This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/G66ZRGpP175deoPQ7U3Za9nKD0w.roa File: G66ZRGpP175deoPQ7U3Za9nKD0w.roa (raw, json) Hash identifier: HkZPrm3Ezp4vp5umTEdyTp/1ilAZylGrhl49CM0Emq8= Subject key identifier: 1B:AE:99:44:6A:4F:D7:BE:5D:7A:83:D0:ED:4D:D9:6B:D9:CA:0F:4C Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b Certificate serial: 019A8216B68ABCD6E2C60CA031C3DE9789BB Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/G66ZRGpP175deoPQ7U3Za9nKD0w.roa Signing time: Fri 14 Nov 2025 11:18:37 +0000 ROA not before: Fri 14 Nov 2025 11:18:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212496 IP address blocks: 185.24.109.0/24 maxlen: 24 185.58.114.0/24 maxlen: 24 185.73.183.0/24 maxlen: 24 185.97.79.0/24 maxlen: 24 185.104.148.0/24 maxlen: 24 185.105.47.0/24 maxlen: 24 185.111.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:82:16:b6:8a:bc:d6:e2:c6:0c:a0:31:c3:de:97:89:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b Validity Not Before: Nov 14 11:18:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1bae99446a4fd7be5d7a83d0ed4dd96bd9ca0f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:33:c7:1c:2b:60:33:12:b1:7a:3e:fb:ee:ea: ab:b1:fc:18:d4:c8:77:b3:d8:9e:f1:69:fe:08:6c: e3:d3:4c:89:47:0a:3b:bb:54:40:36:26:ce:50:41: 91:60:19:20:9a:41:9f:b5:2e:c4:fb:7d:a4:a1:46: b5:4c:f1:d1:01:87:93:81:91:db:18:fe:f6:81:20: 55:8d:f4:9f:4b:0f:9c:22:f4:73:da:86:72:ad:ce: 20:1e:1a:57:91:69:cc:c6:88:a1:52:68:0f:a6:61: 9b:7e:c7:9c:6d:e5:cd:3d:17:fc:41:81:b6:64:c3: aa:e9:04:65:1c:b2:ae:58:ff:27:0c:bf:ec:e4:d6: d4:ad:8c:05:c0:e5:a0:c8:34:95:2a:50:e1:3a:91: 6a:1d:53:0a:2d:8e:23:f3:8a:79:35:b1:3e:35:ec: fa:ad:0b:f2:75:79:99:e8:b7:21:5f:68:f8:15:fd: 0f:83:8f:6e:5a:bc:29:b6:14:d4:37:fa:67:d9:24: 34:0f:f1:15:15:b7:c7:ab:24:5b:74:be:71:6e:66: 8d:9b:ce:95:2e:f5:35:85:26:46:73:70:73:86:98: b5:ba:ce:22:32:72:1f:ff:63:eb:2d:ed:53:c6:bb: 07:a7:e1:a0:bc:bc:03:7e:f7:a5:57:47:b0:48:4f: c5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:AE:99:44:6A:4F:D7:BE:5D:7A:83:D0:ED:4D:D9:6B:D9:CA:0F:4C X509v3 Authority Key Identifier: keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/G66ZRGpP175deoPQ7U3Za9nKD0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.24.109.0/24 185.58.114.0/24 185.73.183.0/24 185.97.79.0/24 185.104.148.0/24 185.105.47.0/24 185.111.25.0/24 Signature Algorithm: sha256WithRSAEncryption 79:80:be:32:ab:85:26:63:52:ab:59:ee:e1:b4:75:d7:98:b9: d3:ee:aa:5c:99:0e:9c:c1:f1:49:02:d1:b9:64:a8:b1:2c:48: 0e:cb:d7:7f:05:71:18:b7:90:74:67:3b:bd:f0:e1:31:65:16: 67:4e:ff:10:9b:ec:fc:c7:81:1b:2d:40:30:95:8a:21:55:24: 91:4d:b0:c1:d9:9a:7a:50:a2:0c:9d:90:7c:c8:cc:75:93:bd: f1:e1:e8:9e:6a:4d:ab:19:7b:cd:5a:e3:0e:45:22:d0:b5:05: 17:0c:4e:58:35:da:fd:5f:f1:6f:19:90:55:eb:62:49:ec:56: bc:57:76:99:73:95:2f:ff:30:a8:fd:79:40:c4:44:db:75:d4: 12:36:5f:0c:b8:dc:36:95:f8:a2:f5:70:d9:c7:a5:70:8c:c5: c8:27:11:83:ce:be:c0:db:54:ca:4a:cb:54:89:ec:b6:f1:c8: 39:04:81:f2:4f:65:ac:6c:ff:59:02:58:22:ac:25:7e:fe:ef: 08:b9:40:79:4e:c4:d7:1c:b9:59:7f:35:e3:00:55:cb:67:64: 43:14:ef:19:5f:06:7d:18:fd:34:13:15:b1:56:d2:a4:e7:0e: 9b:ce:90:41:18:51:d9:3c:2d:30:c3:2f:2c:0f:31:5e:8d:64: 54:ff:7c:8f -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZqCFraKvNbixgygMcPel4m7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4 OWU4NWIwHhcNMjUxMTE0MTExODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmFlOTk0NDZhNGZkN2JlNWQ3YTgzZDBlZDRkZDk2YmQ5Y2EwZjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DPHHCtgMxKxej777uqrsfwY1Mh3 s9ie8Wn+CGzj00yJRwo7u1RANibOUEGRYBkgmkGftS7E+32koUa1TPHRAYeTgZHb GP72gSBVjfSfSw+cIvRz2oZyrc4gHhpXkWnMxoihUmgPpmGbfsecbeXNPRf8QYG2 ZMOq6QRlHLKuWP8nDL/s5NbUrYwFwOWgyDSVKlDhOpFqHVMKLY4j84p5NbE+Nez6 rQvydXmZ6LchX2j4Ff0Pg49uWrwpthTUN/pn2SQ0D/EVFbfHqyRbdL5xbmaNm86V LvU1hSZGc3Bzhpi1us4iMnIf/2PrLe1TxrsHp+GgvLwDfvelV0ewSE/FRwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFBuumURqT9e+XXqD0O1N2WvZyg9MMB8GA1UdIwQY MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt NmVlNTM0ZDkyZTUyLzEvRzY2WlJHcFAxNzVkZW9QUTdVM1phOW5LRDB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAuRhtAwQA uTpyAwQAuUm3AwQAuWFPAwQAuWiUAwQAuWkvAwQAuW8ZMA0GCSqGSIb3DQEBCwUA A4IBAQB5gL4yq4UmY1KrWe7htHXXmLnT7qpcmQ6cwfFJAtG5ZKixLEgOy9d/BXEY t5B0Zzu98OExZRZnTv8Qm+z8x4EbLUAwlYohVSSRTbDB2Zp6UKIMnZB8yMx1k73x 4eieak2rGXvNWuMORSLQtQUXDE5YNdr9X/FvGZBV62JJ7Fa8V3aZc5Uv/zCo/XlA xETbddQSNl8MuNw2lfii9XDZx6VwjMXIJxGDzr7A21TKSstUiey28cg5BIHyT2Ws bP9ZAlgirCV+/u8IuUB5TsTXHLlZfzXjAFXLZ2RDFO8ZXwZ9GP00ExWxVtKk5w6b zpBBGFHZPC0wwy8sDzFejWRU/3yP -----END CERTIFICATE-----Generated at Sat Dec 6 21:11:12 2025 by rpki-client