This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/D2r7dT-bQwOpT4u2PCOrnBwATAQ.roa File: D2r7dT-bQwOpT4u2PCOrnBwATAQ.roa (raw, json) Hash identifier: zFihphlv0kTjByMn1IEtdtasSsD/xCgw79RV8lzEyT0= Subject key identifier: 0F:6A:FB:75:3F:9B:43:03:A9:4F:8B:B6:3C:23:AB:9C:1C:00:4C:04 Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1 Certificate serial: 019AB0AC082D7AE22321680104C3C1D6C456 Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/D2r7dT-bQwOpT4u2PCOrnBwATAQ.roa Signing time: Sun 23 Nov 2025 12:24:15 +0000 ROA not before: Sun 23 Nov 2025 12:24:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216361 IP address blocks: 185.217.39.0/24 maxlen: 24 194.36.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b0:ac:08:2d:7a:e2:23:21:68:01:04:c3:c1:d6:c4:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1 Validity Not Before: Nov 23 12:24:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0f6afb753f9b4303a94f8bb63c23ab9c1c004c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5e:1e:aa:dd:95:84:21:35:82:b6:75:74:b5: 52:e8:35:b2:c8:27:05:2b:58:60:47:8e:e4:b3:94: 70:a1:0d:14:e6:7b:02:4d:e7:f9:04:e1:39:46:27: 44:7a:2f:fc:c9:92:b0:5a:95:0d:06:48:55:21:a4: d1:31:86:75:35:2e:57:78:6b:ab:d9:0d:14:81:3f: 1a:90:74:eb:27:b4:40:98:e3:a2:89:ff:57:8f:1d: 7f:57:9b:f0:54:2b:ed:ba:ab:3a:ae:ce:51:b2:b6: 81:71:17:12:00:3e:2a:90:4c:61:ba:5a:5a:4c:00: bf:5d:7f:74:d6:68:3e:87:ff:c5:10:b5:38:92:88: 94:30:6d:fe:64:4e:4f:7e:4e:9c:98:fd:e1:6b:70: a9:0b:db:e3:50:df:3e:c2:af:dd:0f:c5:2a:33:aa: 1e:55:45:6c:13:f3:21:ef:41:c1:bf:95:87:ef:11: 9f:02:f3:8a:2a:0c:52:0c:b9:d4:6b:47:14:48:ce: 81:33:76:d2:40:f7:fa:f8:a3:36:ab:9b:1d:87:53: 61:e8:14:6c:62:ab:6f:97:a8:33:03:bc:b3:93:f1: 3a:53:d4:2a:a7:3d:49:56:66:14:2f:7c:a4:da:18: 64:31:85:d2:52:cb:fc:48:cb:f3:35:d2:c6:a2:ab: 9f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:6A:FB:75:3F:9B:43:03:A9:4F:8B:B6:3C:23:AB:9C:1C:00:4C:04 X509v3 Authority Key Identifier: keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/D2r7dT-bQwOpT4u2PCOrnBwATAQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.217.39.0/24 194.36.173.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:51:5a:1a:21:7c:51:42:3d:42:ca:32:96:84:d5:e3:b2:49: 27:46:b9:19:26:de:42:84:ed:53:10:57:d8:29:42:b9:fd:1c: dc:ed:9d:7c:1d:a9:d2:79:04:ba:5e:8a:ad:00:c3:67:e1:3b: 83:a1:08:7f:c7:2b:80:d0:d7:a4:25:d6:33:d4:30:6a:f9:cf: 8f:4e:e4:4f:98:95:f2:0f:80:0e:92:da:54:f8:5f:ad:55:82: 2b:e2:14:ec:2d:21:71:8c:f2:f3:72:38:2d:32:02:be:fd:b5: b4:ad:0a:be:54:72:16:de:ec:01:aa:86:af:75:e9:fb:c6:90: 0b:67:ac:5c:63:a1:59:c7:ed:d3:e4:29:4c:ae:f8:af:83:b0: 1d:88:2a:d9:b4:77:bb:3f:70:fa:04:11:50:62:88:b7:7a:1a: 38:ee:74:f4:98:cb:05:45:4e:ce:6f:d1:46:d8:34:54:fc:07: 08:72:8c:76:67:a7:ff:c3:ff:ec:ee:bf:a0:43:1c:14:41:11: 7b:80:61:4e:c1:35:73:0b:d4:e3:92:bb:1b:36:6e:a4:11:46: 6c:c7:0b:f4:07:bf:a3:0f:1d:21:f1:85:0c:31:c7:c2:a7:09: 3c:61:10:8a:e2:ec:af:82:c3:32:d1:b5:04:9f:30:1f:b2:b4: f2:68:3c:31 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqwrAgteuIjIWgBBMPB1sRWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx ZjZhZDEwHhcNMjUxMTIzMTIyNDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjZhZmI3NTNmOWI0MzAzYTk0ZjhiYjYzYzIzYWI5YzFjMDA0YzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl4eqt2VhCE1grZ1dLVS6DWyyCcF K1hgR47ks5RwoQ0U5nsCTef5BOE5RidEei/8yZKwWpUNBkhVIaTRMYZ1NS5XeGur 2Q0UgT8akHTrJ7RAmOOiif9Xjx1/V5vwVCvtuqs6rs5RsraBcRcSAD4qkExhulpa TAC/XX901mg+h//FELU4koiUMG3+ZE5Pfk6cmP3ha3CpC9vjUN8+wq/dD8UqM6oe VUVsE/Mh70HBv5WH7xGfAvOKKgxSDLnUa0cUSM6BM3bSQPf6+KM2q5sdh1Nh6BRs Yqtvl6gzA7yzk/E6U9Qqpz1JVmYUL3yk2hhkMYXSUsv8SMvzNdLGoqufNQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFA9q+3U/m0MDqU+Ltjwjq5wcAEwEMB8GA1UdIwQY MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt NGIzYjFiNjNiNmFiLzEvRDJyN2RULWJRd09wVDR1MlBDT3JuQndBVEFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAudknAwQA wiStMA0GCSqGSIb3DQEBCwUAA4IBAQCPUVoaIXxRQj1CyjKWhNXjskknRrkZJt5C hO1TEFfYKUK5/Rzc7Z18HanSeQS6XoqtAMNn4TuDoQh/xyuA0NekJdYz1DBq+c+P TuRPmJXyD4AOktpU+F+tVYIr4hTsLSFxjPLzcjgtMgK+/bW0rQq+VHIW3uwBqoav den7xpALZ6xcY6FZx+3T5ClMrvivg7AdiCrZtHe7P3D6BBFQYoi3eho47nT0mMsF RU7Ob9FG2DRU/AcIcox2Z6f/w//s7r+gQxwUQRF7gGFOwTVzC9TjkrsbNm6kEUZs xwv0B7+jDx0h8YUMMcfCpwk8YRCK4uyvgsMy0bUEnzAfsrTyaDwx -----END CERTIFICATE-----Generated at Sat Dec 6 16:34:58 2025 by rpki-client