This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/2Ch-i4CtydEazV6QR71K4kHh3ss.roa File: 2Ch-i4CtydEazV6QR71K4kHh3ss.roa (raw, json) Hash identifier: /rpBNodccaChgNsqRCzkzP22U9WQI5/NnJ3SOigmEpU= Subject key identifier: D8:28:7E:8B:80:AD:C9:D1:1A:CD:5E:90:47:BD:4A:E2:41:E1:DE:CB Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417 Certificate serial: 019AE8D1B69E2B1CAB61B9F51108735A3901 Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/2Ch-i4CtydEazV6QR71K4kHh3ss.roa Signing time: Thu 04 Dec 2025 10:04:09 +0000 ROA not before: Thu 04 Dec 2025 10:04:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5400 IP address blocks: 62.172.0.0/21 maxlen: 21 194.74.80.0/21 maxlen: 21 195.99.64.0/20 maxlen: 20 195.171.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:d1:b6:9e:2b:1c:ab:61:b9:f5:11:08:73:5a:39:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417 Validity Not Before: Dec 4 10:04:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d8287e8b80adc9d11acd5e9047bd4ae241e1decb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b1:31:7a:df:85:ee:8a:69:00:78:55:67:a6: 80:39:32:af:62:8e:f0:bf:d3:c2:5a:09:d5:fb:31: 18:76:b8:83:2b:44:cc:e9:57:7a:56:d0:26:63:fd: d8:6e:63:b1:3b:0d:b5:95:56:4a:3f:7a:d5:31:15: 40:ea:b1:f6:e8:d6:d0:42:8b:f0:2b:81:dc:f9:e2: db:50:b1:9b:a3:13:33:a6:2b:4b:f5:bd:d1:32:be: b3:0d:08:b0:da:21:cf:11:a5:bc:8f:17:78:5f:d1: 92:c0:e4:10:f0:87:b0:1e:3b:ff:8b:f1:ad:ac:f9: 5b:74:2f:75:11:6d:d7:fa:f9:31:8d:dd:b8:16:29: f0:7c:a6:cd:21:02:6c:e1:fe:5d:56:e4:7a:d5:64: 59:c3:f0:54:5c:28:19:05:9d:47:78:c4:21:4e:08: 63:ed:ac:78:b2:7f:5f:7e:47:f9:c0:4c:a1:78:85: 6d:38:88:6b:e2:41:b5:03:4f:c9:22:2a:71:21:71: d5:de:39:fc:30:4a:30:d3:a0:91:48:be:d4:33:b0: 68:41:68:22:94:de:cc:2f:14:4b:e9:80:32:e7:ee: a9:1f:db:47:e8:a0:8b:49:d6:32:dc:6c:23:93:06: 75:c3:cf:5f:31:35:86:42:9f:2b:4d:14:ee:b7:63: 5f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:28:7E:8B:80:AD:C9:D1:1A:CD:5E:90:47:BD:4A:E2:41:E1:DE:CB X509v3 Authority Key Identifier: keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/2Ch-i4CtydEazV6QR71K4kHh3ss.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.172.0.0/21 194.74.80.0/21 195.99.64.0/20 195.171.36.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:c1:11:ef:2c:51:09:a6:b0:8e:2e:cd:62:6f:2b:5e:dc:15: cf:b3:2c:39:92:20:20:67:7b:83:5e:7b:d1:03:24:51:5d:22: 30:ee:1b:bd:7d:1e:ea:0a:37:ca:8b:60:ec:6d:c8:4f:01:36: c7:7c:95:a4:39:18:4d:58:26:90:20:df:c1:10:e9:da:75:1d: 14:44:f0:0d:d2:1b:19:a7:ba:9c:68:8e:6f:28:2c:b2:db:cc: a0:d2:9c:76:e8:ba:c9:a7:db:bf:03:7f:12:58:ba:80:3b:23: 64:d6:4c:72:05:12:e1:d5:95:ff:72:16:bd:f6:37:73:eb:e7: 59:ee:c8:08:42:c8:1e:0b:63:99:3c:75:77:37:70:fb:e7:86: 80:d7:f4:af:7c:fd:08:23:58:d2:ad:77:c7:42:e1:1e:de:6e: 79:79:ee:03:17:52:97:93:a5:a4:71:f3:2c:6c:8c:2b:45:83: be:c4:94:6f:44:4a:c7:68:d9:e2:c3:16:e4:d2:7d:52:3b:f4: f0:ed:a1:c7:9e:8f:0d:24:07:26:88:ef:b7:7e:9c:7a:12:61: 07:b2:10:db:ea:66:2f:55:53:e0:ca:cc:f9:f9:a6:1c:5a:f5: 8a:97:35:24:d8:6a:78:74:3d:6d:8f:6b:cc:fa:a1:5d:e8:c6: 2f:db:90:71 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZro0baeKxyrYbn1EQhzWjkBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZDZlMTYxZGNmYjdiNzI3NzUxNDlkNDM1Yjc5YmE5ZDU2 ZDE0MTcwHhcNMjUxMjA0MTAwNDA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODI4N2U4YjgwYWRjOWQxMWFjZDVlOTA0N2JkNGFlMjQxZTFkZWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbExet+F7oppAHhVZ6aAOTKvYo7w v9PCWgnV+zEYdriDK0TM6Vd6VtAmY/3YbmOxOw21lVZKP3rVMRVA6rH26NbQQovw K4Hc+eLbULGboxMzpitL9b3RMr6zDQiw2iHPEaW8jxd4X9GSwOQQ8IewHjv/i/Gt rPlbdC91EW3X+vkxjd24FinwfKbNIQJs4f5dVuR61WRZw/BUXCgZBZ1HeMQhTghj 7ax4sn9ffkf5wEyheIVtOIhr4kG1A0/JIipxIXHV3jn8MEow06CRSL7UM7BoQWgi lN7MLxRL6YAy5+6pH9tH6KCLSdYy3GwjkwZ1w89fMTWGQp8rTRTut2NfFwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFNgofouArcnRGs1ekEe9SuJB4d7LMB8GA1UdIwQY MBaAFM/W4WHc+3tyd1FJ1DW3m6nVbRQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84NTIxNDAtYTI3Zi00NDliLWI1ZmYt MjIzNzQyZWU0Mzc1LzEvMkNoLWk0Q3R5ZEVhelY2UVI3MUs0a0hoM3NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS84NTIxNDAtYTI3Zi00NDliLWI1ZmYtMjIzNzQyZWU0Mzc1 LzEvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDPqwAAwQD wkpQAwQEw2NAAwQCw6skMA0GCSqGSIb3DQEBCwUAA4IBAQALwRHvLFEJprCOLs1i byte3BXPsyw5kiAgZ3uDXnvRAyRRXSIw7hu9fR7qCjfKi2DsbchPATbHfJWkORhN WCaQIN/BEOnadR0URPAN0hsZp7qcaI5vKCyy28yg0px26LrJp9u/A38SWLqAOyNk 1kxyBRLh1ZX/cha99jdz6+dZ7sgIQsgeC2OZPHV3N3D754aA1/SvfP0II1jSrXfH QuEe3m55ee4DF1KXk6WkcfMsbIwrRYO+xJRvRErHaNniwxbk0n1SO/Tw7aHHno8N JAcmiO+3fpx6EmEHshDb6mYvVVPgysz5+aYcWvWKlzUk2Gp4dD1tj2vM+qFd6MYv 25Bx -----END CERTIFICATE-----Generated at Sat Dec 6 23:19:54 2025 by rpki-client