This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/J59u2BmsQF-lPgsXDgML3YW9EYg.roa File: J59u2BmsQF-lPgsXDgML3YW9EYg.roa (raw, json) Hash identifier: bjXPi4LmjoKUaLE0TDsNz6nSI8OxQWrWRYgOLdLvs8M= Subject key identifier: 27:9F:6E:D8:19:AC:40:5F:A5:3E:0B:17:0E:03:0B:DD:85:BD:11:88 Certificate issuer: /CN=62f4b147ab0efebf3e46e6dea985d751877cbb4e Certificate serial: 019ACC352D689FB96E7CD56DDD8308A4CD37 Authority key identifier: 62:F4:B1:47:AB:0E:FE:BF:3E:46:E6:DE:A9:85:D7:51:87:7C:BB:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/J59u2BmsQF-lPgsXDgML3YW9EYg.roa Signing time: Fri 28 Nov 2025 20:43:48 +0000 ROA not before: Fri 28 Nov 2025 20:43:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203543 IP address blocks: 185.194.172.0/24 maxlen: 24 185.194.173.0/24 maxlen: 24 185.194.174.0/24 maxlen: 24 185.194.175.0/24 maxlen: 24 194.156.236.0/24 maxlen: 24 194.156.237.0/24 maxlen: 24 194.156.238.0/24 maxlen: 24 194.156.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.crl rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cc:35:2d:68:9f:b9:6e:7c:d5:6d:dd:83:08:a4:cd:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62f4b147ab0efebf3e46e6dea985d751877cbb4e Validity Not Before: Nov 28 20:43:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=279f6ed819ac405fa53e0b170e030bdd85bd1188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:94:db:6c:0f:81:73:da:50:64:87:e4:5e:40: f1:16:c1:60:99:6d:f7:64:3d:39:ab:a6:b9:ae:0c: a0:82:98:7c:ca:ea:60:df:4b:04:3d:ae:a8:24:4a: 30:df:7d:e9:fb:df:98:b2:b9:da:bc:65:b3:5c:e3: c3:d9:08:55:e8:1d:ce:f2:97:55:93:f3:54:fb:ab: 48:36:05:2e:c9:f0:2a:e3:9a:da:73:77:fe:1f:b4: a2:93:7b:bb:f4:04:2e:79:6e:04:83:5a:ac:09:df: de:db:dc:b5:4a:0a:59:42:6e:4d:f7:c9:64:00:fc: b2:9a:22:7e:f9:f7:c6:24:96:7e:aa:b8:3b:39:15: 89:61:42:e6:94:1a:d8:d6:e4:41:a6:48:ea:38:c9: 9c:63:78:31:8e:d8:7a:87:fd:ac:21:9d:03:b1:1b: a2:26:d0:5d:e0:62:3a:00:c4:33:c8:74:df:ec:dd: 1b:c4:0c:32:70:ec:f2:f1:21:31:d9:e9:9f:0c:f7: e4:5c:1c:b6:bd:16:13:25:66:b8:69:6a:41:24:b2: f3:e4:3a:d3:63:7f:60:1d:f5:78:fa:7f:09:83:b8: 79:d6:1b:c2:c5:c1:6b:57:c5:0c:04:19:1b:41:2c: 83:38:f5:ff:02:e4:80:2e:d9:29:f2:ad:09:6b:5b: 53:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:9F:6E:D8:19:AC:40:5F:A5:3E:0B:17:0E:03:0B:DD:85:BD:11:88 X509v3 Authority Key Identifier: keyid:62:F4:B1:47:AB:0E:FE:BF:3E:46:E6:DE:A9:85:D7:51:87:7C:BB:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/J59u2BmsQF-lPgsXDgML3YW9EYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.194.172.0/22 194.156.236.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:cb:ed:85:9e:0f:70:74:61:b0:21:8b:92:79:eb:d2:ca:c4: 2f:40:4f:67:5a:3f:91:c4:fd:f4:eb:a2:39:49:4b:19:d1:34: 62:6d:e0:e6:2f:a7:f9:e3:ce:99:76:5f:64:b4:c3:06:5f:8b: 8a:1a:73:bb:eb:4f:10:a3:b2:96:3b:1d:05:f6:fc:a6:b3:23: d1:94:df:df:a1:dd:93:95:2b:c1:de:f4:48:24:87:18:e8:f0: bd:2d:68:f8:4d:03:4f:c7:41:57:9b:52:c7:4f:db:25:5a:bc: fa:88:4e:ab:ba:7a:fa:6c:40:45:08:a4:a3:4e:22:4a:01:b0: 9d:59:1a:d0:c9:cf:8b:64:d3:be:f5:77:45:7f:a7:11:56:9d: c6:07:ce:59:c5:3b:a3:2c:41:97:79:69:39:13:d3:c9:60:59: bb:64:75:d8:3a:40:94:d3:77:51:6a:ed:f8:9c:d2:2e:8c:9e: 5a:61:c2:6a:e8:a5:48:4b:2d:61:f3:40:05:63:69:92:e5:62: 32:c8:fd:ff:e1:92:09:da:18:e5:33:4f:85:17:ba:87:64:d9: 3e:a2:74:57:ad:ce:7f:95:64:64:69:6a:58:9f:04:3b:35:fa: 56:07:6c:5d:31:36:4a:fa:aa:9e:df:4e:5b:31:6c:8c:fe:c5: 96:63:42:70 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrMNS1on7lufNVt3YMIpM03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZjRiMTQ3YWIwZWZlYmYzZTQ2ZTZkZWE5ODVkNzUxODc3 Y2JiNGUwHhcNMjUxMTI4MjA0MzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzlmNmVkODE5YWM0MDVmYTUzZTBiMTcwZTAzMGJkZDg1YmQxMTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5TbbA+Bc9pQZIfkXkDxFsFgmW33 ZD05q6a5rgyggph8yupg30sEPa6oJEow333p+9+YsrnavGWzXOPD2QhV6B3O8pdV k/NU+6tINgUuyfAq45rac3f+H7Sik3u79AQueW4Eg1qsCd/e29y1SgpZQm5N98lk APyymiJ++ffGJJZ+qrg7ORWJYULmlBrY1uRBpkjqOMmcY3gxjth6h/2sIZ0DsRui JtBd4GI6AMQzyHTf7N0bxAwycOzy8SEx2emfDPfkXBy2vRYTJWa4aWpBJLLz5DrT Y39gHfV4+n8Jg7h51hvCxcFrV8UMBBkbQSyDOPX/AuSALtkp8q0Ja1tTuwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCefbtgZrEBfpT4LFw4DC92FvRGIMB8GA1UdIwQY MBaAFGL0sUerDv6/Pkbm3qmF11GHfLtOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXZTeFI2c09fcjgtUnViZXFZWFhVWWQ4dTA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84ZTZlNWEtYWVjMC00MGFkLWE2Mjgt ZGFiM2E5ZjAzMGRjLzEvSjU5dTJCbXNRRi1sUGdzWERnTUwzWVc5RVlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy84ZTZlNWEtYWVjMC00MGFkLWE2MjgtZGFiM2E5ZjAzMGRj LzEvWXZTeFI2c09fcjgtUnViZXFZWFhVWWQ4dTA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCucKsAwQC wpzsMA0GCSqGSIb3DQEBCwUAA4IBAQAby+2Fng9wdGGwIYuSeevSysQvQE9nWj+R xP3066I5SUsZ0TRibeDmL6f5486Zdl9ktMMGX4uKGnO7608Qo7KWOx0F9vymsyPR lN/fod2TlSvB3vRIJIcY6PC9LWj4TQNPx0FXm1LHT9slWrz6iE6runr6bEBFCKSj TiJKAbCdWRrQyc+LZNO+9XdFf6cRVp3GB85ZxTujLEGXeWk5E9PJYFm7ZHXYOkCU 03dRau34nNIujJ5aYcJq6KVISy1h80AFY2mS5WIyyP3/4ZIJ2hjlM0+FF7qHZNk+ onRXrc5/lWRkaWpYnwQ7NfpWB2xdMTZK+qqe305bMWyM/sWWY0Jw -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:06 2025 by rpki-client