This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/PnVATVHozDfPNeX2JOaIkRbv6D8.roa File: PnVATVHozDfPNeX2JOaIkRbv6D8.roa (raw, json) Hash identifier: 4Aq3QEbr9dXg3c82vnEqBRKtSSDl04fMwo+ZjR3NIuA= Subject key identifier: 3E:75:40:4D:51:E8:CC:37:CF:35:E5:F6:24:E6:88:91:16:EF:E8:3F Certificate issuer: /CN=5fa4d80464978f6ebfba95f745a3305726f72d93 Certificate serial: 019A8C47F5C4994A91802CF953FFC2CD387A Authority key identifier: 5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/PnVATVHozDfPNeX2JOaIkRbv6D8.roa Signing time: Sun 16 Nov 2025 10:48:37 +0000 ROA not before: Sun 16 Nov 2025 10:48:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5542 IP address blocks: 92.61.176.0/22 maxlen: 22 92.61.176.0/24 maxlen: 24 92.61.177.0/24 maxlen: 24 92.61.178.0/24 maxlen: 24 92.61.179.0/24 maxlen: 24 185.123.208.0/22 maxlen: 22 185.123.208.0/24 maxlen: 24 185.123.209.0/24 maxlen: 24 185.123.210.0/24 maxlen: 24 185.123.211.0/24 maxlen: 24 2a06:af80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:8c:47:f5:c4:99:4a:91:80:2c:f9:53:ff:c2:cd:38:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fa4d80464978f6ebfba95f745a3305726f72d93 Validity Not Before: Nov 16 10:48:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3e75404d51e8cc37cf35e5f624e6889116efe83f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:eb:ea:2c:57:f0:6d:04:58:6b:24:5a:28:29: ed:28:b6:5d:60:1e:f4:38:ad:f3:99:7a:82:25:a3: 9a:ed:14:bc:e9:32:69:17:77:c3:cd:f5:28:66:8d: 95:30:b1:92:da:fc:d1:26:6e:1d:db:65:6a:c5:55: 80:a9:ce:00:20:4b:fa:05:dd:61:ec:38:5b:0e:28: 8d:7a:ee:09:a5:de:5b:7d:20:41:36:d1:92:d6:05: 1d:1f:78:2b:f7:e4:d1:3c:fb:14:d6:15:2a:00:a7: 4a:9a:f2:7d:8e:cb:b1:df:d0:f4:52:34:28:b8:88: 2d:68:f5:37:79:20:75:29:0f:48:86:93:00:7b:08: 69:4f:85:82:27:86:4e:c2:0c:bf:2e:89:f5:59:46: 7d:a5:2f:b3:fc:82:7f:7a:62:9c:e4:82:f3:af:69: 2c:32:20:59:75:78:98:95:ed:2b:db:06:40:85:b2: 9e:17:2d:7d:67:b8:86:74:be:8f:5c:be:9a:6c:6c: c8:70:70:00:ed:de:d8:5a:28:21:db:25:68:4a:a8: f2:df:a8:68:4c:33:59:7f:9a:6b:90:c9:17:c2:06: 76:de:c1:ee:5e:96:ee:3f:5c:17:b9:00:bb:c6:d4: 35:e2:d8:be:84:2c:c4:4d:ce:f9:e9:2e:90:1c:bc: 27:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:75:40:4D:51:E8:CC:37:CF:35:E5:F6:24:E6:88:91:16:EF:E8:3F X509v3 Authority Key Identifier: keyid:5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/PnVATVHozDfPNeX2JOaIkRbv6D8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.61.176.0/22 185.123.208.0/22 IPv6: 2a06:af80::/29 Signature Algorithm: sha256WithRSAEncryption bd:7b:bf:67:a9:0d:af:25:16:a0:58:4b:2f:93:80:35:4f:cb: a6:ec:32:c5:d1:fa:80:ef:d1:36:0b:f6:4a:9b:b9:68:07:6e: b0:7c:02:32:c7:7f:93:c2:09:d9:d3:91:69:56:06:a2:51:f6: cb:76:10:b5:1d:a3:da:51:23:80:8c:d5:f0:a9:8f:dc:c6:73: cd:c6:37:d4:b8:19:ab:14:78:0f:e4:ee:4a:81:b5:8e:f7:aa: ca:94:37:7e:56:6c:dc:91:0c:80:58:1f:e6:33:e7:75:e5:85: 9d:51:83:fc:b3:e7:c4:22:cd:23:be:d4:9f:34:b5:99:7e:1d: ae:73:1a:22:75:07:11:15:ae:1e:8c:1e:93:e1:37:0d:a8:9e: ac:15:aa:f8:34:5c:1c:50:e5:75:dd:84:14:f2:b5:1f:c8:c8: be:68:36:ef:17:0e:a4:ae:b9:87:77:51:b8:a7:48:11:70:a2: b9:07:49:38:9c:6c:aa:b9:c6:f5:7e:6e:d3:8f:33:5e:eb:92: 92:53:f6:ba:20:14:9a:91:02:7f:ce:63:2d:06:f4:d3:96:d9: b5:c1:67:a8:03:cb:98:e7:09:5e:2b:9e:2e:bf:49:be:75:8d: de:d6:de:48:e8:eb:b4:ad:bb:b8:ef:d9:ea:8b:df:19:3f:a0: 21:b8:cc:f2 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZqMR/XEmUqRgCz5U//CzTh6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYTRkODA0NjQ5NzhmNmViZmJhOTVmNzQ1YTMzMDU3MjZm NzJkOTMwHhcNMjUxMTE2MTA0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTc1NDA0ZDUxZThjYzM3Y2YzNWU1ZjYyNGU2ODg5MTE2ZWZlODNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouvqLFfwbQRYayRaKCntKLZdYB70 OK3zmXqCJaOa7RS86TJpF3fDzfUoZo2VMLGS2vzRJm4d22VqxVWAqc4AIEv6Bd1h 7DhbDiiNeu4Jpd5bfSBBNtGS1gUdH3gr9+TRPPsU1hUqAKdKmvJ9jsux39D0UjQo uIgtaPU3eSB1KQ9IhpMAewhpT4WCJ4ZOwgy/Lon1WUZ9pS+z/IJ/emKc5ILzr2ks MiBZdXiYle0r2wZAhbKeFy19Z7iGdL6PXL6abGzIcHAA7d7YWigh2yVoSqjy36ho TDNZf5prkMkXwgZ23sHuXpbuP1wXuQC7xtQ14ti+hCzETc756S6QHLwnqQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFD51QE1R6Mw3zzXl9iTmiJEW7+g/MB8GA1UdIwQY MBaAFF+k2ARkl49uv7qV90WjMFcm9y2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDZUWUJHU1hqMjZfdXBYM1JhTXdWeWIzTFpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMDUwYjQtOWJhMC00ZTg1LTlkNzYt NGZhNjI0MmI4YTNhLzEvUG5WQVRWSG96RGZQTmVYMkpPYUlrUmJ2NkQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMDUwYjQtOWJhMC00ZTg1LTlkNzYtNGZhNjI0MmI4YTNh LzEvWDZUWUJHU1hqMjZfdXBYM1JhTXdWeWIzTFpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCXD2wAwQC uXvQMA0EAgACMAcDBQMqBq+AMA0GCSqGSIb3DQEBCwUAA4IBAQC9e79nqQ2vJRag WEsvk4A1T8um7DLF0fqA79E2C/ZKm7loB26wfAIyx3+TwgnZ05FpVgaiUfbLdhC1 HaPaUSOAjNXwqY/cxnPNxjfUuBmrFHgP5O5KgbWO96rKlDd+VmzckQyAWB/mM+d1 5YWdUYP8s+fEIs0jvtSfNLWZfh2ucxoidQcRFa4ejB6T4TcNqJ6sFar4NFwcUOV1 3YQU8rUfyMi+aDbvFw6krrmHd1G4p0gRcKK5B0k4nGyqucb1fm7TjzNe65KSU/a6 IBSakQJ/zmMtBvTTltm1wWeoA8uY5wleK54uv0m+dY3e1t5I6Ou0rbu479nqi98Z P6AhuMzy -----END CERTIFICATE-----Generated at Sun Dec 7 07:31:48 2025 by rpki-client