This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/StEj_fKIhM_Y-WvhqR9asn3zkJ4.roa File: StEj_fKIhM_Y-WvhqR9asn3zkJ4.roa (raw, json) Hash identifier: rySuoIem67mU+hNq7a7plBWUhA9LSHC6nBRvTCxnrcI= Subject key identifier: 4A:D1:23:FD:F2:88:84:CF:D8:F9:6B:E1:A9:1F:5A:B2:7D:F3:90:9E Certificate issuer: /CN=0ae4bc9401d9f87772c8c9c69834077512f42611 Certificate serial: 019AEF5274FBCAD298CF18025C8E3901C6B0 Authority key identifier: 0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/StEj_fKIhM_Y-WvhqR9asn3zkJ4.roa Signing time: Fri 05 Dec 2025 16:22:29 +0000 ROA not before: Fri 05 Dec 2025 16:22:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50053 IP address blocks: 81.85.72.0/24 maxlen: 24 81.85.74.0/24 maxlen: 24 81.85.75.0/24 maxlen: 24 213.155.28.0/24 maxlen: 24 2a11:2cc0:2::/47 maxlen: 47 2a11:2cc0:4::/47 maxlen: 47 2a11:2cc0:6::/47 maxlen: 47 2a11:2cc0:8::/47 maxlen: 47 2a11:2cc0:10::/47 maxlen: 47 2a11:2cc0:20::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.mft rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:52:74:fb:ca:d2:98:cf:18:02:5c:8e:39:01:c6:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ae4bc9401d9f87772c8c9c69834077512f42611 Validity Not Before: Dec 5 16:22:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4ad123fdf28884cfd8f96be1a91f5ab27df3909e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b0:1a:9c:1b:8f:45:64:39:6e:e7:08:1f:ff: 76:9e:51:45:ab:28:39:f9:44:a6:c6:7b:fa:94:d2: 3c:52:aa:68:a0:20:b4:cb:b8:0c:18:90:03:51:66: c9:3d:54:6e:d3:cb:5e:cd:a6:4c:18:84:7a:d6:84: f8:50:41:b1:49:ae:fb:43:c6:53:67:2b:36:2d:ca: d8:af:e5:db:51:ac:32:31:62:b3:8e:25:02:bc:38: 90:e1:9b:fd:d7:7b:71:01:31:bb:ac:85:cf:77:69: 4b:fc:90:80:88:8b:c3:20:52:6b:1a:44:64:16:c5: 75:cf:0c:02:72:06:ce:7b:53:d5:b1:69:63:ab:f1: a1:72:30:6b:a5:50:50:95:a9:a8:60:24:e0:3d:a5: 87:a4:ea:a7:03:2d:ac:0b:ca:94:59:b4:6e:e8:c7: 5a:bf:df:89:9d:39:88:e0:49:2f:8b:46:26:2b:8c: ba:f4:bd:ea:ae:76:8f:08:1c:e0:d1:d7:43:a6:bf: 6a:68:6e:29:cc:e3:c6:a5:cc:cd:3c:61:3f:f8:0d: e1:7a:55:87:09:bc:9b:75:c7:a7:5d:53:2b:15:e9: 35:dc:e4:b3:b3:2c:a9:e3:a6:4c:ec:7d:9b:a3:7d: b9:61:4c:f8:75:7f:2a:85:a3:0b:49:a1:5c:9e:9a: cb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D1:23:FD:F2:88:84:CF:D8:F9:6B:E1:A9:1F:5A:B2:7D:F3:90:9E X509v3 Authority Key Identifier: keyid:0A:E4:BC:94:01:D9:F8:77:72:C8:C9:C6:98:34:07:75:12:F4:26:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/StEj_fKIhM_Y-WvhqR9asn3zkJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a407a0-8bc1-4416-9437-24246682bf00/1/CuS8lAHZ-HdyyMnGmDQHdRL0JhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.85.72.0/24 81.85.74.0/23 213.155.28.0/24 IPv6: 2a11:2cc0:2::-2a11:2cc0:9:ffff:ffff:ffff:ffff:ffff 2a11:2cc0:10::/47 2a11:2cc0:20::/47 Signature Algorithm: sha256WithRSAEncryption 49:0b:e1:47:d2:84:78:b8:9b:11:f2:55:26:89:b7:c2:af:d0: a5:3a:ac:92:ef:65:7c:69:05:53:4e:74:ef:98:1e:35:0d:63: b5:c6:46:73:a6:1f:fa:7f:a4:7a:8c:7b:4c:e7:f4:7c:7c:59: 83:87:b0:cc:cc:e7:d1:67:d9:55:8c:d0:d4:24:cb:fb:da:34: a4:d4:89:26:32:3f:14:3c:7c:de:02:e6:ca:42:0b:69:4a:cc: d1:0d:db:6e:db:1b:9f:a8:26:95:73:e9:1c:81:b2:ea:94:5d: ac:42:db:1a:ad:f6:78:8b:80:c5:ac:5e:19:b0:4b:10:2a:ea: d1:f6:4d:c0:be:b7:4b:6d:4f:32:75:f2:aa:49:3a:67:93:cc: cf:33:a3:3e:ac:18:46:89:1c:ec:8d:fb:90:8f:1c:78:85:a6: 3f:6f:5e:3f:09:5a:e1:46:d5:1f:b6:10:50:bc:1e:98:97:16: 0e:88:46:60:9d:59:e5:9d:aa:05:d2:1b:8a:50:50:9f:02:73: 2b:03:e1:cd:af:ee:df:8f:35:f1:aa:29:f2:8b:59:bb:d6:71: 0d:79:aa:80:ca:b4:ab:cb:a9:9a:64:fa:fc:20:be:5d:3f:04: 9d:49:63:aa:fa:61:01:f3:a8:4a:df:54:a8:27:2f:92:42:0f: a4:1f:02:ba -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZrvUnT7ytKYzxgCXI45AcawMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZTRiYzk0MDFkOWY4Nzc3MmM4YzljNjk4MzQwNzc1MTJm NDI2MTEwHhcNMjUxMjA1MTYyMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWQxMjNmZGYyODg4NGNmZDhmOTZiZTFhOTFmNWFiMjdkZjM5MDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7AanBuPRWQ5bucIH/92nlFFqyg5 +USmxnv6lNI8UqpooCC0y7gMGJADUWbJPVRu08tezaZMGIR61oT4UEGxSa77Q8ZT Zys2LcrYr+XbUawyMWKzjiUCvDiQ4Zv913txATG7rIXPd2lL/JCAiIvDIFJrGkRk FsV1zwwCcgbOe1PVsWljq/GhcjBrpVBQlamoYCTgPaWHpOqnAy2sC8qUWbRu6Mda v9+JnTmI4Ekvi0YmK4y69L3qrnaPCBzg0ddDpr9qaG4pzOPGpczNPGE/+A3helWH CbybdcenXVMrFek13OSzsyyp46ZM7H2bo325YUz4dX8qhaMLSaFcnprLAQIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFErRI/3yiITP2Plr4akfWrJ985CeMB8GA1UdIwQY MBaAFArkvJQB2fh3csjJxpg0B3US9CYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0Mzct MjQyNDY2ODJiZjAwLzEvU3RFal9mS0loTV9ZLVd2aHFSOWFzbjN6a0o0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9hNDA3YTAtOGJjMS00NDE2LTk0MzctMjQyNDY2ODJiZjAw LzEvQ3VTOGxBSFotSGR5eU1uR21EUUhkUkwwSmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAYBAIAATASAwQAUVVIAwQB UVVKAwQA1ZscMCwEAgACMCYwEgMHASoRLMAAAgMHASoRLMAACAMHASoRLMAAEAMH ASoRLMAAIDANBgkqhkiG9w0BAQsFAAOCAQEASQvhR9KEeLibEfJVJom3wq/QpTqs ku9lfGkFU05075geNQ1jtcZGc6Yf+n+keox7TOf0fHxZg4ewzMzn0WfZVYzQ1CTL +9o0pNSJJjI/FDx83gLmykILaUrM0Q3bbtsbn6gmlXPpHIGy6pRdrELbGq32eIuA xaxeGbBLECrq0fZNwL63S21PMnXyqkk6Z5PMzzOjPqwYRokc7I37kI8ceIWmP29e Pwla4UbVH7YQULwemJcWDohGYJ1Z5Z2qBdIbilBQnwJzKwPhza/u34818aop8otZ u9ZxDXmqgMq0q8upmmT6/CC+XT8EnUljqvphAfOoSt9UqCcvkkIPpB8Cug== -----END CERTIFICATE-----Generated at Sat Dec 6 13:10:12 2025 by rpki-client