This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/V1kohq7P4ydapDB7EU11fRLeRUg.roa File: V1kohq7P4ydapDB7EU11fRLeRUg.roa (raw, json) Hash identifier: TxOniEW/xxFZY5KmO7UC+sdZGH0WDC/W/Livh3vHUfw= Subject key identifier: 57:59:28:86:AE:CF:E3:27:5A:A4:30:7B:11:4D:75:7D:12:DE:45:48 Certificate issuer: /CN=d29dc792adfcfe88c79e7958fbfec525630b62f9 Certificate serial: 019ABA463860E40292870A798FD3A66DC087 Authority key identifier: D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/V1kohq7P4ydapDB7EU11fRLeRUg.roa Signing time: Tue 25 Nov 2025 09:09:15 +0000 ROA not before: Tue 25 Nov 2025 09:09:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60757 IP address blocks: 45.132.84.0/24 maxlen: 24 45.143.89.0/24 maxlen: 24 45.143.91.0/24 maxlen: 24 85.92.120.0/24 maxlen: 24 85.92.121.0/24 maxlen: 24 85.92.122.0/24 maxlen: 24 85.92.123.0/24 maxlen: 24 185.217.188.0/24 maxlen: 24 185.217.189.0/24 maxlen: 24 185.217.190.0/23 maxlen: 23 185.217.190.0/24 maxlen: 24 185.217.191.0/24 maxlen: 24 2a0d:bcc0::/32 maxlen: 48 2a0d:bcc1::/32 maxlen: 48 2a0d:bcc2::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:46:38:60:e4:02:92:87:0a:79:8f:d3:a6:6d:c0:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d29dc792adfcfe88c79e7958fbfec525630b62f9 Validity Not Before: Nov 25 09:09:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=57592886aecfe3275aa4307b114d757d12de4548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d7:f3:85:62:1b:f7:be:79:cf:ea:32:61:3d: c3:ab:11:d9:a1:c4:66:67:b5:97:40:98:9c:3a:b0: 70:99:6b:5f:fa:8c:d0:af:3c:fc:66:c1:03:20:60: fb:42:a9:63:2d:3f:da:74:66:a9:8b:6b:c6:bd:f1: b0:fc:13:fb:bc:9e:9a:58:8f:d3:d9:87:d9:6a:7b: f2:bb:02:4d:32:fb:f0:f2:37:37:f8:8a:18:e4:ff: b1:a2:3c:90:03:a9:43:af:f1:a0:11:01:9d:cf:78: bb:98:62:07:92:1f:e6:b8:d9:68:4a:4a:53:b0:67: 1f:32:be:1a:bf:98:5c:aa:91:fe:fb:ea:c2:23:0b: 0e:c2:51:43:b3:47:8d:cb:72:f4:90:bc:b2:32:43: e2:f2:15:b0:2f:12:38:9c:ea:be:1a:1d:c9:03:8c: d8:e2:71:2d:51:b0:7e:73:35:85:03:65:6d:2d:45: 8a:5c:ee:ea:0e:65:b5:5a:0f:4a:96:ed:d8:8c:62: 63:0f:5e:d7:26:2d:f1:25:81:81:d3:ec:3b:82:82: 8a:21:fb:17:2e:43:c1:e0:32:51:69:c6:d2:aa:75: 96:25:23:2a:bf:8e:5b:57:3c:e7:61:c5:8a:66:e8: 48:33:9a:00:aa:6a:cb:92:6e:c1:ae:4c:11:f9:67: eb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:59:28:86:AE:CF:E3:27:5A:A4:30:7B:11:4D:75:7D:12:DE:45:48 X509v3 Authority Key Identifier: keyid:D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/V1kohq7P4ydapDB7EU11fRLeRUg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.84.0/24 45.143.89.0/24 45.143.91.0/24 85.92.120.0/22 185.217.188.0/22 IPv6: 2a0d:bcc0::-2a0d:bcc2:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 21:a8:96:c0:b8:ed:3d:38:ae:7f:26:ae:1e:0e:69:37:8a:15: b2:19:f2:37:f1:d2:6d:30:76:23:86:aa:6e:b6:f2:ac:e1:a3: c1:e1:4d:1a:78:63:67:47:04:07:82:d3:e7:03:eb:cb:54:c9: dc:16:20:eb:95:8a:09:e7:cd:77:9d:0b:fa:09:68:b1:56:ac: f2:a0:b3:6b:7b:c8:6b:cd:a4:f0:14:6f:3a:62:96:29:88:37: cf:77:67:7b:93:3b:f9:f8:99:4f:87:ac:71:58:a9:a9:62:4c: 27:3f:89:08:7c:90:f0:44:af:aa:6c:39:46:01:8d:af:20:66: b9:3e:f0:91:8d:bb:cb:80:ec:9e:bb:d4:cf:6b:3b:7b:83:f1: c3:0d:76:7c:8f:c5:7c:15:ae:f5:ca:8c:ce:9f:28:3b:e5:e5: 7d:9c:1e:ec:59:16:07:96:ba:84:53:e8:46:b9:fa:f8:a6:92: d2:d3:51:4a:b5:2f:99:ac:ec:e9:74:10:b5:eb:40:53:38:14: e0:04:fa:66:5f:2c:85:7d:05:cd:b1:56:84:1b:72:9a:3f:4d: 22:79:0a:28:a0:40:37:fb:d6:61:5a:26:c1:04:13:5d:57:2f: 9f:d1:2a:25:f0:1d:f8:85:ee:32:b2:b7:00:f0:8b:0e:39:ab: e1:bc:65:34 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZq6Rjhg5AKShwp5j9OmbcCHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyOWRjNzkyYWRmY2ZlODhjNzllNzk1OGZiZmVjNTI1NjMw YjYyZjkwHhcNMjUxMTI1MDkwOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzU5Mjg4NmFlY2ZlMzI3NWFhNDMwN2IxMTRkNzU3ZDEyZGU0NTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNfzhWIb9755z+oyYT3DqxHZocRm Z7WXQJicOrBwmWtf+ozQrzz8ZsEDIGD7QqljLT/adGapi2vGvfGw/BP7vJ6aWI/T 2YfZanvyuwJNMvvw8jc3+IoY5P+xojyQA6lDr/GgEQGdz3i7mGIHkh/muNloSkpT sGcfMr4av5hcqpH+++rCIwsOwlFDs0eNy3L0kLyyMkPi8hWwLxI4nOq+Gh3JA4zY 4nEtUbB+czWFA2VtLUWKXO7qDmW1Wg9Klu3YjGJjD17XJi3xJYGB0+w7goKKIfsX LkPB4DJRacbSqnWWJSMqv45bVzznYcWKZuhIM5oAqmrLkm7BrkwR+Wfr4wIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFFdZKIauz+MnWqQwexFNdX0S3kVIMB8GA1UdIwQY MBaAFNKdx5Kt/P6Ix555WPv+xSVjC2L5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHAzSGtxMzhfb2pIbm5sWS1fN0ZKV01MWXZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kOGY4Y2YtMTg4YS00YmQwLThkYmEt NDFlN2ZiYTZkNmUxLzEvVjFrb2hxN1A0eWRhcERCN0VVMTFmUkxlUlVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kOGY4Y2YtMTg4YS00YmQwLThkYmEtNDFlN2ZiYTZkNmUx LzEvMHAzSGtxMzhfb2pIbm5sWS1fN0ZKV01MWXZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjAkBAIAATAeAwQALYRUAwQA LY9ZAwQALY9bAwQCVVx4AwQCudm8MBYEAgACMBAwDgMFBioNvMADBQAqDbzCMA0G CSqGSIb3DQEBCwUAA4IBAQAhqJbAuO09OK5/Jq4eDmk3ihWyGfI38dJtMHYjhqpu tvKs4aPB4U0aeGNnRwQHgtPnA+vLVMncFiDrlYoJ5813nQv6CWixVqzyoLNre8hr zaTwFG86YpYpiDfPd2d7kzv5+JlPh6xxWKmpYkwnP4kIfJDwRK+qbDlGAY2vIGa5 PvCRjbvLgOyeu9TPazt7g/HDDXZ8j8V8Fa71yozOnyg75eV9nB7sWRYHlrqEU+hG ufr4ppLS01FKtS+ZrOzpdBC160BTOBTgBPpmXyyFfQXNsVaEG3KaP00ieQoooEA3 +9ZhWibBBBNdVy+f0Sol8B34he4ysrcA8IsOOavhvGU0 -----END CERTIFICATE-----Generated at Sat Dec 6 12:54:01 2025 by rpki-client