This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/7kS00ej2ZeAo7m_sTqprGIPCdOY.roa File: 7kS00ej2ZeAo7m_sTqprGIPCdOY.roa (raw, json) Hash identifier: 1T7+35REuk4BxQa8rL6u509JmlvXEoQ/saCXE4fYZDo= Subject key identifier: EE:44:B4:D1:E8:F6:65:E0:28:EE:6F:EC:4E:AA:6B:18:83:C2:74:E6 Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B130BAAEF417AB5C28CC8315EA3F589FD Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/7kS00ej2ZeAo7m_sTqprGIPCdOY.roa Signing time: Fri 12 Dec 2025 14:51:30 +0000 ROA not before: Fri 12 Dec 2025 14:51:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210489 IP address blocks: 45.135.96.0/23 maxlen: 23 45.135.98.0/23 maxlen: 23 45.136.64.0/22 maxlen: 23 45.136.64.0/23 maxlen: 23 45.136.66.0/23 maxlen: 23 45.140.8.0/23 maxlen: 23 45.141.16.0/23 maxlen: 23 45.141.18.0/23 maxlen: 23 45.141.62.0/23 maxlen: 23 45.141.206.0/23 maxlen: 23 45.152.8.0/23 maxlen: 23 45.157.202.0/23 maxlen: 23 46.161.210.0/23 maxlen: 23 46.161.220.0/23 maxlen: 23 46.161.222.0/23 maxlen: 23 91.244.204.0/22 maxlen: 23 91.244.204.0/23 maxlen: 23 91.244.206.0/23 maxlen: 23 185.222.32.0/23 maxlen: 23 185.222.34.0/23 maxlen: 23 193.110.4.0/23 maxlen: 24 193.110.4.0/24 maxlen: 24 193.110.5.0/24 maxlen: 24 195.62.22.0/23 maxlen: 24 195.62.22.0/24 maxlen: 24 195.62.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:0b:aa:ef:41:7a:b5:c2:8c:c8:31:5e:a3:f5:89:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Dec 12 14:51:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ee44b4d1e8f665e028ee6fec4eaa6b1883c274e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:10:2b:22:be:2c:0c:61:b2:aa:98:77:8d:f9: 5f:81:c9:18:7d:af:fb:44:e3:56:80:28:5f:34:1b: 46:69:97:25:57:58:c7:ef:23:24:82:b1:14:77:82: 0e:c1:83:b1:09:a2:45:5e:39:2c:58:67:6c:05:78: a6:6b:d3:e1:42:b0:aa:39:78:3a:dc:5d:d1:51:c7: 12:2f:71:04:17:06:d0:ee:bc:f4:d0:b6:1c:a1:d2: ed:0c:69:a5:12:d4:4d:68:c4:85:f9:14:6a:92:4f: d9:7a:26:e3:fb:84:2e:82:82:44:69:93:7c:80:41: 30:87:a0:bb:d4:c2:9c:45:4a:20:1b:95:98:18:96: e6:16:ae:1e:db:2c:56:c3:df:da:63:fb:ba:49:70: 0f:e3:ac:7c:27:62:1e:83:d5:89:46:09:b0:75:4f: 46:2e:26:2b:3c:26:8a:19:1b:ea:e9:1b:11:5c:60: eb:4b:98:63:ef:2c:6e:20:87:60:a7:4c:4c:e4:a7: bd:a2:2a:d3:c9:8b:00:e9:f5:ab:f3:cf:6a:8a:a4: 78:b3:ab:2e:21:a0:4d:24:0a:ea:4d:22:e9:6d:dc: 64:49:15:de:13:f1:58:c2:46:21:9e:18:1e:b8:f6: cf:4a:28:5a:87:99:a9:ed:6a:3a:2c:6a:99:66:90: 26:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:44:B4:D1:E8:F6:65:E0:28:EE:6F:EC:4E:AA:6B:18:83:C2:74:E6 X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/7kS00ej2ZeAo7m_sTqprGIPCdOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.96.0/22 45.136.64.0/22 45.140.8.0/23 45.141.16.0/22 45.141.62.0/23 45.141.206.0/23 45.152.8.0/23 45.157.202.0/23 46.161.210.0/23 46.161.220.0/22 91.244.204.0/22 185.222.32.0/22 193.110.4.0/23 195.62.22.0/23 Signature Algorithm: sha256WithRSAEncryption bc:d7:7d:48:ba:b2:3e:28:6a:e7:d9:f0:d5:60:bd:94:74:34: 11:52:64:e7:23:41:22:b8:b4:48:0f:1a:a4:37:c0:c9:d1:cc: 56:8d:5c:02:57:28:7a:16:c2:88:e9:78:d5:31:5d:6e:25:5f: 80:8a:03:07:62:25:46:1c:cf:23:73:22:52:5e:b4:c1:22:b9: e8:82:b2:03:87:83:a4:e3:54:69:b0:7d:7b:37:62:5d:68:31: 4a:ad:95:e9:52:42:26:49:04:a7:d7:00:dc:5c:db:d1:1a:d0: 8c:af:85:4e:d7:47:fb:3d:86:0c:0e:e6:a9:9c:c8:04:0d:e1: 49:90:0b:e2:d5:96:86:03:2a:73:72:f6:e0:f1:00:ee:5c:1b: 0c:d7:b1:f1:64:fc:23:be:03:3c:5b:81:d0:43:61:96:97:4f: ef:4a:c3:e4:d6:0f:4c:3d:33:05:2d:20:6c:50:75:be:82:6b: 22:c3:94:f9:c8:fd:85:af:9a:58:4e:89:53:aa:50:52:58:71: ad:fd:fb:c0:59:ff:4b:ce:05:a2:fd:dc:0e:a7:f4:55:8c:16: e3:71:9c:53:cc:1b:e7:82:70:ed:09:86:a1:33:a8:51:c6:43: b6:ba:0b:78:69:3a:e5:3d:00:bc:6d:bf:bb:44:e7:21:fa:72: 3d:31:38:c0 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZsTC6rvQXq1wozIMV6j9Yn9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjUxMjEyMTQ1MTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTQ0YjRkMWU4ZjY2NWUwMjhlZTZmZWM0ZWFhNmIxODgzYzI3NGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBArIr4sDGGyqph3jflfgckYfa/7 RONWgChfNBtGaZclV1jH7yMkgrEUd4IOwYOxCaJFXjksWGdsBXima9PhQrCqOXg6 3F3RUccSL3EEFwbQ7rz00LYcodLtDGmlEtRNaMSF+RRqkk/Zeibj+4QugoJEaZN8 gEEwh6C71MKcRUogG5WYGJbmFq4e2yxWw9/aY/u6SXAP46x8J2Ieg9WJRgmwdU9G LiYrPCaKGRvq6RsRXGDrS5hj7yxuIIdgp0xM5Ke9oirTyYsA6fWr889qiqR4s6su IaBNJArqTSLpbdxkSRXeE/FYwkYhnhgeuPbPSihah5mp7Wo6LGqZZpAm8wIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFO5EtNHo9mXgKO5v7E6qaxiDwnTmMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvN2tTMDBlajJaZUFvN21fc1RxcHJHSVBDZE9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQCLYdgAwQC LYhAAwQBLYwIAwQCLY0QAwQBLY0+AwQBLY3OAwQBLZgIAwQBLZ3KAwQBLqHSAwQC LqHcAwQCW/TMAwQCud4gAwQBwW4EAwQBwz4WMA0GCSqGSIb3DQEBCwUAA4IBAQC8 131IurI+KGrn2fDVYL2UdDQRUmTnI0EiuLRIDxqkN8DJ0cxWjVwCVyh6FsKI6XjV MV1uJV+AigMHYiVGHM8jcyJSXrTBIrnogrIDh4Ok41RpsH17N2JdaDFKrZXpUkIm SQSn1wDcXNvRGtCMr4VO10f7PYYMDuapnMgEDeFJkAvi1ZaGAypzcvbg8QDuXBsM 17HxZPwjvgM8W4HQQ2GWl0/vSsPk1g9MPTMFLSBsUHW+gmsiw5T5yP2Fr5pYTolT qlBSWHGt/fvAWf9LzgWi/dwOp/RVjBbjcZxTzBvngnDtCYahM6hRxkO2ugt4aTrl PQC8bb+7ROch+nI9MTjA -----END CERTIFICATE-----Generated at Fri Dec 19 22:34:21 2025 by rpki-client