This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/Jcq5yvwEtHQoD_1jYEKNyZCWXLM.roa File: Jcq5yvwEtHQoD_1jYEKNyZCWXLM.roa (raw, json) Hash identifier: kShwVd7RPed1Q8cEpgFDRaXOy2m8MWShMYQnb7UjDXw= Subject key identifier: 25:CA:B9:CA:FC:04:B4:74:28:0F:FD:63:60:42:8D:C9:90:96:5C:B3 Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 019AC64AE65CA44AE51CFE7C465D8B6FDAA9 Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/Jcq5yvwEtHQoD_1jYEKNyZCWXLM.roa Signing time: Thu 27 Nov 2025 17:09:48 +0000 ROA not before: Thu 27 Nov 2025 17:09:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13213 IP address blocks: 80.174.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c6:4a:e6:5c:a4:4a:e5:1c:fe:7c:46:5d:8b:6f:da:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Nov 27 17:09:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=25cab9cafc04b474280ffd6360428dc990965cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4d:08:02:82:e5:f0:0e:84:d7:5a:cf:36:7b: 8c:59:49:82:74:4f:f8:81:d0:d9:9a:d1:67:64:ff: ef:b6:f3:55:92:e5:56:13:0c:88:b7:18:57:a2:7d: 26:64:7e:e7:f4:b4:be:41:e8:a2:79:bf:be:10:c6: e9:0e:bc:c4:17:4f:a4:e0:74:76:ee:1c:15:97:60: 39:ee:6f:98:a3:12:e6:66:41:6e:3a:89:4d:a3:01: 63:94:ad:f8:e8:39:22:91:81:10:80:4d:a6:d5:d5: 31:83:38:01:5b:7a:4f:a8:e0:d8:9f:2b:c5:2f:00: 43:92:f9:1e:12:50:3b:d9:e8:97:0f:76:c5:e6:fc: 0c:6e:7f:26:13:3b:1a:ea:63:6e:29:72:9b:b3:d4: ad:f8:29:25:4b:ff:dd:99:51:76:19:ba:79:b9:06: 12:d8:88:da:1c:d0:50:48:5c:57:05:45:6d:ba:9e: 04:c9:81:f0:10:60:4d:3c:be:ab:65:d3:86:af:45: 37:9c:b5:4d:12:98:8d:fe:8a:b6:fc:b6:c8:cb:b7: b3:9f:13:6a:45:93:10:4c:60:47:4d:a6:4d:47:79: d5:32:3e:5f:d4:67:8f:c1:56:33:41:f2:16:ad:98: e0:b8:ec:72:d0:b2:2d:1d:8f:e6:94:97:a3:39:7c: cc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CA:B9:CA:FC:04:B4:74:28:0F:FD:63:60:42:8D:C9:90:96:5C:B3 X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/Jcq5yvwEtHQoD_1jYEKNyZCWXLM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.174.249.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:8c:38:fd:5b:db:08:fd:de:31:7d:ec:ff:94:03:1e:99:38: 5d:f5:7d:1f:f2:fb:9c:da:e4:6b:d7:70:5f:01:d8:bf:00:d3: de:f2:e3:62:f8:a0:a6:42:61:88:3d:e9:92:cb:65:a2:17:5c: a8:6c:fa:a3:84:27:15:00:a7:0b:1f:e2:f2:a5:d1:e4:fe:e8: cb:fe:78:82:e0:da:81:07:a1:72:83:d5:93:f9:89:3d:57:5a: 11:f1:a0:b6:d2:c2:85:1f:ac:4b:93:46:56:e8:2d:dd:b5:a8: 72:65:3b:6d:3e:70:cd:7d:7b:0c:66:fe:b9:f1:a6:05:9e:b1: 86:2c:9f:ed:53:64:60:ca:9b:57:35:2e:54:bf:1f:0e:66:35: 4d:55:bd:00:83:e0:c2:d5:1f:99:80:e2:73:28:40:b7:97:98: 9e:35:6b:d0:44:6c:5b:6f:3d:43:c0:af:1a:03:7e:bb:42:b1: 8e:d7:a7:f7:8c:78:9c:f4:98:eb:e0:24:fd:c6:3f:8d:69:82: 05:e1:ff:58:8c:46:6e:42:a6:22:0b:0f:20:76:db:31:dd:d8: 18:da:34:a8:a0:2d:52:a3:9c:46:3f:b2:75:4b:8b:9d:60:fa: 6c:97:e7:68:a9:e4:73:09:74:db:13:4c:d4:2a:86:21:9f:50: ba:e5:47:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrGSuZcpErlHP58Rl2Lb9qpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjUxMTI3MTcwOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWNhYjljYWZjMDRiNDc0MjgwZmZkNjM2MDQyOGRjOTkwOTY1Y2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU0IAoLl8A6E11rPNnuMWUmCdE/4 gdDZmtFnZP/vtvNVkuVWEwyItxhXon0mZH7n9LS+Qeiieb++EMbpDrzEF0+k4HR2 7hwVl2A57m+YoxLmZkFuOolNowFjlK346DkikYEQgE2m1dUxgzgBW3pPqODYnyvF LwBDkvkeElA72eiXD3bF5vwMbn8mEzsa6mNuKXKbs9St+CklS//dmVF2Gbp5uQYS 2IjaHNBQSFxXBUVtup4EyYHwEGBNPL6rZdOGr0U3nLVNEpiN/oq2/LbIy7eznxNq RZMQTGBHTaZNR3nVMj5f1GePwVYzQfIWrZjguOxy0LItHY/mlJejOXzM9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCXKucr8BLR0KA/9Y2BCjcmQllyzMB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEvSmNxNXl2d0V0SFFvRF8xallFS055WkNXWExNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUK75MA0G CSqGSIb3DQEBCwUAA4IBAQAPjDj9W9sI/d4xfez/lAMemThd9X0f8vuc2uRr13Bf Adi/ANPe8uNi+KCmQmGIPemSy2WiF1yobPqjhCcVAKcLH+LypdHk/ujL/niC4NqB B6Fyg9WT+Yk9V1oR8aC20sKFH6xLk0ZW6C3dtahyZTttPnDNfXsMZv658aYFnrGG LJ/tU2RgyptXNS5Uvx8OZjVNVb0Ag+DC1R+ZgOJzKEC3l5ieNWvQRGxbbz1DwK8a A367QrGO16f3jHic9Jjr4CT9xj+NaYIF4f9YjEZuQqYiCw8gdtsx3dgY2jSooC1S o5xGP7J1S4udYPpsl+doqeRzCXTbE0zUKoYhn1C65UcI -----END CERTIFICATE-----Generated at Sat Dec 6 19:45:37 2025 by rpki-client