This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/A_0P_wYc_OEllR0zbsxJlPKyFvw.roa File: A_0P_wYc_OEllR0zbsxJlPKyFvw.roa (raw, json) Hash identifier: msjGR0Il4I4n4cOz691q2AapFwK62zADiANHUiiJFWI= Subject key identifier: 03:FD:0F:FF:06:1C:FC:E1:25:95:1D:33:6E:CC:49:94:F2:B2:16:FC Certificate issuer: /CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a Certificate serial: 019A9B88B0C996FBF35FE9B91B13146F55EC Authority key identifier: 6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/A_0P_wYc_OEllR0zbsxJlPKyFvw.roa Signing time: Wed 19 Nov 2025 09:53:37 +0000 ROA not before: Wed 19 Nov 2025 09:53:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 396982 IP address blocks: 185.231.86.0/24 maxlen: 24 185.231.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:88:b0:c9:96:fb:f3:5f:e9:b9:1b:13:14:6f:55:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a Validity Not Before: Nov 19 09:53:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=03fd0fff061cfce125951d336ecc4994f2b216fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cd:9c:fd:c3:d7:4f:cd:ff:31:cb:d9:e2:b6: 24:f3:4f:97:db:e4:28:65:10:a4:c8:c9:61:23:ba: 6a:67:ae:f9:ff:44:e8:a0:83:76:9e:9a:24:12:dc: b3:8c:ae:43:60:dc:52:73:ea:94:d8:f4:c7:35:10: 2a:47:db:e1:5d:76:b2:41:e5:42:02:13:76:93:eb: 33:1f:60:2c:c1:74:ee:80:4a:58:92:10:a3:8b:19: 2d:b8:30:11:63:ac:e7:77:08:74:47:52:5f:26:7c: 9c:ef:36:3d:70:85:07:67:de:43:9a:d8:2b:48:0a: 56:83:b8:58:c2:48:1d:ef:7f:a3:f1:86:7e:b5:f2: 4c:9d:74:41:ef:dd:ef:95:fa:e7:65:8f:9b:d5:99: f1:75:4b:05:93:94:bc:8b:13:72:08:34:b1:88:bd: d5:bd:3f:02:8a:3c:39:99:b3:71:ed:b9:78:38:90: 26:cc:35:92:7c:f7:d8:d9:96:b3:ab:c7:10:16:35: b5:c8:7c:bd:c5:18:a6:23:70:92:ff:03:f9:d5:f5: d5:82:e9:f5:89:57:f7:20:56:c4:d1:5b:b4:fb:42: d4:5e:19:3b:d1:d9:93:d0:17:0d:fb:13:96:37:d9: 16:de:1d:89:3e:38:96:31:ad:bc:d2:3f:a1:5a:ae: 01:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FD:0F:FF:06:1C:FC:E1:25:95:1D:33:6E:CC:49:94:F2:B2:16:FC X509v3 Authority Key Identifier: keyid:6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/A_0P_wYc_OEllR0zbsxJlPKyFvw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.86.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:13:58:42:28:97:3e:af:4a:d9:4f:29:13:ad:37:29:08:7a: e0:d1:5e:85:ba:0a:a3:d7:77:68:ca:cc:76:67:92:b6:cc:e2: 49:01:f2:2e:4c:a6:b5:24:b4:6f:ef:bc:1d:21:59:ef:3a:54: 57:ee:df:fe:c6:f3:ce:7c:59:0e:bf:bb:e6:11:0f:f2:5a:d5: 3c:dd:ff:a3:19:37:13:d7:ea:76:1a:04:fd:d2:a6:f8:08:bf: 5a:9c:24:41:63:0d:d0:d9:43:b7:a0:59:c9:90:72:e9:f7:33: 35:db:35:f7:47:fb:29:d6:db:e8:b3:34:18:05:29:fb:86:92: f3:a3:78:45:d5:9d:02:d3:8d:95:3a:22:bd:bc:96:62:24:b8: a0:57:44:ec:a7:53:53:fb:ed:91:a6:48:5b:81:8d:d8:e8:27: 8e:9b:0d:0f:14:c3:89:a4:60:da:a7:18:6a:d7:34:02:35:13: 42:65:96:27:5e:8f:73:71:c0:03:9d:d9:ed:26:93:06:91:e7: e7:c0:b5:cc:b7:db:69:61:d2:c8:5c:5e:59:f6:7b:99:90:f8: f2:62:12:4e:4c:df:cf:94:90:b6:ea:b6:8f:27:d8:d4:37:af: 09:86:1d:3d:27:e5:c3:2c:3e:29:17:80:84:63:aa:7d:8e:e3: 7e:47:35:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqbiLDJlvvzX+m5GxMUb1XsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzJlZTVmMDE4OWVmOWI2NzE0MThlZDMzNmVjYjE3Mjhm OTkyMGEwHhcNMjUxMTE5MDk1MzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2ZkMGZmZjA2MWNmY2UxMjU5NTFkMzM2ZWNjNDk5NGYyYjIxNmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1M2c/cPXT83/McvZ4rYk80+X2+Qo ZRCkyMlhI7pqZ675/0TooIN2npokEtyzjK5DYNxSc+qU2PTHNRAqR9vhXXayQeVC AhN2k+szH2AswXTugEpYkhCjixktuDARY6zndwh0R1JfJnyc7zY9cIUHZ95Dmtgr SApWg7hYwkgd73+j8YZ+tfJMnXRB793vlfrnZY+b1ZnxdUsFk5S8ixNyCDSxiL3V vT8Cijw5mbNx7bl4OJAmzDWSfPfY2Zazq8cQFjW1yHy9xRimI3CS/wP51fXVgun1 iVf3IFbE0Vu0+0LUXhk70dmT0BcN+xOWN9kW3h2JPjiWMa280j+hWq4BNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAP9D/8GHPzhJZUdM27MSZTyshb8MB8GA1UdIwQY MBaAFG8y7l8Bie+bZxQY7TNuyxco+ZIKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpMdVh3R0o3NXRuRkJqdE0yN0xGeWo1a2dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iMmVkY2ItZWUyMS00OWVmLThmY2Yt OGU3NjEzODA0YzgwLzEvQV8wUF93WWNfT0VsbFIwemJzeEpsUEt5RnZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9iMmVkY2ItZWUyMS00OWVmLThmY2YtOGU3NjEzODA0Yzgw LzEvYnpMdVh3R0o3NXRuRkJqdE0yN0xGeWo1a2dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuedWMA0G CSqGSIb3DQEBCwUAA4IBAQCPE1hCKJc+r0rZTykTrTcpCHrg0V6Fugqj13doysx2 Z5K2zOJJAfIuTKa1JLRv77wdIVnvOlRX7t/+xvPOfFkOv7vmEQ/yWtU83f+jGTcT 1+p2GgT90qb4CL9anCRBYw3Q2UO3oFnJkHLp9zM12zX3R/sp1tvoszQYBSn7hpLz o3hF1Z0C042VOiK9vJZiJLigV0Tsp1NT++2RpkhbgY3Y6CeOmw0PFMOJpGDapxhq 1zQCNRNCZZYnXo9zccADndntJpMGkefnwLXMt9tpYdLIXF5Z9nuZkPjyYhJOTN/P lJC26raPJ9jUN68Jhh09J+XDLD4pF4CEY6p9juN+RzXC -----END CERTIFICATE-----Generated at Sat Dec 6 14:05:34 2025 by rpki-client