This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/pL3i2ZZ9emPHPv8_low9IJJ1mqM.roa File: pL3i2ZZ9emPHPv8_low9IJJ1mqM.roa (raw, json) Hash identifier: RjovUh5nlh9maakqrR1LT9Y7/iHkn9blWZ2NzRVi0JI= Subject key identifier: A4:BD:E2:D9:96:7D:7A:63:C7:3E:FF:3F:96:8C:3D:20:92:75:9A:A3 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019A98DF8A1A0893AD20811AA5F72E590359 Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/pL3i2ZZ9emPHPv8_low9IJJ1mqM.roa Signing time: Tue 18 Nov 2025 21:29:37 +0000 ROA not before: Tue 18 Nov 2025 21:29:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205733 IP address blocks: 95.170.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:98:df:8a:1a:08:93:ad:20:81:1a:a5:f7:2e:59:03:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Nov 18 21:29:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a4bde2d9967d7a63c73eff3f968c3d2092759aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:46:e0:aa:69:79:e8:a0:4f:27:60:0e:5a:a1: 09:bc:91:6d:b5:f3:41:5b:2b:b7:60:31:00:9a:2f: 6c:56:3e:a9:3f:e0:89:82:05:a2:94:82:8b:59:95: 41:f8:5f:08:f8:92:c6:39:d3:29:e4:62:87:64:af: 13:51:f3:79:9b:01:65:10:ed:4c:9a:b8:84:5a:78: 28:ed:90:c9:7d:30:f4:98:24:e5:d2:db:b6:98:a1: aa:ea:dc:cc:14:8d:6c:9c:80:bf:3e:76:19:13:f3: 56:79:36:27:dc:85:d7:19:30:2d:f7:66:b1:61:a0: d7:ce:04:3e:dc:01:0a:44:05:54:d1:22:07:e0:f8: 9a:43:af:f3:e0:64:47:40:bd:5a:5a:9d:68:62:05: df:ad:df:b7:52:6a:da:33:0e:78:f6:c6:76:a8:36: 7c:8d:56:07:cb:98:0b:a3:40:67:dd:2c:26:84:e8: 01:c7:03:7c:c8:65:ff:2b:d5:fc:d8:02:dc:41:82: e0:25:23:ce:7e:14:5a:ac:ab:15:77:94:ef:5c:73: bf:94:2b:2b:c1:e5:1c:71:c0:5d:03:de:d3:d3:77: ad:12:03:91:e1:2f:bb:ce:a8:2b:ca:b4:b8:c4:fe: 4f:34:7f:88:7f:b8:6d:9b:47:b9:50:72:34:9c:93: ea:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:BD:E2:D9:96:7D:7A:63:C7:3E:FF:3F:96:8C:3D:20:92:75:9A:A3 X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/pL3i2ZZ9emPHPv8_low9IJJ1mqM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.170.25.0/24 Signature Algorithm: sha256WithRSAEncryption 86:82:61:95:5c:97:ab:d2:3b:0a:e6:b4:7e:9c:5f:43:09:07: 20:60:9d:84:51:44:2b:f5:a6:5c:d2:4f:a2:1b:39:be:45:1d: 89:34:d9:b7:9c:3a:44:8b:33:41:2c:9a:57:8f:99:ff:f4:7e: 0b:77:08:06:2a:05:44:65:f4:0f:a4:6c:8a:7b:c6:21:ee:97: 7d:39:98:c2:f1:22:4e:fc:9b:4d:c4:d2:d6:01:37:91:52:f7: 7d:ec:f3:b4:0e:ee:51:00:e6:fc:8b:51:eb:61:61:24:52:85: 52:1c:aa:c2:a0:9c:5f:36:d5:58:33:3e:5d:84:9c:92:02:0e: e1:6a:16:77:f9:3b:74:c2:c2:e0:a5:f8:e6:51:74:af:1a:a5: 27:fa:2d:53:56:da:0e:17:5d:47:7e:94:84:b4:cc:e9:f7:69: ea:8f:06:30:fb:23:90:32:3f:2a:85:06:2e:87:76:32:e3:f7: 4d:76:58:e7:42:7d:0b:8b:57:31:f4:16:dc:b2:5e:98:19:9d: cf:22:3d:67:5e:4d:4b:80:ec:54:bb:2b:04:c1:43:14:e5:66: 30:83:22:92:ca:86:80:3a:ab:9e:1d:fe:f8:05:21:8a:e4:dc: ff:60:57:89:23:c5:14:0d:1d:c5:de:b2:1c:74:49:d4:3f:be: 19:1a:02:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqY34oaCJOtIIEapfcuWQNZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjUxMTE4MjEyOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGJkZTJkOTk2N2Q3YTYzYzczZWZmM2Y5NjhjM2QyMDkyNzU5YWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0bgqml56KBPJ2AOWqEJvJFttfNB Wyu3YDEAmi9sVj6pP+CJggWilIKLWZVB+F8I+JLGOdMp5GKHZK8TUfN5mwFlEO1M mriEWngo7ZDJfTD0mCTl0tu2mKGq6tzMFI1snIC/PnYZE/NWeTYn3IXXGTAt92ax YaDXzgQ+3AEKRAVU0SIH4PiaQ6/z4GRHQL1aWp1oYgXfrd+3UmraMw549sZ2qDZ8 jVYHy5gLo0Bn3SwmhOgBxwN8yGX/K9X82ALcQYLgJSPOfhRarKsVd5TvXHO/lCsr weUcccBdA97T03etEgOR4S+7zqgryrS4xP5PNH+If7htm0e5UHI0nJPqlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKS94tmWfXpjxz7/P5aMPSCSdZqjMB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvcEwzaTJaWjllbVBIUHY4X2xvdzlJSkoxbXFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX6oZMA0G CSqGSIb3DQEBCwUAA4IBAQCGgmGVXJer0jsK5rR+nF9DCQcgYJ2EUUQr9aZc0k+i Gzm+RR2JNNm3nDpEizNBLJpXj5n/9H4LdwgGKgVEZfQPpGyKe8Yh7pd9OZjC8SJO /JtNxNLWATeRUvd97PO0Du5RAOb8i1HrYWEkUoVSHKrCoJxfNtVYMz5dhJySAg7h ahZ3+Tt0wsLgpfjmUXSvGqUn+i1TVtoOF11HfpSEtMzp92nqjwYw+yOQMj8qhQYu h3Yy4/dNdljnQn0Li1cx9Bbcsl6YGZ3PIj1nXk1LgOxUuysEwUMU5WYwgyKSyoaA OqueHf74BSGK5Nz/YFeJI8UUDR3F3rIcdEnUP74ZGgKx -----END CERTIFICATE-----Generated at Sat Dec 6 21:47:08 2025 by rpki-client