This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/rH4zTDq_DbrOTV-Cv150Encg0_c.roa File: rH4zTDq_DbrOTV-Cv150Encg0_c.roa (raw, json) Hash identifier: sOzYYtedumoF+uawmC9v+69bsDR2EMzC3U7NNPNVOhk= Subject key identifier: AC:7E:33:4C:3A:BF:0D:BA:CE:4D:5F:82:BF:5E:74:12:77:20:D3:F7 Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019B36718C1F5631D599FCB9A56228A5D0A6 Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/rH4zTDq_DbrOTV-Cv150Encg0_c.roa Signing time: Fri 19 Dec 2025 11:49:29 +0000 ROA not before: Fri 19 Dec 2025 11:49:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 45.155.241.0/24 maxlen: 24 45.155.242.0/24 maxlen: 24 194.143.206.0/23 maxlen: 24 194.143.207.0/24 maxlen: 24 194.143.217.0/24 maxlen: 24 194.143.218.0/24 maxlen: 24 194.143.221.0/24 maxlen: 24 194.143.222.0/24 maxlen: 24 194.143.223.0/24 maxlen: 24 195.114.196.0/24 maxlen: 24 195.114.197.0/24 maxlen: 24 195.114.198.0/24 maxlen: 24 195.114.205.0/24 maxlen: 24 213.220.7.0/24 maxlen: 24 213.220.11.0/24 maxlen: 24 213.220.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:71:8c:1f:56:31:d5:99:fc:b9:a5:62:28:a5:d0:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Dec 19 11:49:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ac7e334c3abf0dbace4d5f82bf5e74127720d3f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:88:73:b9:18:cb:9a:92:7c:56:39:e9:0e:bf: 77:97:e2:d8:2d:7f:e9:ae:6c:4b:06:23:e1:5d:ea: 67:98:d8:3b:7c:cb:1f:25:48:93:8f:53:22:38:a7: 0b:fb:70:83:39:03:48:6f:00:d8:f5:d0:6f:aa:8a: 1b:f0:bd:58:0a:e3:7c:1e:ca:b2:d9:c8:f4:40:73: c9:f8:0c:62:9b:a1:d2:1b:65:03:dd:d7:74:d3:c0: 49:48:77:31:db:50:e1:90:5c:f5:6c:82:ba:f6:b3: 2f:06:5c:52:c1:33:32:b1:b9:1e:c5:0d:a1:3a:77: 3b:32:b8:06:9d:ba:bb:d4:3d:00:9b:87:c3:8f:37: 4c:01:cd:e1:6b:24:85:ae:3f:b2:3c:b8:61:ba:73: 8f:65:12:3f:94:89:0c:42:ed:0b:ea:c7:82:dc:3d: c5:33:b2:a6:cb:8c:5f:99:8e:bc:f8:3d:fc:dc:98: e0:e0:90:dd:9c:3c:90:8f:8d:ca:e2:64:93:28:2f: 17:b8:b0:6f:51:a3:c8:b9:14:56:24:20:f9:bd:50: 2d:30:61:46:ed:b8:95:dc:e1:4a:d9:10:0b:37:af: 7f:12:6d:ec:f0:49:c2:a3:ac:cc:1f:14:c5:e8:09: 38:74:fd:48:fb:18:c2:64:32:d0:c9:de:9f:d6:08: 99:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:7E:33:4C:3A:BF:0D:BA:CE:4D:5F:82:BF:5E:74:12:77:20:D3:F7 X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/rH4zTDq_DbrOTV-Cv150Encg0_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.241.0-45.155.242.255 194.143.206.0/23 194.143.217.0-194.143.218.255 194.143.221.0-194.143.223.255 195.114.196.0-195.114.198.255 195.114.205.0/24 213.220.7.0/24 213.220.11.0/24 213.220.13.0/24 Signature Algorithm: sha256WithRSAEncryption 24:0b:3e:2b:2f:3a:af:e0:b6:0e:59:94:46:a5:95:42:87:e0: 8c:4c:9a:92:17:a4:db:81:56:ee:6f:a4:c4:ad:f4:5e:48:fb: d2:3f:42:cc:a8:62:53:4d:e6:93:84:b0:4d:cf:44:3f:6a:92: ba:91:5f:27:4a:a1:c1:49:8b:63:67:96:0c:66:c6:31:ed:c0: f7:7b:43:ed:25:fe:6b:98:bf:84:3b:fc:14:a7:dc:6f:2d:83: 6a:ae:67:4e:19:ba:26:11:63:5a:ff:bc:cd:92:a0:42:40:f8: 90:2c:ce:b8:20:1c:c0:4e:ac:d0:7b:a4:53:86:4b:cd:f2:7e: ad:26:52:75:20:6c:a5:92:25:7d:34:00:8e:11:17:2f:9d:54: cb:4f:14:8e:61:7c:d2:0f:fa:2a:d4:fc:cf:e3:8e:40:84:8c: f2:92:a0:e0:c5:82:fb:71:cc:5e:18:f0:87:5a:49:4e:e6:d0: 57:52:13:3d:a2:ac:a6:cd:17:1f:c7:bd:68:cd:97:d6:2f:03: 05:de:da:be:f5:b3:b2:7d:34:c7:0e:6d:e3:94:ab:65:27:ea: bb:07:78:d0:c8:3a:5c:84:ee:23:4d:50:7e:43:9f:fa:d5:b4: e0:61:2a:cc:af:b8:31:ef:50:40:c7:48:60:30:c7:a1:10:1d: d1:29:fb:0b -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgISAZs2cYwfVjHVmfy5pWIopdCmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjUxMjE5MTE0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzdlMzM0YzNhYmYwZGJhY2U0ZDVmODJiZjVlNzQxMjc3MjBkM2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YhzuRjLmpJ8VjnpDr93l+LYLX/p rmxLBiPhXepnmNg7fMsfJUiTj1MiOKcL+3CDOQNIbwDY9dBvqoob8L1YCuN8Hsqy 2cj0QHPJ+Axim6HSG2UD3dd008BJSHcx21DhkFz1bIK69rMvBlxSwTMysbkexQ2h Onc7MrgGnbq71D0Am4fDjzdMAc3haySFrj+yPLhhunOPZRI/lIkMQu0L6seC3D3F M7Kmy4xfmY68+D383Jjg4JDdnDyQj43K4mSTKC8XuLBvUaPIuRRWJCD5vVAtMGFG 7biV3OFK2RALN69/Em3s8EnCo6zMHxTF6Ak4dP1I+xjCZDLQyd6f1giZ/wIDAQAB o4ICWTCCAlUwHQYDVR0OBBYEFKx+M0w6vw26zk1fgr9edBJ3INP3MB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvckg0elREcV9EYnJPVFYtQ3YxNTBFbmNnMF9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWMAwDBAAtm/ED BAAtm/IDBAHCj84wDAMEAMKP2QMEAMKP2jAMAwQAwo/dAwQFwo/AMAwDBALDcsQD BADDcsYDBADDcs0DBADV3AcDBADV3AsDBADV3A0wDQYJKoZIhvcNAQELBQADggEB ACQLPisvOq/gtg5ZlEallUKH4IxMmpIXpNuBVu5vpMSt9F5I+9I/QsyoYlNN5pOE sE3PRD9qkrqRXydKocFJi2NnlgxmxjHtwPd7Q+0l/muYv4Q7/BSn3G8tg2quZ04Z uiYRY1r/vM2SoEJA+JAszrggHMBOrNB7pFOGS83yfq0mUnUgbKWSJX00AI4RFy+d VMtPFI5hfNIP+irU/M/jjkCEjPKSoODFgvtxzF4Y8IdaSU7m0FdSEz2irKbNFx/H vWjNl9YvAwXe2r71s7J9NMcObeOUq2Un6rsHeNDIOlyE7iNNUH5Dn/rVtOBhKsyv uDHvUEDHSGAwx6EQHdEp+ws= -----END CERTIFICATE-----Generated at Sun Dec 21 03:20:46 2025 by rpki-client