This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/JdIl599bFrQkvYK71kA-jh9kgoI.roa File: JdIl599bFrQkvYK71kA-jh9kgoI.roa (raw, json) Hash identifier: 2ri06SGgJjF1564kDMoX3o5lXa4aDkLikcCvYOLBym0= Subject key identifier: 25:D2:25:E7:DF:5B:16:B4:24:BD:82:BB:D6:40:3E:8E:1F:64:82:82 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B26F550D8A32C6A8A8D8677985104A0CE Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/JdIl599bFrQkvYK71kA-jh9kgoI.roa Signing time: Tue 16 Dec 2025 11:39:29 +0000 ROA not before: Tue 16 Dec 2025 11:39:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206385 IP address blocks: 37.18.25.0/24 maxlen: 24 37.18.41.0/24 maxlen: 24 37.230.136.0/24 maxlen: 24 37.230.230.0/24 maxlen: 24 46.243.173.0/24 maxlen: 24 141.101.175.0/24 maxlen: 24 141.101.199.0/24 maxlen: 24 178.170.253.0/24 maxlen: 24 185.2.33.0/24 maxlen: 24 188.72.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 08:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:f5:50:d8:a3:2c:6a:8a:8d:86:77:98:51:04:a0:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Dec 16 11:39:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=25d225e7df5b16b424bd82bbd6403e8e1f648282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:02:d4:5e:3b:7a:48:b2:18:64:59:04:49:fc: ea:0d:85:6f:42:27:b4:d2:37:71:e0:4b:92:d2:ef: b6:1a:28:f8:f5:cd:b6:82:3d:9c:61:4b:cb:f6:f1: b2:5a:0e:2e:de:c6:f0:1c:6f:77:ea:ac:2b:90:af: 0e:db:7a:1a:04:52:e2:d4:b4:c4:55:f6:81:cb:40: a7:a9:76:49:4e:4d:5c:2c:db:79:b6:83:42:b1:ae: 27:4c:0f:ab:a1:52:70:8f:f4:6b:ef:25:9f:df:fb: 67:b0:9b:fa:c5:4c:c8:e4:07:a4:05:b2:02:97:9b: 9f:2c:69:1e:f0:a9:db:18:ff:b7:a8:ae:0d:ca:07: 2f:c8:9c:cd:5f:eb:6f:62:6b:03:70:6f:3f:b4:f1: 58:ff:80:c9:dd:76:bd:f0:58:d1:60:ed:28:d6:54: 47:1c:30:0f:98:a4:a1:12:c9:c6:58:28:8d:92:d9: f2:96:3d:94:c9:4c:b8:2d:08:a6:9b:4a:40:bb:d1: 29:5b:83:33:8e:aa:8b:1d:fb:51:44:84:09:d8:5d: 65:4a:e9:72:3b:5f:c3:95:e3:8d:33:2a:48:92:4a: bf:77:31:fa:53:f5:ec:9c:05:b0:b4:6d:e0:87:99: 96:0a:06:9a:69:ae:3d:12:03:3a:30:f6:54:8f:02: e3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D2:25:E7:DF:5B:16:B4:24:BD:82:BB:D6:40:3E:8E:1F:64:82:82 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/JdIl599bFrQkvYK71kA-jh9kgoI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.18.25.0/24 37.18.41.0/24 37.230.136.0/24 37.230.230.0/24 46.243.173.0/24 141.101.175.0/24 141.101.199.0/24 178.170.253.0/24 185.2.33.0/24 188.72.72.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:0f:85:57:15:a7:1b:e9:1c:3d:42:2f:52:c2:d3:0e:a6:4c: 61:eb:4c:01:f8:13:fd:9c:e6:bb:ee:e7:9b:4d:2b:d9:16:a3: f5:c6:16:31:c2:4d:0b:b6:15:86:a0:c2:08:20:e4:76:29:f4: 6d:9e:07:b6:91:07:bd:24:3a:0a:e3:ff:29:47:89:ff:88:79: cf:43:74:75:9b:6a:40:30:c5:10:a8:a4:04:17:33:97:e7:26: 9b:4c:67:81:6e:32:42:2a:0f:eb:fc:d5:02:13:09:8c:43:67: cd:ad:ed:c6:b5:f3:50:5d:c7:33:5c:25:34:6a:8d:f5:1a:a9: f6:fb:59:69:9a:cc:41:9b:ed:d3:39:46:9e:a6:31:35:40:62: 4f:bb:5a:f2:0b:59:26:f1:9b:ed:5b:18:fb:83:19:46:8d:f8: b2:41:fb:65:c8:85:33:8c:9e:d1:87:e1:06:b3:85:5b:3b:96: 45:0a:8b:18:50:5b:91:ba:52:5f:d0:bb:2e:34:66:12:83:e6: 10:26:78:23:7f:d7:9e:e6:45:34:96:7a:d1:a4:b7:1a:56:f2: 30:45:7f:34:c6:02:d2:c0:0e:a3:9d:08:02:f6:8d:46:35:3e: 0e:8c:b7:54:47:a0:3c:92:2f:24:d6:15:c3:cc:86:11:3c:f2: 1c:49:8b:c6 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZsm9VDYoyxqio2Gd5hRBKDOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjUxMjE2MTEzOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWQyMjVlN2RmNWIxNmI0MjRiZDgyYmJkNjQwM2U4ZTFmNjQ4MjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwLUXjt6SLIYZFkESfzqDYVvQie0 0jdx4EuS0u+2Gij49c22gj2cYUvL9vGyWg4u3sbwHG936qwrkK8O23oaBFLi1LTE VfaBy0CnqXZJTk1cLNt5toNCsa4nTA+roVJwj/Rr7yWf3/tnsJv6xUzI5AekBbIC l5ufLGke8KnbGP+3qK4NygcvyJzNX+tvYmsDcG8/tPFY/4DJ3Xa98FjRYO0o1lRH HDAPmKShEsnGWCiNktnylj2UyUy4LQimm0pAu9EpW4MzjqqLHftRRIQJ2F1lSuly O1/DleONMypIkkq/dzH6U/XsnAWwtG3gh5mWCgaaaa49EgM6MPZUjwLjUwIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFCXSJeffWxa0JL2Cu9ZAPo4fZIKCMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvSmRJbDU5OWJGclFrdllLNzFrQS1qaDlrZ29JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAJRIZAwQA JRIpAwQAJeaIAwQAJebmAwQALvOtAwQAjWWvAwQAjWXHAwQAsqr9AwQAuQIhAwQA vEhIMA0GCSqGSIb3DQEBCwUAA4IBAQBqD4VXFacb6Rw9Qi9SwtMOpkxh60wB+BP9 nOa77uebTSvZFqP1xhYxwk0LthWGoMIIIOR2KfRtnge2kQe9JDoK4/8pR4n/iHnP Q3R1m2pAMMUQqKQEFzOX5yabTGeBbjJCKg/r/NUCEwmMQ2fNre3GtfNQXcczXCU0 ao31Gqn2+1lpmsxBm+3TOUaepjE1QGJPu1ryC1km8ZvtWxj7gxlGjfiyQftlyIUz jJ7Rh+EGs4VbO5ZFCosYUFuRulJf0LsuNGYSg+YQJngjf9ee5kU0lnrRpLcaVvIw RX80xgLSwA6jnQgC9o1GNT4OjLdUR6A8ki8k1hXDzIYRPPIcSYvG -----END CERTIFICATE-----Generated at Thu Dec 18 14:47:53 2025 by rpki-client