87:49:7c:0c:0b:34:99:c8:92:36:68: 37:84:01:4e:8b:32:43:54:78:d4:6a:05:1a:77:da: d6:ca:01:e5:43:78:9d:26:f2:8c:e4:bc:57:62:7d: 8c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2D:A6:E9:1E:DF:D9:70:AE:BD:C0:22:D6:5D:AE:61:E8:C1:2A:09 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cS2m6R7f2XCuvcAi1l2uYejBKgk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.228.0/24 45.66.231.0/24 45.89.247.0/24 45.141.158.0/24 81.161.238.0/24 83.219.99.0/24 85.217.130.0/23 87.120.87.0/24 87.120.126.0/24 87.120.166.0/24 87.120.245.0/24 87.121.60.0/23 87.121.132.0/22 87.121.165.0/24 91.92.27.0/24 91.92.67.0/24 91.92.248.0/21 92.119.196.0/23 92.249.50.0/24 93.123.109.0/24 185.222.160.0/24 193.25.216.0/24 193.148.253.0/24 194.31.222.0/24 194.55.186.0/24 194.169.175.0/24 212.73.149.0/24 212.87.204.0/24 Signature Algorithm: sha256WithRSAEncryption 03:f7:60:60:32:54:42:28:8c:da:32:cd:86:a0:10:25:ca:a0: 5b:63:a8:97:66:20:bf:b4:5e:02:d8:37:d4:b7:1d:2a:15:04: 3b:40:13:b8:ab:73:1a:19:25:05:99:02:ee:a2:80:43:f0:99: dd:95:2e:69:88:eb:53:05:ba:8c:b4:12:05:11:fc:a5:81:82: 59:b8:59:c2:72:b9:01:e7:2a:16:1d:60:a8:d5:27:95:a2:6b: 1d:51:57:04:9a:5d:9a:ed:8a:71:92:55:24:03:1e:99:7d:0b: 89:44:f4:07:3b:70:59:a0:23:7e:29:3d:3c:50:fa:80:f5:68: 73:69:16:e4:8c:25:5d:bd:1c:0c:c9:34:26:8b:2d:1a:23:41: a5:e7:c4:2e:c4:d1:e5:6c:0e:27:b9:68:89:7c:35:72:80:6a: c3:fe:d2:7c:ad:a1:28:b4:de:c1:99:ba:a2:a8:6a:fb:ad:fa: c3:66:8d:51:23:2b:00:86:e9:6e:1f:53:40:57:61:44:13:49: be:69:32:40:66:31:76:47:19:5d:ed:e7:44:c9:af:42:b0:ce: ef:bb:87:f1:c3:31:7a:dc:04:12:fa:15:0d:e6:c7:6e:13:bd: 1c:95:b2:2b:1c:bf:3f:41:55:34:93:7a:cc:ee:16:97:4f:9a: da:30:28:9c -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZswUxiZEYxYBk9sssgrYXJVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMjE4MDcxODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTJkYTZlOTFlZGZkOTcwYWViZGMwMjJkNjVkYWU2MWU4YzEyYTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH8lxEiAmaT4tPVEsj1bL8YK3ZPB ZEMMOm4FGkdfxyLSBB2GgdYWRkHz4QVIaDYgqjZgkqBHQ9yv7StmgsfaHqC/+u4a SRTevuH7I0Rg7Hg0L//4By2TxK8Tkot78fWlDB2eTU6T6roDGeqCGSFwmR36aUow 4XaDL6Vnv3xdiQG76DPD33KgMUXL8baDOgaVOAo0O6IOdtoFYlVNrx9NoKh9nFSC /uFA5vwYtMVksn820HupulggCCmBRQo8+y+d+V5AjYQe1u9n0cuwvR/dFlPNQ3PQ h0l8DAs0mciSNmg3hAFOizJDVHjUagUad9rWygHlQ3idJvKM5LxXYn2MuwIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFHEtpuke39lwrr3AItZdrmHowSoJMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvY1MybTZSN2YyWEN1dmNBaTFsMnVZZWpCS2drLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHFBggrBgEFBQcBBwEB/wSBtTCBsjCBrwQCAAEwgagDBAAt QuQDBAAtQucDBAAtWfcDBAAtjZ4DBABRoe4DBABT22MDBAFV2YIDBABXeFcDBABX eH4DBABXeKYDBABXePUDBAFXeTwDBAJXeYQDBABXeaUDBABbXBsDBABbXEMDBANb XPgDBAFcd8QDBABc+TIDBABde20DBAC53qADBADBGdgDBADBlP0DBADCH94DBADC N7oDBADCqa8DBADUSZUDBADUV8wwDQYJKoZIhvcNAQELBQADggEBAAP3YGAyVEIo jNoyzYagECXKoFtjqJdmIL+0XgLYN9S3HSoVBDtAE7ircxoZJQWZAu6igEPwmd2V LmmI61MFuoy0EgUR/KWBglm4WcJyuQHnKhYdYKjVJ5Wiax1RVwSaXZrtinGSVSQD Hpl9C4lE9Ac7cFmgI34pPTxQ+oD1aHNpFuSMJV29HAzJNCaLLRojQaXnxC7E0eVs Die5aIl8NXKAasP+0nytoSi03sGZuqKoavut+sNmjVEjKwCG6W4fU0BXYUQTSb5p MkBmMXZHGV3t50TJr0Kwzu+7h/HDMXrcBBL6FQ3mx24TvRyVsiscvz9BVTSTeszu FpdPmtowKJw= -----END CERTIFICATE-----Generated at Sat Dec 20 05:59:50 2025 by rpki-client