This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/2D749NTS5rsUM88WTokU4j35DFk.roa File: 2D749NTS5rsUM88WTokU4j35DFk.roa (raw, json) Hash identifier: OdYrjeQoE7Y6O0peufvBGoL7G9BCb/mFSDo6H0HN/ds= Subject key identifier: D8:3E:F8:F4:D4:D2:E6:BB:14:33:CF:16:4E:89:14:E2:3D:F9:0C:59 Certificate issuer: /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533 Certificate serial: 019A822E845F4E93ADF21589B52D4E4AB3A5 Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/2D749NTS5rsUM88WTokU4j35DFk.roa Signing time: Fri 14 Nov 2025 11:44:37 +0000 ROA not before: Fri 14 Nov 2025 11:44:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211381 IP address blocks: 5.8.248.0/24 maxlen: 24 62.233.53.0/24 maxlen: 24 77.220.212.0/24 maxlen: 24 77.220.213.0/24 maxlen: 24 109.107.157.0/24 maxlen: 24 178.159.43.0/24 maxlen: 24 185.93.6.0/24 maxlen: 24 185.201.252.0/24 maxlen: 24 185.229.251.0/24 maxlen: 24 185.235.128.0/24 maxlen: 24 185.237.165.0/24 maxlen: 24 185.241.61.0/24 maxlen: 24 185.244.218.0/24 maxlen: 24 185.244.219.0/24 maxlen: 24 185.250.207.0/24 maxlen: 24 185.251.25.0/24 maxlen: 24 193.3.168.0/24 maxlen: 24 193.169.105.0/24 maxlen: 24 194.15.46.0/24 maxlen: 24 194.26.232.0/24 maxlen: 24 194.62.105.0/24 maxlen: 24 212.86.114.0/24 maxlen: 24 212.86.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:82:2e:84:5f:4e:93:ad:f2:15:89:b5:2d:4e:4a:b3:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533 Validity Not Before: Nov 14 11:44:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d83ef8f4d4d2e6bb1433cf164e8914e23df90c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:9c:03:7f:e3:d6:8c:44:31:29:b2:89:63:f1: 11:58:ca:b1:08:93:41:ed:b0:f7:22:8f:fc:94:50: dc:7c:b8:f4:44:e5:99:85:e6:1d:9e:e7:59:2c:db: 01:c8:9f:dd:fc:58:53:5d:1c:ea:35:4f:7d:6e:aa: a7:76:38:5c:85:ff:4f:2b:ba:66:9a:4d:fb:b0:5e: 77:df:bc:44:89:39:d4:d3:6d:99:71:b6:36:04:5b: 99:87:77:86:cf:9b:bf:81:de:ba:59:42:23:80:d7: 98:46:b9:c5:a5:3b:0d:e2:dc:8a:3a:26:98:3e:c6: ae:c6:ad:d6:98:5c:ff:0b:c5:ff:a1:1e:65:0e:4a: fb:f3:45:91:09:bb:f1:86:23:55:b6:92:34:10:63: c4:e2:68:12:c0:61:50:06:ea:db:97:19:79:bb:fc: de:a0:f5:ba:ab:75:b2:29:f0:eb:98:4a:53:be:4f: 74:fc:d1:41:74:49:ac:4e:b1:70:03:02:6e:92:51: 91:b0:4d:36:e5:64:10:27:86:d4:b0:55:a6:00:60: ce:07:d0:8f:81:b9:01:5e:92:42:20:03:3f:d1:b7: b7:68:07:4c:44:d6:32:df:98:07:24:99:fc:be:9c: 28:dd:35:55:7b:91:2c:3c:d2:1c:19:2f:78:1e:d4: 6a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3E:F8:F4:D4:D2:E6:BB:14:33:CF:16:4E:89:14:E2:3D:F9:0C:59 X509v3 Authority Key Identifier: keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/2D749NTS5rsUM88WTokU4j35DFk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.8.248.0/24 62.233.53.0/24 77.220.212.0/23 109.107.157.0/24 178.159.43.0/24 185.93.6.0/24 185.201.252.0/24 185.229.251.0/24 185.235.128.0/24 185.237.165.0/24 185.241.61.0/24 185.244.218.0/23 185.250.207.0/24 185.251.25.0/24 193.3.168.0/24 193.169.105.0/24 194.15.46.0/24 194.26.232.0/24 194.62.105.0/24 212.86.114.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:6f:39:a7:4e:95:34:08:66:09:07:d0:26:e8:c6:29:37:3f: 0d:89:0f:70:63:25:64:dc:29:ce:3c:a8:7a:35:01:39:08:c3: bd:04:00:76:fb:61:19:09:c6:04:ea:39:18:77:af:e9:6f:93: 4f:ad:be:0a:d1:97:92:e5:ad:2d:05:3a:f3:4c:f2:83:46:ca: 6c:23:ea:22:3e:ef:45:b2:2f:c0:5c:f3:d9:f4:9f:a6:e3:a7: 3f:b4:a2:b4:6d:cb:ed:81:a8:80:e5:31:84:76:cc:2e:ad:4e: b0:87:13:0a:f9:3a:68:26:81:3c:ae:05:02:5b:2c:14:00:63: 82:e8:af:09:8f:a2:05:d8:1d:4c:fc:d4:24:72:7f:df:46:41: 46:d3:e4:40:66:13:10:f6:9d:ec:35:79:d2:35:46:8b:71:86: 28:bf:bd:f4:51:f8:80:7e:0b:12:f1:10:1d:07:c4:63:67:20: 57:59:de:7c:23:b6:ad:e5:78:e5:c1:26:71:33:d7:a7:df:ef: d8:48:0c:e7:1e:ba:bf:09:23:12:b8:3c:8e:34:7a:7e:bb:94: d1:18:7e:64:15:63:ed:ad:46:6a:94:8a:ef:1c:86:ed:ce:2b: 67:f1:ba:ec:6b:2c:d2:15:43:91:11:e2:f4:a1:8d:53:8d:34: b0:e0:55:3d -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgISAZqCLoRfTpOt8hWJtS1OSrOlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmY2FkODlkZjFiZjk5YTM2ZjI5MGNjM2VmMGYxZTdiNGQw Mjc1MzMwHhcNMjUxMTE0MTE0NDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODNlZjhmNGQ0ZDJlNmJiMTQzM2NmMTY0ZTg5MTRlMjNkZjkwYzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85wDf+PWjEQxKbKJY/ERWMqxCJNB 7bD3Io/8lFDcfLj0ROWZheYdnudZLNsByJ/d/FhTXRzqNU99bqqndjhchf9PK7pm mk37sF5337xEiTnU022ZcbY2BFuZh3eGz5u/gd66WUIjgNeYRrnFpTsN4tyKOiaY Psauxq3WmFz/C8X/oR5lDkr780WRCbvxhiNVtpI0EGPE4mgSwGFQBurblxl5u/ze oPW6q3WyKfDrmEpTvk90/NFBdEmsTrFwAwJuklGRsE025WQQJ4bUsFWmAGDOB9CP gbkBXpJCIAM/0be3aAdMRNYy35gHJJn8vpwo3TVVe5EsPNIcGS94HtRqaQIDAQAB o4ICfjCCAnowHQYDVR0OBBYEFNg++PTU0ua7FDPPFk6JFOI9+QxZMB8GA1UdIwQY MBaAFH/K2J3xv5mjbykMw+8PHntNAnUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjhyWW5mR19tYU52S1F6RDd3OGVlMDBDZFRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85ZjhiMTYtMjg0Zi00NTEyLWIzZGMt MDE1ZDlmMWI0YjUwLzEvMkQ3NDlOVFM1cnNVTTg4V1Rva1U0ajM1REZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85ZjhiMTYtMjg0Zi00NTEyLWIzZGMtMDE1ZDlmMWI0YjUw LzEvZjhyWW5mR19tYU52S1F6RDd3OGVlMDBDZFRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGTBggrBgEFBQcBBwEB/wSBgzCBgDB+BAIAATB4AwQABQj4 AwQAPuk1AwQBTdzUAwQAbWudAwQAsp8rAwQAuV0GAwQAucn8AwQAueX7AwQAueuA AwQAue2lAwQAufE9AwQBufTaAwQAufrPAwQAufsZAwQAwQOoAwQAwalpAwQAwg8u AwQAwhroAwQAwj5pAwQB1FZyMA0GCSqGSIb3DQEBCwUAA4IBAQBsbzmnTpU0CGYJ B9Am6MYpNz8NiQ9wYyVk3CnOPKh6NQE5CMO9BAB2+2EZCcYE6jkYd6/pb5NPrb4K 0ZeS5a0tBTrzTPKDRspsI+oiPu9Fsi/AXPPZ9J+m46c/tKK0bcvtgaiA5TGEdswu rU6whxMK+TpoJoE8rgUCWywUAGOC6K8Jj6IF2B1M/NQkcn/fRkFG0+RAZhMQ9p3s NXnSNUaLcYYov730UfiAfgsS8RAdB8RjZyBXWd58I7at5XjlwSZxM9en3+/YSAzn Hrq/CSMSuDyONHp+u5TRGH5kFWPtrUZqlIrvHIbtzitn8brsayzSFUOREeL0oY1T jTSw4FU9 -----END CERTIFICATE-----Generated at Sat Dec 6 16:17:23 2025 by rpki-client