This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/L3grILjJ_vBSj2YCgvXjKpgjiWU.roa File: L3grILjJ_vBSj2YCgvXjKpgjiWU.roa (raw, json) Hash identifier: zbnShwYTCfimkRsR6IKcduvWEFccf6OGK+/x/bSSG/M= Subject key identifier: 2F:78:2B:20:B8:C9:FE:F0:52:8F:66:02:82:F5:E3:2A:98:23:89:65 Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254 Certificate serial: 019A2001D857D3859507D64F4BF39688DA4E Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/L3grILjJ_vBSj2YCgvXjKpgjiWU.roa Signing time: Sun 26 Oct 2025 10:13:03 +0000 ROA not before: Sun 26 Oct 2025 10:13:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25211 IP address blocks: 85.11.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:20:01:d8:57:d3:85:95:07:d6:4f:4b:f3:96:88:da:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254 Validity Not Before: Oct 26 10:13:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2f782b20b8c9fef0528f660282f5e32a98238965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cd:4d:4d:c9:06:31:0f:a3:43:c5:09:5b:d1: bb:24:e7:d7:85:10:58:e9:74:4e:78:9e:52:a1:85: fa:16:db:73:07:b1:af:bc:f4:9d:e6:38:0a:f3:b6: dc:d4:f9:3e:a8:c5:50:1e:ea:90:13:fb:ca:ee:11: 8b:2f:ab:50:2c:53:dd:5a:4c:5a:8b:10:05:96:b0: 79:e1:61:f6:ce:ea:70:97:7b:55:f4:75:da:12:bb: 71:91:aa:3d:6d:34:56:35:f4:59:9b:aa:19:2b:ca: 1a:b2:7b:e0:d5:aa:42:b2:76:32:f6:b3:01:e0:31: be:c3:14:8c:ca:43:75:92:45:40:64:71:ce:77:c5: 78:bb:c9:dc:c3:99:b4:96:f6:38:09:6e:53:a5:11: 35:6c:a5:30:26:34:c5:1b:79:84:71:c1:55:44:ed: c4:87:6d:f5:94:72:dd:5f:0b:a3:84:3e:83:7a:9b: 53:09:b6:da:e9:d4:88:e5:95:b3:a0:35:c5:7e:0d: 3c:37:b2:b1:e7:d5:46:fa:56:1d:b3:9e:ae:eb:a4: d5:b2:5f:19:26:83:a3:65:f3:bd:ae:a9:82:41:b6: fe:c3:aa:7f:85:b0:54:ab:a7:cf:1e:45:53:8c:51: 65:f3:ad:4a:72:15:e2:ac:9c:0b:e8:67:7f:9f:3e: 6d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:78:2B:20:B8:C9:FE:F0:52:8F:66:02:82:F5:E3:2A:98:23:89:65 X509v3 Authority Key Identifier: keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/L3grILjJ_vBSj2YCgvXjKpgjiWU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.11.163.0/24 Signature Algorithm: sha256WithRSAEncryption a9:f1:f3:92:6a:93:3b:48:e7:b5:ba:d4:c7:d8:ab:22:cc:01: fb:12:5a:f3:ad:46:1b:a3:44:e9:fd:ac:2f:bc:14:b7:6e:1f: 49:9d:2c:2e:22:28:2d:b7:48:32:dd:64:ab:40:d5:cf:eb:4e: 23:9e:5a:4a:31:05:c8:e4:d6:ca:23:1e:7d:70:35:6b:bb:e8: 91:88:36:27:53:65:37:a8:2f:4b:36:28:16:8c:70:b5:41:64: 67:aa:b2:ab:6b:4b:4c:91:2b:23:cd:fd:ba:9f:5c:8d:ae:5b: 36:90:52:1b:e0:9e:6f:67:d3:c0:c8:a2:ad:68:29:c1:a8:75: dd:6b:9a:aa:0f:63:92:be:80:3a:2d:87:07:f5:4a:61:a0:de: 8c:d6:37:c8:af:79:fa:1d:0c:29:fb:91:68:61:96:4f:b9:6b: fb:73:d0:8e:d9:d4:30:d8:a2:28:88:61:93:3c:62:aa:20:09: 8c:c3:37:78:1f:f6:ca:e1:1b:10:fe:b3:4e:50:7b:a7:d2:51: 9a:2e:6e:18:f6:2a:46:2a:39:5e:be:e4:04:e6:13:53:79:f2: 42:37:4f:69:8f:01:d7:17:1f:0a:55:5d:fc:a0:11:80:14:ea: c6:57:b4:ab:0e:aa:37:39:b8:12:be:a3:62:3e:4f:71:c3:1d: ba:10:43:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZogAdhX04WVB9ZPS/OWiNpOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NzVkNTE5ZGUyMzljZjE2NGNiOTRhNjY2MGMyNTMwY2Vh ZWYyNTQwHhcNMjUxMDI2MTAxMzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjc4MmIyMGI4YzlmZWYwNTI4ZjY2MDI4MmY1ZTMyYTk4MjM4OTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3s1NTckGMQ+jQ8UJW9G7JOfXhRBY 6XROeJ5SoYX6FttzB7GvvPSd5jgK87bc1Pk+qMVQHuqQE/vK7hGLL6tQLFPdWkxa ixAFlrB54WH2zupwl3tV9HXaErtxkao9bTRWNfRZm6oZK8oasnvg1apCsnYy9rMB 4DG+wxSMykN1kkVAZHHOd8V4u8ncw5m0lvY4CW5TpRE1bKUwJjTFG3mEccFVRO3E h231lHLdXwujhD6DeptTCbba6dSI5ZWzoDXFfg08N7Kx59VG+lYds56u66TVsl8Z JoOjZfO9rqmCQbb+w6p/hbBUq6fPHkVTjFFl861KchXirJwL6Gd/nz5tjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC94KyC4yf7wUo9mAoL14yqYI4llMB8GA1UdIwQY MBaAFFl11RneI5zxZMuUpmYMJTDOrvJUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUt MmNjNjc1NzI2OTc1LzEvTDNncklMakpfdkJTajJZQ2d2WGpLcGdqaVdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUtMmNjNjc1NzI2OTc1 LzEvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVQujMA0G CSqGSIb3DQEBCwUAA4IBAQCp8fOSapM7SOe1utTH2KsizAH7ElrzrUYbo0Tp/awv vBS3bh9JnSwuIigtt0gy3WSrQNXP604jnlpKMQXI5NbKIx59cDVru+iRiDYnU2U3 qC9LNigWjHC1QWRnqrKra0tMkSsjzf26n1yNrls2kFIb4J5vZ9PAyKKtaCnBqHXd a5qqD2OSvoA6LYcH9UphoN6M1jfIr3n6HQwp+5FoYZZPuWv7c9CO2dQw2KIoiGGT PGKqIAmMwzd4H/bK4RsQ/rNOUHun0lGaLm4Y9ipGKjlevuQE5hNTefJCN09pjwHX Fx8KVV38oBGAFOrGV7SrDqo3ObgSvqNiPk9xwx26EEPS -----END CERTIFICATE-----Generated at Sat Dec 6 08:17:22 2025 by rpki-client