This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/4Al3Y1ZBZBCUxchwU91f_Xxn0AU.roa File: 4Al3Y1ZBZBCUxchwU91f_Xxn0AU.roa (raw, json) Hash identifier: 0wR+Vye4jZb7FKOlhaY4DjYZccJb4NlRZOZozqrRK6g= Subject key identifier: E0:09:77:63:56:41:64:10:94:C5:C8:70:53:DD:5F:FD:7C:67:D0:05 Certificate issuer: /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d Certificate serial: 019B133DB7FD3BCB2B4DD3F32EE3FFBB8817 Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/4Al3Y1ZBZBCUxchwU91f_Xxn0AU.roa Signing time: Fri 12 Dec 2025 15:46:10 +0000 ROA not before: Fri 12 Dec 2025 15:46:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25151 IP address blocks: 37.46.136.0/21 maxlen: 24 81.24.0.0/20 maxlen: 24 81.24.0.0/22 maxlen: 24 81.24.4.0/22 maxlen: 24 81.24.6.0/23 maxlen: 24 81.24.8.0/22 maxlen: 24 81.24.10.0/23 maxlen: 24 85.158.200.0/21 maxlen: 24 93.94.224.0/21 maxlen: 24 109.235.72.0/21 maxlen: 24 185.54.112.0/22 maxlen: 24 185.78.196.0/22 maxlen: 24 2a01:518::/32 maxlen: 48 2a05:6cc0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:3d:b7:fd:3b:cb:2b:4d:d3:f3:2e:e3:ff:bb:88:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d Validity Not Before: Dec 12 15:46:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e00977635641641094c5c87053dd5ffd7c67d005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:53:8f:01:59:f4:48:62:e3:2a:5d:a2:65:3c: f7:86:1c:c1:e7:2d:e3:dc:27:69:08:dd:b6:33:c4: d3:28:80:3d:cb:7f:ed:5d:f2:6e:26:a2:dd:a6:c8: 0c:59:d9:ea:96:0a:0e:57:83:a6:91:ba:e0:8f:4a: 17:e5:cc:47:b1:71:89:c9:82:6a:2d:31:55:b8:66: c3:cf:4c:c0:dc:aa:70:60:44:99:0b:58:38:71:91: 79:89:10:f8:3d:80:b5:6f:cf:2c:a8:2f:e9:f3:50: 54:5b:18:67:af:09:29:86:29:48:f3:be:a5:2b:23: 9d:6b:97:f4:6a:f0:c7:3d:56:c6:15:b2:62:a9:1d: 8a:e3:0c:01:9a:6d:83:f8:28:0e:5b:50:df:2e:08: 10:f4:f8:8c:f3:c2:cf:0d:6c:b2:f0:29:70:bd:8e: 12:0a:93:5f:da:35:d3:e9:bd:ff:2f:ba:2f:4a:3f: 7a:c9:d4:e0:e6:cc:ab:21:1d:d5:99:6e:b6:46:c8: f1:43:95:8c:12:d7:55:10:f5:f2:b8:38:16:f3:9d: 00:c0:0f:b5:5f:ca:f1:ef:81:d1:a0:41:e6:75:1d: d9:2b:32:96:f7:a5:8c:bb:bf:0a:77:38:c3:38:9c: 53:ed:99:12:02:00:59:2f:aa:d1:9a:6f:fe:f9:aa: 3e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:09:77:63:56:41:64:10:94:C5:C8:70:53:DD:5F:FD:7C:67:D0:05 X509v3 Authority Key Identifier: keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/4Al3Y1ZBZBCUxchwU91f_Xxn0AU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.46.136.0/21 81.24.0.0/20 85.158.200.0/21 93.94.224.0/21 109.235.72.0/21 185.54.112.0/22 185.78.196.0/22 IPv6: 2a01:518::/32 2a05:6cc0::/29 Signature Algorithm: sha256WithRSAEncryption 02:29:58:d2:2d:b7:2f:54:31:d0:c3:b8:9d:65:3b:ae:87:fc: 93:d4:04:fa:0f:b1:dd:0c:44:23:45:4d:e1:7d:e2:e0:17:52: d8:7a:b4:dc:31:36:26:25:8b:82:0f:6b:04:ed:9a:25:0a:18: 33:1f:f6:7f:cb:74:c7:e1:de:3b:16:26:ec:f4:ce:ff:d7:03: 41:4b:9a:91:de:08:bf:d1:81:6c:2c:0c:8e:af:c1:79:6c:68: 44:4e:c7:70:40:ad:d7:4d:d8:7a:bb:87:6b:45:fd:83:99:06: c7:ef:de:05:23:5f:c3:07:b3:e2:ba:4b:94:37:5c:7b:75:90: 9a:9f:73:5c:77:1f:79:b5:8e:f8:d5:4c:b4:c7:c5:4e:e9:0f: d2:26:2a:f6:d3:a6:5b:3f:aa:e7:cb:e8:7a:ca:34:49:cc:eb: 36:76:b0:7c:da:8e:f7:22:58:82:58:c4:bf:71:99:51:e2:3e: 46:bd:05:45:2f:8f:02:91:67:9b:0e:66:5f:70:3e:34:ca:cc: 99:88:1d:4d:49:7f:05:c6:11:37:a9:80:88:33:9f:dc:c7:8f: 7a:38:fc:f0:21:d7:86:11:1f:68:09:38:31:3d:b2:b0:bc:f2: 25:ad:0a:02:3c:2f:6f:98:83:9d:f0:25:a9:ca:fc:df:24:f4: ab:5c:c7:a8 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZsTPbf9O8srTdPzLuP/u4gXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MjMyOWQ4ZDdlNTQxOTUzZTEyMGZkMDVmNjZjYzZlYmFi MDY4NGQwHhcNMjUxMjEyMTU0NjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDA5Nzc2MzU2NDE2NDEwOTRjNWM4NzA1M2RkNWZmZDdjNjdkMDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1OPAVn0SGLjKl2iZTz3hhzB5y3j 3CdpCN22M8TTKIA9y3/tXfJuJqLdpsgMWdnqlgoOV4Omkbrgj0oX5cxHsXGJyYJq LTFVuGbDz0zA3KpwYESZC1g4cZF5iRD4PYC1b88sqC/p81BUWxhnrwkphilI876l KyOda5f0avDHPVbGFbJiqR2K4wwBmm2D+CgOW1DfLggQ9PiM88LPDWyy8ClwvY4S CpNf2jXT6b3/L7ovSj96ydTg5syrIR3VmW62RsjxQ5WMEtdVEPXyuDgW850AwA+1 X8rx74HRoEHmdR3ZKzKW96WMu78KdzjDOJxT7ZkSAgBZL6rRmm/++ao+rQIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFOAJd2NWQWQQlMXIcFPdX/18Z9AFMB8GA1UdIwQY MBaAFNYjKdjX5UGVPhIP0F9mzG66sGhNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lODUxODAtMTkxMC00YzQyLWExZjUt NzMyMDJmMGUxZDAzLzEvNEFsM1kxWkJaQkNVeGNod1U5MWZfWHhuMEFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9lODUxODAtMTkxMC00YzQyLWExZjUtNzMyMDJmMGUxZDAz LzEvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAwBAIAATAqAwQDJS6IAwQE URgAAwQDVZ7IAwQDXV7gAwQDbetIAwQCuTZwAwQCuU7EMBQEAgACMA4DBQAqAQUY AwUDKgVswDANBgkqhkiG9w0BAQsFAAOCAQEAAilY0i23L1Qx0MO4nWU7rof8k9QE +g+x3QxEI0VN4X3i4BdS2Hq03DE2JiWLgg9rBO2aJQoYMx/2f8t0x+HeOxYm7PTO /9cDQUuakd4Iv9GBbCwMjq/BeWxoRE7HcECt103YeruHa0X9g5kGx+/eBSNfwwez 4rpLlDdce3WQmp9zXHcfebWO+NVMtMfFTukP0iYq9tOmWz+q58voeso0SczrNnaw fNqO9yJYgljEv3GZUeI+Rr0FRS+PApFnmw5mX3A+NMrMmYgdTUl/BcYRN6mAiDOf 3MePejj88CHXhhEfaAk4MT2ysLzyJa0KAjwvb5iDnfAlqcr83yT0q1zHqA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:07:04 2025 by rpki-client