This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/C2VKpKbdGAve9BWW62cbChidaz4.roa File: C2VKpKbdGAve9BWW62cbChidaz4.roa (raw, json) Hash identifier: 3l891zT8Fz6ua1wyx1XjuCbzbSNNszMW60VkFMa54cs= Subject key identifier: 0B:65:4A:A4:A6:DD:18:0B:DE:F4:15:96:EB:67:1B:0A:18:9D:6B:3E Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B1B41B76EBFC8DA161EA6C8FE9DE8680A Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/C2VKpKbdGAve9BWW62cbChidaz4.roa Signing time: Sun 14 Dec 2025 05:07:30 +0000 ROA not before: Sun 14 Dec 2025 05:07:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 19318 IP address blocks: 94.249.180.0/24 maxlen: 24 94.249.181.0/24 maxlen: 24 94.249.182.0/24 maxlen: 24 94.249.184.0/24 maxlen: 24 94.249.185.0/24 maxlen: 24 94.249.186.0/24 maxlen: 24 94.249.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:41:b7:6e:bf:c8:da:16:1e:a6:c8:fe:9d:e8:68:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 14 05:07:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0b654aa4a6dd180bdef41596eb671b0a189d6b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fc:88:10:d6:12:ad:d2:f9:1f:8b:bf:80:ce: 15:ad:92:24:cd:a8:8d:e4:77:51:45:f5:5a:fe:3e: 45:c2:2c:75:fc:5b:b8:24:fa:00:7d:cb:fc:81:d5: e7:ca:0d:0f:81:79:47:b1:62:62:e0:3e:70:73:09: ff:1d:1a:0a:86:f7:6b:57:7a:e7:2e:4d:87:00:86: 03:07:c6:51:3b:9d:1e:73:3c:44:a7:a0:5d:94:f6: 54:b5:f2:ac:bc:ad:2f:08:8a:41:9c:9e:09:e2:d2: 18:b2:fb:f4:a2:d4:04:00:5c:eb:c7:55:7f:2f:5f: 67:ec:a5:e9:a6:1b:ed:f9:3e:db:30:a0:fe:51:87: e4:5d:86:4d:45:50:16:b5:99:cd:9a:77:f2:68:0d: 93:6f:38:25:95:e6:37:e9:09:bc:00:d7:ee:d0:f3: 6f:be:4b:c6:d2:d9:13:8c:d6:36:ea:eb:14:92:00: bd:37:83:8a:7e:c2:ee:29:08:23:39:94:14:de:19: f2:a1:8d:ff:cf:b9:dc:36:06:5a:b7:63:87:de:0f: 50:b3:7e:b9:72:d6:8d:27:48:ed:81:32:0b:56:2f: 04:e6:50:13:cc:6b:bd:22:81:98:37:31:6f:c2:d7: 35:e3:12:7b:60:30:de:63:f9:51:46:96:34:84:99: 19:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:65:4A:A4:A6:DD:18:0B:DE:F4:15:96:EB:67:1B:0A:18:9D:6B:3E X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/C2VKpKbdGAve9BWW62cbChidaz4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.249.180.0-94.249.182.255 94.249.184.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:2c:6f:eb:71:27:df:26:ed:04:1c:3f:50:01:1c:b0:89:3a: 6d:18:5d:64:b7:05:65:93:2d:a7:bd:1a:2b:d2:51:f9:0a:32: a4:04:3f:8e:e0:e2:74:d1:72:c2:59:13:38:a6:05:29:4e:1d: 1a:2d:2b:5d:79:05:a7:ce:e9:84:0a:0a:0d:41:72:f5:20:46: 6d:81:4f:39:6e:e4:10:ab:a1:46:82:e0:26:c7:01:0d:06:c0: 9c:2e:5c:e0:18:94:c7:ee:67:00:af:ed:88:a4:5d:71:d9:b1: 77:12:3e:e9:f3:ad:d5:7b:09:2a:4a:b7:b4:9e:af:ae:52:dd: 5c:e6:d8:28:07:18:8c:3b:b8:74:fa:cf:8b:b4:f2:cf:ba:7d: 1a:4b:51:f3:61:05:3e:70:00:a5:39:87:36:c3:d9:21:4c:c6: 59:a2:97:06:c5:04:02:c5:6c:e8:3d:bb:64:7b:7c:1e:4b:ef: 3e:ea:2f:78:d4:c7:2b:5a:39:3b:26:ea:d3:ac:01:3a:ca:9d: 1c:d1:90:1d:1e:4a:2a:0f:86:19:56:e9:95:0a:09:0b:a0:b3: ef:dc:22:a4:e8:70:0f:33:48:0a:73:10:a1:78:cd:1d:36:5a: 6e:21:ab:7d:19:8f:3e:fb:c1:71:75:da:f5:a2:b5:8e:2e:7f: 63:f4:d5:cb -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZsbQbduv8jaFh6myP6d6GgKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjE0MDUwNzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjY1NGFhNGE2ZGQxODBiZGVmNDE1OTZlYjY3MWIwYTE4OWQ2YjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPyIENYSrdL5H4u/gM4VrZIkzaiN 5HdRRfVa/j5Fwix1/Fu4JPoAfcv8gdXnyg0PgXlHsWJi4D5wcwn/HRoKhvdrV3rn Lk2HAIYDB8ZRO50eczxEp6BdlPZUtfKsvK0vCIpBnJ4J4tIYsvv0otQEAFzrx1V/ L19n7KXpphvt+T7bMKD+UYfkXYZNRVAWtZnNmnfyaA2TbzglleY36Qm8ANfu0PNv vkvG0tkTjNY26usUkgC9N4OKfsLuKQgjOZQU3hnyoY3/z7ncNgZat2OH3g9Qs365 ctaNJ0jtgTILVi8E5lATzGu9IoGYNzFvwtc14xJ7YDDeY/lRRpY0hJkZYwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFAtlSqSm3RgL3vQVlutnGwoYnWs+MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvQzJWS3BLYmRHQXZlOUJXVzYyY2JDaGlkYXo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAJe+bQD BABe+bYDBAJe+bgwDQYJKoZIhvcNAQELBQADggEBACssb+txJ98m7QQcP1ABHLCJ Om0YXWS3BWWTLae9GivSUfkKMqQEP47g4nTRcsJZEzimBSlOHRotK115BafO6YQK Cg1BcvUgRm2BTzlu5BCroUaC4CbHAQ0GwJwuXOAYlMfuZwCv7YikXXHZsXcSPunz rdV7CSpKt7Ser65S3Vzm2CgHGIw7uHT6z4u08s+6fRpLUfNhBT5wAKU5hzbD2SFM xlmilwbFBALFbOg9u2R7fB5L7z7qL3jUxytaOTsm6tOsATrKnRzRkB0eSioPhhlW 6ZUKCQugs+/cIqTocA8zSApzEKF4zR02Wm4hq30Zjz77wXF12vWitY4uf2P01cs= -----END CERTIFICATE-----Generated at Wed Dec 17 20:07:24 2025 by rpki-client