This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/4KUpBqgP7CqsqYjihpL6JW1__PY.roa File: 4KUpBqgP7CqsqYjihpL6JW1__PY.roa (raw, json) Hash identifier: y1mWBKsuw1JHXNozTzV9PXz9oElVltZjJ6RCCGIn+Eg= Subject key identifier: E0:A5:29:06:A8:0F:EC:2A:AC:A9:88:E2:86:92:FA:25:6D:7F:FC:F6 Certificate issuer: /CN=945b73df7e6fe1100f1d13a07c18d59af228428c Certificate serial: 019A9B23100F17BC9546FE8F8F2673D683F1 Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/4KUpBqgP7CqsqYjihpL6JW1__PY.roa Signing time: Wed 19 Nov 2025 08:02:37 +0000 ROA not before: Wed 19 Nov 2025 08:02:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 61098 IP address blocks: 85.217.160.0/22 maxlen: 24 85.217.172.0/23 maxlen: 24 85.217.174.0/23 maxlen: 24 85.217.184.0/23 maxlen: 24 85.217.186.0/23 maxlen: 24 89.145.160.0/22 maxlen: 24 89.145.164.0/23 maxlen: 24 89.145.166.0/23 maxlen: 24 91.92.116.0/23 maxlen: 24 91.92.118.0/23 maxlen: 24 91.92.140.0/23 maxlen: 24 91.92.142.0/23 maxlen: 24 91.92.152.0/23 maxlen: 24 91.92.154.0/23 maxlen: 24 91.92.200.0/23 maxlen: 24 91.92.202.0/23 maxlen: 24 91.92.224.0/23 maxlen: 24 91.92.227.0/24 maxlen: 24 92.39.56.0/22 maxlen: 24 92.39.60.0/22 maxlen: 24 138.124.208.0/22 maxlen: 24 138.124.212.0/22 maxlen: 24 138.124.216.0/23 maxlen: 24 138.124.220.0/22 maxlen: 24 151.145.192.0/22 maxlen: 24 151.145.196.0/22 maxlen: 22 151.145.200.0/22 maxlen: 22 159.100.240.0/22 maxlen: 24 159.100.244.0/24 maxlen: 24 159.100.245.0/24 maxlen: 24 159.100.246.0/23 maxlen: 24 159.100.248.0/21 maxlen: 24 185.19.28.0/22 maxlen: 24 185.150.8.0/22 maxlen: 24 194.182.160.0/22 maxlen: 24 194.182.164.0/22 maxlen: 24 194.182.168.0/22 maxlen: 24 194.182.172.0/22 maxlen: 24 194.182.176.0/22 maxlen: 24 194.182.180.0/22 maxlen: 24 194.182.184.0/22 maxlen: 24 194.182.188.0/22 maxlen: 24 2a04:c41::/32 maxlen: 48 2a04:c42::/32 maxlen: 48 2a04:c42:f11::/48 maxlen: 48 2a04:c42:f12::/48 maxlen: 48 2a04:c43::/32 maxlen: 48 2a04:c44::/32 maxlen: 48 2a04:c45::/32 maxlen: 48 2a04:c46::/32 maxlen: 48 2a04:c47::/32 maxlen: 48 2a04:c47:f11::/48 maxlen: 48 2a04:c47:f12::/48 maxlen: 48 2a07:6cc0:10::/48 maxlen: 48 2a07:6cc0:11::/48 maxlen: 48 2a07:6cc0:12::/48 maxlen: 48 2a07:6cc0:20::/48 maxlen: 48 2a07:6cc0:21::/48 maxlen: 48 2a07:6cc0:30::/48 maxlen: 48 2a07:6cc0:31::/48 maxlen: 48 2a07:6cc0:40::/48 maxlen: 48 2a07:6cc0:41::/48 maxlen: 48 2a07:6cc0:50::/48 maxlen: 48 2a07:6cc0:60::/48 maxlen: 48 2a07:6cc0:70::/48 maxlen: 48 2a07:6cc0:71::/48 maxlen: 48 2a07:6cc0:80::/48 maxlen: 48 2a07:6cc1::/32 maxlen: 48 2a07:6cc2::/32 maxlen: 48 2a07:6cc2:f11::/48 maxlen: 48 2a07:6cc2:f12::/48 maxlen: 48 2a07:6cc3::/32 maxlen: 48 2a07:6cc3:f11::/48 maxlen: 48 2a07:6cc3:f12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:23:10:0f:17:bc:95:46:fe:8f:8f:26:73:d6:83:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c Validity Not Before: Nov 19 08:02:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e0a52906a80fec2aaca988e28692fa256d7ffcf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b1:5f:7e:29:9f:e7:13:d2:cd:c3:1a:62:47: c9:4f:35:db:bf:6a:6b:3f:fa:19:7c:4f:93:8d:72: 30:ec:c3:76:1a:a7:f6:d2:97:9a:96:b2:88:11:c3: 77:15:33:f0:91:85:ff:c0:dc:5c:15:d6:fa:da:4f: 52:9d:e9:46:d4:db:09:b3:9d:02:c9:4a:45:81:06: b0:b2:02:a0:c6:6e:f7:6c:87:0c:93:1f:ba:42:31: fd:ae:1f:c8:aa:67:cf:51:e2:ab:ff:6a:90:7d:26: e4:f3:e2:8e:68:01:33:ba:20:bc:bb:b5:39:30:bc: 06:f9:e6:56:c9:a6:69:f4:84:ee:2e:e9:00:d8:ce: a5:06:49:96:f2:da:dc:4b:c8:6c:20:af:d7:48:fb: dd:d2:88:b7:50:12:18:46:d5:c4:cf:99:05:f9:20: 86:e5:22:d1:03:0a:9c:e0:ae:a7:03:13:1a:2b:3d: 2b:32:23:56:b7:ca:93:ba:28:13:20:0b:b0:bf:f3: 08:a2:53:b8:bf:e5:83:4c:ad:cf:eb:41:db:09:a5: 37:5c:cd:92:94:d8:ad:2e:01:54:6a:f5:ae:05:d2: 2f:31:9c:cd:8c:c3:7a:e6:56:d6:8c:28:28:4d:2e: 3b:eb:45:de:a1:99:63:44:38:b8:54:ff:97:82:10: f5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A5:29:06:A8:0F:EC:2A:AC:A9:88:E2:86:92:FA:25:6D:7F:FC:F6 X509v3 Authority Key Identifier: keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/4KUpBqgP7CqsqYjihpL6JW1__PY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.217.160.0/22 85.217.172.0/22 85.217.184.0/22 89.145.160.0/21 91.92.116.0/22 91.92.140.0/22 91.92.152.0/22 91.92.200.0/22 91.92.224.0/23 91.92.227.0/24 92.39.56.0/21 138.124.208.0-138.124.217.255 138.124.220.0/22 151.145.192.0-151.145.203.255 159.100.240.0/20 185.19.28.0/22 185.150.8.0/22 194.182.160.0/19 IPv6: 2a04:c41::-2a04:c47:ffff:ffff:ffff:ffff:ffff:ffff 2a07:6cc0:10::-2a07:6cc0:12:ffff:ffff:ffff:ffff:ffff 2a07:6cc0:20::/47 2a07:6cc0:30::/47 2a07:6cc0:40::/47 2a07:6cc0:50::/48 2a07:6cc0:60::/48 2a07:6cc0:70::/47 2a07:6cc0:80::/48 2a07:6cc1::-2a07:6cc3:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 2d:c7:ba:2b:85:5c:8a:9b:57:4e:5c:4a:fa:ac:3c:45:8e:2e: f9:90:c1:e0:22:64:f9:ca:5a:68:0a:49:da:68:91:d9:6b:c5: 7c:f9:28:8e:c3:d7:10:2c:bb:85:b7:d0:26:a5:a4:8b:cd:03: 8b:f1:a1:a0:6d:7b:54:0a:d4:7e:d6:57:20:e4:25:9c:9c:13: a7:94:0c:61:7e:ab:aa:81:fb:d2:79:62:7b:d3:94:8e:20:de: 59:c5:ea:90:cc:a8:01:29:8f:63:45:35:88:92:74:1d:e7:2f: 6c:89:8e:ab:53:db:19:b0:f2:18:77:24:ae:47:88:0d:74:cd: f8:49:8d:46:0d:99:49:5d:58:93:c6:a6:66:b6:ad:2b:a4:3b: 0b:69:45:c5:e8:cb:b8:dc:56:a0:98:37:9f:f8:6f:96:de:82: 71:49:52:40:02:60:0f:a7:a0:cd:9e:cb:8a:7f:aa:b5:e3:36: f2:c3:84:59:b1:7f:2e:7b:ba:f2:85:05:18:b8:58:fd:ee:e0: 46:9f:57:5e:3c:c6:7a:b9:58:ec:ff:c7:99:67:2c:9b:a4:b6: be:9f:85:ab:41:61:68:5c:86:16:45:b1:eb:4d:c1:74:62:db: d1:5f:a1:9c:9b:83:35:35:81:2c:ee:64:c9:9a:b6:58:25:1b: 05:77:f7:59 -----BEGIN CERTIFICATE----- MIIF9TCCBN2gAwIBAgISAZqbIxAPF7yVRv6PjyZz1oPxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NWI3M2RmN2U2ZmUxMTAwZjFkMTNhMDdjMThkNTlhZjIy ODQyOGMwHhcNMjUxMTE5MDgwMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGE1MjkwNmE4MGZlYzJhYWNhOTg4ZTI4NjkyZmEyNTZkN2ZmY2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrFffimf5xPSzcMaYkfJTzXbv2pr P/oZfE+TjXIw7MN2Gqf20pealrKIEcN3FTPwkYX/wNxcFdb62k9SnelG1NsJs50C yUpFgQawsgKgxm73bIcMkx+6QjH9rh/IqmfPUeKr/2qQfSbk8+KOaAEzuiC8u7U5 MLwG+eZWyaZp9ITuLukA2M6lBkmW8trcS8hsIK/XSPvd0oi3UBIYRtXEz5kF+SCG 5SLRAwqc4K6nAxMaKz0rMiNWt8qTuigTIAuwv/MIolO4v+WDTK3P60HbCaU3XM2S lNitLgFUavWuBdIvMZzNjMN65lbWjCgoTS4760XeoZljRDi4VP+XghD1SQIDAQAB o4IDATCCAv0wHQYDVR0OBBYEFOClKQaoD+wqrKmI4oaS+iVtf/z2MB8GA1UdIwQY MBaAFJRbc99+b+EQDx0ToHwY1ZryKEKMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lYzYxOGYtOWY2MS00MTg1LWJhMGQt NmU0NTI0MjVhMTkzLzEvNEtVcEJxZ1A3Q3FzcVlqaWhwTDZKVzFfX1BZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9lYzYxOGYtOWY2MS00MTg1LWJhMGQtNmU0NTI0MjVhMTkz LzEvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBFQYIKwYBBQUHAQcBAf8EggEEMIIBADCBggQCAAEwfAME AlXZoAMEAlXZrAMEAlXZuAMEA1mRoAMEAltcdAMEAltcjAMEAltcmAMEAltcyAME AVtc4AMEAFtc4wMEA1wnODAMAwQEinzQAwQBinzYAwQCinzcMAwDBAaXkcADBAKX kcgDBASfZPADBAK5ExwDBAK5lggDBAXCtqAweQQCAAIwczAOAwUAKgQMQQMFAyoE DEAwEgMHBCoHbMAAEAMHACoHbMAAEgMHASoHbMAAIAMHASoHbMAAMAMHASoHbMAA QAMHACoHbMAAUAMHACoHbMAAYAMHASoHbMAAcAMHACoHbMAAgDAOAwUAKgdswQMF AioHbMAwDQYJKoZIhvcNAQELBQADggEBAC3HuiuFXIqbV05cSvqsPEWOLvmQweAi ZPnKWmgKSdpokdlrxXz5KI7D1xAsu4W30CalpIvNA4vxoaBte1QK1H7WVyDkJZyc E6eUDGF+q6qB+9J5YnvTlI4g3lnF6pDMqAEpj2NFNYiSdB3nL2yJjqtT2xmw8hh3 JK5HiA10zfhJjUYNmUldWJPGpma2rSukOwtpRcXoy7jcVqCYN5/4b5begnFJUkAC YA+noM2ey4p/qrXjNvLDhFmxfy57uvKFBRi4WP3u4EafV148xnq5WOz/x5lnLJuk tr6fhatBYWhchhZFsetNwXRi29FfoZybgzU1gSzuZMmatlglGwV391k= -----END CERTIFICATE-----Generated at Sun Dec 21 20:30:59 2025 by rpki-client