This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/sicbdCG2iYzhu-629rtfi9Mdacc.roa File: sicbdCG2iYzhu-629rtfi9Mdacc.roa (raw, json) Hash identifier: 15ZqEI24vxjg+kbWFjzN5AwwcoD44VA0JvYiQO2NJFQ= Subject key identifier: B2:27:1B:74:21:B6:89:8C:E1:BB:EE:B6:F6:BB:5F:8B:D3:1D:69:C7 Certificate issuer: /CN=ed64691c31892cc991ad4e9a9671147759e417ab Certificate serial: 019A77A29F65AB288E35491AE2AE923854B1 Authority key identifier: ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/sicbdCG2iYzhu-629rtfi9Mdacc.roa Signing time: Wed 12 Nov 2025 10:35:37 +0000 ROA not before: Wed 12 Nov 2025 10:35:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 34689 IP address blocks: 95.131.202.0/24 maxlen: 24 185.75.242.0/24 maxlen: 24 185.75.243.0/24 maxlen: 24 2a05:5502::/32 maxlen: 32 2a13:9400::/32 maxlen: 32 2a13:9401::/32 maxlen: 32 2a13:9402::/32 maxlen: 32 2a13:9403::/32 maxlen: 32 2a13:9404::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:77:a2:9f:65:ab:28:8e:35:49:1a:e2:ae:92:38:54:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed64691c31892cc991ad4e9a9671147759e417ab Validity Not Before: Nov 12 10:35:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b2271b7421b6898ce1bbeeb6f6bb5f8bd31d69c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:32:97:0c:87:05:b5:4f:84:10:95:5e:3c:81: e7:52:b6:2c:37:f2:5c:25:71:1c:d6:49:51:e5:60: 8c:bc:77:08:2e:bc:fe:a5:36:5d:cd:52:3d:09:44: af:d8:ba:2b:0f:2a:53:e7:ac:1d:c4:e3:88:0a:32: eb:4b:09:eb:81:51:06:df:9f:8c:46:73:a5:a2:68: 9b:d5:59:06:46:d7:94:7d:fb:e5:44:76:a0:02:4e: c2:9b:e5:01:51:74:fd:f0:8f:b6:41:b1:94:23:4a: a6:f9:95:0e:4f:17:83:c3:4e:0f:de:0f:6d:81:42: cb:22:c6:c5:d0:6c:60:38:92:42:8a:2d:ea:65:d8: 87:f9:e9:9d:3d:7d:6e:35:b2:fe:c2:cc:53:cb:d6: 70:de:a2:b8:b5:ce:72:a5:98:04:6d:b2:8a:8a:28: b9:97:3e:57:31:0e:68:77:0c:6a:44:ac:80:04:04: f3:7f:1c:41:21:96:e6:53:72:45:63:b7:4b:ff:07: 57:3b:ae:d6:bb:b8:d2:0e:23:ee:ab:61:8b:8a:a7: 93:bf:79:a6:ad:1e:c1:c3:c1:5e:91:6d:01:74:b6: f8:6e:c0:fa:18:14:a9:bf:3b:7f:f5:c9:d6:88:37: 8f:1c:24:1b:7b:b6:8e:bb:ae:9f:bf:1e:48:62:57: 4a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:27:1B:74:21:B6:89:8C:E1:BB:EE:B6:F6:BB:5F:8B:D3:1D:69:C7 X509v3 Authority Key Identifier: keyid:ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/sicbdCG2iYzhu-629rtfi9Mdacc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.131.202.0/24 185.75.242.0/23 IPv6: 2a05:5502::/32 2a13:9400::-2a13:9404:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption a4:20:8f:a1:82:83:b9:ae:52:f9:68:b3:ae:50:43:b2:97:8f: f4:98:df:ec:f3:eb:75:e4:23:85:ce:7e:74:3a:38:6c:3a:d1: ca:29:a9:e9:aa:4c:50:d4:62:d3:3b:f9:37:b5:57:6b:9a:cb: 19:46:c0:c5:46:dd:12:e8:0e:fc:ab:34:fb:eb:e6:d9:4f:4c: 8f:aa:96:ff:9a:2c:4a:51:2d:02:de:24:14:0b:20:af:eb:bb: 6e:b6:52:51:e8:4c:19:cb:4f:67:26:21:f6:31:9f:06:53:95: e2:1b:58:ca:3c:13:11:b9:72:74:c1:3c:2e:98:eb:5b:9b:36: 53:f9:d0:94:1c:c0:07:43:92:84:a4:a4:2d:b6:aa:9d:54:ab: 20:ea:85:87:6a:21:41:f9:bf:9b:e3:2d:3d:c8:90:50:8c:10: 33:23:83:62:e8:53:9b:46:9d:a1:a9:4d:fb:48:24:64:a6:6f: 51:26:55:3c:a9:56:dc:a0:d6:c1:f8:85:26:40:c9:fe:6b:a5: 80:72:08:97:f7:73:48:1f:a3:c4:34:9c:e1:03:c0:d4:c8:d4: 20:e9:fa:e0:8a:bc:9a:a0:66:d4:a0:67:7c:24:ad:92:21:b2: c8:4f:ac:97:13:34:72:08:a4:5f:9b:67:8b:af:54:1e:3d:a2: c2:0c:41:86 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZp3op9lqyiONUka4q6SOFSxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNjQ2OTFjMzE4OTJjYzk5MWFkNGU5YTk2NzExNDc3NTll NDE3YWIwHhcNMjUxMTEyMTAzNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjI3MWI3NDIxYjY4OThjZTFiYmVlYjZmNmJiNWY4YmQzMWQ2OWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTKXDIcFtU+EEJVePIHnUrYsN/Jc JXEc1klR5WCMvHcILrz+pTZdzVI9CUSv2LorDypT56wdxOOICjLrSwnrgVEG35+M RnOlomib1VkGRteUffvlRHagAk7Cm+UBUXT98I+2QbGUI0qm+ZUOTxeDw04P3g9t gULLIsbF0GxgOJJCii3qZdiH+emdPX1uNbL+wsxTy9Zw3qK4tc5ypZgEbbKKiii5 lz5XMQ5odwxqRKyABATzfxxBIZbmU3JFY7dL/wdXO67Wu7jSDiPuq2GLiqeTv3mm rR7Bw8FekW0BdLb4bsD6GBSpvzt/9cnWiDePHCQbe7aOu66fvx5IYldKowIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFLInG3QhtomM4bvutva7X4vTHWnHMB8GA1UdIwQY MBaAFO1kaRwxiSzJka1OmpZxFHdZ5BerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1dScEhER0pMTW1SclU2YWxuRVVkMW5rRjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mNjdkMDktODkyMy00MTUyLTk1ZjIt N2M3ZGIyMTIzMGEzLzEvc2ljYmRDRzJpWXpodS02MjlydGZpOU1kYWNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9mNjdkMDktODkyMy00MTUyLTk1ZjItN2M3ZGIyMTIzMGEz LzEvN1dScEhER0pMTW1SclU2YWxuRVVkMW5rRjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjASBAIAATAMAwQAX4PKAwQB uUvyMBwEAgACMBYDBQAqBVUCMA0DBAIqE5QDBQAqE5QEMA0GCSqGSIb3DQEBCwUA A4IBAQCkII+hgoO5rlL5aLOuUEOyl4/0mN/s8+t15COFzn50OjhsOtHKKanpqkxQ 1GLTO/k3tVdrmssZRsDFRt0S6A78qzT76+bZT0yPqpb/mixKUS0C3iQUCyCv67tu tlJR6EwZy09nJiH2MZ8GU5XiG1jKPBMRuXJ0wTwumOtbmzZT+dCUHMAHQ5KEpKQt tqqdVKsg6oWHaiFB+b+b4y09yJBQjBAzI4Ni6FObRp2hqU37SCRkpm9RJlU8qVbc oNbB+IUmQMn+a6WAcgiX93NIH6PENJzhA8DUyNQg6frgiryaoGbUoGd8JK2SIbLI T6yXEzRyCKRfm2eLr1QePaLCDEGG -----END CERTIFICATE-----Generated at Sat Dec 6 17:20:07 2025 by rpki-client