This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/An6UmHEtH3Bmh0Lg39EpfIop0js.roa File: An6UmHEtH3Bmh0Lg39EpfIop0js.roa (raw, json) Hash identifier: igybf10nuNaP19Av8rDWw+HthCnNiYX7BDks0g7bElQ= Subject key identifier: 02:7E:94:98:71:2D:1F:70:66:87:42:E0:DF:D1:29:7C:8A:29:D2:3B Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Certificate serial: 019AE8A130878F5816CD08D8AAFEA8DB3BCF Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/An6UmHEtH3Bmh0Lg39EpfIop0js.roa Signing time: Thu 04 Dec 2025 09:11:09 +0000 ROA not before: Thu 04 Dec 2025 09:11:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39150 IP address blocks: 91.196.137.0/24 maxlen: 24 93.179.120.0/24 maxlen: 24 95.85.83.128/25 maxlen: 25 95.181.213.0/24 maxlen: 24 109.196.133.0/24 maxlen: 24 195.182.8.0/24 maxlen: 24 2a04:8680::/32 maxlen: 32 2a04:8681::/32 maxlen: 32 2a09:d5c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:a1:30:87:8f:58:16:cd:08:d8:aa:fe:a8:db:3b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Validity Not Before: Dec 4 09:11:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=027e9498712d1f70668742e0dfd1297c8a29d23b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1b:98:cf:f1:60:55:0e:ac:47:11:b1:20:68: 6d:10:7d:90:11:7b:f1:f1:90:2a:b4:d3:40:04:23: c8:97:de:b9:fc:2b:4e:e2:7f:c6:ea:05:b3:5b:e5: 81:aa:66:7b:f4:45:d6:fc:9e:d4:b7:1c:d6:db:a4: 0c:21:c9:4e:13:9a:f2:15:26:04:78:91:3a:4c:8a: d9:6b:68:b5:71:21:6c:3b:f8:ac:54:2d:ea:3b:0b: d4:cc:60:71:31:4a:34:a8:62:53:19:cf:c6:8b:30: f3:f5:d6:f1:3c:de:5d:5c:70:16:7b:72:f0:fe:5e: 0e:4a:88:80:63:89:8a:7a:1f:6c:6c:c7:bb:87:b6: 09:d6:e4:19:8b:3a:6d:a5:1b:f0:94:d9:5f:a8:b9: 6b:a9:93:4b:fb:64:04:c4:a7:5e:a9:77:0e:56:dc: 7b:9b:fc:a0:60:14:e1:e2:ac:77:74:76:f7:85:b5: 21:12:09:2c:d2:3b:1a:4a:3f:e7:26:c7:09:d4:bf: 64:34:63:dc:d4:61:0e:a3:2c:0d:7e:03:66:fc:99: 37:fd:42:f5:63:a8:3d:85:b8:29:d7:1e:24:5c:61: bf:3a:78:b8:16:ae:c6:cd:d8:01:ff:84:2b:6b:1e: 7f:10:f2:8e:9f:9c:09:05:d6:60:b8:4d:59:44:74: 57:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:7E:94:98:71:2D:1F:70:66:87:42:E0:DF:D1:29:7C:8A:29:D2:3B X509v3 Authority Key Identifier: keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/An6UmHEtH3Bmh0Lg39EpfIop0js.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.137.0/24 93.179.120.0/24 95.85.83.128/25 95.181.213.0/24 109.196.133.0/24 195.182.8.0/24 IPv6: 2a04:8680::/31 2a09:d5c0::/32 Signature Algorithm: sha256WithRSAEncryption 44:82:33:75:3f:09:90:c1:38:56:b8:3d:b0:4a:42:0a:c9:e1: b4:57:9d:5a:eb:5d:65:a0:85:89:80:fe:d7:85:3b:97:ee:3d: c4:0a:a8:19:ac:10:3a:bb:40:80:9d:77:71:86:69:b2:e8:30: a6:d5:fd:d4:dd:d9:71:1e:fe:2d:55:16:a8:2e:3d:d9:6d:d6: 5c:30:21:3f:e1:f9:9c:76:58:8c:45:1d:7a:95:72:d7:57:a0: 6c:fa:7a:d0:17:29:f1:ed:36:75:10:86:e2:26:1c:e4:18:ad: 14:af:9a:63:0e:22:9f:ae:fe:f1:3e:e4:4c:1b:ad:49:1d:2e: 4e:54:e8:79:ad:8e:30:0c:bb:14:a5:c5:39:93:47:c1:44:4c: 54:ec:e8:0c:57:3a:30:63:ac:98:8f:b7:54:3c:2d:e6:0a:9b: ba:49:90:da:0b:b3:fd:ea:16:1b:90:88:0d:54:38:a4:ea:24: 4f:e4:af:4d:1c:c8:75:bb:c0:e0:4c:c4:b0:92:28:7e:67:a3: bf:25:c3:3d:d4:36:18:5e:64:ec:b4:3c:aa:45:16:4a:e6:43: 70:9c:8f:06:bf:8b:a1:51:c0:4a:63:0c:cd:ac:6c:0f:a9:1b: 85:23:15:22:80:8d:aa:dc:95:ec:71:b0:4c:17:85:ff:24:3d: 79:2a:fe:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgISAZrooTCHj1gWzQjYqv6o2zvPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy OWZmODQwHhcNMjUxMjA0MDkxMTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjdlOTQ5ODcxMmQxZjcwNjY4NzQyZTBkZmQxMjk3YzhhMjlkMjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RuYz/FgVQ6sRxGxIGhtEH2QEXvx 8ZAqtNNABCPIl965/CtO4n/G6gWzW+WBqmZ79EXW/J7UtxzW26QMIclOE5ryFSYE eJE6TIrZa2i1cSFsO/isVC3qOwvUzGBxMUo0qGJTGc/GizDz9dbxPN5dXHAWe3Lw /l4OSoiAY4mKeh9sbMe7h7YJ1uQZizptpRvwlNlfqLlrqZNL+2QExKdeqXcOVtx7 m/ygYBTh4qx3dHb3hbUhEgks0jsaSj/nJscJ1L9kNGPc1GEOoywNfgNm/Jk3/UL1 Y6g9hbgp1x4kXGG/Oni4Fq7GzdgB/4Qrax5/EPKOn5wJBdZguE1ZRHRXgwIDAQAB o4ICPjCCAjowHQYDVR0OBBYEFAJ+lJhxLR9wZodC4N/RKXyKKdI7MB8GA1UdIwQY MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt MjhmYzc3OTY3NzYzLzEvQW42VW1IRXRIM0JtaDBMZzM5RXBmSW9wMGpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzArBAIAATAlAwQAW8SJAwQA XbN4AwUHX1VTgAMEAF+11QMEAG3EhQMEAMO2CDAUBAIAAjAOAwUBKgSGgAMFACoJ 1cAwDQYJKoZIhvcNAQELBQADggEBAESCM3U/CZDBOFa4PbBKQgrJ4bRXnVrrXWWg hYmA/teFO5fuPcQKqBmsEDq7QICdd3GGabLoMKbV/dTd2XEe/i1VFqguPdlt1lww IT/h+Zx2WIxFHXqVctdXoGz6etAXKfHtNnUQhuImHOQYrRSvmmMOIp+u/vE+5Ewb rUkdLk5U6HmtjjAMuxSlxTmTR8FETFTs6AxXOjBjrJiPt1Q8LeYKm7pJkNoLs/3q FhuQiA1UOKTqJE/kr00cyHW7wOBMxLCSKH5no78lwz3UNhheZOy0PKpFFkrmQ3Cc jwa/i6FRwEpjDM2sbA+pG4UjFSKAjarclexxsEwXhf8kPXkq/vU= -----END CERTIFICATE-----Generated at Sat Dec 6 08:17:48 2025 by rpki-client