This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/d4ybRcabDTL5I6KnKfAwkofhkaU.roa File: d4ybRcabDTL5I6KnKfAwkofhkaU.roa (raw, json) Hash identifier: y+vhYi3sDZPsdd5d0RuC2nbOgBESoom0L1Uvr/s4g2s= Subject key identifier: 77:8C:9B:45:C6:9B:0D:32:F9:23:A2:A7:29:F0:30:92:87:E1:91:A5 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B33599F2DCB37B60D3377D6956CB341DF Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/d4ybRcabDTL5I6KnKfAwkofhkaU.roa Signing time: Thu 18 Dec 2025 21:24:29 +0000 ROA not before: Thu 18 Dec 2025 21:24:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 7029 IP address blocks: 89.125.141.0/24 maxlen: 24 89.125.164.0/24 maxlen: 24 89.125.184.0/24 maxlen: 24 140.225.192.0/21 maxlen: 21 140.225.200.0/21 maxlen: 21 140.225.208.0/21 maxlen: 21 140.225.216.0/21 maxlen: 21 206.245.136.0/21 maxlen: 21 206.245.144.0/21 maxlen: 21 208.123.184.0/24 maxlen: 24 208.123.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:59:9f:2d:cb:37:b6:0d:33:77:d6:95:6c:b3:41:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Dec 18 21:24:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=778c9b45c69b0d32f923a2a729f0309287e191a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8f:7e:af:07:58:ff:27:db:d4:f9:ab:53:a4: 1a:98:8a:d3:10:53:b0:ee:5e:03:7b:d8:ee:cb:83: 8d:7d:2b:dc:8f:4f:c1:3a:b7:20:ce:e6:10:fb:d2: 3f:94:59:57:bc:4d:86:44:5c:d9:c7:46:5f:1a:bf: 32:6d:7d:4f:e4:89:7f:76:15:ec:d9:35:e3:66:19: f2:06:5a:ab:a5:fc:79:56:8d:09:ce:2e:ed:8c:40: c9:ab:38:2f:92:6f:d8:d6:32:16:38:af:99:de:93: 87:70:68:80:89:e4:82:7b:98:f4:22:cd:05:75:f1: 21:c2:39:8f:6b:fd:81:0d:16:2d:73:f4:ef:c9:33: cb:24:52:17:13:9a:c8:60:ac:c0:05:a4:a5:2e:66: 04:3d:86:57:79:3a:6d:87:df:da:df:b5:7a:9a:d5: 34:34:e1:1a:a1:9d:54:85:8d:91:02:e8:4e:1c:eb: 81:6c:4b:d9:21:fc:ec:47:df:df:27:2b:6d:1f:21: 5f:44:aa:d6:c7:cb:9a:57:1d:d9:7e:3a:fc:24:1b: 1b:6d:48:d1:21:46:3b:57:a8:e0:18:ef:f1:43:8f: 78:1e:d0:d3:d3:73:1f:74:ec:1a:85:53:79:b0:8a: 4e:36:19:76:c9:a0:39:80:b9:1e:dc:d8:38:20:ad: 7a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:8C:9B:45:C6:9B:0D:32:F9:23:A2:A7:29:F0:30:92:87:E1:91:A5 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/d4ybRcabDTL5I6KnKfAwkofhkaU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.125.141.0/24 89.125.164.0/24 89.125.184.0/24 140.225.192.0/19 206.245.136.0-206.245.151.255 208.123.184.0/24 208.123.186.0/24 Signature Algorithm: sha256WithRSAEncryption 86:f1:77:26:05:48:02:0f:54:aa:4e:6a:2e:d4:1f:fe:e1:58: f8:10:3f:c5:04:3b:9a:b5:12:c5:d7:0a:ee:b8:e2:3b:a2:f0: af:39:a4:87:2e:8b:d5:f7:b5:97:7d:85:d9:2b:dd:4a:23:a6: ab:7d:50:75:1f:73:91:e3:76:89:19:7d:a6:95:0f:20:92:61: b8:3d:80:94:28:7c:a3:46:71:8e:b6:87:5a:e2:f7:ea:fb:13: 62:4f:29:28:d6:1a:49:3a:aa:06:98:8c:c9:62:8b:35:33:e4: dd:b1:50:d4:8b:38:16:dc:9e:71:ea:e3:a9:9e:f7:81:21:20: e6:42:39:c3:11:7a:58:51:2b:8b:3e:92:89:ba:69:3d:47:b0: 4a:2b:6a:11:f4:8e:98:bd:fd:04:df:d5:75:19:db:cd:39:d6: 88:17:b5:5e:6b:c5:57:c8:c0:17:87:20:84:b5:34:16:7a:fd: bd:51:fc:93:bf:6f:45:0d:26:05:37:b9:58:2e:54:3c:d8:33: d5:8e:cb:e5:f1:40:cf:bb:c6:26:af:62:7a:7c:0b:de:cb:10: 2a:81:4c:ec:31:0f:23:8c:a4:b9:fc:4e:20:1d:ef:f6:7b:0b: ed:9d:b8:fe:12:4d:32:f9:57:34:a2:25:30:80:9d:20:bf:70: 95:ae:55:54 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZszWZ8tyze2DTN31pVss0HfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjUxMjE4MjEyNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzhjOWI0NWM2OWIwZDMyZjkyM2EyYTcyOWYwMzA5Mjg3ZTE5MWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz49+rwdY/yfb1PmrU6QamIrTEFOw 7l4De9juy4ONfSvcj0/BOrcgzuYQ+9I/lFlXvE2GRFzZx0ZfGr8ybX1P5Il/dhXs 2TXjZhnyBlqrpfx5Vo0Jzi7tjEDJqzgvkm/Y1jIWOK+Z3pOHcGiAieSCe5j0Is0F dfEhwjmPa/2BDRYtc/TvyTPLJFIXE5rIYKzABaSlLmYEPYZXeTpth9/a37V6mtU0 NOEaoZ1UhY2RAuhOHOuBbEvZIfzsR9/fJyttHyFfRKrWx8uaVx3Zfjr8JBsbbUjR IUY7V6jgGO/xQ494HtDT03MfdOwahVN5sIpONhl2yaA5gLke3Ng4IK16pwIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFHeMm0XGmw0y+SOipynwMJKH4ZGlMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvZDR5YlJjYWJEVEw1STZLbktmQXdrb2Zoa2FVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAWX2NAwQA WX2kAwQAWX24AwQFjOHAMAwDBAPO9YgDBAPO9ZADBADQe7gDBADQe7owDQYJKoZI hvcNAQELBQADggEBAIbxdyYFSAIPVKpOai7UH/7hWPgQP8UEO5q1EsXXCu644jui 8K85pIcui9X3tZd9hdkr3Uojpqt9UHUfc5HjdokZfaaVDyCSYbg9gJQofKNGcY62 h1ri9+r7E2JPKSjWGkk6qgaYjMliizUz5N2xUNSLOBbcnnHq46me94EhIOZCOcMR elhRK4s+kom6aT1HsEorahH0jpi9/QTf1XUZ28051ogXtV5rxVfIwBeHIIS1NBZ6 /b1R/JO/b0UNJgU3uVguVDzYM9WOy+XxQM+7xiavYnp8C97LECqBTOwxDyOMpLn8 TiAd7/Z7C+2duP4STTL5VzSiJTCAnSC/cJWuVVQ= -----END CERTIFICATE-----Generated at Sat Dec 20 04:36:35 2025 by rpki-client