This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/aIdbv2PChw55j7_R8vc3yfCppjM.roa File: aIdbv2PChw55j7_R8vc3yfCppjM.roa (raw, json) Hash identifier: 7O9akKdhsGMuaoHlwkcm0tguViTaEMAO1XClLbR6cPM= Subject key identifier: 68:87:5B:BF:63:C2:87:0E:79:8F:BF:D1:F2:F7:37:C9:F0:A9:A6:33 Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16 Certificate serial: 019B3727BE4D11AAC0E49F9CFBC127DD1D7C Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/aIdbv2PChw55j7_R8vc3yfCppjM.roa Signing time: Fri 19 Dec 2025 15:08:29 +0000 ROA not before: Fri 19 Dec 2025 15:08:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62005 IP address blocks: 45.86.228.0/24 maxlen: 24 45.86.229.0/24 maxlen: 24 45.86.231.0/24 maxlen: 24 45.129.199.0/24 maxlen: 24 45.143.166.0/23 maxlen: 23 45.150.108.0/24 maxlen: 24 62.106.66.0/24 maxlen: 24 62.204.35.0/24 maxlen: 24 77.72.85.0/24 maxlen: 24 83.97.79.0/24 maxlen: 24 91.211.27.0/24 maxlen: 24 91.235.234.0/24 maxlen: 24 91.242.241.0/24 maxlen: 24 146.19.143.0/24 maxlen: 24 146.19.254.0/24 maxlen: 24 155.212.242.0/24 maxlen: 24 155.212.243.0/24 maxlen: 24 176.124.32.0/24 maxlen: 24 176.124.33.0/24 maxlen: 24 185.39.18.0/24 maxlen: 24 185.123.53.0/24 maxlen: 24 193.104.75.0/24 maxlen: 24 193.109.120.0/24 maxlen: 24 193.200.16.0/24 maxlen: 24 193.200.17.0/24 maxlen: 24 194.26.141.0/24 maxlen: 24 194.61.120.0/24 maxlen: 24 194.61.121.0/24 maxlen: 24 195.54.160.0/24 maxlen: 24 212.46.38.0/24 maxlen: 24 213.109.147.0/24 maxlen: 24 213.109.192.0/24 maxlen: 24 2a10:1fc0:1::/48 maxlen: 48 2a10:1fc0:2::/48 maxlen: 48 2a10:1fc0:3::/48 maxlen: 48 2a10:1fc0:4::/48 maxlen: 48 2a10:1fc0:5::/48 maxlen: 48 2a10:1fc0:6::/48 maxlen: 48 2a10:1fc0:8::/48 maxlen: 48 2a10:1fc0:9::/48 maxlen: 48 2a10:1fc0:b::/48 maxlen: 48 2a10:1fc0:c::/48 maxlen: 48 2a10:1fc0:d::/48 maxlen: 48 2a10:1fc0:e::/48 maxlen: 48 2a10:1fc0:f::/48 maxlen: 48 2a10:1fc0:10::/48 maxlen: 48 2a10:1fc0:11::/48 maxlen: 48 2a10:1fc0:12::/48 maxlen: 48 2a10:1fc0:13::/48 maxlen: 48 2a10:1fc0:14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:27:be:4d:11:aa:c0:e4:9f:9c:fb:c1:27:dd:1d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16 Validity Not Before: Dec 19 15:08:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68875bbf63c2870e798fbfd1f2f737c9f0a9a633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:01:7f:aa:f5:0a:03:27:1b:5f:7c:60:a6:b2: 04:53:b6:4d:9c:3a:6d:97:b4:99:94:5c:aa:1b:76: a9:3b:79:fd:37:0c:18:41:da:c7:8c:59:6d:b4:6d: f5:cb:d3:59:2c:30:0e:52:8e:68:74:a4:ff:fe:71: 6a:81:d4:bf:e7:dc:74:42:40:1b:21:75:ea:3a:a4: 3b:84:4f:5b:3b:31:7b:ab:1e:31:1e:86:e8:85:55: 61:56:af:ad:83:18:84:04:2e:5b:ec:ea:e7:40:85: cb:fe:21:d5:27:61:dc:97:48:15:cb:3f:97:0c:74: 05:82:0e:97:93:c6:28:8e:c0:94:78:46:0d:72:61: e1:90:bf:bb:3f:14:ec:70:d1:36:1b:47:4f:9d:a2: 48:62:da:9d:3b:19:12:33:e5:be:7b:48:5e:d2:4b: 74:b5:86:05:a6:40:9d:ae:12:31:71:84:ca:08:c1: 9c:f2:d4:fe:97:f7:c0:d1:85:49:7b:63:00:a7:e0: e7:9a:ed:73:43:74:dd:9d:58:f5:de:46:e7:29:90: fe:07:7a:9f:47:a3:8c:de:3c:84:4f:b6:e0:e8:df: 11:e3:a6:c6:53:e9:66:9a:e8:89:b6:e8:21:67:85: cc:7f:36:f3:5c:42:33:c8:7a:db:5a:54:20:a8:0d: b1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:87:5B:BF:63:C2:87:0E:79:8F:BF:D1:F2:F7:37:C9:F0:A9:A6:33 X509v3 Authority Key Identifier: keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/aIdbv2PChw55j7_R8vc3yfCppjM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.228.0/23 45.86.231.0/24 45.129.199.0/24 45.143.166.0/23 45.150.108.0/24 62.106.66.0/24 62.204.35.0/24 77.72.85.0/24 83.97.79.0/24 91.211.27.0/24 91.235.234.0/24 91.242.241.0/24 146.19.143.0/24 146.19.254.0/24 155.212.242.0/23 176.124.32.0/23 185.39.18.0/24 185.123.53.0/24 193.104.75.0/24 193.109.120.0/24 193.200.16.0/23 194.26.141.0/24 194.61.120.0/23 195.54.160.0/24 212.46.38.0/24 213.109.147.0/24 213.109.192.0/24 IPv6: 2a10:1fc0:1::-2a10:1fc0:6:ffff:ffff:ffff:ffff:ffff 2a10:1fc0:8::/47 2a10:1fc0:b::-2a10:1fc0:14:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 54:30:c3:52:93:8e:c4:e1:23:d4:fd:9b:4a:65:07:34:6e:7f: 7c:74:b5:40:de:69:55:80:45:e2:87:7f:db:01:a9:bd:02:e7: ef:81:b2:02:e3:81:99:bd:2a:0e:56:8b:e1:96:c5:fb:41:0e: 8b:08:30:f0:fb:40:3b:85:65:50:58:d8:58:36:ef:c6:c1:dd: 17:4b:79:41:25:16:ce:8b:0a:b9:af:bc:fd:c5:2d:7c:2b:15: 68:b4:63:c0:35:69:11:41:5a:ef:94:5c:98:aa:d8:f6:53:f6: 1e:0d:22:41:c8:a7:e1:60:20:5d:fb:57:0a:61:1c:ee:2f:6b: 48:4c:2b:28:b1:72:a0:98:5e:a2:11:5b:5b:1d:1a:fa:5a:20: f5:b9:1f:5e:22:5e:e0:0d:bd:59:62:43:32:8e:af:2c:9b:20: 90:d1:09:b6:20:0c:7d:a5:c9:ca:61:43:43:eb:dd:8a:a5:dd: 03:e6:4e:84:e3:53:38:dc:ac:08:51:10:cd:cc:36:b3:14:85: 72:32:4c:04:79:31:60:1b:a1:41:f5:60:1b:d3:4d:b0:bd:65: e3:c5:52:aa:1b:8b:9d:02:eb:10:cd:a8:04:5c:a1:83:e7:52: a9:09:7b:ef:52:0d:c2:0c:45:d7:cb:c6:d2:f2:65:37:95:2c: 49:b0:ae:4d -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgISAZs3J75NEarA5J+c+8En3R18MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NzMyMGQwMzA5MzAxNzhlNmY3Y2VlZjkxZDJhYjg3ODRk M2RjMTYwHhcNMjUxMjE5MTUwODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODg3NWJiZjYzYzI4NzBlNzk4ZmJmZDFmMmY3MzdjOWYwYTlhNjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQF/qvUKAycbX3xgprIEU7ZNnDpt l7SZlFyqG3apO3n9NwwYQdrHjFlttG31y9NZLDAOUo5odKT//nFqgdS/59x0QkAb IXXqOqQ7hE9bOzF7qx4xHobohVVhVq+tgxiEBC5b7OrnQIXL/iHVJ2Hcl0gVyz+X DHQFgg6Xk8YojsCUeEYNcmHhkL+7PxTscNE2G0dPnaJIYtqdOxkSM+W+e0he0kt0 tYYFpkCdrhIxcYTKCMGc8tT+l/fA0YVJe2MAp+Dnmu1zQ3TdnVj13kbnKZD+B3qf R6OM3jyET7bg6N8R46bGU+lmmuiJtughZ4XMfzbzXEIzyHrbWlQgqA2xxQIDAQAB o4IC4zCCAt8wHQYDVR0OBBYEFGiHW79jwocOeY+/0fL3N8nwqaYzMB8GA1UdIwQY MBaAFJRzINAwkwF45vfO75HSq4eE09wWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEt OGFjNGEyMTkzOGI0LzEvYUlkYnYyUENodzU1ajdfUjh2YzN5ZkNwcGpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEtOGFjNGEyMTkzOGI0 LzEvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH4BggrBgEFBQcBBwEB/wSB6DCB5TCBqQQCAAEwgaIDBAEt VuQDBAAtVucDBAAtgccDBAEtj6YDBAAtlmwDBAA+akIDBAA+zCMDBABNSFUDBABT YU8DBABb0xsDBABb6+oDBABb8vEDBACSE48DBACSE/4DBAGb1PIDBAGwfCADBAC5 JxIDBAC5ezUDBADBaEsDBADBbXgDBAHByBADBADCGo0DBAHCPXgDBADDNqADBADU LiYDBADVbZMDBADVbcAwNwQCAAIwMTASAwcAKhAfwAABAwcAKhAfwAAGAwcBKhAf wAAIMBIDBwAqEB/AAAsDBwAqEB/AABQwDQYJKoZIhvcNAQELBQADggEBAFQww1KT jsThI9T9m0plBzRuf3x0tUDeaVWAReKHf9sBqb0C5++BsgLjgZm9Kg5Wi+GWxftB DosIMPD7QDuFZVBY2Fg278bB3RdLeUElFs6LCrmvvP3FLXwrFWi0Y8A1aRFBWu+U XJiq2PZT9h4NIkHIp+FgIF37VwphHO4va0hMKyixcqCYXqIRW1sdGvpaIPW5H14i XuANvVliQzKOryybIJDRCbYgDH2lycphQ0Pr3Yql3QPmToTjUzjcrAhREM3MNrMU hXIyTAR5MWAboUH1YBvTTbC9ZePFUqobi50C6xDNqARcoYPnUqkJe+9SDcIMRdfL xtLyZTeVLEmwrk0= -----END CERTIFICATE-----Generated at Sat Dec 20 23:51:35 2025 by rpki-client