This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/FomQAsyPJRMx9g-hhlkT7M04pr0.roa File: FomQAsyPJRMx9g-hhlkT7M04pr0.roa (raw, json) Hash identifier: ikv4aeMhl3lapNnx+Yj6ImgDMiSl/VYapyC2LeBgopY= Subject key identifier: 16:89:90:02:CC:8F:25:13:31:F6:0F:A1:86:59:13:EC:CD:38:A6:BD Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Certificate serial: 019ADF1CCD0B82403AA0FE39AA3BF1A3C9FF Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/FomQAsyPJRMx9g-hhlkT7M04pr0.roa Signing time: Tue 02 Dec 2025 12:49:58 +0000 ROA not before: Tue 02 Dec 2025 12:49:58 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58061 IP address blocks: 45.137.212.0/24 maxlen: 24 45.137.213.0/24 maxlen: 24 45.137.214.0/24 maxlen: 24 45.137.215.0/24 maxlen: 24 62.197.45.0/24 maxlen: 24 82.117.242.0/23 maxlen: 23 85.90.208.0/24 maxlen: 24 85.90.209.0/24 maxlen: 24 89.187.73.0/24 maxlen: 24 89.187.77.0/24 maxlen: 24 92.63.224.0/24 maxlen: 24 148.222.186.0/24 maxlen: 24 176.98.40.0/24 maxlen: 24 185.93.104.0/24 maxlen: 24 185.93.105.0/24 maxlen: 24 185.93.106.0/24 maxlen: 24 185.109.48.0/24 maxlen: 24 2a02:c6c1:2::/48 maxlen: 48 2a02:c6c1:3::/48 maxlen: 48 2a02:c6c1:e::/48 maxlen: 48 2a02:c6c1:10::/48 maxlen: 48 2a02:c6c1:141::/48 maxlen: 48 2a02:c6c1:142::/48 maxlen: 48 2a02:c6c1:151::/48 maxlen: 48 2a02:c6c1:152::/48 maxlen: 48 2a02:c6c1:153::/48 maxlen: 48 2a02:c6c1:154::/48 maxlen: 48 2a02:c6c1:155::/48 maxlen: 48 2a02:c6c1:156::/48 maxlen: 48 2a02:c6c2::/32 maxlen: 32 2a02:c6c3::/32 maxlen: 32 2a02:c6c7::/32 maxlen: 32 2a0c:6740::/29 maxlen: 29 2a0c:6741::/32 maxlen: 32 2a0e:92c0::/29 maxlen: 29 2a0e:9a40::/29 maxlen: 29 2a0e:a7c0::/29 maxlen: 29 2a0e:a7c0::/32 maxlen: 32 2a0e:a7c1:1::/48 maxlen: 48 2a0f:4b40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:1c:cd:0b:82:40:3a:a0:fe:39:aa:3b:f1:a3:c9:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Validity Not Before: Dec 2 12:49:58 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=16899002cc8f251331f60fa1865913eccd38a6bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:46:b2:40:02:33:a9:ec:3f:0d:43:eb:24:59: 44:a0:4d:87:cc:3b:d6:89:4c:24:a3:50:22:a1:d1: 2e:51:08:1e:85:92:93:87:b5:2e:30:24:09:dd:df: 2a:9f:11:33:ed:97:06:fd:a9:c7:44:9f:72:7d:c7: b7:ed:05:82:61:63:80:33:d1:2b:27:0e:94:3a:06: e3:7e:8f:e7:b1:0c:f0:be:2c:3c:c4:08:5d:16:c2: 27:65:d3:1d:f0:26:b9:e7:c9:2d:cb:cd:7e:d2:23: 89:52:0d:1c:2c:04:02:42:52:1d:5d:82:e1:ad:73: 93:1c:2b:ff:0e:be:a8:c4:45:3b:cd:73:8d:94:98: e9:a2:39:7e:a1:a9:83:2d:ca:23:50:ab:1f:ac:49: c0:28:74:b0:1e:78:22:4b:c6:9a:ae:7e:32:97:03: d8:30:60:f5:b2:e6:32:09:17:81:c4:37:f4:d6:09: 74:e8:5c:d3:8c:4d:08:09:f9:d3:47:93:98:36:b7: 7d:7d:c0:fe:8c:db:47:cf:f6:c8:3b:78:3d:09:bb: 68:e1:86:45:a8:e8:83:1b:00:fe:bb:70:d5:87:a4: 66:19:bb:d5:91:98:11:ea:5a:f1:70:7a:7e:7e:13: 2a:81:90:3e:68:20:70:bb:75:4c:93:0e:4c:5b:3a: aa:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:89:90:02:CC:8F:25:13:31:F6:0F:A1:86:59:13:EC:CD:38:A6:BD X509v3 Authority Key Identifier: keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/FomQAsyPJRMx9g-hhlkT7M04pr0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.212.0/22 62.197.45.0/24 82.117.242.0/23 85.90.208.0/23 89.187.73.0/24 89.187.77.0/24 92.63.224.0/24 148.222.186.0/24 176.98.40.0/24 185.93.104.0-185.93.106.255 185.109.48.0/24 IPv6: 2a02:c6c1:2::/47 2a02:c6c1:e::/48 2a02:c6c1:10::/48 2a02:c6c1:141::-2a02:c6c1:142:ffff:ffff:ffff:ffff:ffff 2a02:c6c1:151::-2a02:c6c1:156:ffff:ffff:ffff:ffff:ffff 2a02:c6c2::/31 2a02:c6c7::/32 2a0c:6740::/29 2a0e:92c0::/29 2a0e:9a40::/29 2a0e:a7c0::/29 2a0f:4b40::/29 Signature Algorithm: sha256WithRSAEncryption 69:95:8b:65:75:69:46:42:d3:49:15:0d:a0:c3:66:45:a5:17: ce:1e:8d:53:b2:3a:5c:f1:5c:3c:2c:33:ad:e1:06:99:15:9c: ed:e1:6f:86:ce:08:6d:d4:2e:56:55:4b:39:f2:9b:7e:ae:21: d8:b7:ac:ec:0d:b8:aa:89:5b:1d:60:61:65:fc:ad:e6:78:65: e4:35:2b:1a:5f:19:b7:c2:e8:8c:48:e3:0b:ba:7b:6f:e0:4d: 6b:00:19:f1:78:3b:7d:71:07:6f:56:11:ac:0b:b8:72:ea:a7: 90:4a:e7:b4:a3:41:9c:30:a6:04:ea:7c:98:fd:50:43:01:0b: 04:b0:9e:ff:9d:94:b7:36:6c:39:07:a7:cf:f4:53:db:9c:d0: 99:6e:4b:dd:a5:92:73:e9:10:dc:12:f8:3a:60:48:43:94:a0: 0d:ff:d0:ae:ca:4b:cd:bc:11:d7:9e:dc:8c:47:cb:dd:52:9c: 9f:43:50:20:1e:23:fe:0c:4f:67:80:be:cb:ca:65:ed:74:29: cf:69:19:a5:2a:68:e2:4f:bf:44:0e:10:d6:b6:e8:be:e3:fe: e7:21:49:cb:02:ef:7a:ca:9c:83:64:27:be:bd:7e:71:b5:0f: a8:0b:98:66:c3:18:94:a3:53:a8:54:8b:6b:41:3e:d7:93:91: a1:d1:9e:f4 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZrfHM0LgkA6oP45qjvxo8n/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0 NGY0NDQwHhcNMjUxMjAyMTI0OTU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjg5OTAwMmNjOGYyNTEzMzFmNjBmYTE4NjU5MTNlY2NkMzhhNmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kayQAIzqew/DUPrJFlEoE2HzDvW iUwko1AiodEuUQgehZKTh7UuMCQJ3d8qnxEz7ZcG/anHRJ9yfce37QWCYWOAM9Er Jw6UOgbjfo/nsQzwviw8xAhdFsInZdMd8Ca558kty81+0iOJUg0cLAQCQlIdXYLh rXOTHCv/Dr6oxEU7zXONlJjpojl+oamDLcojUKsfrEnAKHSwHngiS8aarn4ylwPY MGD1suYyCReBxDf01gl06FzTjE0ICfnTR5OYNrd9fcD+jNtHz/bIO3g9Cbto4YZF qOiDGwD+u3DVh6RmGbvVkZgR6lrxcHp+fhMqgZA+aCBwu3VMkw5MWzqqKwIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFBaJkALMjyUTMfYPoYZZE+zNOKa9MB8GA1UdIwQY MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt ZWU0MzVkM2NkNTg1LzEvRm9tUUFzeVBKUk14OWctaGhsa1Q3TTA0cHIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1 LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHhBggrBgEFBQcBBwEB/wSB0TCBzjBQBAIAATBKAwQCLYnU AwQAPsUtAwQBUnXyAwQBVVrQAwQAWbtJAwQAWbtNAwQAXD/gAwQAlN66AwQAsGIo MAwDBAO5XWgDBAC5XWoDBAC5bTAwegQCAAIwdAMHASoCxsEAAgMHACoCxsEADgMH ACoCxsEAEDASAwcAKgLGwQFBAwcAKgLGwQFCMBIDBwAqAsbBAVEDBwAqAsbBAVYD BQEqAsbCAwUAKgLGxwMFAyoMZ0ADBQMqDpLAAwUDKg6aQAMFAyoOp8ADBQMqD0tA MA0GCSqGSIb3DQEBCwUAA4IBAQBplYtldWlGQtNJFQ2gw2ZFpRfOHo1Tsjpc8Vw8 LDOt4QaZFZzt4W+Gzght1C5WVUs58pt+riHYt6zsDbiqiVsdYGFl/K3meGXkNSsa Xxm3wuiMSOMLuntv4E1rABnxeDt9cQdvVhGsC7hy6qeQSue0o0GcMKYE6nyY/VBD AQsEsJ7/nZS3Nmw5B6fP9FPbnNCZbkvdpZJz6RDcEvg6YEhDlKAN/9CuykvNvBHX ntyMR8vdUpyfQ1AgHiP+DE9ngL7LymXtdCnPaRmlKmjiT79EDhDWtui+4/7nIUnL Au96ypyDZCe+vX5xtQ+oC5hmwxiUo1OoVItrQT7Xk5Gh0Z70 -----END CERTIFICATE-----Generated at Sat Dec 20 12:54:45 2025 by rpki-client