This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/SYk4GxliaZpJqTCuYoS1RlB42nQ.roa File: SYk4GxliaZpJqTCuYoS1RlB42nQ.roa (raw, json) Hash identifier: 9B1ID7kU7lydVLj0Bq4vSnoOl2X9alpr1jITqsrON4I= Subject key identifier: 49:89:38:1B:19:62:69:9A:49:A9:30:AE:62:84:B5:46:50:78:DA:74 Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 019B0C0EB785DF8D672F9C1C9E2889918533 Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/SYk4GxliaZpJqTCuYoS1RlB42nQ.roa Signing time: Thu 11 Dec 2025 06:17:29 +0000 ROA not before: Thu 11 Dec 2025 06:17:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209372 IP address blocks: 45.80.228.0/22 maxlen: 24 45.88.100.0/24 maxlen: 24 45.93.62.0/23 maxlen: 23 45.95.128.0/24 maxlen: 24 45.95.129.0/24 maxlen: 24 45.95.130.0/23 maxlen: 24 78.41.84.0/22 maxlen: 24 178.159.94.0/24 maxlen: 24 185.221.196.0/23 maxlen: 24 185.232.18.0/23 maxlen: 24 185.238.88.0/22 maxlen: 24 185.246.216.0/24 maxlen: 24 185.246.217.0/24 maxlen: 24 185.246.218.0/23 maxlen: 24 185.253.24.0/24 maxlen: 24 185.253.26.0/23 maxlen: 24 194.113.238.0/24 maxlen: 24 194.113.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 21:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:0e:b7:85:df:8d:67:2f:9c:1c:9e:28:89:91:85:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: Dec 11 06:17:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4989381b1962699a49a930ae6284b5465078da74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a3:92:d2:58:62:21:a9:87:cb:f1:f2:40:c9: 16:7f:5b:a4:39:9a:5f:69:73:48:77:06:4b:41:8d: 5d:ce:b2:43:d5:1a:8c:52:6f:01:60:ee:eb:4a:9c: 91:c0:e1:5b:e4:45:c1:60:98:60:94:ae:d0:0c:64: cd:36:37:a7:85:c4:94:bd:35:2d:27:2d:0e:7b:ec: 1d:d5:23:38:3b:59:97:d3:2e:1b:52:5f:69:fe:63: b8:57:c7:a7:86:c3:90:d8:37:ce:fe:0e:3a:0b:45: 77:32:0a:ff:bf:fe:a8:e6:5e:ea:5c:09:b2:fe:b8: 38:de:41:37:f5:85:bb:80:74:aa:19:b2:46:ec:f1: 29:4e:69:14:16:52:66:87:f9:53:77:d4:0a:af:4c: 1c:23:a1:f1:59:07:aa:b9:cb:48:76:09:fa:3e:a2: c6:88:41:14:9a:73:35:31:cc:81:a0:03:01:35:4c: c5:a5:8b:60:ec:9b:5c:c5:57:6b:cc:77:93:22:ce: 50:30:b9:b5:b8:a4:63:b5:8d:c8:2a:48:a3:60:6b: c2:27:7b:a8:26:09:31:8d:34:83:0f:7d:c5:a0:d6: b6:b1:c6:ca:65:14:1e:5b:ad:1f:99:9d:33:c8:ca: 29:da:96:05:58:7d:76:6c:8a:21:89:67:56:d6:ff: 2c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:89:38:1B:19:62:69:9A:49:A9:30:AE:62:84:B5:46:50:78:DA:74 X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/SYk4GxliaZpJqTCuYoS1RlB42nQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.228.0/22 45.88.100.0/24 45.93.62.0/23 45.95.128.0/22 78.41.84.0/22 178.159.94.0/24 185.221.196.0/23 185.232.18.0/23 185.238.88.0/22 185.246.216.0/22 185.253.24.0/24 185.253.26.0/23 194.113.238.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:de:ee:56:c0:1f:55:4b:04:60:de:58:c8:c4:d7:ca:67:37: ed:ac:f3:ea:f4:38:2d:c5:6e:94:01:ff:e2:ea:1d:a8:6b:ba: 3b:77:c2:f2:8e:e9:ca:9e:18:14:07:c2:88:f7:f2:b8:5d:33: 9f:41:b5:0d:da:08:70:b4:01:c6:27:ec:66:81:32:45:ba:f6: 07:8a:99:a7:7d:42:f6:d7:4c:9f:51:1b:fd:58:ab:62:96:b3: f3:41:61:eb:b2:27:e0:bb:0f:0f:bb:68:31:45:66:d7:f7:22: 9d:6c:90:fc:69:5a:f2:f7:fe:0c:65:fc:4a:38:9a:d5:b9:80: bf:f0:8a:d7:98:5d:4e:cb:be:3b:60:8f:e8:95:07:50:2b:57: 39:62:f3:88:eb:3d:b3:66:72:c0:99:e9:41:b2:8d:b7:af:09: df:0d:bc:77:1e:a0:3d:cd:cb:bd:f8:e4:bc:fa:09:26:9f:1d: 6e:01:34:43:dc:2b:33:09:dc:53:ae:16:86:4b:6f:58:65:16: d0:3a:9b:fe:0a:42:4e:4a:44:1a:8d:0e:37:aa:84:ef:2b:22: 4a:f2:da:cb:dd:5b:5d:d7:c1:0e:e3:cd:1a:89:cf:a5:22:91: 21:d5:97:23:ed:ad:32:19:f0:83:75:e6:ab:82:ac:c7:14:b7: 9a:c7:f0:69 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZsMDreF341nL5wcniiJkYUzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjUxMjExMDYxNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTg5MzgxYjE5NjI2OTlhNDlhOTMwYWU2Mjg0YjU0NjUwNzhkYTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKOS0lhiIamHy/HyQMkWf1ukOZpf aXNIdwZLQY1dzrJD1RqMUm8BYO7rSpyRwOFb5EXBYJhglK7QDGTNNjenhcSUvTUt Jy0Oe+wd1SM4O1mX0y4bUl9p/mO4V8enhsOQ2DfO/g46C0V3Mgr/v/6o5l7qXAmy /rg43kE39YW7gHSqGbJG7PEpTmkUFlJmh/lTd9QKr0wcI6HxWQequctIdgn6PqLG iEEUmnM1McyBoAMBNUzFpYtg7JtcxVdrzHeTIs5QMLm1uKRjtY3IKkijYGvCJ3uo JgkxjTSDD33FoNa2scbKZRQeW60fmZ0zyMop2pYFWH12bIohiWdW1v8snQIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFEmJOBsZYmmaSakwrmKEtUZQeNp0MB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEvU1lrNEd4bGlhWnBKcVRDdVlvUzFSbEI0Mm5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQCLVDkAwQA LVhkAwQBLV0+AwQCLV+AAwQCTilUAwQAsp9eAwQBud3EAwQBuegSAwQCue5YAwQC ufbYAwQAuf0YAwQBuf0aAwQBwnHuMA0GCSqGSIb3DQEBCwUAA4IBAQA63u5WwB9V SwRg3ljIxNfKZzftrPPq9DgtxW6UAf/i6h2oa7o7d8LyjunKnhgUB8KI9/K4XTOf QbUN2ghwtAHGJ+xmgTJFuvYHipmnfUL210yfURv9WKtilrPzQWHrsifguw8Pu2gx RWbX9yKdbJD8aVry9/4MZfxKOJrVuYC/8IrXmF1Oy747YI/olQdQK1c5YvOI6z2z ZnLAmelBso23rwnfDbx3HqA9zcu9+OS8+gkmnx1uATRD3CszCdxTrhaGS29YZRbQ Opv+CkJOSkQajQ43qoTvKyJK8trL3Vtd18EO480aic+lIpEh1Zcj7a0yGfCDdear gqzHFLeax/Bp -----END CERTIFICATE-----Generated at Sat Dec 20 06:33:32 2025 by rpki-client