This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/N_enHggO1OB_E1bZ0nCsrIa0QZw.roa File: N_enHggO1OB_E1bZ0nCsrIa0QZw.roa (raw, json) Hash identifier: cakCBPgoTe537Hz5MCSOibL50nmNuX01F6XNnO52ezk= Subject key identifier: 37:F7:A7:1E:08:0E:D4:E0:7F:13:56:D9:D2:70:AC:AC:86:B4:41:9C Certificate issuer: /CN=bdd017dd6d7cbfe8266154c1ae434c4cf8b68a57 Certificate serial: 019A96F963332719E9BB1E8F7703CD200CC1 Authority key identifier: BD:D0:17:DD:6D:7C:BF:E8:26:61:54:C1:AE:43:4C:4C:F8:B6:8A:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdAX3W18v-gmYVTBrkNMTPi2ilc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/N_enHggO1OB_E1bZ0nCsrIa0QZw.roa Signing time: Tue 18 Nov 2025 12:38:37 +0000 ROA not before: Tue 18 Nov 2025 12:38:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60213 IP address blocks: 91.145.32.0/19 maxlen: 19 185.247.108.0/22 maxlen: 22 2a01:b6c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.crl rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.mft rsync://rpki.ripe.net/repository/DEFAULT/vdAX3W18v-gmYVTBrkNMTPi2ilc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:f9:63:33:27:19:e9:bb:1e:8f:77:03:cd:20:0c:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd017dd6d7cbfe8266154c1ae434c4cf8b68a57 Validity Not Before: Nov 18 12:38:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=37f7a71e080ed4e07f1356d9d270acac86b4419c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:85:26:7d:7d:f1:cb:73:64:92:60:f4:77:7f: 85:26:27:f2:16:0e:31:32:3d:27:08:a2:b9:cc:7e: 9f:03:d7:f1:dd:cc:c1:d6:9a:86:65:6b:b3:d6:b4: 89:c0:0c:a2:da:ff:4e:2e:ae:1d:1c:5c:e3:c4:b3: c5:09:51:61:05:8b:7f:fd:85:64:2b:27:23:0c:4a: 9a:e2:d2:6c:5a:3f:4e:a7:79:f7:8c:c0:72:0d:77: 77:09:8c:53:b7:6e:7d:74:03:87:ca:11:18:e5:68: 10:dd:64:ad:cd:90:0e:11:a7:5e:6e:6f:c1:c8:61: a0:cb:a0:dd:b2:c3:07:05:2a:30:58:1a:0f:df:c1: 0d:08:bd:3f:48:0e:08:88:20:80:86:72:bc:20:08: dd:28:e5:f2:6d:a3:42:8d:fe:5a:8b:a9:68:1f:b8: 4a:77:b7:40:e4:24:66:a7:a6:48:94:b0:3f:6d:75: e1:74:a6:ca:df:2a:54:d5:a0:34:5e:10:74:03:f3: ee:38:75:43:f0:98:bc:3a:54:a1:91:4b:53:89:6a: f2:d6:b0:6e:4a:28:95:11:53:1c:1c:81:a2:c1:30: 98:a6:35:9e:01:c0:e3:bd:91:c6:ef:78:78:5d:38: c7:79:74:75:29:b9:4c:59:2d:66:89:ec:fe:bb:d2: 02:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F7:A7:1E:08:0E:D4:E0:7F:13:56:D9:D2:70:AC:AC:86:B4:41:9C X509v3 Authority Key Identifier: keyid:BD:D0:17:DD:6D:7C:BF:E8:26:61:54:C1:AE:43:4C:4C:F8:B6:8A:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdAX3W18v-gmYVTBrkNMTPi2ilc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/N_enHggO1OB_E1bZ0nCsrIa0QZw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.145.32.0/19 185.247.108.0/22 IPv6: 2a01:b6c0::/29 Signature Algorithm: sha256WithRSAEncryption 81:93:5d:db:68:a2:b5:80:11:81:95:0b:05:13:00:d3:cb:ca: 86:f4:74:40:14:9b:d9:48:ed:27:28:bd:57:c1:fb:24:d4:34: 3c:88:25:79:ab:fc:dd:7f:38:0a:b6:37:b1:11:d6:63:3c:c4: 2e:68:68:e9:64:83:4b:f0:a9:08:e9:d5:b4:6f:4b:a1:33:9d: 28:24:e1:d0:2d:e4:66:79:3a:0c:30:f3:5a:e2:54:39:51:cc: 16:cb:11:ef:26:5c:ac:80:6e:a1:dd:f1:24:df:92:20:fb:93: 79:6e:86:fa:d5:01:f0:f7:f8:11:53:7f:b2:5e:a9:fe:9b:58: 8a:25:0d:96:e3:78:f4:a4:0b:d3:8b:a3:07:b9:fa:c4:85:67: 23:97:65:6c:3a:5d:ab:e9:f4:a8:f7:86:25:48:04:47:fc:df: 72:16:2f:d8:49:72:64:31:c1:c1:e6:27:83:d6:35:d3:a0:a8: 4a:c9:71:54:f5:4b:9c:fa:2d:ad:40:a0:de:e2:bc:14:76:b9: 45:a5:34:ea:81:4c:60:bf:f8:ed:94:c9:7f:4a:d5:32:d2:42: b5:e0:e0:64:1b:55:d2:d7:24:c4:d6:86:be:dd:ec:fa:f4:f8: 59:da:20:fe:8a:10:a9:eb:20:b1:2c:f4:a9:bb:d8:14:ed:6b: e5:b8:be:a8 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZqW+WMzJxnpux6PdwPNIAzBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZDAxN2RkNmQ3Y2JmZTgyNjYxNTRjMWFlNDM0YzRjZjhi NjhhNTcwHhcNMjUxMTE4MTIzODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2Y3YTcxZTA4MGVkNGUwN2YxMzU2ZDlkMjcwYWNhYzg2YjQ0MTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YUmfX3xy3NkkmD0d3+FJifyFg4x Mj0nCKK5zH6fA9fx3czB1pqGZWuz1rSJwAyi2v9OLq4dHFzjxLPFCVFhBYt//YVk KycjDEqa4tJsWj9Op3n3jMByDXd3CYxTt259dAOHyhEY5WgQ3WStzZAOEadebm/B yGGgy6DdssMHBSowWBoP38ENCL0/SA4IiCCAhnK8IAjdKOXybaNCjf5ai6loH7hK d7dA5CRmp6ZIlLA/bXXhdKbK3ypU1aA0XhB0A/PuOHVD8Ji8OlShkUtTiWry1rBu SiiVEVMcHIGiwTCYpjWeAcDjvZHG73h4XTjHeXR1KblMWS1miez+u9IC3wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDf3px4IDtTgfxNW2dJwrKyGtEGcMB8GA1UdIwQY MBaAFL3QF91tfL/oJmFUwa5DTEz4topXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmRBWDNXMTh2LWdtWVZUQnJrTk1UUGkyaWxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9iZTdiYTAtMTA3Yy00MmI2LTg0ZTUt MzM2MjM4YWI2ZGJhLzEvTl9lbkhnZ08xT0JfRTFiWjBuQ3NySWEwUVp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9iZTdiYTAtMTA3Yy00MmI2LTg0ZTUtMzM2MjM4YWI2ZGJh LzEvdmRBWDNXMTh2LWdtWVZUQnJrTk1UUGkyaWxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFW5EgAwQC ufdsMA0EAgACMAcDBQMqAbbAMA0GCSqGSIb3DQEBCwUAA4IBAQCBk13baKK1gBGB lQsFEwDTy8qG9HRAFJvZSO0nKL1Xwfsk1DQ8iCV5q/zdfzgKtjexEdZjPMQuaGjp ZINL8KkI6dW0b0uhM50oJOHQLeRmeToMMPNa4lQ5UcwWyxHvJlysgG6h3fEk35Ig +5N5bob61QHw9/gRU3+yXqn+m1iKJQ2W43j0pAvTi6MHufrEhWcjl2VsOl2r6fSo 94YlSARH/N9yFi/YSXJkMcHB5ieD1jXToKhKyXFU9Uuc+i2tQKDe4rwUdrlFpTTq gUxgv/jtlMl/StUy0kK14OBkG1XS1yTE1oa+3ez69PhZ2iD+ihCp6yCxLPSpu9gU 7WvluL6o -----END CERTIFICATE-----Generated at Sat Dec 6 10:50:10 2025 by rpki-client