This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/1-pE2S6SDai37YLPWhTT0fvBo1oM.roa File: 1-pE2S6SDai37YLPWhTT0fvBo1oM.roa (raw, json) Hash identifier: uI+LytW4sB5NsfK4jUCaDlDrFSrkJVm0Hu/DRqgWX7U= Subject key identifier: FA:91:36:4B:A4:83:6A:2D:FB:60:B3:D6:85:34:F4:7E:F0:68:D6:83 Certificate issuer: /CN=1232303d1638e0735240491aaa9e42b1887adaca Certificate serial: 019B31E240E7CD31B5FF2EE4C1804AB0642E Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/1-pE2S6SDai37YLPWhTT0fvBo1oM.roa Signing time: Thu 18 Dec 2025 14:34:29 +0000 ROA not before: Thu 18 Dec 2025 14:34:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51440 IP address blocks: 5.34.160.0/24 maxlen: 24 46.28.136.0/24 maxlen: 24 95.215.129.0/24 maxlen: 24 195.35.85.0/24 maxlen: 24 2a03:2940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 02:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:e2:40:e7:cd:31:b5:ff:2e:e4:c1:80:4a:b0:64:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca Validity Not Before: Dec 18 14:34:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fa91364ba4836a2dfb60b3d68534f47ef068d683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f5:51:93:17:d6:99:d1:52:6a:c2:3f:9d:e9: 01:c6:59:19:8d:59:8e:0c:4e:30:41:a8:23:98:f7: f8:77:be:43:4b:14:0e:16:2f:40:e8:0d:74:77:c1: 1c:10:9e:d0:ec:40:30:a6:3b:f6:ba:91:de:42:63: 74:27:3f:d7:62:0b:e0:d1:93:d3:4b:d9:e6:ad:7b: cc:21:7f:75:8e:f8:e3:8a:5f:b2:15:2d:a9:ae:cc: 90:d0:3d:22:5a:dd:ce:1d:45:7a:46:19:fa:15:18: 4a:6d:c0:a9:96:8e:f7:f3:ec:53:87:d4:b9:8f:fa: 48:be:bc:c9:ec:c0:fe:72:f7:17:16:ce:f5:43:6a: ea:53:17:2a:63:06:13:6f:d5:c4:53:cf:85:42:8d: 42:c7:18:4c:83:53:ed:2e:c8:e3:7a:09:7b:9e:eb: f7:cc:7e:7e:37:df:3e:b9:47:c7:b1:34:f2:f9:b5: 13:43:27:8f:2e:a4:6d:c4:41:f0:a1:f2:82:31:7f: af:d4:09:13:e7:02:c0:32:54:4d:3f:e3:07:52:f6: 8c:b3:a3:6f:a2:c3:f6:30:45:42:af:34:57:6f:41: 6a:fd:f7:53:d9:75:79:13:3d:4a:07:cd:63:c3:f5: 79:f1:c4:e4:ca:9b:d3:d6:6c:ff:ed:9b:15:7b:0e: 60:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:91:36:4B:A4:83:6A:2D:FB:60:B3:D6:85:34:F4:7E:F0:68:D6:83 X509v3 Authority Key Identifier: keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/1-pE2S6SDai37YLPWhTT0fvBo1oM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.34.160.0/24 46.28.136.0/24 95.215.129.0/24 195.35.85.0/24 IPv6: 2a03:2940::/32 Signature Algorithm: sha256WithRSAEncryption 88:e1:88:69:4a:93:ce:2d:99:17:9d:49:3a:cb:bd:ad:a1:46: 4f:72:97:d2:ea:55:6e:db:99:03:15:b6:8e:59:01:aa:0c:53: 8f:33:61:57:58:44:73:85:4e:5b:51:89:5d:4f:69:5a:e6:4a: 58:21:45:92:28:f8:40:e2:96:2f:46:b8:c4:76:2a:99:e3:46: c7:80:25:24:95:3c:a9:1c:53:b4:91:fc:4a:fa:3c:db:20:a7: d8:59:6f:e9:4f:e8:23:f2:49:f6:4b:ae:ba:d6:33:8e:58:26: ac:58:d6:72:a5:6c:fe:36:a0:78:61:2a:d7:f8:36:3f:f5:f0: b0:98:b9:ba:63:93:97:6a:ba:33:64:af:73:c7:8d:e3:9a:14: 2c:d9:91:f0:4a:05:be:ca:23:9e:7d:76:0c:39:df:ed:9b:a5: b1:33:01:69:cf:98:8a:a8:f0:f4:8f:f8:6e:3a:5c:2b:a7:f5: 1b:92:ce:ee:87:a2:ef:f8:2a:72:bb:70:a9:b9:09:ea:ab:9b: bc:ed:c1:ff:c2:92:13:b5:5a:0e:6c:01:2b:d2:c6:bd:2d:b8: c3:fa:f6:0b:93:47:0e:ef:aa:6e:ee:73:d1:16:cc:da:6b:93: 04:b1:4b:59:1c:bd:b6:e4:18:c8:c5:7a:6a:da:df:4a:de:42: 44:ea:9e:0f -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZsx4kDnzTG1/y7kwYBKsGQuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMzIzMDNkMTYzOGUwNzM1MjQwNDkxYWFhOWU0MmIxODg3 YWRhY2EwHhcNMjUxMjE4MTQzNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTkxMzY0YmE0ODM2YTJkZmI2MGIzZDY4NTM0ZjQ3ZWYwNjhkNjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfVRkxfWmdFSasI/nekBxlkZjVmO DE4wQagjmPf4d75DSxQOFi9A6A10d8EcEJ7Q7EAwpjv2upHeQmN0Jz/XYgvg0ZPT S9nmrXvMIX91jvjjil+yFS2prsyQ0D0iWt3OHUV6Rhn6FRhKbcCplo738+xTh9S5 j/pIvrzJ7MD+cvcXFs71Q2rqUxcqYwYTb9XEU8+FQo1CxxhMg1PtLsjjegl7nuv3 zH5+N98+uUfHsTTy+bUTQyePLqRtxEHwofKCMX+v1AkT5wLAMlRNP+MHUvaMs6Nv osP2MEVCrzRXb0Fq/fdT2XV5Ez1KB81jw/V58cTkypvT1mz/7ZsVew5gMQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFPqRNkukg2ot+2Cz1oU09H7waNaDMB8GA1UdIwQY MBaAFBIyMD0WOOBzUkBJGqqeQrGIetrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wYWIxNjctMzA5NC00MTAzLTgxMzEt MDY0NDE0ZDAzNDBmLzEvMS1wRTJTNlNEYWkzN1lMUFdoVFQwZnZCbzFvTS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGYvMGFiMTY3LTMwOTQtNDEwMy04MTMxLTA2NDQxNGQwMzQw Zi8xL0VqSXdQUlk0NEhOU1FFa2FxcDVDc1loNjJzby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBABggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAAUioAME AC4ciAMEAF/XgQMEAMMjVTANBAIAAjAHAwUAKgMpQDANBgkqhkiG9w0BAQsFAAOC AQEAiOGIaUqTzi2ZF51JOsu9raFGT3KX0upVbtuZAxW2jlkBqgxTjzNhV1hEc4VO W1GJXU9pWuZKWCFFkij4QOKWL0a4xHYqmeNGx4AlJJU8qRxTtJH8Svo82yCn2Flv 6U/oI/JJ9kuuutYzjlgmrFjWcqVs/jageGEq1/g2P/XwsJi5umOTl2q6M2Svc8eN 45oULNmR8EoFvsojnn12DDnf7ZulsTMBac+Yiqjw9I/4bjpcK6f1G5LO7oei7/gq crtwqbkJ6qubvO3B/8KSE7VaDmwBK9LGvS24w/r2C5NHDu+qbu5z0RbM2muTBLFL WRy9tuQYyMV6atrfSt5CROqeDw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:05:22 2025 by rpki-client