This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4PbhCaw3XR1Ffh8NujymXur9ZYI.roa File: 4PbhCaw3XR1Ffh8NujymXur9ZYI.roa (raw, json) Hash identifier: xgIoP+p3071XIwhib9cRvRTXApsXeq46DL37jV1jOwo= Subject key identifier: E0:F6:E1:09:AC:37:5D:1D:45:7E:1F:0D:BA:3C:A6:5E:EA:FD:65:82 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B380378148D79C549918ED6ECFDD8BA62 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4PbhCaw3XR1Ffh8NujymXur9ZYI.roa Signing time: Fri 19 Dec 2025 19:08:29 +0000 ROA not before: Fri 19 Dec 2025 19:08:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 109.204.104.0/21 maxlen: 24 212.134.21.0/24 maxlen: 24 212.134.23.0/24 maxlen: 24 212.134.25.0/24 maxlen: 24 212.134.38.0/24 maxlen: 24 212.134.45.0/24 maxlen: 24 212.134.59.0/24 maxlen: 24 212.134.116.0/22 maxlen: 24 212.134.158.0/24 maxlen: 24 212.135.16.0/22 maxlen: 24 212.135.134.0/24 maxlen: 24 212.135.149.0/24 maxlen: 24 212.135.152.0/24 maxlen: 24 212.135.159.0/24 maxlen: 24 212.135.243.0/24 maxlen: 24 212.135.250.0/24 maxlen: 24 212.135.251.0/24 maxlen: 24 212.135.253.0/24 maxlen: 24 212.135.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:03:78:14:8d:79:c5:49:91:8e:d6:ec:fd:d8:ba:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Dec 19 19:08:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e0f6e109ac375d1d457e1f0dba3ca65eeafd6582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4f:e9:9e:ee:a3:22:f2:f5:ed:1b:e1:98:86: 5e:7b:8e:72:7a:11:f0:f9:24:1b:7b:79:f2:c6:5d: 4c:d8:ee:69:cd:cb:90:3b:f6:24:82:8b:ca:1c:33: b8:40:3b:65:8f:95:db:ad:0d:5d:c7:15:85:68:f7: 7f:a9:1a:5a:54:62:cb:ea:6a:b2:30:67:96:53:ca: 78:36:b3:3c:8d:65:c0:0d:7a:39:43:75:ae:bb:6e: e8:9b:59:93:53:47:16:db:af:46:23:3e:92:c3:40: 5f:e8:d7:09:33:d6:a3:32:f3:fc:05:84:77:98:b9: bd:e1:2e:cd:92:6b:49:9a:c7:8a:d8:35:b8:52:01: 4d:4c:65:92:e6:c9:e7:2b:90:d9:ab:7d:9c:99:9b: f8:72:23:5d:75:a7:0d:82:34:9b:9a:ce:e6:d5:23: 84:7d:d5:90:2d:75:76:c3:a0:76:3e:c7:8c:77:cc: c6:9d:9a:f5:c7:7e:ad:89:fd:45:4e:13:5d:80:d0: a1:4e:58:db:71:c5:39:7d:3a:a9:a3:28:7e:5d:5b: b5:c6:60:a6:13:02:c4:f4:c3:28:56:2b:90:e5:82: 3a:44:ae:b4:e9:4c:8e:d6:bb:0d:04:6a:42:3f:2d: 8c:dd:b1:bc:c0:11:cb:15:76:fe:c2:3d:29:9c:44: 8b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F6:E1:09:AC:37:5D:1D:45:7E:1F:0D:BA:3C:A6:5E:EA:FD:65:82 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4PbhCaw3XR1Ffh8NujymXur9ZYI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.204.104.0/21 212.134.21.0/24 212.134.23.0/24 212.134.25.0/24 212.134.38.0/24 212.134.45.0/24 212.134.59.0/24 212.134.116.0/22 212.134.158.0/24 212.135.16.0/22 212.135.134.0/24 212.135.149.0/24 212.135.152.0/24 212.135.159.0/24 212.135.243.0/24 212.135.250.0/23 212.135.253.0-212.135.254.255 Signature Algorithm: sha256WithRSAEncryption 9a:db:a2:a1:47:51:d1:9e:a8:56:64:64:de:d0:7b:eb:77:8d: 72:1c:27:c4:ad:15:a5:93:ab:15:96:96:32:72:55:fb:60:28: 0c:c9:cd:3c:59:35:ea:bb:d2:dd:8c:26:58:eb:a9:0e:f9:b7: ca:30:7d:b1:d1:52:a1:51:a5:ef:c7:87:8e:07:c9:76:9d:f8: 63:f0:44:6a:6a:82:95:13:84:76:58:d6:7b:21:67:8f:37:21: d9:d9:8b:d6:ac:94:4d:b2:00:c3:0c:b3:8f:c3:b9:87:ea:2a: bc:6a:1a:a0:bb:80:8b:13:b3:06:e4:08:8b:b7:f2:8c:9f:9a: 30:c4:57:1a:7b:8c:46:7f:19:47:5e:c0:57:dc:30:16:38:e0: 01:a1:c2:6b:c6:c4:4e:9d:44:10:d6:d7:c5:ab:70:3f:fa:0d: 91:52:83:cb:9f:75:a8:ea:db:c9:b6:1c:b5:e6:ad:ad:e3:51: 6f:b7:d9:36:18:e3:47:b6:12:f7:02:dc:c6:c2:7b:c0:15:79: 60:70:23:bb:36:f1:1e:88:b8:19:7d:23:76:2f:e1:3a:ca:01: c5:73:2a:18:12:1a:ce:90:d2:7f:07:ba:40:36:2b:2c:fc:d0: 77:27:86:3c:80:aa:ce:2c:30:6c:90:f9:e0:9d:0f:5f:e5:49: 0b:e0:4f:b1 -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgISAZs4A3gUjXnFSZGO1uz92LpiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMjE5MTkwODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGY2ZTEwOWFjMzc1ZDFkNDU3ZTFmMGRiYTNjYTY1ZWVhZmQ2NTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok/pnu6jIvL17RvhmIZee45yehHw +SQbe3nyxl1M2O5pzcuQO/YkgovKHDO4QDtlj5XbrQ1dxxWFaPd/qRpaVGLL6mqy MGeWU8p4NrM8jWXADXo5Q3Wuu27om1mTU0cW269GIz6Sw0Bf6NcJM9ajMvP8BYR3 mLm94S7NkmtJmseK2DW4UgFNTGWS5snnK5DZq32cmZv4ciNddacNgjSbms7m1SOE fdWQLXV2w6B2PseMd8zGnZr1x36tif1FThNdgNChTljbccU5fTqpoyh+XVu1xmCm EwLE9MMoViuQ5YI6RK606UyO1rsNBGpCPy2M3bG8wBHLFXb+wj0pnESLUQIDAQAB o4ICcjCCAm4wHQYDVR0OBBYEFOD24QmsN10dRX4fDbo8pl7q/WWCMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvNFBiaENhdzNYUjFGZmg4TnVqeW1YdXI5WllJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbgMEA23MaAME ANSGFQMEANSGFwMEANSGGQMEANSGJgMEANSGLQMEANSGOwMEAtSGdAMEANSGngME AtSHEAMEANSHhgMEANSHlQMEANSHmAMEANSHnwMEANSH8wMEAdSH+jAMAwQA1If9 AwQA1If+MA0GCSqGSIb3DQEBCwUAA4IBAQCa26KhR1HRnqhWZGTe0Hvrd41yHCfE rRWlk6sVlpYyclX7YCgMyc08WTXqu9LdjCZY66kO+bfKMH2x0VKhUaXvx4eOB8l2 nfhj8ERqaoKVE4R2WNZ7IWePNyHZ2YvWrJRNsgDDDLOPw7mH6iq8ahqgu4CLE7MG 5AiLt/KMn5owxFcae4xGfxlHXsBX3DAWOOABocJrxsROnUQQ1tfFq3A/+g2RUoPL n3Wo6tvJthy15q2t41Fvt9k2GONHthL3AtzGwnvAFXlgcCO7NvEeiLgZfSN2L+E6 ygHFcyoYEhrOkNJ/B7pANiss/NB3J4Y8gKrOLDBskPngnQ9f5UkL4E+x -----END CERTIFICATE-----Generated at Sat Dec 20 22:10:24 2025 by rpki-client