This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iRQWA60w_yOFZILYRTncY7LjQus.roa File: iRQWA60w_yOFZILYRTncY7LjQus.roa (raw, json) Hash identifier: Nm0MCQQ4hHKUJD0MIy3MW4JDKzFdGrjNZldhQ5HT0ts= Subject key identifier: 89:14:16:03:AD:30:FF:23:85:64:82:D8:45:39:DC:63:B2:E3:42:EB Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B0CF74614FE957C51D44ECE460A153DAF Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iRQWA60w_yOFZILYRTncY7LjQus.roa Signing time: Thu 11 Dec 2025 10:31:30 +0000 ROA not before: Thu 11 Dec 2025 10:31:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 28753 IP address blocks: 185.155.203.0/24 maxlen: 24 2a04:9f40::/29 maxlen: 29 2a05:b900::/29 maxlen: 29 2a06:1184:101::/48 maxlen: 48 2a06:3bc0::/29 maxlen: 29 2a07:8a40::/29 maxlen: 29 2a09:7b00::/29 maxlen: 29 2a09:b700::/29 maxlen: 29 2a0a:2d06:102::/48 maxlen: 48 2a0a:2d06:103::/48 maxlen: 48 2a0a:7d00::/29 maxlen: 29 2a0c:4880::/29 maxlen: 29 2a0c:7886:99::/48 maxlen: 48 2a0c:7886:100::/48 maxlen: 48 2a0e:15c7:99::/48 maxlen: 48 2a0f:17c0::/29 maxlen: 29 2a0f:2500::/29 maxlen: 29 2a0f:27c0::/29 maxlen: 29 2a0f:3640::/29 maxlen: 29 2a0f:7f00::/29 maxlen: 29 2a0f:a200::/29 maxlen: 29 2a0f:d200::/29 maxlen: 29 2a0f:db40::/29 maxlen: 29 2a10:34c0::/29 maxlen: 29 2a11:8880::/29 maxlen: 29 2a12:4ac0::/29 maxlen: 29 2a12:ac43:1312::/48 maxlen: 48 2a12:ecc0:158::/48 maxlen: 48 2a12:ecc6:1312::/48 maxlen: 48 2a13:1380::/29 maxlen: 29 2a13:18c6:66::/48 maxlen: 48 2a13:18c6:88::/48 maxlen: 48 2a13:2cc0::/29 maxlen: 29 2a13:2d40::/29 maxlen: 29 2a13:2dc0::/29 maxlen: 29 2a13:2e40::/29 maxlen: 29 2a13:3040::/29 maxlen: 29 2a13:3380::/29 maxlen: 29 2a13:4900::/29 maxlen: 29 2a13:5b80::/29 maxlen: 29 2a13:7900::/29 maxlen: 29 2a13:7d80::/29 maxlen: 29 2a13:8200::/29 maxlen: 29 2a13:9080::/29 maxlen: 29 2a13:9480::/29 maxlen: 29 2a13:d100::/29 maxlen: 29 2a13:d700::/29 maxlen: 29 2a13:d900::/29 maxlen: 29 2a13:f900::/29 maxlen: 29 2a13:fb00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:f7:46:14:fe:95:7c:51:d4:4e:ce:46:0a:15:3d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 11 10:31:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=89141603ad30ff23856482d84539dc63b2e342eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0e:f7:9a:b6:09:dc:18:54:f1:62:bb:33:eb: 97:ff:c2:df:6f:3c:30:c4:b5:df:75:3a:b9:b5:bf: 05:6e:8f:7f:94:ff:5c:12:1c:9b:77:6d:a7:c2:92: 9c:5e:25:82:29:4d:60:4b:2c:fe:d1:74:14:40:c3: 60:62:36:d2:26:ec:84:93:f9:9a:77:8e:83:48:c1: 37:54:35:58:b3:32:c5:e9:59:1c:65:01:3d:8a:12: 73:e2:27:ce:56:dc:a3:35:0c:8d:8e:38:ca:21:79: bc:b7:16:2f:9f:b8:00:5d:e4:ad:fd:01:52:53:dd: 55:4f:65:03:7b:33:f9:9c:bb:9c:ce:cb:d7:2a:63: 89:a4:b1:71:e6:ce:83:be:f6:aa:67:d2:d0:ca:1d: 91:95:e3:a8:26:e5:62:03:59:71:50:bd:3e:b7:e2: bd:9d:31:14:42:82:5d:87:c5:62:50:a6:9c:7a:e6: 8c:a8:e9:62:c0:7e:ce:e0:a3:6d:df:1f:f7:ab:b5: 78:b6:32:3b:16:81:a3:51:0d:69:90:95:b0:52:e8: b3:5a:0c:92:55:35:a4:cb:16:ef:c6:36:80:85:44: ec:05:1a:c7:db:10:7b:b5:b1:44:9f:97:22:6e:9d: d6:29:82:0e:54:e2:3b:9e:fa:da:f4:b7:3c:16:62: a9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:14:16:03:AD:30:FF:23:85:64:82:D8:45:39:DC:63:B2:E3:42:EB X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iRQWA60w_yOFZILYRTncY7LjQus.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.203.0/24 IPv6: 2a04:9f40::/29 2a05:b900::/29 2a06:1184:101::/48 2a06:3bc0::/29 2a07:8a40::/29 2a09:7b00::/29 2a09:b700::/29 2a0a:2d06:102::/47 2a0a:7d00::/29 2a0c:4880::/29 2a0c:7886:99::/48 2a0c:7886:100::/48 2a0e:15c7:99::/48 2a0f:17c0::/29 2a0f:2500::/29 2a0f:27c0::/29 2a0f:3640::/29 2a0f:7f00::/29 2a0f:a200::/29 2a0f:d200::/29 2a0f:db40::/29 2a10:34c0::/29 2a11:8880::/29 2a12:4ac0::/29 2a12:ac43:1312::/48 2a12:ecc0:158::/48 2a12:ecc6:1312::/48 2a13:1380::/29 2a13:18c6:66::/48 2a13:18c6:88::/48 2a13:2cc0::/29 2a13:2d40::/29 2a13:2dc0::/29 2a13:2e40::/29 2a13:3040::/29 2a13:3380::/29 2a13:4900::/29 2a13:5b80::/29 2a13:7900::/29 2a13:7d80::/29 2a13:8200::/29 2a13:9080::/29 2a13:9480::/29 2a13:d100::/29 2a13:d700::/29 2a13:d900::/29 2a13:f900::/29 2a13:fb00::/29 Signature Algorithm: sha256WithRSAEncryption 35:32:db:96:59:63:c5:f1:1c:a4:f5:63:b4:25:7e:fa:8d:e9: 9e:f8:e4:8a:6c:c4:05:eb:23:60:7c:4e:77:7c:1e:f8:2a:21: 26:09:2e:ef:a8:ba:7f:ea:5f:6f:9c:a6:73:a5:1d:92:cd:fd: 48:0a:70:8f:bf:fb:e1:29:dc:96:b8:e4:7f:10:74:45:fb:ae: 10:dc:13:c6:a6:39:9c:f8:3c:69:b9:48:84:d4:e7:e5:20:17: a3:b2:b7:03:44:1f:7b:25:9b:50:e5:51:a2:e2:cc:a5:66:86: 1c:cb:b5:72:01:cb:77:54:ad:39:5f:f3:84:0b:d8:f6:a3:7c: b5:59:f3:b2:48:54:46:21:00:db:5a:63:e5:3e:89:64:1d:4a: 9b:51:d3:ac:77:55:d4:42:bf:95:85:44:52:6e:6b:bf:c3:e4: 51:62:05:a1:39:5a:77:fa:7a:ab:78:9b:6b:2b:80:c4:bd:0d: 78:46:6e:82:f3:9d:a6:1f:a8:1a:98:d1:ca:fd:18:6c:63:a1: 46:77:d1:0f:ce:72:22:24:db:ed:ea:11:88:c1:46:f9:d8:29: 4e:e7:10:c3:6a:d6:4f:70:f6:9b:35:9f:95:c0:2b:d7:48:62: 31:1e:c2:ac:0e:14:51:90:91:c9:40:cc:7a:9c:c1:71:cd:1b: d2:ae:8d:5e -----BEGIN CERTIFICATE----- MIIGczCCBVugAwIBAgISAZsM90YU/pV8UdROzkYKFT2vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjExMTAzMTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTE0MTYwM2FkMzBmZjIzODU2NDgyZDg0NTM5ZGM2M2IyZTM0MmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ73mrYJ3BhU8WK7M+uX/8Lfbzww xLXfdTq5tb8Fbo9/lP9cEhybd22nwpKcXiWCKU1gSyz+0XQUQMNgYjbSJuyEk/ma d46DSME3VDVYszLF6VkcZQE9ihJz4ifOVtyjNQyNjjjKIXm8txYvn7gAXeSt/QFS U91VT2UDezP5nLuczsvXKmOJpLFx5s6DvvaqZ9LQyh2RleOoJuViA1lxUL0+t+K9 nTEUQoJdh8ViUKaceuaMqOliwH7O4KNt3x/3q7V4tjI7FoGjUQ1pkJWwUuizWgyS VTWkyxbvxjaAhUTsBRrH2xB7tbFEn5cibp3WKYIOVOI7nvra9Lc8FmKpQQIDAQAB o4IDfzCCA3swHQYDVR0OBBYEFIkUFgOtMP8jhWSC2EU53GOy40LrMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvaVJRV0E2MHdfeU9GWklMWVJUbmNZN0xqUXVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBkwYIKwYBBQUHAQcBAf8EggGCMIIBfjAMBAIAATAGAwQA uZvLMIIBbAQCAAIwggFkAwUDKgSfQAMFAyoFuQADBwAqBhGEAQEDBQMqBjvAAwUD KgeKQAMFAyoJewADBQMqCbcAAwcBKgotBgECAwUDKgp9AAMFAyoMSIADBwAqDHiG AJkDBwAqDHiGAQADBwAqDhXHAJkDBQMqDxfAAwUDKg8lAAMFAyoPJ8ADBQMqDzZA AwUDKg9/AAMFAyoPogADBQMqD9IAAwUDKg/bQAMFAyoQNMADBQMqEYiAAwUDKhJK wAMHACoSrEMTEgMHACoS7MABWAMHACoS7MYTEgMFAyoTE4ADBwAqExjGAGYDBwAq ExjGAIgDBQMqEyzAAwUDKhMtQAMFAyoTLcADBQMqEy5AAwUDKhMwQAMFAyoTM4AD BQMqE0kAAwUDKhNbgAMFAyoTeQADBQMqE32AAwUDKhOCAAMFAyoTkIADBQMqE5SA AwUDKhPRAAMFAyoT1wADBQMqE9kAAwUDKhP5AAMFAyoT+wAwDQYJKoZIhvcNAQEL BQADggEBADUy25ZZY8XxHKT1Y7QlfvqN6Z745IpsxAXrI2B8Tnd8HvgqISYJLu+o un/qX2+cpnOlHZLN/UgKcI+/++Ep3Ja45H8QdEX7rhDcE8amOZz4PGm5SITU5+Ug F6OytwNEH3slm1DlUaLizKVmhhzLtXIBy3dUrTlf84QL2PajfLVZ87JIVEYhANta Y+U+iWQdSptR06x3VdRCv5WFRFJua7/D5FFiBaE5Wnf6eqt4m2srgMS9DXhGboLz naYfqBqY0cr9GGxjoUZ30Q/OciIk2+3qEYjBRvnYKU7nEMNq1k9w9ps1n5XAK9dI YjEewqwOFFGQkclAzHqcwXHNG9KujV4= -----END CERTIFICATE-----Generated at Fri Dec 19 23:29:26 2025 by rpki-client