This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/4hdJJM49TPFJ8UIQsjqGtqY9d2k.roa File: 4hdJJM49TPFJ8UIQsjqGtqY9d2k.roa (raw, json) Hash identifier: H2Z5HGem2IEYbWBjNLqNweSflwmSMiuJe5Fz2Atczxc= Subject key identifier: E2:17:49:24:CE:3D:4C:F1:49:F1:42:10:B2:3A:86:B6:A6:3D:77:69 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B514401E05E4905E165B38B87F53850F2 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/4hdJJM49TPFJ8UIQsjqGtqY9d2k.roa Signing time: Wed 24 Dec 2025 16:49:29 +0000 ROA not before: Wed 24 Dec 2025 16:49:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 984 IP address blocks: 84.233.132.0/23 maxlen: 24 84.233.164.0/23 maxlen: 24 84.233.200.0/23 maxlen: 24 84.233.220.0/23 maxlen: 24 84.233.232.0/23 maxlen: 24 84.233.240.0/23 maxlen: 24 195.86.2.0/23 maxlen: 24 195.86.8.0/21 maxlen: 24 195.86.16.0/22 maxlen: 24 195.86.20.0/23 maxlen: 24 195.86.28.0/22 maxlen: 24 195.86.32.0/22 maxlen: 24 195.86.36.0/23 maxlen: 24 195.86.44.0/22 maxlen: 24 195.86.50.0/23 maxlen: 24 195.86.52.0/22 maxlen: 24 195.86.60.0/22 maxlen: 24 195.86.64.0/23 maxlen: 24 195.86.68.0/22 maxlen: 24 195.86.72.0/21 maxlen: 24 195.86.80.0/20 maxlen: 24 195.86.96.0/20 maxlen: 24 195.86.114.0/23 maxlen: 24 195.86.116.0/22 maxlen: 24 195.86.120.0/22 maxlen: 24 195.86.128.0/23 maxlen: 24 195.86.132.0/22 maxlen: 24 195.86.136.0/21 maxlen: 24 195.86.144.0/20 maxlen: 24 195.86.162.0/23 maxlen: 24 195.86.164.0/22 maxlen: 24 195.86.168.0/21 maxlen: 24 195.86.176.0/20 maxlen: 24 195.86.192.0/20 maxlen: 24 195.86.212.0/22 maxlen: 24 195.86.216.0/23 maxlen: 24 195.86.224.0/21 maxlen: 24 195.86.232.0/22 maxlen: 24 195.86.236.0/23 maxlen: 24 195.86.242.0/23 maxlen: 24 195.86.244.0/22 maxlen: 24 195.86.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:44:01:e0:5e:49:05:e1:65:b3:8b:87:f5:38:50:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Dec 24 16:49:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e2174924ce3d4cf149f14210b23a86b6a63d7769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:35:63:e0:52:ac:2c:ec:72:c7:ec:88:bc:29: 01:9c:77:06:fc:e9:40:e6:ab:55:91:8d:60:d7:1b: c3:17:4c:db:da:cd:91:f3:f7:0e:3a:c0:47:b3:ab: 26:89:44:ec:17:5e:a0:36:eb:2b:7c:36:54:06:e7: 20:53:18:f3:79:0e:2f:8e:13:1c:e1:e5:77:dc:04: 18:83:2c:9e:1f:fb:1d:1c:c4:a3:83:92:1d:62:7b: 3a:f9:e5:39:a4:92:ae:0c:dc:56:dc:48:c0:c2:83: 7a:7c:f8:e8:44:48:f4:5f:e6:8b:8c:23:f3:c8:f2: 39:f2:6c:5d:2d:ac:6a:de:b0:4c:74:90:7b:99:4c: fa:15:65:1c:c3:76:dc:e6:7d:ea:d7:38:67:09:a0: c0:82:7d:34:c0:6d:44:22:43:db:16:49:cf:0c:a6: 62:4d:2d:b5:1e:0d:30:d3:09:6b:c3:54:d6:63:25: 5f:59:90:93:71:fe:26:65:2a:63:81:4d:42:0c:10: b4:17:2b:e0:db:65:2d:bd:45:bc:a9:27:63:05:9a: 8c:58:c6:7c:a6:8a:26:d1:22:72:48:24:fc:f2:cc: d6:a7:a6:9e:58:c8:ee:93:bd:4a:a1:6e:b2:c7:db: ed:51:a5:01:c5:be:a5:32:50:79:d1:8e:64:74:1f: 23:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:17:49:24:CE:3D:4C:F1:49:F1:42:10:B2:3A:86:B6:A6:3D:77:69 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/4hdJJM49TPFJ8UIQsjqGtqY9d2k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.233.132.0/23 84.233.164.0/23 84.233.200.0/23 84.233.220.0/23 84.233.232.0/23 84.233.240.0/23 195.86.2.0/23 195.86.8.0-195.86.21.255 195.86.28.0-195.86.37.255 195.86.44.0/22 195.86.50.0-195.86.55.255 195.86.60.0-195.86.65.255 195.86.68.0-195.86.111.255 195.86.114.0-195.86.123.255 195.86.128.0/23 195.86.132.0-195.86.159.255 195.86.162.0-195.86.207.255 195.86.212.0-195.86.217.255 195.86.224.0-195.86.237.255 195.86.242.0-195.86.255.255 Signature Algorithm: sha256WithRSAEncryption 73:d5:5c:00:26:b8:b3:19:6d:b1:33:c5:1b:2c:d6:44:80:30: f0:13:e0:61:04:78:f4:da:ed:c3:5b:2d:3d:7e:b6:c2:bd:b6: 20:79:f8:20:9d:b2:ea:bd:79:c6:f6:29:1e:80:0d:03:00:4b: 1e:0e:e4:42:c6:e2:bf:f2:01:33:7c:c5:59:5e:42:70:54:ef: 21:a0:40:66:df:2b:65:5e:94:d1:43:8f:36:2d:4e:08:f8:8b: fb:04:e4:27:2e:7a:90:2b:13:0f:e4:22:e4:75:7a:96:55:3f: 2f:24:de:1d:b3:0a:26:04:dd:fd:7f:c8:06:8a:ce:8a:8f:0e: 6e:91:93:57:25:dc:db:ca:32:cf:9b:ea:92:77:22:99:03:bb: 74:59:c6:6e:9e:18:17:69:95:96:ea:fc:ef:88:28:77:e8:ab: 43:42:2d:92:4c:7e:d6:67:2a:81:4a:ac:0d:a6:0d:09:14:6f: 78:0f:c0:ed:91:51:40:e6:3b:e8:0a:95:fe:ef:1a:20:48:12: 97:f4:f3:92:fd:ff:08:91:37:0a:74:a2:0a:d2:ca:5a:9e:9a: b1:94:d5:45:e7:1d:73:8c:db:45:c5:7b:f5:a5:aa:52:86:34: b5:95:c6:c8:be:ab:f6:5a:ab:21:89:b5:34:36:13:e9:2d:64: db:b3:3d:a4 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgISAZtRRAHgXkkF4WWzi4f1OFDyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjUxMjI0MTY0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjE3NDkyNGNlM2Q0Y2YxNDlmMTQyMTBiMjNhODZiNmE2M2Q3NzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjVj4FKsLOxyx+yIvCkBnHcG/OlA 5qtVkY1g1xvDF0zb2s2R8/cOOsBHs6smiUTsF16gNusrfDZUBucgUxjzeQ4vjhMc 4eV33AQYgyyeH/sdHMSjg5IdYns6+eU5pJKuDNxW3EjAwoN6fPjoREj0X+aLjCPz yPI58mxdLaxq3rBMdJB7mUz6FWUcw3bc5n3q1zhnCaDAgn00wG1EIkPbFknPDKZi TS21Hg0w0wlrw1TWYyVfWZCTcf4mZSpjgU1CDBC0Fyvg22UtvUW8qSdjBZqMWMZ8 poom0SJySCT88szWp6aeWMjuk71KoW6yx9vtUaUBxb6lMlB50Y5kdB8j2QIDAQAB o4IC1zCCAtMwHQYDVR0OBBYEFOIXSSTOPUzxSfFCELI6hramPXdpMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvNGhkSkpNNDlUUEZKOFVJUXNqcUd0cVk5ZDJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHsBggrBgEFBQcBBwEB/wSB3DCB2TCB1gQCAAEwgc8DBAFU 6YQDBAFU6aQDBAFU6cgDBAFU6dwDBAFU6egDBAFU6fADBAHDVgIwDAMEA8NWCAME AcNWFDAMAwQCw1YcAwQBw1YkAwQCw1YsMAwDBAHDVjIDBAPDVjAwDAMEAsNWPAME AcNWQDAMAwQCw1ZEAwQEw1ZgMAwDBAHDVnIDBALDVngDBAHDVoAwDAMEAsNWhAME BcNWgDAMAwQBw1aiAwQEw1bAMAwDBALDVtQDBAHDVtgwDAMEBcNW4AMEAcNW7DAL AwQBw1byAwMAw1YwDQYJKoZIhvcNAQELBQADggEBAHPVXAAmuLMZbbEzxRss1kSA MPAT4GEEePTa7cNbLT1+tsK9tiB5+CCdsuq9ecb2KR6ADQMASx4O5ELG4r/yATN8 xVleQnBU7yGgQGbfK2VelNFDjzYtTgj4i/sE5CcuepArEw/kIuR1epZVPy8k3h2z CiYE3f1/yAaKzoqPDm6Rk1cl3NvKMs+b6pJ3IpkDu3RZxm6eGBdplZbq/O+IKHfo q0NCLZJMftZnKoFKrA2mDQkUb3gPwO2RUUDmO+gKlf7vGiBIEpf085L9/wiRNwp0 ogrSylqemrGU1UXnHXOM20XFe/WlqlKGNLWVxsi+q/ZaqyGJtTQ2E+ktZNuzPaQ= -----END CERTIFICATE-----Generated at Tue Dec 30 10:28:38 2025 by rpki-client