This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/EflVpiVqUjXSXoz-wEEEARW_Q-M.roa File: EflVpiVqUjXSXoz-wEEEARW_Q-M.roa (raw, json) Hash identifier: rzQa0HxuFunt0xvTKT2H9/TepJ8izaWUQiSzjphZuj8= Subject key identifier: 11:F9:55:A6:25:6A:52:35:D2:5E:8C:FE:C0:41:04:01:15:BF:43:E3 Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e Certificate serial: 019A9B92C26D58B2E697D0B55DFB37DE586C Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/EflVpiVqUjXSXoz-wEEEARW_Q-M.roa Signing time: Wed 19 Nov 2025 10:04:37 +0000 ROA not before: Wed 19 Nov 2025 10:04:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 398781 IP address blocks: 80.173.192.0/21 maxlen: 32 80.173.232.0/21 maxlen: 32 80.173.240.0/21 maxlen: 32 80.173.248.0/21 maxlen: 32 82.158.0.0/18 maxlen: 32 82.158.92.0/22 maxlen: 32 82.158.96.0/22 maxlen: 32 82.158.100.0/22 maxlen: 32 82.158.104.0/22 maxlen: 32 82.158.108.0/22 maxlen: 32 140.225.32.0/21 maxlen: 32 140.225.40.0/21 maxlen: 32 140.225.48.0/21 maxlen: 32 140.225.56.0/21 maxlen: 32 140.225.224.0/19 maxlen: 32 167.150.82.0/23 maxlen: 32 167.150.96.0/23 maxlen: 32 167.150.108.0/23 maxlen: 32 167.150.114.0/23 maxlen: 32 167.150.150.0/23 maxlen: 32 167.150.164.0/23 maxlen: 32 167.150.168.0/23 maxlen: 32 167.150.174.0/23 maxlen: 32 167.150.178.0/23 maxlen: 32 167.150.184.0/23 maxlen: 32 167.150.202.0/23 maxlen: 32 167.150.212.0/23 maxlen: 32 167.150.242.0/23 maxlen: 32 173.224.144.0/20 maxlen: 32 188.240.83.0/24 maxlen: 24 209.92.16.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:92:c2:6d:58:b2:e6:97:d0:b5:5d:fb:37:de:58:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e Validity Not Before: Nov 19 10:04:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=11f955a6256a5235d25e8cfec041040115bf43e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9f:df:71:24:64:41:d5:06:6c:33:30:c3:76: 4b:2f:41:ec:f4:f0:cb:c0:04:a9:41:44:b6:29:32: 01:56:e1:63:89:0c:6a:42:2a:42:3b:62:71:3a:c2: 95:23:70:5e:ee:0f:6d:ee:e7:23:07:ea:1e:33:37: 83:0f:09:3e:d7:22:79:fd:80:67:47:63:b1:76:45: 49:16:7e:47:04:28:b8:90:ac:bd:d8:17:84:94:cc: 4e:fa:3c:ae:4b:55:9c:7f:6d:63:c2:85:00:57:79: e3:06:5d:bf:03:81:ce:21:ce:00:19:2c:ad:ce:f4: c4:bd:55:12:73:a2:6c:46:a3:f3:93:b4:f0:de:02: 50:ad:52:af:a2:5a:69:c5:cc:61:ab:29:6f:6d:97: f0:08:c9:72:ad:64:d4:9f:ff:4f:dc:a0:c5:2f:67: 19:06:92:1a:0f:4b:58:48:a6:a8:e8:5b:9f:b9:66: 62:7f:3a:bc:51:9e:c0:b8:0f:03:a1:ac:51:39:54: 2f:3a:52:1c:b1:7c:5e:d7:a1:c0:09:c9:1c:ab:7d: 1f:51:ab:21:61:a2:a8:3d:19:3b:8a:a2:89:6e:9f: 3a:99:0e:b9:19:d4:64:86:d9:de:d3:91:0e:d9:6e: 4b:98:8b:02:2d:27:5c:09:fb:67:0c:21:4d:3c:b7: de:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F9:55:A6:25:6A:52:35:D2:5E:8C:FE:C0:41:04:01:15:BF:43:E3 X509v3 Authority Key Identifier: keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/EflVpiVqUjXSXoz-wEEEARW_Q-M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.173.192.0/21 80.173.232.0-80.173.255.255 82.158.0.0/18 82.158.92.0-82.158.111.255 140.225.32.0/19 140.225.224.0/19 167.150.82.0/23 167.150.96.0/23 167.150.108.0/23 167.150.114.0/23 167.150.150.0/23 167.150.164.0/23 167.150.168.0/23 167.150.174.0/23 167.150.178.0/23 167.150.184.0/23 167.150.202.0/23 167.150.212.0/23 167.150.242.0/23 173.224.144.0/20 188.240.83.0/24 209.92.16.0/20 Signature Algorithm: sha256WithRSAEncryption 2c:ad:85:72:f2:54:ef:91:df:cb:99:2e:e6:14:de:05:a9:a2: b1:33:85:88:63:11:6d:09:49:e4:f0:fb:17:a6:a6:f8:fc:b7: 90:a2:cb:84:3c:0e:46:f8:54:90:ff:54:11:ee:b9:2f:66:67: d3:42:2f:e0:66:15:60:75:c2:c1:22:e2:bc:fd:50:17:b1:2c: a0:a4:db:59:35:2d:80:4c:c8:aa:10:c2:d4:53:0d:9c:27:6f: b4:b3:06:1e:54:49:74:01:14:88:66:26:93:9b:e2:0e:c9:4e: 66:98:e4:44:36:65:a2:e2:ce:ee:55:4e:7a:df:a7:0f:e0:80: 3a:c4:bc:2f:7f:23:c7:05:81:2e:8a:5d:5f:c2:be:39:29:86: ae:0f:c6:20:dd:28:71:c0:2e:6e:e2:34:30:24:13:ed:97:a2: f8:4f:31:0e:c4:6e:d9:16:fc:a3:e2:ff:9f:f1:66:d1:0d:a8: 35:24:ee:53:f7:97:22:47:15:36:99:c9:00:f8:67:2a:83:c6: 62:a8:62:3e:ee:81:d4:ed:07:ca:75:1a:d9:ea:14:76:97:0d: 91:4b:53:aa:d5:b1:b4:86:7f:c1:b5:59:2e:ba:78:67:69:a8: 55:7f:3c:e8:37:fe:33:31:a0:f5:7b:0e:aa:1c:67:da:94:d9: a5:3e:67:24 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZqbksJtWLLml9C1Xfs33lhsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMGI0MTlmMGMxN2I0YzhiZTIxN2Y2NDM4OGQyNjhkMTRk YzI2MWUwHhcNMjUxMTE5MTAwNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWY5NTVhNjI1NmE1MjM1ZDI1ZThjZmVjMDQxMDQwMTE1YmY0M2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J/fcSRkQdUGbDMww3ZLL0Hs9PDL wASpQUS2KTIBVuFjiQxqQipCO2JxOsKVI3Be7g9t7ucjB+oeMzeDDwk+1yJ5/YBn R2OxdkVJFn5HBCi4kKy92BeElMxO+jyuS1Wcf21jwoUAV3njBl2/A4HOIc4AGSyt zvTEvVUSc6JsRqPzk7Tw3gJQrVKvolppxcxhqylvbZfwCMlyrWTUn/9P3KDFL2cZ BpIaD0tYSKao6FufuWZifzq8UZ7AuA8DoaxROVQvOlIcsXxe16HACckcq30fUash YaKoPRk7iqKJbp86mQ65GdRkhtne05EO2W5LmIsCLSdcCftnDCFNPLfenQIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFBH5VaYlalI10l6M/sBBBAEVv0PjMB8GA1UdIwQY MBaAFFELQZ8MF7TIviF/ZDiNJo0U3CYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYt MTRhMDk5OTNkNjcxLzEvRWZsVnBpVnFValhTWG96LXdFRUVBUldfUS1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYtMTRhMDk5OTNkNjcx LzEvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGwBggrBgEFBQcBBwEB/wSBoDCBnTCBmgQCAAEwgZMDBANQ rcAwCwMEA1Ct6AMDAVCsAwQGUp4AMAwDBAJSnlwDBARSnmADBAWM4SADBAWM4eAD BAGnllIDBAGnlmADBAGnlmwDBAGnlnIDBAGnlpYDBAGnlqQDBAGnlqgDBAGnlq4D BAGnlrIDBAGnlrgDBAGnlsoDBAGnltQDBAGnlvIDBASt4JADBAC88FMDBATRXBAw DQYJKoZIhvcNAQELBQADggEBACythXLyVO+R38uZLuYU3gWporEzhYhjEW0JSeTw +xempvj8t5Ciy4Q8Dkb4VJD/VBHuuS9mZ9NCL+BmFWB1wsEi4rz9UBexLKCk21k1 LYBMyKoQwtRTDZwnb7SzBh5USXQBFIhmJpOb4g7JTmaY5EQ2ZaLizu5VTnrfpw/g gDrEvC9/I8cFgS6KXV/Cvjkphq4PxiDdKHHALm7iNDAkE+2XovhPMQ7EbtkW/KPi /5/xZtENqDUk7lP3lyJHFTaZyQD4ZyqDxmKoYj7ugdTtB8p1GtnqFHaXDZFLU6rV sbSGf8G1WS66eGdpqFV/POg3/jMxoPV7DqocZ9qU2aU+ZyQ= -----END CERTIFICATE-----Generated at Sat Dec 6 14:05:27 2025 by rpki-client