This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/KqYpLt69SflJBo1sQ2OPQNaEmh0.roa File: KqYpLt69SflJBo1sQ2OPQNaEmh0.roa (raw, json) Hash identifier: 9U4Ti2hjAKuXbp33zEkU6JfWYj9Jatfsxecu0ZI7FIk= Subject key identifier: 2A:A6:29:2E:DE:BD:49:F9:49:06:8D:6C:43:63:8F:40:D6:84:9A:1D Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B30EEB97191FAEA80B448FF6E2A25B540 Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/KqYpLt69SflJBo1sQ2OPQNaEmh0.roa Signing time: Thu 18 Dec 2025 10:08:29 +0000 ROA not before: Thu 18 Dec 2025 10:08:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8795 IP address blocks: 46.10.150.0/24 maxlen: 24 62.176.126.0/24 maxlen: 24 77.85.175.0/24 maxlen: 24 77.85.196.0/24 maxlen: 24 83.228.107.0/24 maxlen: 24 95.43.224.0/24 maxlen: 24 95.43.230.0/24 maxlen: 24 212.5.130.0/24 maxlen: 24 212.5.133.0/24 maxlen: 24 212.5.145.0/24 maxlen: 24 213.16.35.0/24 maxlen: 24 213.91.134.0/24 maxlen: 24 213.91.170.0/24 maxlen: 24 2a01:5a8:7::/56 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:ee:b9:71:91:fa:ea:80:b4:48:ff:6e:2a:25:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Dec 18 10:08:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2aa6292edebd49f949068d6c43638f40d6849a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ac:0a:61:37:01:19:a6:76:2d:14:43:73:e9: a5:03:8f:71:83:0a:56:8b:46:40:2e:35:78:dd:53: 5f:9c:dc:9c:93:77:0b:de:f6:2f:05:ef:7d:8e:2c: 3e:4b:35:eb:f6:0d:01:a0:1e:e9:6e:cb:50:3e:3f: 34:59:6a:2a:6a:33:e3:56:4a:99:60:e8:51:a8:4b: c7:49:15:6c:d5:d7:3f:06:af:ec:af:c0:54:b8:86: ca:b5:9a:51:4a:5b:11:19:c0:cb:a4:78:89:e6:98: 8b:d3:0f:ec:22:f8:0c:f9:cf:4c:64:76:e0:ad:40: cc:c0:4f:59:0f:ab:6b:3d:6f:6f:b5:8c:62:14:66: 64:3b:b7:70:dc:68:63:58:18:af:8e:a8:e7:6a:0f: d1:72:8a:2c:d5:62:01:cb:c6:0f:2c:e8:e2:68:08: 14:43:c5:e6:bc:f5:c5:dc:2f:78:30:35:4d:aa:14: bc:66:ab:04:f3:fc:00:89:8d:af:88:ca:78:c4:ad: c7:66:28:56:eb:72:a2:f3:f8:1d:f0:4d:da:b0:7b: ad:1c:67:9d:41:28:7e:38:e6:7a:c9:9c:62:1a:eb: ce:76:34:82:38:06:90:3b:8f:5b:ab:bf:d8:2b:b7: 3d:bf:6b:f1:2a:5c:a8:e2:97:f9:86:15:03:83:37: 1a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A6:29:2E:DE:BD:49:F9:49:06:8D:6C:43:63:8F:40:D6:84:9A:1D X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/KqYpLt69SflJBo1sQ2OPQNaEmh0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.10.150.0/24 62.176.126.0/24 77.85.175.0/24 77.85.196.0/24 83.228.107.0/24 95.43.224.0/24 95.43.230.0/24 212.5.130.0/24 212.5.133.0/24 212.5.145.0/24 213.16.35.0/24 213.91.134.0/24 213.91.170.0/24 IPv6: 2a01:5a8:7::/56 Signature Algorithm: sha256WithRSAEncryption 73:b0:e2:6a:00:4d:bc:d5:e5:d8:94:1f:4a:a6:db:12:d5:d9: 0f:c8:c9:4c:6e:97:5f:79:30:60:0a:16:0e:b2:3b:92:52:d3: 74:95:0b:f4:a9:da:07:e0:39:a5:fc:bb:31:6f:75:9e:6b:fe: ea:6d:83:45:22:3d:13:2e:86:20:f2:05:9c:f2:6e:0e:a7:77: 72:52:e1:1b:b0:1c:4a:db:04:18:a5:fb:ed:02:99:d4:64:28: ec:d5:0b:d2:fa:42:cb:6c:16:a5:7d:9c:2f:5d:8a:7d:0c:b0: 53:a4:3e:9b:dc:0b:93:6f:3e:a9:41:bb:67:0f:79:f6:13:49: c8:c7:d0:99:5f:64:81:31:28:5f:a3:5d:e9:21:48:8c:22:bf: 12:61:1b:df:04:1e:d2:27:67:4c:c8:7b:60:c0:36:f6:04:4b: e9:48:a0:a8:8a:1e:5e:f2:84:5a:4a:89:db:85:24:0f:a2:fa: a6:9e:d9:89:d8:b3:5f:70:75:cb:24:90:80:af:0e:bb:b3:94: 30:fa:56:54:45:7a:e7:42:9c:ce:87:e0:4b:e4:c2:74:a4:a8: 95:30:43:9d:6c:bb:3c:72:d1:89:e8:94:dc:a8:16:36:3d:9c: 29:59:a0:45:43:3b:25:39:2d:eb:81:cf:26:31:97:50:5c:60: 33:a1:3d:81 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgISAZsw7rlxkfrqgLRI/24qJbVAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjUxMjE4MTAwODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWE2MjkyZWRlYmQ0OWY5NDkwNjhkNmM0MzYzOGY0MGQ2ODQ5YTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqwKYTcBGaZ2LRRDc+mlA49xgwpW i0ZALjV43VNfnNyck3cL3vYvBe99jiw+SzXr9g0BoB7pbstQPj80WWoqajPjVkqZ YOhRqEvHSRVs1dc/Bq/sr8BUuIbKtZpRSlsRGcDLpHiJ5piL0w/sIvgM+c9MZHbg rUDMwE9ZD6trPW9vtYxiFGZkO7dw3GhjWBivjqjnag/Rcoos1WIBy8YPLOjiaAgU Q8XmvPXF3C94MDVNqhS8ZqsE8/wAiY2viMp4xK3HZihW63Ki8/gd8E3asHutHGed QSh+OOZ6yZxiGuvOdjSCOAaQO49bq7/YK7c9v2vxKlyo4pf5hhUDgzcahQIDAQAB o4ICYzCCAl8wHQYDVR0OBBYEFCqmKS7evUn5SQaNbENjj0DWhJodMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvS3FZcEx0NjlTZmxKQm8xc1EyT1BRTmFFbWgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBUBAIAATBOAwQALgqWAwQA PrB+AwQATVWvAwQATVXEAwQAU+RrAwQAXyvgAwQAXyvmAwQA1AWCAwQA1AWFAwQA 1AWRAwQA1RAjAwQA1VuGAwQA1VuqMBAEAgACMAoDCAAqAQWoAAcAMA0GCSqGSIb3 DQEBCwUAA4IBAQBzsOJqAE281eXYlB9KptsS1dkPyMlMbpdfeTBgChYOsjuSUtN0 lQv0qdoH4Dml/Lsxb3Wea/7qbYNFIj0TLoYg8gWc8m4Op3dyUuEbsBxK2wQYpfvt ApnUZCjs1QvS+kLLbBalfZwvXYp9DLBTpD6b3AuTbz6pQbtnD3n2E0nIx9CZX2SB MShfo13pIUiMIr8SYRvfBB7SJ2dMyHtgwDb2BEvpSKCoih5e8oRaSonbhSQPovqm ntmJ2LNfcHXLJJCArw67s5Qw+lZURXrnQpzOh+BL5MJ0pKiVMEOdbLs8ctGJ6JTc qBY2PZwpWaBFQzslOS3rgc8mMZdQXGAzoT2B -----END CERTIFICATE-----Generated at Sat Dec 20 04:36:27 2025 by rpki-client