This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/rSNt5mbOe2enCzlMGRj201i-_cs.roa File: rSNt5mbOe2enCzlMGRj201i-_cs.roa (raw, json) Hash identifier: uWOokgWLXLQE0h3ZyEyKwrogrQWS207xC1q6GvYUv54= Subject key identifier: AD:23:6D:E6:66:CE:7B:67:A7:0B:39:4C:19:18:F6:D3:58:BE:FD:CB Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243 Certificate serial: 019ADFAF231101C65132B06D6855F75B09CD Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/rSNt5mbOe2enCzlMGRj201i-_cs.roa Signing time: Tue 02 Dec 2025 15:29:48 +0000 ROA not before: Tue 02 Dec 2025 15:29:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 45014 IP address blocks: 80.93.160.0/20 maxlen: 24 84.246.152.0/21 maxlen: 24 92.60.96.0/20 maxlen: 24 159.253.56.0/21 maxlen: 24 185.18.32.0/24 maxlen: 24 185.184.236.0/22 maxlen: 22 194.150.252.0/23 maxlen: 24 217.172.128.0/20 maxlen: 24 2a00:1a90::/32 maxlen: 48 2a02:cb0::/32 maxlen: 40 2a03:f2c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:af:23:11:01:c6:51:32:b0:6d:68:55:f7:5b:09:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243 Validity Not Before: Dec 2 15:29:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ad236de666ce7b67a70b394c1918f6d358befdcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:81:9c:76:ea:61:ab:d8:0c:7d:59:03:97:72: 2c:e1:3b:69:01:8a:ca:1b:e6:6d:16:f0:4e:90:4b: 9c:4f:61:1a:d2:03:19:5f:e4:6d:00:b6:8a:d4:78: 9e:f7:a1:03:79:98:c3:02:ec:c6:f1:d0:7e:c6:5b: 8b:49:5e:66:d4:e5:22:75:01:b0:ae:8a:74:92:04: 96:ba:08:c4:e7:89:1e:e3:ed:ab:86:11:81:00:76: 65:80:5d:32:18:18:f3:94:5f:61:db:dc:17:94:2c: 1f:b2:d1:52:9d:93:d2:c0:ed:40:ba:00:0e:97:59: a7:a5:05:23:52:fb:af:f5:33:fe:e8:5d:83:66:cd: 32:79:aa:7a:49:3b:00:b7:8e:f9:49:23:48:5c:d5: ff:08:e0:a3:7e:28:a0:81:ab:bc:a6:c5:96:13:aa: 87:ef:d2:a3:9c:3b:e4:6d:39:3a:e4:a9:0c:43:d2: e6:ea:7f:97:6d:a5:f2:bc:b0:0b:2b:fc:08:eb:50: 6c:da:69:ec:d1:a3:2a:e1:71:5b:62:1a:c2:25:70: fa:8b:94:92:2a:37:53:5d:be:7b:39:1d:4e:f3:1d: 2f:bf:2b:3c:ea:6b:57:29:ac:64:78:ec:37:d9:9a: 8a:6a:84:85:ce:52:dc:e5:66:38:2d:1c:67:bd:02: 01:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:23:6D:E6:66:CE:7B:67:A7:0B:39:4C:19:18:F6:D3:58:BE:FD:CB X509v3 Authority Key Identifier: keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/rSNt5mbOe2enCzlMGRj201i-_cs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.93.160.0/20 84.246.152.0/21 92.60.96.0/20 159.253.56.0/21 185.18.32.0/24 185.184.236.0/22 194.150.252.0/23 217.172.128.0/20 IPv6: 2a00:1a90::/32 2a02:cb0::/32 2a03:f2c0::/32 Signature Algorithm: sha256WithRSAEncryption 0c:e4:ae:7f:fc:2d:ac:3b:f9:00:d5:29:f4:b9:2d:7c:d0:c2: 5d:f3:6b:3a:46:16:16:8b:77:6f:1d:af:bc:69:b0:6f:c8:ff: 65:68:97:10:5d:53:4c:39:d8:e3:e1:ba:52:dd:b8:ea:77:f4: c2:0b:01:c3:c9:2a:2c:39:d0:b3:f1:83:23:39:da:b2:f8:67: 37:5b:34:c9:1c:0c:7c:b0:66:a6:12:99:a6:87:f5:66:ba:ed: 7c:0a:fc:df:20:dc:c3:33:d1:4a:27:49:86:8a:a8:35:77:dd: bc:92:7e:99:fa:1d:31:0e:5b:7f:6e:85:20:58:ab:b8:04:18: 91:a1:55:fc:ae:2b:0c:30:df:c4:d4:a3:94:d1:9a:30:94:86: 29:fc:d8:26:01:ce:f2:02:cd:1a:45:16:89:2c:c3:1a:d0:ac: f8:6d:3d:1b:80:63:7a:4d:0e:89:2d:59:34:cf:9c:e6:8f:84: 01:bb:f5:7c:be:dc:d9:6c:da:a7:f8:18:1b:25:40:51:e5:4f: 43:bb:73:ca:e7:5b:a8:4e:dc:f5:42:f9:7b:5e:6b:0b:b4:ff: 5b:76:69:5d:02:9d:52:a1:54:51:de:af:28:06:58:40:58:74: 1a:af:0b:82:cb:aa:4a:c8:d2:fa:17:53:08:68:11:9a:d8:fc: 65:38:8c:00 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgISAZrfryMRAcZRMrBtaFX3WwnNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTBjYTdjMWUwZThhMWM3YWQwMmQwYmI4MjhiNDExODhh ZTUyNDMwHhcNMjUxMjAyMTUyOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDIzNmRlNjY2Y2U3YjY3YTcwYjM5NGMxOTE4ZjZkMzU4YmVmZGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44Gcduphq9gMfVkDl3Is4TtpAYrK G+ZtFvBOkEucT2Ea0gMZX+RtALaK1Hie96EDeZjDAuzG8dB+xluLSV5m1OUidQGw rop0kgSWugjE54ke4+2rhhGBAHZlgF0yGBjzlF9h29wXlCwfstFSnZPSwO1AugAO l1mnpQUjUvuv9TP+6F2DZs0yeap6STsAt475SSNIXNX/COCjfiiggau8psWWE6qH 79KjnDvkbTk65KkMQ9Lm6n+XbaXyvLALK/wI61Bs2mns0aMq4XFbYhrCJXD6i5SS KjdTXb57OR1O8x0vvys86mtXKaxkeOw32ZqKaoSFzlLc5WY4LRxnvQIBdwIDAQAB o4ICUDCCAkwwHQYDVR0OBBYEFK0jbeZmzntnpws5TBkY9tNYvv3LMB8GA1UdIwQY MBaAFNvgynweDoocetAtC7gotBGIrlJDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mM2M4ZTgtYzViYy00MjExLWE5YWMt NGY5MTEyZWRlOTY4LzEvclNOdDVtYk9lMmVuQ3psTUdSajIwMWktX2NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mM2M4ZTgtYzViYy00MjExLWE5YWMtNGY5MTEyZWRlOTY4 LzEvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTA2BAIAATAwAwQEUF2gAwQD VPaYAwQEXDxgAwQDn/04AwQAuRIgAwQCubjsAwQBwpb8AwQE2ayAMBsEAgACMBUD BQAqABqQAwUAKgIMsAMFACoD8sAwDQYJKoZIhvcNAQELBQADggEBAAzkrn/8Law7 +QDVKfS5LXzQwl3zazpGFhaLd28dr7xpsG/I/2VolxBdU0w52OPhulLduOp39MIL AcPJKiw50LPxgyM52rL4ZzdbNMkcDHywZqYSmaaH9Wa67XwK/N8g3MMz0UonSYaK qDV33bySfpn6HTEOW39uhSBYq7gEGJGhVfyuKwww38TUo5TRmjCUhin82CYBzvIC zRpFFokswxrQrPhtPRuAY3pNDoktWTTPnOaPhAG79Xy+3Nls2qf4GBslQFHlT0O7 c8rnW6hO3PVC+Xteawu0/1t2aV0CnVKhVFHerygGWEBYdBqvC4LLqkrI0voXUwho EZrY/GU4jAA= -----END CERTIFICATE-----Generated at Sat Dec 6 11:54:03 2025 by rpki-client