This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/4xED1tEGl5lG0V3xONp_kJ138wE.roa File: 4xED1tEGl5lG0V3xONp_kJ138wE.roa (raw, json) Hash identifier: x6XiQH9Y09H1DIY141ucUVYPcHJvSfQdxw1jzZyI858= Subject key identifier: E3:11:03:D6:D1:06:97:99:46:D1:5D:F1:38:DA:7F:90:9D:77:F3:01 Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019B2DE2B1A15F10D345DE1B3CD6809EEDD6 Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/4xED1tEGl5lG0V3xONp_kJ138wE.roa Signing time: Wed 17 Dec 2025 19:56:29 +0000 ROA not before: Wed 17 Dec 2025 19:56:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200598 IP address blocks: 24.235.22.0/23 maxlen: 24 62.112.30.0/24 maxlen: 24 66.9.96.0/20 maxlen: 24 69.72.72.0/22 maxlen: 24 77.223.192.0/21 maxlen: 24 77.223.200.0/23 maxlen: 24 79.110.184.0/22 maxlen: 24 79.139.64.0/23 maxlen: 24 83.142.200.0/21 maxlen: 24 85.204.28.0/23 maxlen: 24 86.106.28.0/23 maxlen: 24 89.20.50.0/23 maxlen: 24 89.37.60.0/23 maxlen: 24 89.39.184.0/23 maxlen: 24 89.40.236.0/23 maxlen: 24 89.42.215.0/24 maxlen: 24 91.217.106.0/23 maxlen: 24 95.215.144.0/22 maxlen: 24 121.127.48.0/20 maxlen: 24 128.0.60.0/22 maxlen: 24 141.193.108.0/22 maxlen: 24 141.193.214.0/23 maxlen: 24 162.216.138.0/23 maxlen: 24 162.250.216.0/22 maxlen: 24 168.149.248.0/23 maxlen: 24 173.214.200.0/22 maxlen: 24 176.111.54.0/23 maxlen: 24 176.222.48.0/22 maxlen: 24 178.216.184.0/21 maxlen: 24 188.215.12.0/22 maxlen: 24 193.91.8.0/23 maxlen: 24 195.78.90.0/23 maxlen: 24 195.128.136.0/24 maxlen: 24 198.14.16.0/20 maxlen: 24 198.145.112.0/22 maxlen: 24 199.48.230.0/23 maxlen: 24 204.15.4.0/22 maxlen: 24 205.220.216.0/23 maxlen: 24 217.144.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:e2:b1:a1:5f:10:d3:45:de:1b:3c:d6:80:9e:ed:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Dec 17 19:56:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e31103d6d106979946d15df138da7f909d77f301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0b:4f:1b:1b:ff:b8:8d:c9:bb:a7:ca:f9:52: 0f:1a:5d:7d:7d:f2:ad:7c:10:f7:40:05:02:5b:02: 2c:1e:66:e3:98:6d:9d:24:7d:cf:62:d6:f2:95:02: 36:97:94:45:3d:2c:97:db:03:99:81:7c:62:f4:fd: 64:8d:5d:ed:39:0d:cb:2e:0d:e8:c2:bd:9d:47:16: a6:be:2a:3a:0c:28:a5:e3:6e:cb:1a:4e:b4:98:e4: 60:59:74:e7:2e:d4:f5:66:2c:f0:ec:f2:8a:25:fc: 0c:d8:d4:a4:1d:8a:bf:66:98:9e:a6:ba:5c:35:37: ca:b8:9f:f6:f2:45:ff:a1:42:0b:d3:c2:17:9d:7f: b0:d5:8a:d3:57:ea:6c:86:ef:93:82:77:48:05:04: e4:ae:8c:36:80:d9:66:f0:c6:8e:9e:ef:f9:6f:c7: e5:8c:a5:3c:38:9e:d0:e0:e9:3c:57:26:a1:12:3b: 7b:b8:c9:e1:61:d2:5c:fa:46:d8:ab:be:de:1d:50: d8:2c:2c:cb:f7:c5:21:0f:9d:a4:17:99:27:8d:58: 36:6a:81:57:26:64:04:82:a0:59:6d:70:32:9d:bf: 93:24:f3:a3:ca:37:6f:46:c2:bc:cb:55:46:39:40: dc:e0:ad:56:75:d0:09:3a:8a:cd:18:72:fc:f8:da: 72:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:11:03:D6:D1:06:97:99:46:D1:5D:F1:38:DA:7F:90:9D:77:F3:01 X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/4xED1tEGl5lG0V3xONp_kJ138wE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.235.22.0/23 62.112.30.0/24 66.9.96.0/20 69.72.72.0/22 77.223.192.0-77.223.201.255 79.110.184.0/22 79.139.64.0/23 83.142.200.0/21 85.204.28.0/23 86.106.28.0/23 89.20.50.0/23 89.37.60.0/23 89.39.184.0/23 89.40.236.0/23 89.42.215.0/24 91.217.106.0/23 95.215.144.0/22 121.127.48.0/20 128.0.60.0/22 141.193.108.0/22 141.193.214.0/23 162.216.138.0/23 162.250.216.0/22 168.149.248.0/23 173.214.200.0/22 176.111.54.0/23 176.222.48.0/22 178.216.184.0/21 188.215.12.0/22 193.91.8.0/23 195.78.90.0/23 195.128.136.0/24 198.14.16.0/20 198.145.112.0/22 199.48.230.0/23 204.15.4.0/22 205.220.216.0/23 217.144.108.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:fd:ab:b5:ed:2d:42:4e:d8:90:cc:e4:a1:79:75:b4:d3:0c: 71:18:c8:d7:3c:3b:6a:0e:b9:72:bc:fd:ce:04:ab:43:40:9a: 5c:86:5d:69:d8:ac:03:33:86:14:bf:b4:a0:ca:6a:07:ce:c2: 2e:a4:f8:36:52:3f:7c:34:78:5f:f8:be:58:62:a6:be:20:fb: c3:c8:7b:75:14:9b:db:48:52:50:74:4c:95:fc:25:55:a2:15: 1f:55:72:55:e2:48:af:8f:f4:72:9a:04:fd:10:24:87:5d:96: 62:ca:fe:c7:0c:e0:22:eb:6d:68:80:26:51:b1:02:49:39:60: 87:45:b2:36:4a:da:fa:82:f1:f7:7c:ea:ac:52:52:a2:9f:ec: 07:26:cd:d0:90:26:0e:34:cb:80:e7:8a:d3:39:f5:fd:fa:cd: 68:9f:42:0e:29:3a:97:74:49:33:85:70:8f:a7:20:f9:7a:e2: 43:a3:0a:48:6d:9f:36:da:88:f0:2a:5a:7e:63:6e:29:65:73: 52:d3:96:5d:84:f3:7d:b1:02:79:0d:2f:ff:30:ef:ca:77:43: de:6a:64:1d:8e:7d:81:8e:84:ec:68:f9:0c:aa:1b:bb:6a:57: e8:22:ad:58:9a:d3:1a:a1:3d:b8:fc:e7:56:7d:1b:1f:99:09: 23:19:d5:c9 -----BEGIN CERTIFICATE----- MIIF6TCCBNGgAwIBAgISAZst4rGhXxDTRd4bPNaAnu3WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjUxMjE3MTk1NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzExMDNkNmQxMDY5Nzk5NDZkMTVkZjEzOGRhN2Y5MDlkNzdmMzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AtPGxv/uI3Ju6fK+VIPGl19ffKt fBD3QAUCWwIsHmbjmG2dJH3PYtbylQI2l5RFPSyX2wOZgXxi9P1kjV3tOQ3LLg3o wr2dRxamvio6DCil427LGk60mORgWXTnLtT1Zizw7PKKJfwM2NSkHYq/Zpieprpc NTfKuJ/28kX/oUIL08IXnX+w1YrTV+pshu+TgndIBQTkrow2gNlm8MaOnu/5b8fl jKU8OJ7Q4Ok8VyahEjt7uMnhYdJc+kbYq77eHVDYLCzL98UhD52kF5knjVg2aoFX JmQEgqBZbXAynb+TJPOjyjdvRsK8y1VGOUDc4K1WddAJOorNGHL8+Npy4QIDAQAB o4IC9TCCAvEwHQYDVR0OBBYEFOMRA9bRBpeZRtFd8Tjaf5Cdd/MBMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvNHhFRDF0RUdsNWxHMFYzeE9OcF9rSjEzOHdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBCQYIKwYBBQUHAQcBAf8EgfkwgfYwgfMEAgABMIHsAwQB GOsWAwQAPnAeAwQEQglgAwQCRUhIMAwDBAZN38ADBAFN38gDBAJPbrgDBAFPi0AD BANTjsgDBAFVzBwDBAFWahwDBAFZFDIDBAFZJTwDBAFZJ7gDBAFZKOwDBABZKtcD BAFb2WoDBAJf15ADBAR5fzADBAKAADwDBAKNwWwDBAGNwdYDBAGi2IoDBAKi+tgD BAGolfgDBAKt1sgDBAGwbzYDBAKw3jADBAOy2LgDBAK81wwDBAHBWwgDBAHDTloD BADDgIgDBATGDhADBALGkXADBAHHMOYDBALMDwQDBAHN3NgDBALZkGwwDQYJKoZI hvcNAQELBQADggEBAA79q7XtLUJO2JDM5KF5dbTTDHEYyNc8O2oOuXK8/c4Eq0NA mlyGXWnYrAMzhhS/tKDKagfOwi6k+DZSP3w0eF/4vlhipr4g+8PIe3UUm9tIUlB0 TJX8JVWiFR9VclXiSK+P9HKaBP0QJIddlmLK/scM4CLrbWiAJlGxAkk5YIdFsjZK 2vqC8fd86qxSUqKf7AcmzdCQJg40y4DnitM59f36zWifQg4pOpd0STOFcI+nIPl6 4kOjCkhtnzbaiPAqWn5jbillc1LTll2E832xAnkNL/8w78p3Q95qZB2OfYGOhOxo +QyqG7tqV+girVia0xqhPbj851Z9Gx+ZCSMZ1ck= -----END CERTIFICATE-----Generated at Sat Dec 20 07:29:06 2025 by rpki-client