This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dfbce8-5437-49d7-a7f9-c6ddeb494735/1/cpO-3YGSbutgQmx_vuZqosXyZC0.roa File: cpO-3YGSbutgQmx_vuZqosXyZC0.roa (raw, json) Hash identifier: oUU6w2RYiSZAkqy6t99fzpKQ3+UD5p93LlQ8mpQ7YRk= Subject key identifier: 72:93:BE:DD:81:92:6E:EB:60:42:6C:7F:BE:E6:6A:A2:C5:F2:64:2D Certificate issuer: /CN=7735b70dca270fcb8e4b9092b7200364138f5df1 Certificate serial: 019A96D3D9A1299F6D1FC9E391D701801654 Authority key identifier: 77:35:B7:0D:CA:27:0F:CB:8E:4B:90:92:B7:20:03:64:13:8F:5D:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzW3DconD8uOS5CStyADZBOPXfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dfbce8-5437-49d7-a7f9-c6ddeb494735/1/cpO-3YGSbutgQmx_vuZqosXyZC0.roa Signing time: Tue 18 Nov 2025 11:57:37 +0000 ROA not before: Tue 18 Nov 2025 11:57:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205357 IP address blocks: 185.219.248.0/24 maxlen: 24 185.219.249.0/24 maxlen: 24 185.219.250.0/24 maxlen: 24 185.219.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dfbce8-5437-49d7-a7f9-c6ddeb494735/1/dzW3DconD8uOS5CStyADZBOPXfE.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/dfbce8-5437-49d7-a7f9-c6ddeb494735/1/dzW3DconD8uOS5CStyADZBOPXfE.mft rsync://rpki.ripe.net/repository/DEFAULT/dzW3DconD8uOS5CStyADZBOPXfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:d3:d9:a1:29:9f:6d:1f:c9:e3:91:d7:01:80:16:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7735b70dca270fcb8e4b9092b7200364138f5df1 Validity Not Before: Nov 18 11:57:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7293bedd81926eeb60426c7fbee66aa2c5f2642d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f8:08:87:b0:5d:1b:7b:30:e4:d3:4c:79:81: 94:eb:93:30:bc:e1:6f:cb:c2:32:2b:63:e6:e8:22: 40:40:1c:54:39:0e:ff:42:40:5b:05:cd:94:d2:dd: c9:81:77:b1:0f:95:f9:43:64:04:0b:62:97:b8:80: a3:11:02:29:9c:89:b8:38:19:b8:f3:d6:23:67:9e: 69:d0:ab:7d:01:0b:71:75:04:15:b5:46:5d:24:64: 66:f5:0d:d2:87:4c:d2:25:19:25:cb:fb:aa:03:e3: 77:a3:dd:b6:d4:e4:b5:08:84:09:de:53:ed:3c:03: 9f:c5:8c:af:85:18:ee:be:03:5b:91:a7:13:a4:29: 37:1e:30:35:dd:fe:f3:0f:6e:1c:e5:e3:6f:55:e3: 9e:11:b8:2f:94:ac:d4:4c:2d:29:c3:f5:91:92:d8: 4a:82:7e:91:a4:68:7c:74:83:ef:9e:78:a0:ea:f9: 54:f4:c0:9f:b5:02:bc:b7:1a:97:91:45:ca:e9:02: c4:d4:d2:4b:fb:12:91:86:c6:be:e2:73:4e:63:e2: 5c:51:4e:fc:d5:ac:0a:dd:0b:92:63:ef:ff:b6:f2: 84:2b:50:77:1a:4e:7c:9e:2d:70:d1:8e:3f:87:b2: bd:33:44:8e:c9:c8:42:36:06:ed:34:be:15:b9:db: 3f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:93:BE:DD:81:92:6E:EB:60:42:6C:7F:BE:E6:6A:A2:C5:F2:64:2D X509v3 Authority Key Identifier: keyid:77:35:B7:0D:CA:27:0F:CB:8E:4B:90:92:B7:20:03:64:13:8F:5D:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzW3DconD8uOS5CStyADZBOPXfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dfbce8-5437-49d7-a7f9-c6ddeb494735/1/cpO-3YGSbutgQmx_vuZqosXyZC0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dfbce8-5437-49d7-a7f9-c6ddeb494735/1/dzW3DconD8uOS5CStyADZBOPXfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.219.248.0/22 Signature Algorithm: sha256WithRSAEncryption cc:2c:ee:f6:a6:29:19:85:df:b7:89:bb:3a:60:f0:b8:70:95: e6:a2:54:d5:4b:8a:42:6d:07:80:65:69:2f:83:69:0e:94:da: 14:13:2f:65:46:cc:b4:23:8e:06:be:34:3f:30:80:c9:31:d1: c8:34:d7:7e:90:95:08:5c:db:04:06:4e:d9:52:9f:74:f6:f7: 3f:69:09:72:02:d7:54:23:e8:ca:0c:48:c4:e8:04:e5:c8:d1: 11:8a:d1:27:76:2a:0e:c9:17:e8:d7:8b:9e:b8:67:08:b0:a8: df:f0:d1:5f:db:6a:e9:5b:9b:bf:98:a7:58:1e:cc:c9:19:7f: 6a:49:ea:50:00:53:d2:2d:61:1b:35:92:94:27:dd:9e:36:85: c8:06:02:85:c5:61:26:07:a9:82:59:83:bc:3c:24:3d:7c:d3: d8:80:87:77:22:a9:4b:fa:2f:f2:f5:61:bd:e7:81:97:cc:80: e6:a8:49:c8:96:c7:60:c6:ff:c3:76:a1:c6:53:4a:1a:7e:0a: d5:7f:ec:6f:d9:d7:f9:44:15:e6:ea:f3:6d:27:11:ab:e9:25: 0b:20:5d:91:f2:b6:72:75:a6:ea:13:9c:45:b0:3c:68:8c:b1: be:e4:90:5e:df:bc:24:c2:7b:5d:52:df:2b:bc:42:a2:1d:84: 9a:84:0b:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqW09mhKZ9tH8njkdcBgBZUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MzViNzBkY2EyNzBmY2I4ZTRiOTA5MmI3MjAwMzY0MTM4 ZjVkZjEwHhcNMjUxMTE4MTE1NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjkzYmVkZDgxOTI2ZWViNjA0MjZjN2ZiZWU2NmFhMmM1ZjI2NDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vgIh7BdG3sw5NNMeYGU65MwvOFv y8IyK2Pm6CJAQBxUOQ7/QkBbBc2U0t3JgXexD5X5Q2QEC2KXuICjEQIpnIm4OBm4 89YjZ55p0Kt9AQtxdQQVtUZdJGRm9Q3Sh0zSJRkly/uqA+N3o9221OS1CIQJ3lPt PAOfxYyvhRjuvgNbkacTpCk3HjA13f7zD24c5eNvVeOeEbgvlKzUTC0pw/WRkthK gn6RpGh8dIPvnnig6vlU9MCftQK8txqXkUXK6QLE1NJL+xKRhsa+4nNOY+JcUU78 1awK3QuSY+//tvKEK1B3Gk58ni1w0Y4/h7K9M0SOychCNgbtNL4Vuds/vQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHKTvt2Bkm7rYEJsf77maqLF8mQtMB8GA1UdIwQY MBaAFHc1tw3KJw/LjkuQkrcgA2QTj13xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHpXM0Rjb25EOHVPUzVDU3R5QURaQk9QWGZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZmJjZTgtNTQzNy00OWQ3LWE3Zjkt YzZkZGViNDk0NzM1LzEvY3BPLTNZR1NidXRnUW14X3Z1WnFvc1h5WkMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9kZmJjZTgtNTQzNy00OWQ3LWE3ZjktYzZkZGViNDk0NzM1 LzEvZHpXM0Rjb25EOHVPUzVDU3R5QURaQk9QWGZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudv4MA0G CSqGSIb3DQEBCwUAA4IBAQDMLO72pikZhd+3ibs6YPC4cJXmolTVS4pCbQeAZWkv g2kOlNoUEy9lRsy0I44GvjQ/MIDJMdHINNd+kJUIXNsEBk7ZUp909vc/aQlyAtdU I+jKDEjE6ATlyNERitEndioOyRfo14ueuGcIsKjf8NFf22rpW5u/mKdYHszJGX9q SepQAFPSLWEbNZKUJ92eNoXIBgKFxWEmB6mCWYO8PCQ9fNPYgId3IqlL+i/y9WG9 54GXzIDmqEnIlsdgxv/DdqHGU0oafgrVf+xv2df5RBXm6vNtJxGr6SULIF2R8rZy dabqE5xFsDxojLG+5JBe37wkwntdUt8rvEKiHYSahAua -----END CERTIFICATE-----Generated at Sat Dec 6 23:30:59 2025 by rpki-client