This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/43fPb6IlMxCWip-u3TuxStj82E4.roa File: 43fPb6IlMxCWip-u3TuxStj82E4.roa (raw, json) Hash identifier: Mqbur7niNqgFl4nQcWhW3qg9fhBOp7Iht1K5RU8cFVQ= Subject key identifier: E3:77:CF:6F:A2:25:33:10:96:8A:9F:AE:DD:3B:B1:4A:D8:FC:D8:4E Certificate issuer: /CN=e0390c1c361df05224376108eff9b20dc2ee0265 Certificate serial: 019B314875B0925C8996910DE53E37BF66AE Authority key identifier: E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/43fPb6IlMxCWip-u3TuxStj82E4.roa Signing time: Thu 18 Dec 2025 11:46:30 +0000 ROA not before: Thu 18 Dec 2025 11:46:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42848 IP address blocks: 147.67.0.0/17 maxlen: 17 147.67.128.0/17 maxlen: 17 158.166.0.0/16 maxlen: 16 158.166.245.0/24 maxlen: 24 158.167.0.0/16 maxlen: 16 158.167.35.0/24 maxlen: 24 158.167.245.0/24 maxlen: 24 158.168.0.0/16 maxlen: 16 158.169.0.0/17 maxlen: 17 158.169.128.0/17 maxlen: 17 2a01:7080::/32 maxlen: 32 2a01:7080:14::/48 maxlen: 48 2a01:7080:16::/48 maxlen: 48 2a01:7080:24::/48 maxlen: 48 2a01:7080:26::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:48:75:b0:92:5c:89:96:91:0d:e5:3e:37:bf:66:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0390c1c361df05224376108eff9b20dc2ee0265 Validity Not Before: Dec 18 11:46:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e377cf6fa2253310968a9faedd3bb14ad8fcd84e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:31:2c:d8:8e:b8:d7:42:9a:57:99:db:e2:a4: d6:6c:7c:ba:a8:60:01:27:c9:b1:28:98:51:65:21: a8:68:51:d1:28:e8:17:18:ae:ee:db:cd:1b:fb:57: f5:07:f9:07:2f:f9:a1:c9:f5:23:d7:8f:59:4f:2c: 0d:fe:a7:ed:fb:0a:bb:1b:97:e8:1f:e2:88:92:97: 34:37:ec:8d:eb:71:94:3a:99:7b:4e:84:af:ad:a6: 28:11:cd:d0:fc:a1:84:53:65:f5:b3:3f:ab:1a:15: cf:bf:b3:fe:fb:ad:c5:8e:bf:f0:d4:c9:18:04:41: ec:ae:e5:3c:08:32:80:2b:c4:63:93:66:d4:97:96: e2:de:c0:72:ff:e7:d1:8e:a9:29:de:7d:72:9b:9c: 64:c1:d4:53:78:3c:93:1a:c9:d1:25:b7:54:b2:c9: a6:fd:7e:e2:29:3d:b1:91:77:5f:ac:d2:01:d4:df: 73:f9:59:be:c4:1c:65:d2:66:23:e5:77:95:79:eb: 27:1d:23:a8:a5:d9:33:ae:ac:3c:99:70:d4:d9:1c: ea:ec:99:fa:57:6c:98:db:46:55:aa:07:8f:0a:8b: 1b:ad:20:11:d3:0d:a0:5b:f5:5f:e7:cf:6e:e3:13: f3:4c:74:70:22:35:39:5d:ec:cb:41:f9:6a:39:6b: 1b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:77:CF:6F:A2:25:33:10:96:8A:9F:AE:DD:3B:B1:4A:D8:FC:D8:4E X509v3 Authority Key Identifier: keyid:E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/43fPb6IlMxCWip-u3TuxStj82E4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.67.0.0/16 158.166.0.0-158.169.255.255 IPv6: 2a01:7080::/32 Signature Algorithm: sha256WithRSAEncryption 1d:83:0f:65:27:6e:a6:83:f1:76:f2:87:3a:a9:86:a0:a9:80: 4b:4e:76:85:00:72:9f:55:62:f1:5f:e0:d0:54:ef:a9:3f:fa: 43:0b:15:d7:f8:d3:4b:fb:f1:b1:fb:e4:fe:51:bb:35:f7:14: 8f:5c:e2:c4:bd:12:84:c5:ca:ea:b6:4c:6c:b8:de:3c:36:51: 9a:28:53:a8:0c:07:98:b5:67:e1:b0:71:52:60:ba:7f:eb:12: 10:29:f4:d9:78:d7:ee:f7:78:12:28:7f:8c:6b:fd:78:61:55: a8:86:6c:a1:1a:38:f1:94:9b:b6:38:6a:f9:2e:f2:37:13:e1: 1d:e8:cc:ce:7d:b0:cc:e7:50:f4:2d:6b:9c:f4:43:b3:61:14: 1b:1b:8c:bf:a3:07:bf:17:a7:eb:59:f9:fc:6c:e3:22:3f:3f: 27:b1:34:8f:b4:06:db:5a:9f:4b:c6:f7:c4:76:37:07:24:40: 78:59:e1:b6:52:a1:fc:8c:de:21:da:3d:11:7a:ea:a6:05:e1: 92:38:ab:ce:aa:07:8d:e4:92:3a:4b:e2:f0:db:1e:01:fc:a0: 00:89:7a:30:5c:b9:f9:63:6c:c8:7e:ca:b9:4b:ae:43:7e:b1: e7:32:3e:0a:bd:8a:09:e7:e6:27:b7:9a:ae:68:ee:fa:b9:a3: d9:6c:81:e9 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZsxSHWwklyJlpEN5T43v2auMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMzkwYzFjMzYxZGYwNTIyNDM3NjEwOGVmZjliMjBkYzJl ZTAyNjUwHhcNMjUxMjE4MTE0NjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzc3Y2Y2ZmEyMjUzMzEwOTY4YTlmYWVkZDNiYjE0YWQ4ZmNkODRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDEs2I6410KaV5nb4qTWbHy6qGAB J8mxKJhRZSGoaFHRKOgXGK7u280b+1f1B/kHL/mhyfUj149ZTywN/qft+wq7G5fo H+KIkpc0N+yN63GUOpl7ToSvraYoEc3Q/KGEU2X1sz+rGhXPv7P++63Fjr/w1MkY BEHsruU8CDKAK8Rjk2bUl5bi3sBy/+fRjqkp3n1ym5xkwdRTeDyTGsnRJbdUssmm /X7iKT2xkXdfrNIB1N9z+Vm+xBxl0mYj5XeVeesnHSOopdkzrqw8mXDU2Rzq7Jn6 V2yY20ZVqgePCosbrSAR0w2gW/Vf589u4xPzTHRwIjU5XezLQflqOWsbpQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFON3z2+iJTMQloqfrt07sUrY/NhOMB8GA1UdIwQY MBaAFOA5DBw2HfBSJDdhCO/5sg3C7gJlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNERrTUhEWWQ4RklrTjJFSTdfbXlEY0x1QW1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zYzBmMDQtOGNhZi00OWQ0LWFhYjct NTllNjExZDc2NTc0LzEvNDNmUGI2SWxNeENXaXAtdTNUdXhTdGo4MkU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zYzBmMDQtOGNhZi00OWQ0LWFhYjctNTllNjExZDc2NTc0 LzEvNERrTUhEWWQ4RklrTjJFSTdfbXlEY0x1QW1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwMAk0MwCgMD AZ6mAwMBnqgwDQQCAAIwBwMFACoBcIAwDQYJKoZIhvcNAQELBQADggEBAB2DD2Un bqaD8XbyhzqphqCpgEtOdoUAcp9VYvFf4NBU76k/+kMLFdf400v78bH75P5RuzX3 FI9c4sS9EoTFyuq2TGy43jw2UZooU6gMB5i1Z+GwcVJgun/rEhAp9Nl41+73eBIo f4xr/XhhVaiGbKEaOPGUm7Y4avku8jcT4R3ozM59sMznUPQta5z0Q7NhFBsbjL+j B78Xp+tZ+fxs4yI/PyexNI+0Bttan0vG98R2NwckQHhZ4bZSofyM3iHaPRF66qYF 4ZI4q86qB43kkjpL4vDbHgH8oACJejBcufljbMh+yrlLrkN+secyPgq9ignn5ie3 mq5o7vq5o9lsgek= -----END CERTIFICATE-----Generated at Tue Dec 30 06:34:35 2025 by rpki-client