This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/wBJ0IUR5xE1UzkcuQlL6GGuMVm4.roa File: wBJ0IUR5xE1UzkcuQlL6GGuMVm4.roa (raw, json) Hash identifier: v2tXfu10g3+3TlStTIMoAI5GMxbBI5ELJPgVu0LsLdA= Subject key identifier: C0:12:74:21:44:79:C4:4D:54:CE:47:2E:42:52:FA:18:6B:8C:56:6E Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B2E7E5509CD676AE449997D690157FB42 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/wBJ0IUR5xE1UzkcuQlL6GGuMVm4.roa Signing time: Wed 17 Dec 2025 22:46:29 +0000 ROA not before: Wed 17 Dec 2025 22:46:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212552 IP address blocks: 43.225.90.0/24 maxlen: 24 45.146.241.0/24 maxlen: 24 46.249.98.0/23 maxlen: 24 46.249.100.0/22 maxlen: 24 46.249.103.0/24 maxlen: 24 46.249.111.0/24 maxlen: 24 82.115.8.0/24 maxlen: 24 82.115.13.0/24 maxlen: 24 82.115.16.0/24 maxlen: 24 82.115.17.0/24 maxlen: 24 82.115.18.0/24 maxlen: 24 82.115.19.0/24 maxlen: 24 82.115.20.0/23 maxlen: 24 82.115.24.0/22 maxlen: 24 89.251.8.0/23 maxlen: 24 103.75.196.0/22 maxlen: 24 185.80.196.0/24 maxlen: 24 185.215.244.0/23 maxlen: 24 193.36.84.0/23 maxlen: 24 202.133.88.0/24 maxlen: 24 202.133.89.0/24 maxlen: 24 202.133.90.0/24 maxlen: 24 202.133.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:7e:55:09:cd:67:6a:e4:49:99:7d:69:01:57:fb:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Dec 17 22:46:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c01274214479c44d54ce472e4252fa186b8c566e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:77:c3:67:2c:01:8a:fd:80:44:5b:70:0c:00: f4:e1:39:af:8e:7d:ab:86:78:af:52:5e:b0:2d:96: af:22:d2:f6:43:6d:3d:a9:de:72:de:57:72:01:3e: ab:85:46:ce:d3:57:cf:1f:e7:ec:48:f3:23:83:70: 63:55:73:ec:b9:2c:c6:18:fe:63:f5:c7:19:36:9b: d6:64:cc:8b:6d:9f:e6:e8:c7:98:47:56:8d:08:69: 1c:f5:2f:44:33:66:36:b4:16:65:05:07:8e:5c:fe: 93:0d:b7:84:1d:2a:c8:50:ff:7b:ac:15:fb:3f:c3: 14:63:ef:7f:f9:97:e5:60:7a:1b:cd:73:12:2d:ef: db:92:d5:aa:df:86:47:d7:d8:3b:37:92:41:12:8b: 6a:c7:cb:ed:f5:43:9c:76:58:c8:f8:f7:d9:b0:63: a7:bf:ed:da:33:7d:0d:90:2b:3a:ce:7f:ee:dc:35: f3:a5:d6:95:51:60:e7:8e:1d:d5:26:fb:43:31:14: fe:24:88:61:6f:45:e0:8a:ea:bf:37:3e:0d:a7:4b: da:6a:7b:0c:e2:c6:78:ba:33:43:ea:ab:73:42:96: 3f:98:80:05:2f:a8:1d:de:cb:da:34:47:ec:d5:95: ef:93:ac:de:d7:4f:37:58:74:d4:af:e9:b1:2a:e9: 14:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:12:74:21:44:79:C4:4D:54:CE:47:2E:42:52:FA:18:6B:8C:56:6E X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/wBJ0IUR5xE1UzkcuQlL6GGuMVm4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.225.90.0/24 45.146.241.0/24 46.249.98.0-46.249.103.255 46.249.111.0/24 82.115.8.0/24 82.115.13.0/24 82.115.16.0-82.115.21.255 82.115.24.0/22 89.251.8.0/23 103.75.196.0/22 185.80.196.0/24 185.215.244.0/23 193.36.84.0/23 202.133.88.0/22 Signature Algorithm: sha256WithRSAEncryption 49:bd:2b:a9:71:87:b1:a9:11:29:8f:61:3e:69:7b:8f:35:02: 3f:50:2f:00:aa:de:04:42:84:3e:ac:9b:b9:52:9d:70:4c:7e: c6:f4:d6:57:d6:65:c3:e9:1c:c3:76:34:e4:40:73:3c:9d:f6: 0e:10:b2:70:d2:02:42:a4:35:39:94:2a:07:c1:d3:3e:b6:b5: 0e:94:c4:78:c3:7a:a9:29:e1:4a:b9:43:03:6c:f0:6f:41:a3: 64:51:ef:0b:4a:eb:9b:25:df:ae:5b:57:fc:46:cd:96:b1:aa: 19:08:b9:31:ef:1b:ca:e1:b0:3c:f9:34:28:a9:f1:a5:20:6a: 24:05:ae:fb:4e:af:bb:68:52:2e:ff:b8:78:46:bd:03:01:c0: e9:04:a8:85:7e:9c:f3:35:f9:26:16:2c:00:b3:2c:a7:d2:15: 18:8e:05:b4:72:97:8e:b9:04:36:d5:b3:82:ed:e0:ff:73:b3: 41:e4:d2:91:6d:3a:f7:4c:1b:65:3f:9a:e1:7a:48:21:86:df: 24:cb:53:fa:16:87:e2:b8:67:a6:ed:e8:a7:a5:cb:ec:4e:c4: a7:39:42:ab:37:11:32:c9:77:84:30:f0:c4:0b:ac:09:59:8a: 86:ba:14:a1:d2:b4:c6:1c:a2:46:4c:60:5d:02:98:f5:b1:43: 1c:19:1b:af -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgISAZsuflUJzWdq5EmZfWkBV/tCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjUxMjE3MjI0NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDEyNzQyMTQ0NzljNDRkNTRjZTQ3MmU0MjUyZmExODZiOGM1NjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnfDZywBiv2ARFtwDAD04Tmvjn2r hnivUl6wLZavItL2Q209qd5y3ldyAT6rhUbO01fPH+fsSPMjg3BjVXPsuSzGGP5j 9ccZNpvWZMyLbZ/m6MeYR1aNCGkc9S9EM2Y2tBZlBQeOXP6TDbeEHSrIUP97rBX7 P8MUY+9/+ZflYHobzXMSLe/bktWq34ZH19g7N5JBEotqx8vt9UOcdljI+PfZsGOn v+3aM30NkCs6zn/u3DXzpdaVUWDnjh3VJvtDMRT+JIhhb0Xgiuq/Nz4Np0vaansM 4sZ4ujND6qtzQpY/mIAFL6gd3svaNEfs1ZXvk6ze1083WHTUr+mxKukUbwIDAQAB o4ICZzCCAmMwHQYDVR0OBBYEFMASdCFEecRNVM5HLkJS+hhrjFZuMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvd0JKMElVUjV4RTFVemtjdVFsTDZHR3VNVm00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH0GCCsGAQUFBwEHAQH/BG4wbDBqBAIAATBkAwQAK+FaAwQA LZLxMAwDBAEu+WIDBAMu+WADBAAu+W8DBABScwgDBABScw0wDAMEBFJzEAMEAVJz FAMEAlJzGAMEAVn7CAMEAmdLxAMEALlQxAMEAbnX9AMEAcEkVAMEAsqFWDANBgkq hkiG9w0BAQsFAAOCAQEASb0rqXGHsakRKY9hPml7jzUCP1AvAKreBEKEPqybuVKd cEx+xvTWV9Zlw+kcw3Y05EBzPJ32DhCycNICQqQ1OZQqB8HTPra1DpTEeMN6qSnh SrlDA2zwb0GjZFHvC0rrmyXfrltX/EbNlrGqGQi5Me8byuGwPPk0KKnxpSBqJAWu +06vu2hSLv+4eEa9AwHA6QSohX6c8zX5JhYsALMsp9IVGI4FtHKXjrkENtWzgu3g /3OzQeTSkW0690wbZT+a4XpIIYbfJMtT+haH4rhnpu3op6XL7E7EpzlCqzcRMsl3 hDDwxAusCVmKhroUodK0xhyiRkxgXQKY9bFDHBkbrw== -----END CERTIFICATE-----Generated at Fri Dec 19 22:35:23 2025 by rpki-client