This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/joN3X-mRLakXHrwEWC_3n3sGuII.roa File: joN3X-mRLakXHrwEWC_3n3sGuII.roa (raw, json) Hash identifier: mwXuMQtF9Qvbb6s7M2Xwl6LdZT+OlHznvx0PU3HKz0Q= Subject key identifier: 8E:83:77:5F:E9:91:2D:A9:17:1E:BC:04:58:2F:F7:9F:7B:06:B8:82 Certificate issuer: /CN=9338840926ac73ead5b6187919e88f10032299ca Certificate serial: 019ADF6F0C8E8CB520D25B8F6B693AF8A279 Authority key identifier: 93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/joN3X-mRLakXHrwEWC_3n3sGuII.roa Signing time: Tue 02 Dec 2025 14:19:48 +0000 ROA not before: Tue 02 Dec 2025 14:19:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203936 IP address blocks: 185.118.188.0/22 maxlen: 24 185.118.188.0/24 maxlen: 24 185.118.189.0/24 maxlen: 24 185.118.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:6f:0c:8e:8c:b5:20:d2:5b:8f:6b:69:3a:f8:a2:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9338840926ac73ead5b6187919e88f10032299ca Validity Not Before: Dec 2 14:19:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8e83775fe9912da9171ebc04582ff79f7b06b882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9f:ed:f1:13:45:64:86:fa:22:d8:56:4d:88: dd:b0:95:60:77:18:1a:31:5a:0b:0d:e2:7f:f0:bc: 67:4f:05:f8:de:ee:f0:c6:65:de:4b:75:5d:cb:a5: 97:a5:3e:03:af:5f:46:f0:b4:15:b3:67:80:c9:ed: 23:89:35:41:af:4d:dc:05:fe:ad:7d:01:d6:1b:90: e1:76:06:89:8d:c6:da:57:90:8a:d7:d6:08:05:56: 33:79:f2:f0:a8:a4:43:96:33:5b:7f:97:ee:91:47: 56:08:01:db:d2:a1:41:7f:b4:47:bd:27:9c:40:8c: 66:74:ab:95:6b:22:22:d3:4f:27:f1:2b:24:8b:0d: 06:06:50:9e:01:c2:ec:ec:a5:14:ba:39:98:bb:3c: 41:5f:d5:2e:42:46:31:40:bb:d0:0f:be:58:fd:4a: b9:68:49:89:83:80:f9:0d:6a:f4:86:73:a1:be:7b: b8:5c:6e:61:b4:d3:fd:46:5c:52:4a:38:1e:76:22: b7:5a:c9:77:b5:cd:9c:47:dd:06:af:0b:08:dd:5c: f7:27:f7:18:52:e2:e1:c1:c3:c6:56:69:a8:3a:b5: 38:5b:d7:e5:02:19:fc:1e:0f:58:be:25:f6:aa:97: a7:cd:2f:e1:70:65:66:16:2b:1d:13:4f:15:af:09: fe:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:83:77:5F:E9:91:2D:A9:17:1E:BC:04:58:2F:F7:9F:7B:06:B8:82 X509v3 Authority Key Identifier: keyid:93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/joN3X-mRLakXHrwEWC_3n3sGuII.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.118.188.0/22 Signature Algorithm: sha256WithRSAEncryption 74:08:2a:95:2e:66:5a:52:3b:a5:ae:83:b6:52:23:a9:1e:bc: 80:87:dd:ad:eb:1c:1a:27:34:56:7a:87:94:38:08:f7:df:a9: 9f:96:e1:1c:06:49:f2:74:cc:62:fd:66:83:14:8e:93:5d:79: 7a:e7:9d:99:c4:a2:15:2d:50:0d:b3:e5:5e:37:57:60:85:51: fa:75:08:0a:21:f2:e8:9d:16:f8:93:2f:35:7d:88:80:f9:2e: d9:a6:d7:ff:fe:c3:6d:16:c6:58:7d:45:86:95:8a:66:b4:5e: 33:40:c1:5b:30:b4:33:34:d3:ef:09:45:26:3a:15:0a:81:a9: 13:75:42:a1:46:b5:ca:dd:26:ad:20:86:35:c6:f9:14:5d:e8: 57:52:95:ea:ad:ba:de:9c:93:ec:89:f6:50:1a:e8:cb:33:51: be:41:2b:a1:53:9e:f6:bc:3b:ba:9d:dd:20:8b:0b:73:9b:ee: 5e:e1:5a:54:3d:76:4e:73:1e:ad:12:39:7b:38:41:61:02:12: b4:ac:5b:1b:6a:5a:57:46:39:c1:17:6f:d5:d0:1c:26:d3:d8: 75:82:55:43:9e:65:83:90:a8:64:34:0e:ad:d6:95:8b:d4:b2: fe:00:a3:59:90:48:79:36:6e:09:84:7b:d7:9c:94:9f:6f:b3: 33:44:a0:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrfbwyOjLUg0luPa2k6+KJ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMzg4NDA5MjZhYzczZWFkNWI2MTg3OTE5ZTg4ZjEwMDMy Mjk5Y2EwHhcNMjUxMjAyMTQxOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTgzNzc1ZmU5OTEyZGE5MTcxZWJjMDQ1ODJmZjc5ZjdiMDZiODgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05/t8RNFZIb6IthWTYjdsJVgdxga MVoLDeJ/8LxnTwX43u7wxmXeS3Vdy6WXpT4Dr19G8LQVs2eAye0jiTVBr03cBf6t fQHWG5DhdgaJjcbaV5CK19YIBVYzefLwqKRDljNbf5fukUdWCAHb0qFBf7RHvSec QIxmdKuVayIi008n8Sskiw0GBlCeAcLs7KUUujmYuzxBX9UuQkYxQLvQD75Y/Uq5 aEmJg4D5DWr0hnOhvnu4XG5htNP9RlxSSjgediK3Wsl3tc2cR90GrwsI3Vz3J/cY UuLhwcPGVmmoOrU4W9flAhn8Hg9YviX2qpenzS/hcGVmFisdE08Vrwn+NwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI6Dd1/pkS2pFx68BFgv9597BriCMB8GA1UdIwQY MBaAFJM4hAkmrHPq1bYYeRnojxADIpnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wYmQ0ZDMtZDQ2Yy00ODNmLTk1NmUt ZWE3YWU3MmJkMzJkLzEvam9OM1gtbVJMYWtYSHJ3RVdDXzNuM3NHdUlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8wYmQ0ZDMtZDQ2Yy00ODNmLTk1NmUtZWE3YWU3MmJkMzJk LzEva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXa8MA0G CSqGSIb3DQEBCwUAA4IBAQB0CCqVLmZaUjulroO2UiOpHryAh92t6xwaJzRWeoeU OAj336mfluEcBknydMxi/WaDFI6TXXl6552ZxKIVLVANs+VeN1dghVH6dQgKIfLo nRb4ky81fYiA+S7Zptf//sNtFsZYfUWGlYpmtF4zQMFbMLQzNNPvCUUmOhUKgakT dUKhRrXK3SatIIY1xvkUXehXUpXqrbrenJPsifZQGujLM1G+QSuhU572vDu6nd0g iwtzm+5e4VpUPXZOcx6tEjl7OEFhAhK0rFsbalpXRjnBF2/V0Bwm09h1glVDnmWD kKhkNA6t1pWL1LL+AKNZkEh5Nm4JhHvXnJSfb7MzRKCA -----END CERTIFICATE-----Generated at Sat Dec 6 12:52:44 2025 by rpki-client