This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/pFPDjT8pWmy_pJ6wWX4rR8Qo9rg.roa File: pFPDjT8pWmy_pJ6wWX4rR8Qo9rg.roa (raw, json) Hash identifier: RavCPb/6jDXHA14PmNTAv5fyK25mmxUX1z7WqLe0jdg= Subject key identifier: A4:53:C3:8D:3F:29:5A:6C:BF:A4:9E:B0:59:7E:2B:47:C4:28:F6:B8 Certificate issuer: /CN=3d8a553e05f0319bf452fa206c14ccda87304654 Certificate serial: 019B2E23B1253D0B2D77C873BEC9CF84EA82 Authority key identifier: 3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/pFPDjT8pWmy_pJ6wWX4rR8Qo9rg.roa Signing time: Wed 17 Dec 2025 21:07:29 +0000 ROA not before: Wed 17 Dec 2025 21:07:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8368 IP address blocks: 46.243.24.0/21 maxlen: 24 62.213.192.0/19 maxlen: 24 62.213.238.0/24 maxlen: 24 78.41.64.0/21 maxlen: 24 78.110.192.0/20 maxlen: 24 82.146.96.0/19 maxlen: 24 85.158.208.0/21 maxlen: 24 87.237.8.0/21 maxlen: 24 88.82.32.0/19 maxlen: 24 89.35.16.0/21 maxlen: 24 89.250.176.0/20 maxlen: 24 91.197.108.0/22 maxlen: 24 94.140.160.0/19 maxlen: 24 94.158.248.0/24 maxlen: 24 94.158.250.0/24 maxlen: 24 95.171.160.0/19 maxlen: 24 178.132.8.0/21 maxlen: 24 185.39.124.0/22 maxlen: 24 185.47.0.0/22 maxlen: 24 185.48.100.0/22 maxlen: 24 185.72.168.0/22 maxlen: 24 185.78.180.0/22 maxlen: 24 185.81.224.0/22 maxlen: 24 185.90.184.0/22 maxlen: 22 185.174.64.0/22 maxlen: 24 185.214.4.0/22 maxlen: 24 185.224.236.0/22 maxlen: 22 188.64.72.0/21 maxlen: 24 188.118.0.0/18 maxlen: 24 195.110.54.0/23 maxlen: 24 195.144.64.0/19 maxlen: 24 195.225.100.0/22 maxlen: 24 213.193.200.0/21 maxlen: 24 213.193.224.0/21 maxlen: 24 213.193.248.0/23 maxlen: 24 2001:4158::/29 maxlen: 48 2001:4c40::/32 maxlen: 48 2a00:c78::/32 maxlen: 48 2a00:1fb8::/32 maxlen: 48 2a01:8c20::/32 maxlen: 48 2a0b:8b00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:23:b1:25:3d:0b:2d:77:c8:73:be:c9:cf:84:ea:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8a553e05f0319bf452fa206c14ccda87304654 Validity Not Before: Dec 17 21:07:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a453c38d3f295a6cbfa49eb0597e2b47c428f6b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dc:75:c3:ab:a3:53:fd:1c:29:8e:a7:26:02: 72:01:28:eb:ca:74:99:c9:ae:80:7f:db:c6:3d:46: d5:d4:08:63:b4:a4:00:0b:23:64:33:89:1c:45:fb: cb:99:b6:f7:aa:d5:a6:d2:fd:48:7a:c7:7f:69:c6: 23:bf:06:f9:bc:16:4b:58:5a:7c:0c:4f:ae:22:ca: 6e:ce:63:2d:73:63:29:15:55:d2:da:ff:73:db:8b: 6a:91:fb:18:2b:93:1d:67:38:07:d9:e8:70:d3:ed: cf:d7:cb:82:2b:7c:16:6f:ef:87:8b:cf:86:a9:52: f8:07:6a:6f:ef:70:9e:3b:9c:45:d4:be:91:1f:7d: 19:e4:b6:39:8c:62:c6:07:7f:cf:42:1e:2c:27:45: 04:0c:e5:d5:ff:8b:be:75:95:1c:d7:0e:b0:54:bd: f7:ec:e5:22:91:c0:2f:d5:5d:b2:a4:d1:e7:45:bb: f5:08:c9:20:04:57:f0:a3:6b:89:a6:b6:2c:cd:c6: db:55:83:57:cf:a9:48:66:28:92:11:f3:c2:15:c7: e8:e4:77:c6:52:15:6d:58:37:cc:1b:3c:10:d8:00: 47:af:f7:76:75:2f:08:17:76:f3:57:73:27:ad:70: 7d:db:83:4c:2a:d8:3f:bf:e7:1b:d4:c4:99:41:e3: 9d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:53:C3:8D:3F:29:5A:6C:BF:A4:9E:B0:59:7E:2B:47:C4:28:F6:B8 X509v3 Authority Key Identifier: keyid:3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/pFPDjT8pWmy_pJ6wWX4rR8Qo9rg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.24.0/21 62.213.192.0/19 62.213.238.0/24 78.41.64.0/21 78.110.192.0/20 82.146.96.0/19 85.158.208.0/21 87.237.8.0/21 88.82.32.0/19 89.35.16.0/21 89.250.176.0/20 91.197.108.0/22 94.140.160.0/19 94.158.248.0/24 94.158.250.0/24 95.171.160.0/19 178.132.8.0/21 185.39.124.0/22 185.47.0.0/22 185.48.100.0/22 185.72.168.0/22 185.78.180.0/22 185.81.224.0/22 185.90.184.0/22 185.174.64.0/22 185.214.4.0/22 185.224.236.0/22 188.64.72.0/21 188.118.0.0/18 195.110.54.0/23 195.144.64.0/19 195.225.100.0/22 213.193.200.0/21 213.193.224.0/21 213.193.248.0/23 IPv6: 2001:4158::/29 2001:4c40::/32 2a00:c78::/32 2a00:1fb8::/32 2a01:8c20::/32 2a0b:8b00::/29 Signature Algorithm: sha256WithRSAEncryption 72:11:41:a4:6c:51:b6:83:70:e5:f9:d3:fb:91:76:3d:93:a4: dd:90:38:f1:8b:5a:a9:5b:a5:cb:af:16:3d:b8:44:f7:cc:e9: 9e:9d:28:66:62:93:04:7e:e9:6b:cb:88:e2:bc:ba:45:b9:40: 8e:d8:25:de:75:87:e2:e5:b7:7f:69:d9:28:59:c6:59:c4:c3: 29:6b:10:6a:36:30:8c:58:b8:69:ea:d5:34:ce:72:a6:9a:03: 24:12:8b:29:8c:1d:76:4d:ef:71:24:cc:09:50:b9:8c:76:32: 0a:55:ee:4f:31:7a:54:ae:2a:3c:8f:a2:06:d3:3c:c6:0f:a0: 96:a9:65:3f:ad:7d:34:94:34:4d:a5:2b:e4:ce:58:8e:e3:f2: 54:89:7a:25:58:03:e1:0a:c8:59:3b:d3:e5:a9:2b:ce:95:d0: 59:9b:a9:5d:3a:23:fb:a9:30:05:84:b5:33:c2:8d:47:73:58: fb:72:99:16:04:bb:9e:10:a2:ba:3e:4f:b2:35:a5:8b:d1:c1: 32:38:fa:7c:57:77:ff:47:1b:7a:38:0e:9e:6f:98:42:17:8d: b8:ee:5a:44:0f:70:64:95:d8:3d:e5:8b:52:f8:8d:64:89:e8: 7d:66:43:ed:79:b8:43:26:8b:4d:11:0e:22:62:54:aa:41:12: 5d:9d:46:5a -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgISAZsuI7ElPQstd8hzvsnPhOqCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGE1NTNlMDVmMDMxOWJmNDUyZmEyMDZjMTRjY2RhODcz MDQ2NTQwHhcNMjUxMjE3MjEwNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDUzYzM4ZDNmMjk1YTZjYmZhNDllYjA1OTdlMmI0N2M0MjhmNmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstx1w6ujU/0cKY6nJgJyASjrynSZ ya6Af9vGPUbV1AhjtKQACyNkM4kcRfvLmbb3qtWm0v1Iesd/acYjvwb5vBZLWFp8 DE+uIspuzmMtc2MpFVXS2v9z24tqkfsYK5MdZzgH2ehw0+3P18uCK3wWb++Hi8+G qVL4B2pv73CeO5xF1L6RH30Z5LY5jGLGB3/PQh4sJ0UEDOXV/4u+dZUc1w6wVL33 7OUikcAv1V2ypNHnRbv1CMkgBFfwo2uJprYszcbbVYNXz6lIZiiSEfPCFcfo5HfG UhVtWDfMGzwQ2ABHr/d2dS8IF3bzV3MnrXB924NMKtg/v+cb1MSZQeOd+QIDAQAB o4IDDzCCAwswHQYDVR0OBBYEFKRTw40/KVpsv6SesFl+K0fEKPa4MB8GA1UdIwQY MBaAFD2KVT4F8DGb9FL6IGwUzNqHMEZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFlwVlBnWHdNWnYwVXZvZ2JCVE0yb2N3UmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81MmNlNTQtZTQ5Yy00MTFjLTg1Mjct MGZiNDgyM2Y1Yjg3LzEvcEZQRGpUOHBXbXlfcEo2d1dYNHJSOFFvOXJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy81MmNlNTQtZTQ5Yy00MTFjLTg1MjctMGZiNDgyM2Y1Yjg3 LzEvUFlwVlBnWHdNWnYwVXZvZ2JCVE0yb2N3UmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBIwYIKwYBBQUHAQcBAf8EggESMIIBDjCB2QQCAAEwgdID BAMu8xgDBAU+1cADBAA+1e4DBANOKUADBARObsADBAVSkmADBANVntADBANX7QgD BAVYUiADBANZIxADBARZ+rADBAJbxWwDBAVejKADBABenvgDBABenvoDBAVfq6AD BAOyhAgDBAK5J3wDBAK5LwADBAK5MGQDBAK5SKgDBAK5TrQDBAK5UeADBAK5WrgD BAK5rkADBAK51gQDBAK54OwDBAO8QEgDBAa8dgADBAHDbjYDBAXDkEADBALD4WQD BAPVwcgDBAPVweADBAHVwfgwMAQCAAIwKgMFAyABQVgDBQAgAUxAAwUAKgAMeAMF ACoAH7gDBQAqAYwgAwUDKguLADANBgkqhkiG9w0BAQsFAAOCAQEAchFBpGxRtoNw 5fnT+5F2PZOk3ZA48YtaqVuly68WPbhE98zpnp0oZmKTBH7pa8uI4ry6RblAjtgl 3nWH4uW3f2nZKFnGWcTDKWsQajYwjFi4aerVNM5yppoDJBKLKYwddk3vcSTMCVC5 jHYyClXuTzF6VK4qPI+iBtM8xg+glqllP619NJQ0TaUr5M5YjuPyVIl6JVgD4QrI WTvT5akrzpXQWZupXToj+6kwBYS1M8KNR3NY+3KZFgS7nhCiuj5PsjWli9HBMjj6 fFd3/0cbejgOnm+YQheNuO5aRA9wZJXYPeWLUviNZInofWZD7Xm4QyaLTREOImJU qkESXZ1GWg== -----END CERTIFICATE-----Generated at Sat Dec 20 12:54:23 2025 by rpki-client