This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/L2SCmCRGZvrmO4FtHsSeq9zGXZ0.roa File: L2SCmCRGZvrmO4FtHsSeq9zGXZ0.roa (raw, json) Hash identifier: 1S1vrwIqgJsILm5Ujeq8fQD6amjAbXoD/QM4fibgEmg= Subject key identifier: 2F:64:82:98:24:46:66:FA:E6:3B:81:6D:1E:C4:9E:AB:DC:C6:5D:9D Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 019AC543A4C46B8934694B0821BCC76EBEB0 Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/L2SCmCRGZvrmO4FtHsSeq9zGXZ0.roa Signing time: Thu 27 Nov 2025 12:22:15 +0000 ROA not before: Thu 27 Nov 2025 12:22:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206950 IP address blocks: 94.188.145.0/24 maxlen: 24 94.188.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c5:43:a4:c4:6b:89:34:69:4b:08:21:bc:c7:6e:be:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Nov 27 12:22:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2f648298244666fae63b816d1ec49eabdcc65d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e8:93:58:33:29:8d:04:33:73:4c:44:01:ff: b2:b6:b9:a9:d9:f1:d8:8e:28:01:1e:9b:28:b6:27: 80:d0:b2:2a:82:5f:4d:90:b2:29:52:02:6c:c3:1f: 87:90:39:b0:fb:38:1d:7b:09:84:bd:41:b2:13:33: c5:d5:52:1b:c1:aa:bc:1f:0d:74:e4:32:36:62:56: e0:de:e1:f9:68:6d:d7:ee:76:46:c3:6f:6b:8a:a6: 5b:4a:43:6c:54:69:14:16:a6:e4:c2:b3:9a:50:d9: 44:f1:c1:85:45:d2:72:38:42:64:01:ee:e8:97:b3: 4d:ea:be:8c:bb:81:8c:ee:cf:76:09:9e:b7:2b:17: d5:ce:3c:f3:1c:aa:df:c2:46:2c:21:99:a3:ff:7f: 7c:5a:47:32:c9:0c:c1:24:94:ee:e3:25:84:98:7c: a2:ea:dd:32:f0:65:55:ee:2b:8a:92:28:05:d0:27: 42:44:16:4d:57:3a:54:2b:f4:61:e3:c9:d5:8c:7e: 11:ba:62:40:22:5a:cd:23:63:48:7c:60:27:31:65: 43:e5:a9:83:1e:fe:ff:52:4f:1e:cf:5d:95:e3:c1: 07:13:60:da:4a:68:1f:4b:06:34:78:dc:57:5a:17: d7:a1:39:e6:80:c5:29:e3:48:52:ad:e8:2f:42:c8: 96:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:64:82:98:24:46:66:FA:E6:3B:81:6D:1E:C4:9E:AB:DC:C6:5D:9D X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/L2SCmCRGZvrmO4FtHsSeq9zGXZ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.188.145.0/24 94.188.185.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:cf:ff:99:fa:4f:ec:91:94:95:db:d7:ff:ee:e4:80:92:03: dc:5e:81:97:a3:00:aa:0d:03:7f:6a:99:68:9f:2e:aa:ff:3d: 44:df:63:3b:21:66:fb:ce:e9:7c:c1:92:8f:17:12:16:50:42: 3d:3d:7d:15:97:c4:27:0a:c8:ba:fe:45:ba:a1:d8:bc:67:8a: ea:d4:27:82:39:6b:2b:df:8d:e4:74:6b:84:bf:7e:b9:74:0d: dc:5f:aa:e3:f4:c5:50:9f:a9:af:9a:d1:f2:15:15:f8:10:48: d5:20:58:fb:b9:16:8f:53:12:a2:ab:75:f6:60:69:96:2c:05: d0:d2:37:61:f7:93:d8:db:2c:dd:fa:f5:31:ae:76:09:67:76: 67:5f:fb:7a:be:50:d8:d6:ab:24:45:42:cb:63:75:1c:47:4b: 7d:58:cf:7f:5c:ec:eb:2b:f8:75:b4:69:2a:e1:86:a0:b4:c8: d3:0b:31:11:09:22:7c:a0:4e:d4:c4:eb:4f:db:ac:66:8e:99: f6:6b:16:b3:33:02:b7:49:13:36:01:1a:63:a1:66:d5:39:43: 55:f6:06:7b:8b:ff:64:38:75:a3:66:13:79:b5:6d:a0:1a:60: 33:fe:95:37:f9:7e:55:ab:f4:75:f9:8e:3c:c2:88:88:a8:78: 9a:dd:7c:1d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrFQ6TEa4k0aUsIIbzHbr6wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjUxMTI3MTIyMjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjY0ODI5ODI0NDY2NmZhZTYzYjgxNmQxZWM0OWVhYmRjYzY1ZDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOiTWDMpjQQzc0xEAf+ytrmp2fHY jigBHpsotieA0LIqgl9NkLIpUgJswx+HkDmw+zgdewmEvUGyEzPF1VIbwaq8Hw10 5DI2Ylbg3uH5aG3X7nZGw29riqZbSkNsVGkUFqbkwrOaUNlE8cGFRdJyOEJkAe7o l7NN6r6Mu4GM7s92CZ63KxfVzjzzHKrfwkYsIZmj/398WkcyyQzBJJTu4yWEmHyi 6t0y8GVV7iuKkigF0CdCRBZNVzpUK/Rh48nVjH4RumJAIlrNI2NIfGAnMWVD5amD Hv7/Uk8ez12V48EHE2DaSmgfSwY0eNxXWhfXoTnmgMUp40hSregvQsiWQwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFC9kgpgkRmb65juBbR7Enqvcxl2dMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvTDJTQ21DUkdadnJtTzRGdEhzU2VxOXpHWFowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXryRAwQA Xry5MA0GCSqGSIb3DQEBCwUAA4IBAQAbz/+Z+k/skZSV29f/7uSAkgPcXoGXowCq DQN/aplony6q/z1E32M7IWb7zul8wZKPFxIWUEI9PX0Vl8QnCsi6/kW6odi8Z4rq 1CeCOWsr343kdGuEv365dA3cX6rj9MVQn6mvmtHyFRX4EEjVIFj7uRaPUxKiq3X2 YGmWLAXQ0jdh95PY2yzd+vUxrnYJZ3ZnX/t6vlDY1qskRULLY3UcR0t9WM9/XOzr K/h1tGkq4YagtMjTCzERCSJ8oE7UxOtP26xmjpn2axazMwK3SRM2ARpjoWbVOUNV 9gZ7i/9kOHWjZhN5tW2gGmAz/pU3+X5Vq/R1+Y48woiIqHia3Xwd -----END CERTIFICATE-----Generated at Sat Dec 6 17:17:49 2025 by rpki-client