This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/AY_WLc-0HtZ3hixtwdogLmPKXhE.roa File: AY_WLc-0HtZ3hixtwdogLmPKXhE.roa (raw, json) Hash identifier: fnYmgKRqcujwjHKJHjsTwufzR5xIWY84VoLFf58blrI= Subject key identifier: 01:8F:D6:2D:CF:B4:1E:D6:77:86:2C:6D:C1:DA:20:2E:63:CA:5E:11 Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e Certificate serial: 019AA6361C9E1CD9FAE1B7C8ABEC02D1F82C Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/AY_WLc-0HtZ3hixtwdogLmPKXhE.roa Signing time: Fri 21 Nov 2025 11:39:15 +0000 ROA not before: Fri 21 Nov 2025 11:39:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41343 IP address blocks: 185.110.212.0/22 maxlen: 24 185.111.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:36:1c:9e:1c:d9:fa:e1:b7:c8:ab:ec:02:d1:f8:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e Validity Not Before: Nov 21 11:39:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=018fd62dcfb41ed677862c6dc1da202e63ca5e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7c:a3:2e:bd:2e:8e:06:2c:7d:bb:e9:db:a0: fc:25:01:20:35:1a:36:db:67:4e:80:df:11:14:06: fd:92:6c:f3:f7:da:97:e2:3b:b6:41:e9:98:9e:67: 4b:c9:3e:06:b8:ed:78:47:87:77:17:97:98:45:d7: bb:f3:29:5d:35:0c:14:83:2f:26:db:d1:01:2a:95: 4e:c7:65:d5:dc:b7:e2:1a:4c:7c:20:c0:01:93:31: d4:65:82:6b:4a:c8:0d:62:13:7d:e4:4d:bb:94:e1: 66:9f:9a:a7:8b:2f:c2:75:f5:b5:db:cb:12:b8:5d: e5:68:d5:93:20:e8:9a:54:30:11:70:84:a2:e3:2e: 83:99:41:0a:6d:5c:cd:98:a6:9e:fa:d1:db:27:1a: 3e:b0:4a:a1:07:7c:60:84:d0:3e:ac:b0:19:7b:32: 3e:ab:55:56:1f:d8:66:a0:17:67:18:76:93:53:9f: a6:3a:f2:08:31:94:9c:f4:03:cc:a4:a6:31:59:23: d0:aa:69:2c:f8:c7:9f:62:3d:0a:05:ff:25:b3:d1: 3c:9b:64:69:2c:2d:10:96:c7:ac:9f:6b:75:c4:bf: 2b:fd:07:66:73:d8:d0:de:cf:a9:fb:37:7a:76:c3: 94:a5:b5:63:96:2e:0e:f5:15:ca:b3:ac:78:ba:6f: cc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8F:D6:2D:CF:B4:1E:D6:77:86:2C:6D:C1:DA:20:2E:63:CA:5E:11 X509v3 Authority Key Identifier: keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/AY_WLc-0HtZ3hixtwdogLmPKXhE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.110.212.0/22 185.111.0.0/22 Signature Algorithm: sha256WithRSAEncryption b8:88:08:f8:18:26:eb:95:52:37:d2:bb:a2:53:90:e2:f7:64: 9b:03:4a:25:96:c1:44:c9:f2:4a:84:2b:25:15:8a:25:77:56: 35:4d:c5:2f:db:0a:47:7f:08:23:c2:b9:92:40:e6:c5:20:2a: 18:48:69:4b:d2:db:9d:cf:04:a9:91:32:5c:80:7c:62:d1:b7: a4:b0:48:e1:94:29:e0:a7:6e:b8:98:c0:c9:6a:94:6c:28:6a: e3:8a:d9:e5:74:73:28:9c:a5:93:fb:f1:10:6c:3a:e6:3b:65: 13:d2:50:66:ab:d0:a8:7f:27:78:27:08:f2:7b:f6:bd:dd:d3: 39:c7:9f:89:9b:36:ca:6a:1d:aa:f0:dd:fb:c2:c6:ae:fe:59: 91:77:89:b7:7d:59:10:90:c3:fd:bc:44:ef:95:12:9b:11:2e: d7:44:a6:89:cf:4c:37:8a:b4:ae:6a:3f:54:4f:0d:17:f7:68: e5:99:ec:78:a1:47:94:09:56:6a:55:4a:f2:73:d0:cd:e2:f9: 26:33:c9:2a:d4:49:78:19:2c:20:a0:8e:cf:26:49:88:ea:94: 4a:af:5b:ab:7c:0c:ec:17:60:c4:1b:eb:50:48:5f:4a:02:2d: 34:ff:b3:f3:78:0a:f1:97:c5:78:13:eb:65:3f:1f:37:8b:b7: 17:25:3a:4d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqmNhyeHNn64bfIq+wC0fgsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0 NjVjMmUwHhcNMjUxMTIxMTEzOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMThmZDYyZGNmYjQxZWQ2Nzc4NjJjNmRjMWRhMjAyZTYzY2E1ZTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33yjLr0ujgYsfbvp26D8JQEgNRo2 22dOgN8RFAb9kmzz99qX4ju2QemYnmdLyT4GuO14R4d3F5eYRde78yldNQwUgy8m 29EBKpVOx2XV3LfiGkx8IMABkzHUZYJrSsgNYhN95E27lOFmn5qniy/CdfW128sS uF3laNWTIOiaVDARcISi4y6DmUEKbVzNmKae+tHbJxo+sEqhB3xghNA+rLAZezI+ q1VWH9hmoBdnGHaTU5+mOvIIMZSc9APMpKYxWSPQqmks+MefYj0KBf8ls9E8m2Rp LC0Qlsesn2t1xL8r/Qdmc9jQ3s+p+zd6dsOUpbVjli4O9RXKs6x4um/MBQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAGP1i3PtB7Wd4YsbcHaIC5jyl4RMB8GA1UdIwQY MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt OTE2NDZiZjAxNTNkLzEvQVlfV0xjLTBIdFozaGl4dHdkb2dMbVBLWGhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuW7UAwQC uW8AMA0GCSqGSIb3DQEBCwUAA4IBAQC4iAj4GCbrlVI30ruiU5Di92SbA0ollsFE yfJKhCslFYold1Y1TcUv2wpHfwgjwrmSQObFICoYSGlL0tudzwSpkTJcgHxi0bek sEjhlCngp264mMDJapRsKGrjitnldHMonKWT+/EQbDrmO2UT0lBmq9Cofyd4Jwjy e/a93dM5x5+JmzbKah2q8N37wsau/lmRd4m3fVkQkMP9vETvlRKbES7XRKaJz0w3 irSuaj9UTw0X92jlmex4oUeUCVZqVUryc9DN4vkmM8kq1El4GSwgoI7PJkmI6pRK r1urfAzsF2DEG+tQSF9KAi00/7PzeArxl8V4E+tlPx83i7cXJTpN -----END CERTIFICATE-----Generated at Sat Dec 6 19:00:18 2025 by rpki-client