This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/IrqfmjYSmlJL7OXNC0rQX5WLKy4.roa File: IrqfmjYSmlJL7OXNC0rQX5WLKy4.roa (raw, json) Hash identifier: 4w58/gVJ68aFODCVE7Wslm87HGUIEPkeLLjV+tW59TI= Subject key identifier: 22:BA:9F:9A:36:12:9A:52:4B:EC:E5:CD:0B:4A:D0:5F:95:8B:2B:2E Certificate issuer: /CN=0ae4bc9401d9f87772c8c9c69834077512f42611 Certificate serial: 019AC63A3ED71B3433223D44929FD10888DD Authority key identifier: 0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/IrqfmjYSmlJL7OXNC0rQX5WLKy4.roa Signing time: Thu 27 Nov 2025 16:51:37 +0000 ROA not before: Thu 27 Nov 2025 16:51:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49791 IP address blocks: 81.85.73.0/24 maxlen: 24 2a11:2cc0:12::/47 maxlen: 47 2a11:2cc0:14::/47 maxlen: 47 2a11:2cc0:16::/47 maxlen: 47 2a11:2cc0:18::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c6:3a:3e:d7:1b:34:33:22:3d:44:92:9f:d1:08:88:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ae4bc9401d9f87772c8c9c69834077512f42611 Validity Not Before: Nov 27 16:51:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=22ba9f9a36129a524bece5cd0b4ad05f958b2b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:30:60:ca:2c:25:be:7a:d9:bd:3b:78:26:15: b3:0e:26:db:f1:b8:f6:ee:ee:86:6b:b7:80:5f:4c: aa:ff:47:04:f0:78:01:f1:e3:0c:7f:80:cc:d2:ba: f7:77:b8:25:d9:58:f9:b8:39:7b:aa:cf:20:1d:29: 2f:f7:8d:fa:f5:fb:21:8f:03:ed:0a:35:c2:05:a3: 5f:16:36:7f:3e:0f:38:c4:bf:47:2c:bd:6e:22:a7: 5c:46:74:90:15:b7:eb:d9:54:43:bf:a4:1c:74:4e: 49:46:b9:13:26:41:92:bc:92:17:21:51:07:e4:44: 5f:60:b6:51:46:29:8b:ae:71:90:9f:2e:e1:ca:56: 02:5d:3c:0a:4a:92:60:d5:fd:a1:5c:6f:77:7a:f7: 4a:b6:1e:c0:1f:ba:32:8e:ad:d1:66:2e:4e:6e:8f: 10:be:e9:e1:d7:98:20:bd:49:ad:29:8f:90:33:de: 4c:12:1b:3b:65:8a:95:94:e5:3b:5d:b7:c8:1b:ef: bd:8b:23:af:d1:e1:77:7b:b0:9c:8d:88:79:70:04: d9:45:88:56:8a:9a:1f:34:84:4e:ec:ed:2f:13:d8: b4:ba:16:e3:6f:4e:23:5b:8c:a2:2c:36:b3:c3:fc: 21:35:02:59:33:29:02:3e:fc:da:24:fd:08:7f:96: 66:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BA:9F:9A:36:12:9A:52:4B:EC:E5:CD:0B:4A:D0:5F:95:8B:2B:2E X509v3 Authority Key Identifier: keyid:0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/IrqfmjYSmlJL7OXNC0rQX5WLKy4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.85.73.0/24 IPv6: 2a11:2cc0:12::-2a11:2cc0:19:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 3e:33:8f:a7:05:b1:3b:26:9d:66:43:03:92:c0:79:97:d4:05: e5:8c:f2:39:88:a6:53:e5:9b:f0:dc:ab:3c:dd:ce:04:02:ae: d1:11:12:00:84:05:12:17:7b:cd:1b:5c:7b:12:dd:d4:f9:25: c0:5e:fc:ff:fb:a7:f5:61:27:0e:f1:22:b7:c1:da:88:f9:d0: 67:79:dd:69:7a:71:39:2b:34:0b:b8:97:c2:12:ba:30:80:d8: 8c:a5:60:e2:60:93:fe:bb:86:f5:05:51:14:3b:50:d9:79:a3: 82:e3:cc:6f:9c:11:94:15:60:f0:dd:22:62:0e:2c:80:2a:7b: e1:ee:f8:f8:30:81:dc:e7:59:57:09:9f:b1:73:08:f4:87:e1: fc:cf:27:c4:f9:7d:ad:e2:07:dd:7a:d9:b2:2d:b0:ad:35:08: 7a:0e:ea:e6:f5:39:95:42:f0:f1:7d:40:76:84:02:60:ff:19: cb:7f:fc:ce:ce:20:00:a8:87:08:18:69:73:ce:2b:ce:b2:40: 5b:b6:cd:8e:c9:23:80:f6:71:25:cd:83:50:af:8f:eb:85:c1: 38:cf:24:05:9f:6b:47:03:b6:b9:e2:1b:c2:6d:84:9e:ed:b6: 83:98:09:c3:cd:67:1a:1b:7e:0c:86:92:77:05:4d:fe:d3:9b: 47:e1:54:66 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrGOj7XGzQzIj1Ekp/RCIjdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZTRiYzk0MDFkOWY4Nzc3MmM4YzljNjk4MzQwNzc1MTJm NDI2MTEwHhcNMjUxMTI3MTY1MTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmJhOWY5YTM2MTI5YTUyNGJlY2U1Y2QwYjRhZDA1Zjk1OGIyYjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDBgyiwlvnrZvTt4JhWzDibb8bj2 7u6Ga7eAX0yq/0cE8HgB8eMMf4DM0rr3d7gl2Vj5uDl7qs8gHSkv94369fshjwPt CjXCBaNfFjZ/Pg84xL9HLL1uIqdcRnSQFbfr2VRDv6QcdE5JRrkTJkGSvJIXIVEH 5ERfYLZRRimLrnGQny7hylYCXTwKSpJg1f2hXG93evdKth7AH7oyjq3RZi5Obo8Q vunh15ggvUmtKY+QM95MEhs7ZYqVlOU7XbfIG++9iyOv0eF3e7CcjYh5cATZRYhW ipofNIRO7O0vE9i0uhbjb04jW4yiLDazw/whNQJZMykCPvzaJP0If5Zm5wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCK6n5o2EppSS+zlzQtK0F+ViysuMB8GA1UdIwQY MBaAFArkvJQB2fh3csjJxpg0B3US9CYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0Mzct MjQyNDY2ODJiZjAwLzEvSXJxZm1qWVNtbEpMN09YTkMwclFYNVdMS3k0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0MzctMjQyNDY2ODJiZjAw LzEvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQAUVVJMBoE AgACMBQwEgMHASoRLMAAEgMHASoRLMAAGDANBgkqhkiG9w0BAQsFAAOCAQEAPjOP pwWxOyadZkMDksB5l9QF5YzyOYimU+Wb8NyrPN3OBAKu0RESAIQFEhd7zRtcexLd 1PklwF78//un9WEnDvEit8HaiPnQZ3ndaXpxOSs0C7iXwhK6MIDYjKVg4mCT/ruG 9QVRFDtQ2XmjguPMb5wRlBVg8N0iYg4sgCp74e74+DCB3OdZVwmfsXMI9Ifh/M8n xPl9reIH3XrZsi2wrTUIeg7q5vU5lULw8X1AdoQCYP8Zy3/8zs4gAKiHCBhpc84r zrJAW7bNjskjgPZxJc2DUK+P64XBOM8kBZ9rRwO2ueIbwm2Enu22g5gJw81nGht+ DIaSdwVN/tObR+FUZg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:10:56 2025 by rpki-client