This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/jeERq-DiGtTR1nOHJ06m2B8iq9E.roa File: jeERq-DiGtTR1nOHJ06m2B8iq9E.roa (raw, json) Hash identifier: k2HbAR5F/iJO7J2rnXi37Cf5v98id/QJHJ0NQ2eIaRc= Subject key identifier: 8D:E1:11:AB:E0:E2:1A:D4:D1:D6:73:87:27:4E:A6:D8:1F:22:AB:D1 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019AA769BAD822CD40C34FB48C6F7A84665A Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/jeERq-DiGtTR1nOHJ06m2B8iq9E.roa Signing time: Fri 21 Nov 2025 17:15:15 +0000 ROA not before: Fri 21 Nov 2025 17:15:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 33659 IP address blocks: 45.150.168.0/22 maxlen: 22 45.151.196.0/22 maxlen: 22 185.147.49.0/24 maxlen: 24 185.212.11.0/24 maxlen: 24 193.31.104.0/22 maxlen: 22 194.50.206.0/23 maxlen: 23 195.138.109.0/24 maxlen: 24 195.138.110.0/24 maxlen: 24 195.138.113.0/24 maxlen: 24 195.138.115.0/24 maxlen: 24 195.138.124.0/22 maxlen: 22 195.211.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a7:69:ba:d8:22:cd:40:c3:4f:b4:8c:6f:7a:84:66:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Nov 21 17:15:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8de111abe0e21ad4d1d67387274ea6d81f22abd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1f:f1:2c:74:b3:ec:06:dc:c9:4f:b4:6b:4d: fc:6e:50:45:aa:07:76:53:13:b9:6a:af:a6:cd:fe: 20:c5:c6:fb:f7:18:5b:20:91:b2:85:e0:7b:f7:07: 82:61:97:65:dc:af:03:60:9f:ef:f1:51:ca:8f:61: 2c:91:5a:44:f0:13:d5:4b:0f:64:c8:30:44:d1:38: 8c:f2:14:92:b3:bb:a8:c0:df:7b:da:19:0a:73:f9: a3:22:39:b9:e1:56:68:fd:cd:87:b9:0c:55:97:a7: c5:40:0d:17:fb:39:0a:5c:31:81:b4:76:43:d9:1b: 7d:f0:4d:02:5a:e1:16:ee:33:f3:56:66:df:e1:56: 36:70:b3:56:48:c3:63:2d:2a:84:30:5d:69:4f:eb: 59:f9:40:d8:2b:74:d5:98:29:c3:66:f9:a0:3b:d1: 25:91:a8:cd:69:f9:68:f5:dd:13:9a:2b:a4:64:b7: 2c:fc:e8:39:09:7b:72:6a:de:b5:d0:41:60:cc:a7: 12:df:71:7f:ae:77:10:70:ce:e6:8c:54:b9:bf:0d: 6c:e9:6e:78:2b:f1:f8:c9:37:ac:f0:97:bd:be:8c: cb:65:01:27:32:81:96:1c:ba:63:02:6f:77:35:2e: 27:af:67:bb:9f:d8:06:55:c1:ea:94:69:18:a8:4e: d0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E1:11:AB:E0:E2:1A:D4:D1:D6:73:87:27:4E:A6:D8:1F:22:AB:D1 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/jeERq-DiGtTR1nOHJ06m2B8iq9E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.168.0/22 45.151.196.0/22 185.147.49.0/24 185.212.11.0/24 193.31.104.0/22 194.50.206.0/23 195.138.109.0-195.138.110.255 195.138.113.0/24 195.138.115.0/24 195.138.124.0/22 195.211.48.0/24 Signature Algorithm: sha256WithRSAEncryption 96:6a:29:c1:a6:9f:ed:3c:5e:c8:be:98:13:4e:e7:2f:9b:61: 90:44:b1:85:1d:f1:ab:64:d7:ad:a7:61:ce:cf:50:e0:cf:eb: 4f:e1:bd:1b:ba:f3:a5:89:cf:e3:bd:6f:eb:70:ff:98:36:eb: 05:dc:bb:c5:32:15:19:90:24:5d:79:b1:87:36:91:45:d6:65: 47:7f:ea:06:35:8b:8b:b7:60:05:ed:80:70:29:ea:c8:db:0b: f5:d2:31:d1:91:e4:31:96:49:39:35:18:aa:08:4a:00:84:d2: 22:8e:a1:89:03:95:af:83:bd:77:17:36:c3:55:3f:1f:7f:10: f3:99:d6:9d:31:f4:aa:e2:29:50:bc:95:a5:0f:2a:8c:2d:ba: f7:4a:75:6d:fb:98:d2:31:ed:29:ec:69:26:a7:11:a0:a2:93: 36:37:09:da:df:b4:7e:3b:fd:9a:7d:7e:65:96:f3:80:73:77: 09:c9:80:c6:b5:59:36:dd:e7:88:8d:4c:2d:fe:9b:35:99:2a: 54:9e:ea:e9:d4:26:90:b2:af:22:49:40:cd:ab:3d:6a:34:61: 41:94:6a:8c:25:74:7b:46:75:17:9e:04:6f:e3:40:70:86:8a: 9f:7f:c2:a9:51:14:7f:32:7e:ea:cf:f5:bf:c6:88:63:29:52: c4:20:05:44 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgISAZqnabrYIs1Aw0+0jG96hGZaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjUxMTIxMTcxNTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGUxMTFhYmUwZTIxYWQ0ZDFkNjczODcyNzRlYTZkODFmMjJhYmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh/xLHSz7AbcyU+0a038blBFqgd2 UxO5aq+mzf4gxcb79xhbIJGyheB79weCYZdl3K8DYJ/v8VHKj2EskVpE8BPVSw9k yDBE0TiM8hSSs7uowN972hkKc/mjIjm54VZo/c2HuQxVl6fFQA0X+zkKXDGBtHZD 2Rt98E0CWuEW7jPzVmbf4VY2cLNWSMNjLSqEMF1pT+tZ+UDYK3TVmCnDZvmgO9El kajNaflo9d0TmiukZLcs/Og5CXtyat610EFgzKcS33F/rncQcM7mjFS5vw1s6W54 K/H4yTes8Je9vozLZQEnMoGWHLpjAm93NS4nr2e7n9gGVcHqlGkYqE7Q/QIDAQAB o4ICTTCCAkkwHQYDVR0OBBYEFI3hEavg4hrU0dZzhydOptgfIqvRMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvamVFUnEtRGlHdFRSMW5PSEowNm0yQjhpcTlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQCLZaoAwQC LZfEAwQAuZMxAwQAudQLAwQCwR9oAwQBwjLOMAwDBADDim0DBADDim4DBADDinED BADDinMDBALDinwDBADD0zAwDQYJKoZIhvcNAQELBQADggEBAJZqKcGmn+08Xsi+ mBNO5y+bYZBEsYUd8atk162nYc7PUODP60/hvRu686WJz+O9b+tw/5g26wXcu8Uy FRmQJF15sYc2kUXWZUd/6gY1i4u3YAXtgHAp6sjbC/XSMdGR5DGWSTk1GKoISgCE 0iKOoYkDla+DvXcXNsNVPx9/EPOZ1p0x9KriKVC8laUPKowtuvdKdW37mNIx7Sns aSanEaCikzY3CdrftH47/Zp9fmWW84BzdwnJgMa1WTbd54iNTC3+mzWZKlSe6unU JpCyryJJQM2rPWo0YUGUaowldHtGdReeBG/jQHCGip9/wqlRFH8yfurP9b/GiGMp UsQgBUQ= -----END CERTIFICATE-----Generated at Sat Dec 6 14:06:33 2025 by rpki-client