This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CMRIQH8Z3gsmfK11X0Yt7FBzPg4.roa File: CMRIQH8Z3gsmfK11X0Yt7FBzPg4.roa (raw, json) Hash identifier: V5ZSdWnvmK0T/aEGEmBtNWZc8dJrVrkrhrMMEiAzv8c= Subject key identifier: 08:C4:48:40:7F:19:DE:0B:26:7C:AD:75:5F:46:2D:EC:50:73:3E:0E Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c Certificate serial: 019A838895EC97CAF7ED137276D19BAE553D Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CMRIQH8Z3gsmfK11X0Yt7FBzPg4.roa Signing time: Fri 14 Nov 2025 18:02:37 +0000 ROA not before: Fri 14 Nov 2025 18:02:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 201128 IP address blocks: 185.84.180.0/24 maxlen: 24 185.84.181.0/24 maxlen: 24 185.84.182.0/24 maxlen: 24 194.110.168.0/24 maxlen: 24 194.110.171.0/24 maxlen: 24 2a05:a740::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:83:88:95:ec:97:ca:f7:ed:13:72:76:d1:9b:ae:55:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c Validity Not Before: Nov 14 18:02:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=08c448407f19de0b267cad755f462dec50733e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:92:ba:ee:6f:b6:37:97:b8:0a:27:3c:10:9d: 58:41:28:51:90:f6:05:8c:be:a7:4f:d3:89:49:0f: 54:5c:15:57:34:88:ca:6c:f8:e6:a2:dd:84:ee:ae: 96:cf:98:72:54:90:2f:d9:c0:fd:84:b9:3a:c9:1e: 33:55:5c:8e:f2:e9:84:0b:db:9e:f2:0f:46:5a:66: 4a:fe:fc:10:90:58:ed:43:83:fe:d4:6b:fe:61:7c: ab:fd:72:ac:e8:4c:57:a9:f4:ab:e4:02:3e:f3:ab: 7d:f7:52:ab:e9:ce:15:f4:c7:89:a2:d5:63:56:70: fa:cb:d5:75:9f:ef:37:89:e0:94:35:c5:3e:c9:5b: 68:54:1d:53:49:15:c5:d8:78:5c:6c:6f:e0:04:b2: 9a:58:73:9a:f7:3d:d7:b7:f4:e0:32:9c:c1:72:1e: 06:70:2d:7d:c9:7e:6d:09:49:84:31:0f:ea:5e:f6: d9:a6:5c:e8:3d:02:05:de:43:b6:72:77:46:f5:96: 80:b7:96:38:37:b2:cb:60:58:b9:38:e0:04:b1:af: 75:9b:76:b0:8f:4c:9f:41:f7:4b:44:ab:d6:1b:77: 8f:8b:5b:dc:f1:9d:dc:b5:a3:51:fb:f6:c0:13:9c: bb:4d:61:00:a5:30:ea:34:6b:28:ae:bb:47:26:9e: 54:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C4:48:40:7F:19:DE:0B:26:7C:AD:75:5F:46:2D:EC:50:73:3E:0E X509v3 Authority Key Identifier: keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CMRIQH8Z3gsmfK11X0Yt7FBzPg4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.84.180.0-185.84.182.255 194.110.168.0/24 194.110.171.0/24 IPv6: 2a05:a740::/29 Signature Algorithm: sha256WithRSAEncryption b7:ef:f4:e6:1e:de:b8:56:38:92:22:d0:1a:78:d1:51:93:3e: 2d:3f:f4:81:be:46:1c:09:7e:0d:2f:c5:ad:e3:32:95:ce:54: 13:71:93:57:77:ae:2c:96:5a:21:f2:f2:70:d9:c9:a8:6c:3f: 5c:4d:1f:ab:cf:f9:e4:56:ee:fd:e0:2c:fc:66:52:71:44:f2: 57:af:f6:56:bf:0c:a7:0e:bf:1f:63:7f:73:8f:d6:73:b3:86: b6:1a:fc:74:fc:7a:9f:70:08:e3:64:da:3f:fd:9f:79:0d:ae: 1c:74:7f:b0:a9:66:06:94:fd:b5:2b:43:28:d6:c2:86:49:ec: 80:c0:91:42:c2:78:82:86:47:25:49:75:ac:cb:46:4f:a9:57: f1:79:8a:7f:d0:0f:90:bd:ee:90:ff:af:3b:ed:36:c0:4f:ee: 93:31:69:42:ac:09:7a:cc:4b:27:ee:15:2e:8b:6e:52:af:30: 0b:e2:94:76:61:15:fc:98:24:25:97:6d:71:d2:8e:43:53:3f: ff:e2:6f:a6:17:48:cb:0c:5b:fa:ca:1f:d3:bb:ed:2b:fa:d0: cd:f8:c9:5e:2c:31:9c:6f:03:62:ac:45:c6:2b:5e:16:47:03: c2:a7:c5:1a:5e:03:d6:da:62:c6:97:b0:3e:ab:ca:7d:7a:9f: e8:7a:98:e9 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZqDiJXsl8r37RNydtGbrlU9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MjUzODg2YTAyNTBhMDRlYzY5YmUwMGJiZjg0MzNjMmYw MTRiN2MwHhcNMjUxMTE0MTgwMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGM0NDg0MDdmMTlkZTBiMjY3Y2FkNzU1ZjQ2MmRlYzUwNzMzZTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5K67m+2N5e4Cic8EJ1YQShRkPYF jL6nT9OJSQ9UXBVXNIjKbPjmot2E7q6Wz5hyVJAv2cD9hLk6yR4zVVyO8umEC9ue 8g9GWmZK/vwQkFjtQ4P+1Gv+YXyr/XKs6ExXqfSr5AI+86t991Kr6c4V9MeJotVj VnD6y9V1n+83ieCUNcU+yVtoVB1TSRXF2HhcbG/gBLKaWHOa9z3Xt/TgMpzBch4G cC19yX5tCUmEMQ/qXvbZplzoPQIF3kO2cndG9ZaAt5Y4N7LLYFi5OOAEsa91m3aw j0yfQfdLRKvWG3ePi1vc8Z3ctaNR+/bAE5y7TWEApTDqNGsorrtHJp5UwQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFAjESEB/Gd4LJnytdV9GLexQcz4OMB8GA1UdIwQY MBaAFAklOIagJQoE7Gm+ALv4QzwvAUt8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zNmY4M2UtNmJlNi00MmM1LTgzODAt MTE0YWQ0MWNmMzMxLzEvQ01SSVFIOFozZ3NtZksxMVgwWXQ3RkJ6UGc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8zNmY4M2UtNmJlNi00MmM1LTgzODAtMTE0YWQ0MWNmMzMx LzEvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaMAwDBAK5VLQD BAC5VLYDBADCbqgDBADCbqswDQQCAAIwBwMFAyoFp0AwDQYJKoZIhvcNAQELBQAD ggEBALfv9OYe3rhWOJIi0Bp40VGTPi0/9IG+RhwJfg0vxa3jMpXOVBNxk1d3riyW WiHy8nDZyahsP1xNH6vP+eRW7v3gLPxmUnFE8lev9la/DKcOvx9jf3OP1nOzhrYa /HT8ep9wCONk2j/9n3kNrhx0f7CpZgaU/bUrQyjWwoZJ7IDAkULCeIKGRyVJdazL Rk+pV/F5in/QD5C97pD/rzvtNsBP7pMxaUKsCXrMSyfuFS6LblKvMAvilHZhFfyY JCWXbXHSjkNTP//ib6YXSMsMW/rKH9O77Sv60M34yV4sMZxvA2KsRcYrXhZHA8Kn xRpeA9baYsaXsD6ryn16n+h6mOk= -----END CERTIFICATE-----Generated at Sat Dec 6 12:43:17 2025 by rpki-client