This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/dQurFEv43EgKbNX8zCFY0sMalF4.roa File: dQurFEv43EgKbNX8zCFY0sMalF4.roa (raw, json) Hash identifier: rPMpjvtue+SmL6V1QPhp/OT4lj7mHQ3h/dhqPqqVCd0= Subject key identifier: 75:0B:AB:14:4B:F8:DC:48:0A:6C:D5:FC:CC:21:58:D2:C3:1A:94:5E Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019A6D58A8C50E3BEE25EB7B81FC0A053BCE Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/dQurFEv43EgKbNX8zCFY0sMalF4.roa Signing time: Mon 10 Nov 2025 10:38:37 +0000 ROA not before: Mon 10 Nov 2025 10:38:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 396356 IP address blocks: 14.102.53.0/24 maxlen: 24 158.173.219.0/24 maxlen: 24 212.32.68.0/24 maxlen: 24 212.32.69.0/24 maxlen: 24 212.32.72.0/24 maxlen: 24 213.254.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6d:58:a8:c5:0e:3b:ee:25:eb:7b:81:fc:0a:05:3b:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Nov 10 10:38:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=750bab144bf8dc480a6cd5fccc2158d2c31a945e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9d:a8:e0:73:50:45:2e:9f:5a:79:e8:59:9b: de:3a:3f:98:94:18:77:e7:f3:2f:88:0f:d0:6b:42: 29:0f:de:1a:05:7c:4d:95:2b:b3:53:7d:3e:a5:93: 23:55:e0:a4:c1:6d:d0:61:24:6a:55:68:41:87:d2: a0:e0:e4:ab:3c:6c:51:e1:db:d6:6f:2a:a8:4a:e9: 45:21:dd:ef:bb:94:70:df:04:55:d7:fb:bb:6b:49: 70:e6:43:2b:57:52:c5:cc:db:8f:a1:58:59:5d:be: 3c:02:0d:35:11:8d:ae:ca:01:ba:13:ed:b9:1f:5d: a8:99:fb:86:04:40:22:49:45:1e:92:58:be:01:9c: 47:bf:36:89:06:a8:5e:62:ad:c4:c7:17:79:0e:ed: 82:b6:01:70:9a:3d:60:75:01:75:f3:24:79:cc:4b: 5b:91:b6:e2:ae:83:e9:81:ec:48:a4:ae:93:69:0a: 3d:84:f5:be:c2:0d:95:48:13:6a:f6:03:ec:f0:98: 19:ab:b5:82:45:ec:4f:ae:c1:71:8f:43:0b:76:18: 28:da:eb:64:e1:bc:f2:6c:3f:fd:6c:3f:94:25:85: 7d:01:ad:97:56:79:0e:4a:94:96:83:8e:89:f7:95: f9:09:c2:90:3b:03:02:d9:1b:8f:35:8f:80:26:a4: 5b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0B:AB:14:4B:F8:DC:48:0A:6C:D5:FC:CC:21:58:D2:C3:1A:94:5E X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/dQurFEv43EgKbNX8zCFY0sMalF4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.53.0/24 158.173.219.0/24 212.32.68.0/23 212.32.72.0/24 213.254.161.0/24 Signature Algorithm: sha256WithRSAEncryption df:e1:39:04:6c:47:a4:ca:c6:52:03:d6:98:f1:dd:3b:71:ef: 54:bc:69:5a:0d:7b:88:9e:d0:57:79:c5:9f:fa:45:4b:6c:6e: 9e:ab:db:47:ff:96:3f:7b:05:15:80:93:75:88:e5:96:76:54: 7c:25:02:46:9f:6a:26:1c:56:d6:d6:ce:e4:78:45:e9:32:41: a7:43:11:02:e5:8f:60:84:27:54:d4:39:6c:de:48:a2:ef:dd: 01:8f:b8:4d:de:b2:a6:f0:5e:4b:cf:90:82:6f:6e:f9:fd:d1: b9:6f:9c:41:03:3c:f9:27:12:4e:dc:bd:58:c6:2f:73:0b:1e: f4:97:8c:83:6d:af:43:6f:1d:f1:63:44:4e:d9:6c:6e:d6:8c: 27:6e:e7:c7:78:fd:fc:d1:06:fa:4a:9c:b2:e4:9f:bb:1a:71: 16:9c:9d:04:f2:f7:90:b2:4a:bc:89:1e:10:31:92:b4:0b:f5: 96:81:b5:60:11:e7:0a:45:c0:80:aa:9f:c9:e9:a5:76:08:dd: a8:9d:de:bc:a6:b7:0c:be:d6:57:25:fb:4b:c1:3b:77:0a:f5: 9d:1b:f7:ab:f4:0e:86:63:fd:f5:16:57:49:95:7c:75:cf:60: 39:ad:03:7b:1d:14:16:7d:52:4b:65:19:fe:af:77:41:c0:e9: 0c:2c:37:33 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZptWKjFDjvuJet7gfwKBTvOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjUxMTEwMTAzODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTBiYWIxNDRiZjhkYzQ4MGE2Y2Q1ZmNjYzIxNThkMmMzMWE5NDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ2o4HNQRS6fWnnoWZveOj+YlBh3 5/MviA/Qa0IpD94aBXxNlSuzU30+pZMjVeCkwW3QYSRqVWhBh9Kg4OSrPGxR4dvW byqoSulFId3vu5Rw3wRV1/u7a0lw5kMrV1LFzNuPoVhZXb48Ag01EY2uygG6E+25 H12omfuGBEAiSUUekli+AZxHvzaJBqheYq3Exxd5Du2CtgFwmj1gdQF18yR5zEtb kbbiroPpgexIpK6TaQo9hPW+wg2VSBNq9gPs8JgZq7WCRexPrsFxj0MLdhgo2utk 4bzybD/9bD+UJYV9Aa2XVnkOSpSWg46J95X5CcKQOwMC2RuPNY+AJqRb/QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFHULqxRL+NxICmzV/MwhWNLDGpReMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvZFF1ckZFdjQzRWdLYk5YOHpDRlkwc01hbEY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQADmY1AwQA nq3bAwQB1CBEAwQA1CBIAwQA1f6hMA0GCSqGSIb3DQEBCwUAA4IBAQDf4TkEbEek ysZSA9aY8d07ce9UvGlaDXuIntBXecWf+kVLbG6eq9tH/5Y/ewUVgJN1iOWWdlR8 JQJGn2omHFbW1s7keEXpMkGnQxEC5Y9ghCdU1Dls3kii790Bj7hN3rKm8F5Lz5CC b275/dG5b5xBAzz5JxJO3L1Yxi9zCx70l4yDba9Dbx3xY0RO2Wxu1ownbufHeP38 0Qb6Spyy5J+7GnEWnJ0E8veQskq8iR4QMZK0C/WWgbVgEecKRcCAqp/J6aV2CN2o nd68prcMvtZXJftLwTt3CvWdG/er9A6GY/31FldJlXx1z2A5rQN7HRQWfVJLZRn+ r3dBwOkMLDcz -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:40 2025 by rpki-client