This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1Ad55fb6cJZ-HyaR6Q4zxI93rAE.roa File: 1Ad55fb6cJZ-HyaR6Q4zxI93rAE.roa (raw, json) Hash identifier: kwl/KS4ijUyT6D4UefiiK59gZYb2M0RddeDVCFpLQ44= Subject key identifier: D4:07:79:E5:F6:FA:70:96:7E:1F:26:91:E9:0E:33:C4:8F:77:AC:01 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B3229AAAA9E3E30D92FD6ECE5B627D4AB Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1Ad55fb6cJZ-HyaR6Q4zxI93rAE.roa Signing time: Thu 18 Dec 2025 15:52:30 +0000 ROA not before: Thu 18 Dec 2025 15:52:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207461 IP address blocks: 45.86.15.0/24 maxlen: 24 45.86.245.0/24 maxlen: 24 45.86.247.0/24 maxlen: 24 45.87.240.0/24 maxlen: 24 45.92.168.0/24 maxlen: 24 45.92.169.0/24 maxlen: 24 45.92.170.0/24 maxlen: 24 45.92.171.0/24 maxlen: 24 45.92.247.0/24 maxlen: 24 45.94.36.0/24 maxlen: 24 45.94.37.0/24 maxlen: 24 45.94.38.0/24 maxlen: 24 45.94.39.0/24 maxlen: 24 45.94.46.0/24 maxlen: 24 45.94.47.0/24 maxlen: 24 45.95.98.0/23 maxlen: 23 45.95.99.0/24 maxlen: 24 45.128.24.0/24 maxlen: 24 45.129.124.0/24 maxlen: 24 45.130.124.0/24 maxlen: 24 45.130.127.0/24 maxlen: 24 45.130.254.0/24 maxlen: 24 45.131.213.0/24 maxlen: 24 45.133.209.0/24 maxlen: 24 45.133.210.0/24 maxlen: 24 45.136.172.0/23 maxlen: 23 45.137.40.0/24 maxlen: 24 45.137.41.0/24 maxlen: 24 45.137.42.0/23 maxlen: 23 45.140.14.0/24 maxlen: 24 45.145.12.0/24 maxlen: 24 45.145.13.0/24 maxlen: 24 45.145.14.0/24 maxlen: 24 45.147.28.0/24 maxlen: 24 45.152.198.0/24 maxlen: 24 192.166.153.0/24 maxlen: 24 193.5.65.0/24 maxlen: 24 193.27.19.0/24 maxlen: 24 2a0f:3d86:44::/48 maxlen: 48 2a0f:3d86:100::/48 maxlen: 48 2a0f:e1c0:a8b9::/48 maxlen: 48 2a13:8c86:120::/48 maxlen: 48 2a13:c900:99::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:29:aa:aa:9e:3e:30:d9:2f:d6:ec:e5:b6:27:d4:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 18 15:52:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d40779e5f6fa70967e1f2691e90e33c48f77ac01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:48:a7:70:0b:f7:2d:1f:b0:4b:40:64:49:d3: fb:83:90:99:6d:7a:06:be:23:b7:0a:d9:cf:85:cb: 1a:4e:46:40:e8:83:e1:78:3a:75:77:1b:bc:41:68: 56:6a:2f:d7:a7:a8:8a:08:64:d2:09:1e:1a:0d:8a: c5:99:6a:48:f3:23:e4:23:42:d1:33:b3:48:ae:eb: da:e9:8d:56:18:2e:92:b4:bc:77:b7:11:0a:ad:72: c8:3f:ab:a5:b1:67:b9:94:e5:a1:f4:0b:6a:dc:2c: 86:7c:31:56:24:6e:82:6f:e3:23:af:75:65:12:c0: 66:bb:e8:05:ec:33:ee:1e:9d:e1:7d:b0:e6:d2:05: 4e:3e:df:ae:6a:c4:8d:d4:6e:0c:4f:ed:6f:40:ff: 4b:db:8d:da:d2:75:22:df:ca:69:a4:72:ba:18:b6: d9:c3:36:78:d1:c0:66:90:e3:d5:8c:2b:bc:bc:2a: 5f:60:21:cc:31:2f:09:da:85:4d:d3:a4:2b:96:0e: 67:95:82:50:bf:e6:f3:68:66:c9:9f:33:83:c5:9d: 87:f3:90:a2:d9:2a:1c:b1:c1:af:0b:a3:43:0e:0f: 6e:ab:eb:9b:d0:79:dd:33:5d:4a:b3:2e:91:b8:aa: fe:42:5c:f0:50:b5:51:53:f9:f4:31:0a:1c:aa:18: 15:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:07:79:E5:F6:FA:70:96:7E:1F:26:91:E9:0E:33:C4:8F:77:AC:01 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1Ad55fb6cJZ-HyaR6Q4zxI93rAE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.15.0/24 45.86.245.0/24 45.86.247.0/24 45.87.240.0/24 45.92.168.0/22 45.92.247.0/24 45.94.36.0/22 45.94.46.0/23 45.95.98.0/23 45.128.24.0/24 45.129.124.0/24 45.130.124.0/24 45.130.127.0/24 45.130.254.0/24 45.131.213.0/24 45.133.209.0-45.133.210.255 45.136.172.0/23 45.137.40.0/22 45.140.14.0/24 45.145.12.0-45.145.14.255 45.147.28.0/24 45.152.198.0/24 192.166.153.0/24 193.5.65.0/24 193.27.19.0/24 IPv6: 2a0f:3d86:44::/48 2a0f:3d86:100::/48 2a0f:e1c0:a8b9::/48 2a13:8c86:120::/48 2a13:c900:99::/48 Signature Algorithm: sha256WithRSAEncryption 29:69:a8:34:02:32:3d:b4:62:8e:68:d6:de:df:38:36:fb:96: f3:46:10:64:e0:73:c9:fd:08:a0:d5:a8:14:23:7d:25:cd:bf: 34:0b:7c:a4:03:b6:5e:40:e2:5e:8e:cd:24:a8:71:f4:e3:68: 0b:54:64:f5:de:08:79:82:85:7b:10:6c:23:79:c9:65:e2:80: c5:db:3d:8a:ed:f7:5d:d7:2d:66:46:e3:ad:e0:53:28:ac:44: 50:8b:15:08:f4:94:4e:f0:6a:8e:b5:07:95:f9:bf:4f:97:ec: 9e:54:75:a6:1d:ba:9d:f2:9c:3d:59:d7:3b:06:0f:cb:ca:75: 4b:b6:14:f8:f2:fe:c0:56:8a:28:a0:67:16:1c:a5:5b:06:3c: 51:91:ca:8c:15:9f:a6:bf:bc:91:8f:6a:f6:66:26:da:46:b6: eb:3f:1c:b5:1f:d5:d5:7a:67:c6:aa:4d:74:11:2a:ce:33:d2: 66:40:95:89:db:60:13:2e:2e:34:7a:6e:f3:39:f8:64:7f:b9: ab:e6:f4:3f:34:9f:0b:ff:5a:8b:fc:5d:e7:1f:72:3a:02:86: e3:a5:43:08:2e:73:d2:44:a2:63:8d:3c:89:c1:07:de:a5:40: 21:18:42:70:b4:97:f5:18:7c:2d:3e:4e:ea:5f:f7:25:99:06: 52:0f:ba:95 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgISAZsyKaqqnj4w2S/W7OW2J9SrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjE4MTU1MjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDA3NzllNWY2ZmE3MDk2N2UxZjI2OTFlOTBlMzNjNDhmNzdhYzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUincAv3LR+wS0BkSdP7g5CZbXoG viO3CtnPhcsaTkZA6IPheDp1dxu8QWhWai/Xp6iKCGTSCR4aDYrFmWpI8yPkI0LR M7NIruva6Y1WGC6StLx3txEKrXLIP6ulsWe5lOWh9Atq3CyGfDFWJG6Cb+Mjr3Vl EsBmu+gF7DPuHp3hfbDm0gVOPt+uasSN1G4MT+1vQP9L243a0nUi38pppHK6GLbZ wzZ40cBmkOPVjCu8vCpfYCHMMS8J2oVN06Qrlg5nlYJQv+bzaGbJnzODxZ2H85Ci 2SocscGvC6NDDg9uq+ub0HndM11Ksy6RuKr+QlzwULVRU/n0MQocqhgVvwIDAQAB o4IC4zCCAt8wHQYDVR0OBBYEFNQHeeX2+nCWfh8mkekOM8SPd6wBMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvMUFkNTVmYjZjSlotSHlhUjZRNHp4STkzckFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH4BggrBgEFBQcBBwEB/wSB6DCB5TCBrQQCAAEwgaYDBAAt Vg8DBAAtVvUDBAAtVvcDBAAtV/ADBAItXKgDBAAtXPcDBAItXiQDBAEtXi4DBAEt X2IDBAAtgBgDBAAtgXwDBAAtgnwDBAAtgn8DBAAtgv4DBAAtg9UwDAMEAC2F0QME AC2F0gMEAS2IrAMEAi2JKAMEAC2MDjAMAwQCLZEMAwQALZEOAwQALZMcAwQALZjG AwQAwKaZAwQAwQVBAwQAwRsTMDMEAgACMC0DBwAqDz2GAEQDBwAqDz2GAQADBwAq D+HAqLkDBwAqE4yGASADBwAqE8kAAJkwDQYJKoZIhvcNAQELBQADggEBAClpqDQC Mj20Yo5o1t7fODb7lvNGEGTgc8n9CKDVqBQjfSXNvzQLfKQDtl5A4l6OzSSocfTj aAtUZPXeCHmChXsQbCN5yWXigMXbPYrt913XLWZG463gUyisRFCLFQj0lE7wao61 B5X5v0+X7J5UdaYdup3ynD1Z1zsGD8vKdUu2FPjy/sBWiiigZxYcpVsGPFGRyowV n6a/vJGPavZmJtpGtus/HLUf1dV6Z8aqTXQRKs4z0mZAlYnbYBMuLjR6bvM5+GR/ uavm9D80nwv/Wov8XecfcjoChuOlQwguc9JEomONPInBB96lQCEYQnC0l/UYfC0+ Tupf9yWZBlIPupU= -----END CERTIFICATE-----Generated at Fri Dec 19 23:29:26 2025 by rpki-client