This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/7hMqrH9OVD2K24HyQGJSxQgbROs.roa File: 7hMqrH9OVD2K24HyQGJSxQgbROs.roa (raw, json) Hash identifier: 5Z/t54abjMbBEOxUElJJ4q31YTLpp5qv+951oazEmnE= Subject key identifier: EE:13:2A:AC:7F:4E:54:3D:8A:DB:81:F2:40:62:52:C5:08:1B:44:EB Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb Certificate serial: 019B364B17FE3DA04D5CCDC7B0573E4CBCE5 Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/7hMqrH9OVD2K24HyQGJSxQgbROs.roa Signing time: Fri 19 Dec 2025 11:07:29 +0000 ROA not before: Fri 19 Dec 2025 11:07:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60631 IP address blocks: 45.149.76.0/24 maxlen: 24 45.149.77.0/24 maxlen: 24 45.149.78.0/24 maxlen: 24 45.149.79.0/24 maxlen: 24 158.255.74.0/24 maxlen: 24 171.22.24.0/24 maxlen: 24 171.22.25.0/24 maxlen: 24 171.22.26.0/24 maxlen: 24 171.22.27.0/24 maxlen: 24 176.97.218.0/24 maxlen: 24 178.211.145.0/24 maxlen: 24 185.190.39.0/24 maxlen: 24 185.204.197.0/24 maxlen: 24 185.252.86.0/24 maxlen: 24 193.105.234.0/24 maxlen: 24 193.242.125.0/24 maxlen: 24 194.5.175.0/24 maxlen: 24 194.5.188.0/24 maxlen: 24 194.5.195.0/24 maxlen: 24 194.5.205.0/24 maxlen: 24 194.62.43.0/24 maxlen: 24 195.88.208.0/24 maxlen: 24 195.177.255.0/24 maxlen: 24 212.23.201.0/24 maxlen: 24 2a0e:b080::/32 maxlen: 32 2a0e:b081::/32 maxlen: 32 2a0e:b082::/32 maxlen: 32 2a0e:b083::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 20:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:4b:17:fe:3d:a0:4d:5c:cd:c7:b0:57:3e:4c:bc:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb Validity Not Before: Dec 19 11:07:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ee132aac7f4e543d8adb81f2406252c5081b44eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:a2:a0:5b:05:0b:d9:71:a6:b4:f8:16:d9: eb:9c:a5:a9:cf:e9:ec:b5:a4:22:ae:14:c7:83:f4: bd:23:da:f3:6c:4e:ae:99:07:0b:43:91:ed:07:fb: 89:05:75:98:cc:6e:e3:3f:4e:3a:69:a7:b2:ec:1c: 37:a2:ea:67:77:9d:26:b8:45:5d:10:59:1d:fb:61: f7:88:bd:7a:ad:a4:21:05:5a:a4:2a:18:59:c3:54: 8c:69:c9:39:4c:9d:ef:88:d1:ed:bd:d9:82:e6:68: 9d:34:40:7f:88:80:61:c1:50:32:69:e6:79:cd:90: 95:fd:2c:9d:24:64:18:75:96:49:27:91:a4:6d:d9: 61:5e:91:ed:1a:c2:5f:0b:ca:81:86:e3:ce:a5:41: 0a:a5:44:b1:ee:7e:08:4e:91:3b:06:7a:a8:78:a6: 3c:9a:dd:4e:fe:9f:c4:21:a7:9c:46:b1:6b:ba:98: 36:90:35:eb:2d:6e:f5:79:f5:3f:2a:04:de:06:c8: c6:cb:ad:8e:b6:ac:4d:53:79:ad:bb:43:96:74:44: d4:44:a4:08:ae:09:5e:c8:ab:3a:00:44:a3:45:f8: d7:59:0b:15:63:18:e8:06:bc:18:14:64:9f:99:a4: 95:0f:1d:ff:11:45:7f:de:ea:a1:03:dc:f6:a7:d9: 80:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:13:2A:AC:7F:4E:54:3D:8A:DB:81:F2:40:62:52:C5:08:1B:44:EB X509v3 Authority Key Identifier: keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/7hMqrH9OVD2K24HyQGJSxQgbROs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.76.0/22 158.255.74.0/24 171.22.24.0/22 176.97.218.0/24 178.211.145.0/24 185.190.39.0/24 185.204.197.0/24 185.252.86.0/24 193.105.234.0/24 193.242.125.0/24 194.5.175.0/24 194.5.188.0/24 194.5.195.0/24 194.5.205.0/24 194.62.43.0/24 195.88.208.0/24 195.177.255.0/24 212.23.201.0/24 IPv6: 2a0e:b080::/30 Signature Algorithm: sha256WithRSAEncryption 85:f2:53:45:d4:2a:ca:66:3c:fd:67:b1:66:89:49:95:dd:a9: 06:e9:a5:90:76:1a:5b:be:83:8f:59:06:a6:84:ad:5b:f8:b4: 3d:7c:9e:98:93:4e:49:f5:35:83:27:6c:72:ca:e3:96:af:9e: 7a:81:2d:cd:59:ff:37:40:43:96:51:a5:40:b2:bd:80:ec:b1: 80:f0:bc:37:0b:4c:b2:c6:4f:78:78:20:45:51:9e:8f:b2:3e: e3:be:b2:88:f9:e8:d5:e3:25:06:3f:d9:e7:29:bd:87:af:82: 39:2e:6a:ff:37:e4:a3:a7:58:4b:a9:f1:d3:e0:3f:27:96:d0: 59:f8:04:0c:e5:ea:8d:56:22:f9:04:05:9a:87:49:d2:ff:fb: ed:f1:a9:16:30:94:3c:0d:02:7c:55:46:60:15:c4:9c:22:64: 06:54:5f:a9:dc:2d:17:42:0c:de:81:63:ba:82:03:07:30:02: 40:fc:52:42:d1:a6:8b:3e:61:72:da:ab:cd:20:29:ea:67:4a: cd:ca:a8:4b:56:94:03:f0:91:59:09:20:7a:ec:88:4b:96:16: de:67:fb:6d:7d:ef:16:6d:94:a0:6a:9a:a6:4a:5e:86:52:dd: 3a:2f:b9:9b:d5:59:16:f1:b1:3f:64:a0:72:a9:91:ce:9d:b7: 09:55:de:74 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgISAZs2Sxf+PaBNXM3HsFc+TLzlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkOGVmZjIwMTIxOGE1YTgyM2NiZTg1MzM2ODUzZTNkYjRk ZDE2ZWIwHhcNMjUxMjE5MTEwNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTEzMmFhYzdmNGU1NDNkOGFkYjgxZjI0MDYyNTJjNTA4MWI0NGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7WioFsFC9lxprT4FtnrnKWpz+ns taQirhTHg/S9I9rzbE6umQcLQ5HtB/uJBXWYzG7jP046aaey7Bw3oupnd50muEVd EFkd+2H3iL16raQhBVqkKhhZw1SMack5TJ3viNHtvdmC5midNEB/iIBhwVAyaeZ5 zZCV/SydJGQYdZZJJ5GkbdlhXpHtGsJfC8qBhuPOpUEKpUSx7n4ITpE7BnqoeKY8 mt1O/p/EIaecRrFrupg2kDXrLW71efU/KgTeBsjGy62OtqxNU3mtu0OWdETURKQI rgleyKs6AESjRfjXWQsVYxjoBrwYFGSfmaSVDx3/EUV/3uqhA9z2p9mAkQIDAQAB o4ICgTCCAn0wHQYDVR0OBBYEFO4TKqx/TlQ9ituB8kBiUsUIG0TrMB8GA1UdIwQY MBaAFP2O/yASGKWoI8voUzaFPj203RbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1k3X0lCSVlwYWdqeS1oVE5vVS1QYlRkRnVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85OWZkNDEtN2VkOC00YjI1LThkNTYt YzdhYzI2YmNjMmRhLzEvN2hNcXJIOU9WRDJLMjRIeVFHSlN4UWdiUk9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC85OWZkNDEtN2VkOC00YjI1LThkNTYtYzdhYzI2YmNjMmRh LzEvX1k3X0lCSVlwYWdqeS1oVE5vVS1QYlRkRnVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzByBAIAATBsAwQCLZVM AwQAnv9KAwQCqxYYAwQAsGHaAwQAstORAwQAub4nAwQAuczFAwQAufxWAwQAwWnq AwQAwfJ9AwQAwgWvAwQAwgW8AwQAwgXDAwQAwgXNAwQAwj4rAwQAw1jQAwQAw7H/ AwQA1BfJMA0EAgACMAcDBQIqDrCAMA0GCSqGSIb3DQEBCwUAA4IBAQCF8lNF1CrK Zjz9Z7FmiUmV3akG6aWQdhpbvoOPWQamhK1b+LQ9fJ6Yk05J9TWDJ2xyyuOWr556 gS3NWf83QEOWUaVAsr2A7LGA8Lw3C0yyxk94eCBFUZ6Psj7jvrKI+ejV4yUGP9nn Kb2Hr4I5Lmr/N+Sjp1hLqfHT4D8nltBZ+AQM5eqNViL5BAWah0nS//vt8akWMJQ8 DQJ8VUZgFcScImQGVF+p3C0XQgzegWO6ggMHMAJA/FJC0aaLPmFy2qvNICnqZ0rN yqhLVpQD8JFZCSB67IhLlhbeZ/ttfe8WbZSgapqmSl6GUt06L7mb1VkW8bE/ZKBy qZHOnbcJVd50 -----END CERTIFICATE-----Generated at Sat Dec 20 05:59:52 2025 by rpki-client