This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/v1N3xmdR1ASJlnAcsLFTqDIui1A.roa File: v1N3xmdR1ASJlnAcsLFTqDIui1A.roa (raw, json) Hash identifier: KG5H+1BX4vaK5edjyu9fGn2Pxz5+wSG/Gox81B9kK+4= Subject key identifier: BF:53:77:C6:67:51:D4:04:89:96:70:1C:B0:B1:53:A8:32:2E:8B:50 Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef Certificate serial: 019ADE97E7D898168FB05E790B3D1D026B29 Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/v1N3xmdR1ASJlnAcsLFTqDIui1A.roa Signing time: Tue 02 Dec 2025 10:24:48 +0000 ROA not before: Tue 02 Dec 2025 10:24:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212330 IP address blocks: 79.132.195.0/24 maxlen: 24 109.230.121.0/24 maxlen: 24 109.230.122.0/24 maxlen: 24 109.230.124.0/24 maxlen: 24 109.230.125.0/24 maxlen: 24 122.102.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:97:e7:d8:98:16:8f:b0:5e:79:0b:3d:1d:02:6b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef Validity Not Before: Dec 2 10:24:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bf5377c66751d4048996701cb0b153a8322e8b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0d:29:9b:c4:ec:4e:61:14:ef:1f:b5:0a:2c: fe:69:71:9e:ef:0a:f6:2d:34:61:9f:f9:15:25:60: 85:c7:fd:eb:57:96:8c:0e:82:cc:10:00:86:93:69: 5a:0e:2e:20:3b:63:fb:c1:b7:59:66:7a:8e:0c:2c: ab:f0:f3:3e:96:f3:99:9d:c9:fb:a6:24:7e:d4:6f: a0:90:ad:3f:b0:dc:bd:0a:8a:43:34:f7:57:ce:c2: 0c:76:90:6d:75:15:73:9e:52:0e:d3:70:c1:3e:30: 17:53:73:44:3f:89:b3:91:f9:45:b0:ce:dc:fe:4f: 68:e2:b2:2f:ab:10:0d:4f:b4:f0:ba:db:86:c3:e7: a4:80:c7:37:51:b9:93:5a:1b:e8:5f:65:19:5c:f4: 66:8d:32:fa:23:2d:71:96:b1:76:c7:bc:83:e8:b4: 0c:c9:4d:1d:61:7f:4c:f4:c1:05:23:60:1c:ff:c2: 4c:2f:86:62:a8:12:c7:33:ea:a7:92:d3:b5:dd:a5: 92:1f:b1:6c:72:59:04:4b:2f:17:bd:08:3d:28:04: 32:f9:81:9a:b7:02:49:74:53:76:5e:ce:55:1d:f7: 5b:93:ab:88:a0:3e:6a:6a:6c:f8:73:e7:cd:ca:22: 9c:83:18:4c:5f:06:90:cd:34:84:a8:2e:f4:1f:af: ab:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:53:77:C6:67:51:D4:04:89:96:70:1C:B0:B1:53:A8:32:2E:8B:50 X509v3 Authority Key Identifier: keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/v1N3xmdR1ASJlnAcsLFTqDIui1A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.132.195.0/24 109.230.121.0-109.230.122.255 109.230.124.0/23 122.102.116.0/24 Signature Algorithm: sha256WithRSAEncryption 95:e2:34:e7:a5:80:0a:fe:94:59:23:b6:e8:d2:64:61:28:6b: 90:c9:63:68:aa:05:55:de:e4:50:ae:72:64:f4:ad:7c:07:48: 1f:a5:74:40:12:b3:98:5c:f0:f7:54:ca:bc:1e:09:b1:43:1a: cb:b8:ee:50:26:bb:3b:46:78:0b:ba:32:f4:88:c7:6b:ba:81: f8:61:b4:e2:eb:95:6e:53:b2:e9:d2:93:9e:2c:01:f0:8c:cc: 98:62:5c:89:9f:d8:1a:38:cf:de:f9:57:b3:96:c3:ff:1c:1a: 2f:7a:30:8e:00:ea:48:78:b0:56:ba:11:1a:12:91:29:f4:45: ce:6a:fd:1e:d7:62:ed:6f:71:9c:ae:fc:22:2f:c8:29:15:3b: 6a:c1:ad:29:11:2d:e6:d6:e1:8a:db:c0:17:c3:bd:21:2a:dd: 6a:23:e7:0d:80:ce:c1:77:ea:99:e8:54:9b:69:e9:e8:31:d8: 16:2a:cd:79:34:9c:43:e1:da:2f:36:f2:91:6d:94:47:2a:74: 14:a7:cf:1e:47:3c:71:ee:5e:e7:0c:99:31:d5:b7:b1:ec:23: 62:cc:a1:d5:df:0e:42:ad:df:fb:c0:c5:95:96:24:42:5a:ef: 48:0d:74:d7:66:2a:09:ff:78:3c:c3:3f:5c:26:e7:a7:f6:a1: 88:55:70:2a -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZrel+fYmBaPsF55Cz0dAmspMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDk4YTE5MDViYmQzMzgxNTMzODI4ZjZiN2ZkMjI3MTcw NDMxZWYwHhcNMjUxMjAyMTAyNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjUzNzdjNjY3NTFkNDA0ODk5NjcwMWNiMGIxNTNhODMyMmU4YjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ0pm8TsTmEU7x+1Ciz+aXGe7wr2 LTRhn/kVJWCFx/3rV5aMDoLMEACGk2laDi4gO2P7wbdZZnqODCyr8PM+lvOZncn7 piR+1G+gkK0/sNy9CopDNPdXzsIMdpBtdRVznlIO03DBPjAXU3NEP4mzkflFsM7c /k9o4rIvqxANT7TwutuGw+ekgMc3UbmTWhvoX2UZXPRmjTL6Iy1xlrF2x7yD6LQM yU0dYX9M9MEFI2Ac/8JML4ZiqBLHM+qnktO13aWSH7FsclkESy8XvQg9KAQy+YGa twJJdFN2Xs5VHfdbk6uIoD5qamz4c+fNyiKcgxhMXwaQzTSEqC70H6+r/wIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFL9Td8ZnUdQEiZZwHLCxU6gyLotQMB8GA1UdIwQY MBaAFMEJihkFu9M4FTOCj2t/0icXBDHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUt YjJhNzEzZDJlYWIyLzEvdjFOM3htZFIxQVNKbG5BY3NMRlRxREl1aTFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUtYjJhNzEzZDJlYWIy LzEvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAT4TDMAwD BABt5nkDBABt5noDBAFt5nwDBAB6ZnQwDQYJKoZIhvcNAQELBQADggEBAJXiNOel gAr+lFkjtujSZGEoa5DJY2iqBVXe5FCucmT0rXwHSB+ldEASs5hc8PdUyrweCbFD Gsu47lAmuztGeAu6MvSIx2u6gfhhtOLrlW5TsunSk54sAfCMzJhiXImf2Bo4z975 V7OWw/8cGi96MI4A6kh4sFa6ERoSkSn0Rc5q/R7XYu1vcZyu/CIvyCkVO2rBrSkR LebW4YrbwBfDvSEq3Woj5w2AzsF36pnoVJtp6egx2BYqzXk0nEPh2i828pFtlEcq dBSnzx5HPHHuXucMmTHVt7HsI2LModXfDkKt3/vAxZWWJEJa70gNdNdmKgn/eDzD P1wm56f2oYhVcCo= -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:32 2025 by rpki-client