This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/m-RlnQtPx6_RI_Lnqf7rDyvTBgg.roa File: m-RlnQtPx6_RI_Lnqf7rDyvTBgg.roa (raw, json) Hash identifier: ZxwRGcKwGjO6j3xwy4sZfLqCb7aFxqzDDktnMipE1Wg= Subject key identifier: 9B:E4:65:9D:0B:4F:C7:AF:D1:23:F2:E7:A9:FE:EB:0F:2B:D3:06:08 Certificate issuer: /CN=192fc85b01f21a0d685c03001df47ac460937bf1 Certificate serial: 019AC0DD8AE229C540605E9CFABCF4149636 Authority key identifier: 19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/m-RlnQtPx6_RI_Lnqf7rDyvTBgg.roa Signing time: Wed 26 Nov 2025 15:52:15 +0000 ROA not before: Wed 26 Nov 2025 15:52:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12812 IP address blocks: 185.190.28.0/23 maxlen: 23 185.190.28.0/24 maxlen: 24 185.190.29.0/24 maxlen: 24 193.188.128.0/22 maxlen: 24 193.188.128.0/24 maxlen: 24 193.188.129.0/24 maxlen: 24 193.188.130.0/24 maxlen: 24 193.188.131.0/24 maxlen: 24 2a02:f700::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c0:dd:8a:e2:29:c5:40:60:5e:9c:fa:bc:f4:14:96:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=192fc85b01f21a0d685c03001df47ac460937bf1 Validity Not Before: Nov 26 15:52:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9be4659d0b4fc7afd123f2e7a9feeb0f2bd30608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a3:12:4b:91:ba:84:c5:94:63:db:83:ac:dd: e9:78:64:22:6c:fb:3a:3a:21:f0:51:06:34:b3:97: 07:7d:6c:94:9b:40:ee:94:a6:35:56:83:22:dc:04: 31:1c:83:f8:16:74:36:b8:58:12:90:a9:4c:7c:a9: 04:be:bd:69:11:4d:7d:79:4c:1f:45:be:64:17:32: 28:25:ec:88:07:65:aa:1f:9d:17:96:93:2e:2a:b2: 68:e8:a4:c9:24:86:40:c5:a0:f4:d7:b0:73:aa:82: c2:f6:4a:55:f2:90:60:0d:88:ce:6f:de:6e:49:0e: 56:f9:19:d2:ae:00:4f:fd:1b:04:b8:8c:cc:e6:46: 28:28:ff:f0:9c:15:a2:6a:23:7c:4a:c9:e3:81:75: c8:1a:c1:31:68:af:bd:5a:6c:42:8e:24:93:fc:11: 22:e6:44:57:5a:1a:8d:af:e2:46:ce:96:ee:6c:e6: 63:20:01:7d:8d:b9:21:b6:ad:73:b5:bb:8f:80:30: 0d:b5:93:ed:2c:af:a1:df:39:5b:8b:37:27:a0:8f: 2b:f0:76:71:8b:22:c0:a1:05:56:35:7e:2c:4c:2c: 6c:47:5e:bb:16:b6:e8:e5:20:73:75:43:ff:a9:f3: a0:9b:5d:9f:b3:2a:c0:0e:4a:0c:ef:01:c5:bf:f4: b8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E4:65:9D:0B:4F:C7:AF:D1:23:F2:E7:A9:FE:EB:0F:2B:D3:06:08 X509v3 Authority Key Identifier: keyid:19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/m-RlnQtPx6_RI_Lnqf7rDyvTBgg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.190.28.0/23 193.188.128.0/22 IPv6: 2a02:f700::/29 Signature Algorithm: sha256WithRSAEncryption 7c:6a:2d:ed:6c:5e:7d:9e:be:2e:a6:ee:42:69:64:2a:c5:57: c6:08:a4:7d:fc:73:95:e7:6c:55:e6:d1:05:d7:15:23:4f:71: 7c:c8:73:1e:1d:3f:d7:b2:1b:29:25:9e:6b:0a:6c:7b:f1:27: b8:5a:40:a6:55:d3:6d:c5:ae:c5:79:80:df:df:c9:bb:dd:32: 2f:a4:6b:c7:6b:4a:58:3b:43:ad:cc:3e:d4:60:36:03:a6:41: 21:0b:69:57:d1:9b:1c:f4:65:70:5e:0f:f4:0d:27:9f:c7:48: 6b:78:42:3b:77:b5:ca:b4:df:b9:78:e7:fe:d6:32:87:be:ce: e9:32:19:a3:b8:c7:e4:51:40:d8:f9:a3:9a:f5:29:d7:26:9c: 09:a1:01:78:2f:ba:34:36:e1:c7:0d:62:17:eb:b3:90:c5:a9: a9:23:09:c7:d4:b2:b2:5f:c5:be:35:b4:20:5d:0c:13:24:6b: 46:3e:0e:94:67:8c:72:40:f0:f9:98:3a:1d:2f:8a:ed:52:56: c7:e7:00:a7:d6:d4:ea:ed:47:71:18:d9:f1:a0:90:de:18:2e: 9a:24:77:b4:e6:85:d5:c8:fd:f2:b0:0b:c6:da:7c:46:03:0a: 27:07:fa:af:16:75:0b:41:4f:14:5b:63:af:01:79:e7:37:17: ab:c7:f8:77 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZrA3YriKcVAYF6c+rz0FJY2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MmZjODViMDFmMjFhMGQ2ODVjMDMwMDFkZjQ3YWM0NjA5 MzdiZjEwHhcNMjUxMTI2MTU1MjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmU0NjU5ZDBiNGZjN2FmZDEyM2YyZTdhOWZlZWIwZjJiZDMwNjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKMSS5G6hMWUY9uDrN3peGQibPs6 OiHwUQY0s5cHfWyUm0DulKY1VoMi3AQxHIP4FnQ2uFgSkKlMfKkEvr1pEU19eUwf Rb5kFzIoJeyIB2WqH50XlpMuKrJo6KTJJIZAxaD017BzqoLC9kpV8pBgDYjOb95u SQ5W+RnSrgBP/RsEuIzM5kYoKP/wnBWiaiN8SsnjgXXIGsExaK+9WmxCjiST/BEi 5kRXWhqNr+JGzpbubOZjIAF9jbkhtq1ztbuPgDANtZPtLK+h3zlbizcnoI8r8HZx iyLAoQVWNX4sTCxsR167Frbo5SBzdUP/qfOgm12fsyrADkoM7wHFv/S4ZQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJvkZZ0LT8ev0SPy56n+6w8r0wYIMB8GA1UdIwQY MBaAFBkvyFsB8hoNaFwDAB30esRgk3vxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1NfSVd3SHlHZzFvWEFNQUhmUjZ4R0NUZV9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8xODI5MTUtZmVlYy00MTYwLTg4YmYt YjIxMDQ0N2MwN2ZmLzEvbS1SbG5RdFB4Nl9SSV9MbnFmN3JEeXZUQmdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8xODI5MTUtZmVlYy00MTYwLTg4YmYtYjIxMDQ0N2MwN2Zm LzEvR1NfSVd3SHlHZzFvWEFNQUhmUjZ4R0NUZV9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBub4cAwQC wbyAMA0EAgACMAcDBQMqAvcAMA0GCSqGSIb3DQEBCwUAA4IBAQB8ai3tbF59nr4u pu5CaWQqxVfGCKR9/HOV52xV5tEF1xUjT3F8yHMeHT/XshspJZ5rCmx78Se4WkCm VdNtxa7FeYDf38m73TIvpGvHa0pYO0OtzD7UYDYDpkEhC2lX0Zsc9GVwXg/0DSef x0hreEI7d7XKtN+5eOf+1jKHvs7pMhmjuMfkUUDY+aOa9SnXJpwJoQF4L7o0NuHH DWIX67OQxampIwnH1LKyX8W+NbQgXQwTJGtGPg6UZ4xyQPD5mDodL4rtUlbH5wCn 1tTq7UdxGNnxoJDeGC6aJHe05oXVyP3ysAvG2nxGAwonB/qvFnULQU8UW2OvAXnn Nxerx/h3 -----END CERTIFICATE-----Generated at Sat Dec 6 18:05:33 2025 by rpki-client