This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/LdsrfDWqBHWlxao5Emt6MNOyUCs.roa File: LdsrfDWqBHWlxao5Emt6MNOyUCs.roa (raw, json) Hash identifier: lYO8dBbUjY7j0Lb2Prf6BePRmajGE0jvlC6JyMnzmV8= Subject key identifier: 2D:DB:2B:7C:35:AA:04:75:A5:C5:AA:39:12:6B:7A:30:D3:B2:50:2B Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417 Certificate serial: 019B07A7BCB9650A65C0E4BADB819245AB18 Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/LdsrfDWqBHWlxao5Emt6MNOyUCs.roa Signing time: Wed 10 Dec 2025 09:46:31 +0000 ROA not before: Wed 10 Dec 2025 09:46:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 95.129.184.0/21 maxlen: 21 185.52.108.0/22 maxlen: 22 192.122.217.0/24 maxlen: 24 192.122.218.0/23 maxlen: 23 192.122.220.0/22 maxlen: 22 192.122.224.0/21 maxlen: 21 192.122.232.0/23 maxlen: 23 192.122.234.0/24 maxlen: 24 2a01:7ae0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:a7:bc:b9:65:0a:65:c0:e4:ba:db:81:92:45:ab:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417 Validity Not Before: Dec 10 09:46:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2ddb2b7c35aa0475a5c5aa39126b7a30d3b2502b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ac:9c:7a:8b:f2:68:76:b6:98:52:5b:a9:c0: 1d:ba:cf:1e:96:ce:ac:6a:48:47:20:32:ff:65:e7: ae:c5:6a:18:b0:c1:a9:db:89:11:f3:4b:b0:00:f1: 46:7d:3d:86:27:72:17:4e:09:82:8a:8e:66:7e:0f: 2a:62:e1:35:be:36:7c:1b:6a:6a:76:13:5e:7b:24: 97:f9:46:3f:58:f8:69:73:ab:07:53:71:04:34:4a: df:d3:ea:fa:25:4d:20:dd:e9:b2:9f:76:39:56:fb: a8:41:42:a4:3b:42:c5:55:0a:29:0f:56:09:fd:af: 76:b7:03:50:44:a3:f6:53:03:45:4c:50:ad:af:13: d9:47:b5:44:57:5a:e3:0c:1c:9d:c9:22:de:1c:a5: ae:78:09:35:e0:a3:1f:23:b3:08:65:2c:20:c6:d3: 2f:c2:ac:7f:be:2f:39:30:61:12:43:64:7a:09:39: 60:62:0f:74:44:be:7a:3d:32:3d:84:6a:e2:a5:b9: aa:4f:d0:9e:f9:de:e0:6b:ab:3d:1e:7e:fd:e3:50: 8e:08:6a:bc:ed:5b:05:da:87:d4:a1:28:cf:80:35: 4a:93:a6:7b:cb:74:f5:59:2e:ad:c2:65:5d:34:f2: b0:3a:6d:3e:45:3f:22:67:1a:9b:a3:c2:f8:98:be: dc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:DB:2B:7C:35:AA:04:75:A5:C5:AA:39:12:6B:7A:30:D3:B2:50:2B X509v3 Authority Key Identifier: keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/LdsrfDWqBHWlxao5Emt6MNOyUCs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.129.184.0/21 185.52.108.0/22 192.122.217.0-192.122.234.255 IPv6: 2a01:7ae0::/32 Signature Algorithm: sha256WithRSAEncryption 5e:81:d2:77:5b:1f:33:1b:ce:cf:63:4f:1c:ef:71:f3:64:dd: f7:66:e7:69:29:95:6d:7a:e4:de:b4:b5:ae:63:aa:4b:c3:15: 19:43:c1:70:95:5f:54:5e:43:fd:5b:1b:df:30:c2:66:78:78: 3e:dc:4d:d3:6b:62:ed:b9:cd:26:07:4c:98:81:db:5a:65:03: 45:4b:74:8d:1b:0a:ac:06:c3:dc:a5:51:90:d1:39:2d:44:df: 25:e8:f6:37:56:d3:6e:03:63:c5:00:9d:3f:1d:a3:d3:47:3b: 8b:af:94:00:04:95:35:15:0c:3a:95:0c:74:67:de:c2:2c:55: 6a:ca:fd:00:10:02:0c:0f:95:61:28:ec:59:f0:2a:e5:44:24: 67:20:4e:71:e5:b2:59:89:ef:e0:8d:9c:03:f8:3f:a9:10:af: 07:68:a7:a6:29:a3:81:8f:08:aa:10:3f:4a:00:6b:03:dd:1d: 0a:9b:75:93:8f:8c:a1:08:40:71:46:20:fc:6e:b1:cb:c3:f5: 94:64:63:51:b6:63:cb:f6:3b:af:ab:1f:2f:ad:1d:30:55:00: ef:81:03:8a:1c:73:5b:2d:db:1d:e9:3b:3b:81:42:21:ba:80: e9:42:49:c0:31:71:76:d0:e0:66:c1:4a:d2:6f:ed:7c:f3:15: 0f:0f:ec:01 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZsHp7y5ZQplwOS624GSRasYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZDZlMTYxZGNmYjdiNzI3NzUxNDlkNDM1Yjc5YmE5ZDU2 ZDE0MTcwHhcNMjUxMjEwMDk0NjMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGRiMmI3YzM1YWEwNDc1YTVjNWFhMzkxMjZiN2EzMGQzYjI1MDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqayceovyaHa2mFJbqcAdus8els6s akhHIDL/ZeeuxWoYsMGp24kR80uwAPFGfT2GJ3IXTgmCio5mfg8qYuE1vjZ8G2pq dhNeeySX+UY/WPhpc6sHU3EENErf0+r6JU0g3emyn3Y5VvuoQUKkO0LFVQopD1YJ /a92twNQRKP2UwNFTFCtrxPZR7VEV1rjDBydySLeHKWueAk14KMfI7MIZSwgxtMv wqx/vi85MGESQ2R6CTlgYg90RL56PTI9hGripbmqT9Ce+d7ga6s9Hn7941COCGq8 7VsF2ofUoSjPgDVKk6Z7y3T1WS6twmVdNPKwOm0+RT8iZxqbo8L4mL7czQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFC3bK3w1qgR1pcWqORJrejDTslArMB8GA1UdIwQY MBaAFM/W4WHc+3tyd1FJ1DW3m6nVbRQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84NTIxNDAtYTI3Zi00NDliLWI1ZmYt MjIzNzQyZWU0Mzc1LzEvTGRzcmZEV3FCSFdseGFvNUVtdDZNTk95VUNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS84NTIxNDAtYTI3Zi00NDliLWI1ZmYtMjIzNzQyZWU0Mzc1 LzEvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQDX4G4AwQC uTRsMAwDBADAetkDBADAeuowDQQCAAIwBwMFACoBeuAwDQYJKoZIhvcNAQELBQAD ggEBAF6B0ndbHzMbzs9jTxzvcfNk3fdm52kplW165N60ta5jqkvDFRlDwXCVX1Re Q/1bG98wwmZ4eD7cTdNrYu25zSYHTJiB21plA0VLdI0bCqwGw9ylUZDROS1E3yXo 9jdW024DY8UAnT8do9NHO4uvlAAElTUVDDqVDHRn3sIsVWrK/QAQAgwPlWEo7Fnw KuVEJGcgTnHlslmJ7+CNnAP4P6kQrwdop6Ypo4GPCKoQP0oAawPdHQqbdZOPjKEI QHFGIPxuscvD9ZRkY1G2Y8v2O6+rHy+tHTBVAO+BA4occ1st2x3pOzuBQiG6gOlC ScAxcXbQ4GbBStJv7XzzFQ8P7AE= -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:26 2025 by rpki-client