This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/lP2nAEJiIiUcsQzexOuSk_UchK4.roa File: lP2nAEJiIiUcsQzexOuSk_UchK4.roa (raw, json) Hash identifier: ywPg2m21nr7CfXnwcup4+15l/gRpGCe4Z8rmju+1Lcg= Subject key identifier: 94:FD:A7:00:42:62:22:25:1C:B1:0C:DE:C4:EB:92:93:F5:1C:84:AE Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Certificate serial: 019ADE4EA84EF995E275975291492608592B Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/lP2nAEJiIiUcsQzexOuSk_UchK4.roa Signing time: Tue 02 Dec 2025 09:04:48 +0000 ROA not before: Tue 02 Dec 2025 09:04:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210099 IP address blocks: 85.117.236.0/24 maxlen: 24 85.117.237.0/24 maxlen: 24 85.117.238.0/24 maxlen: 24 185.17.113.0/24 maxlen: 24 185.17.114.0/24 maxlen: 24 185.73.200.0/24 maxlen: 24 185.73.201.0/24 maxlen: 24 185.165.77.0/24 maxlen: 24 2a04:7c1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:4e:a8:4e:f9:95:e2:75:97:52:91:49:26:08:59:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Validity Not Before: Dec 2 09:04:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=94fda700426222251cb10cdec4eb9293f51c84ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:93:56:b3:f2:30:de:f9:03:f8:16:5a:98:14: ff:40:53:74:68:f1:fe:4a:ef:02:11:7b:01:08:2c: 61:ab:15:c9:f0:ce:c9:d3:f0:f3:b6:bd:76:5d:a9: f9:03:4e:1e:4b:e6:77:2c:f5:b7:fe:3a:d6:c8:bd: 90:ea:af:ab:65:1a:41:bb:7e:4b:22:cb:35:b3:9f: 00:b4:36:b5:95:12:e2:9f:09:d5:a4:02:52:07:a3: 37:d1:e1:de:15:a5:1c:0f:4e:ab:8c:63:c0:d1:7d: a2:d5:e1:72:27:bf:95:8d:a8:9f:10:f1:a7:b0:64: 73:fc:14:e7:7d:77:fc:d9:59:9c:6b:22:0e:21:ae: c6:50:af:19:11:ed:dc:ee:1c:c5:ef:52:c5:fa:74: e2:2a:27:6f:8e:5f:d4:d3:ca:7e:40:ab:ec:58:57: d3:88:a3:3b:6e:37:c7:52:4c:6c:27:2e:6a:df:20: 1c:49:56:8e:c1:13:20:d5:6c:56:c4:71:f1:6f:87: df:e3:19:48:68:ca:16:62:24:32:74:01:56:15:de: ab:31:8e:d5:dd:04:0a:28:69:bf:04:9f:6c:31:af: e8:10:ee:42:40:11:75:32:7a:41:0c:7a:f3:17:0b: f8:ff:47:96:15:f9:96:18:4d:c8:79:67:8d:0e:ab: 8c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FD:A7:00:42:62:22:25:1C:B1:0C:DE:C4:EB:92:93:F5:1C:84:AE X509v3 Authority Key Identifier: keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/lP2nAEJiIiUcsQzexOuSk_UchK4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.117.236.0-85.117.238.255 185.17.113.0-185.17.114.255 185.73.200.0/23 185.165.77.0/24 IPv6: 2a04:7c1::/32 Signature Algorithm: sha256WithRSAEncryption d5:5f:72:0e:c6:f7:fd:fb:93:25:9e:d0:bf:2b:68:47:62:03: d7:c2:76:f6:e1:ec:43:75:e6:88:94:eb:09:f5:5b:ac:fd:60: 67:52:13:57:ad:58:20:4f:56:d2:de:df:5d:03:b4:a9:dc:d5: 1a:1d:61:af:c6:5b:0d:2a:1c:cb:ae:83:37:b8:31:70:59:2a: 24:07:9a:cd:c0:ad:ef:83:99:be:3d:09:27:0a:d0:e0:fa:0f: 14:ba:b6:e1:d1:1c:18:59:7e:79:39:f0:10:62:5d:fb:7a:d4: 93:14:72:ec:16:7b:57:cd:4a:8e:30:92:4d:af:95:e4:58:56: 3f:ea:a7:e6:9f:77:00:76:67:57:8f:d6:59:59:8d:f7:31:e2: d1:ca:76:19:4e:4f:5b:7a:65:0a:a8:7e:c3:9f:49:2e:ec:cc: 81:4b:7f:bd:1e:e2:34:4c:da:d8:74:3d:51:3b:a9:cc:43:2f: 3b:41:48:fb:9a:ef:c3:31:08:ce:56:c0:b1:40:78:8d:1e:d5: 6e:d2:a5:0a:1e:87:5d:2f:9e:d8:43:36:82:b8:9b:33:26:e9: 64:4a:c3:9e:5b:3a:eb:dc:4e:f1:ab:92:47:c5:cf:dc:8f:ea: ba:ef:c9:86:ae:08:7c:70:65:35:39:82:ea:c1:4b:a3:0b:94: f7:f0:5a:e1 -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgISAZreTqhO+ZXidZdSkUkmCFkrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmRkOWRhZDc1ODc3ZjdkMjhkMTRlMDhkYzU1YjEzMzBi ZDEzYjcwHhcNMjUxMjAyMDkwNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGZkYTcwMDQyNjIyMjI1MWNiMTBjZGVjNGViOTI5M2Y1MWM4NGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZNWs/Iw3vkD+BZamBT/QFN0aPH+ Su8CEXsBCCxhqxXJ8M7J0/Dztr12Xan5A04eS+Z3LPW3/jrWyL2Q6q+rZRpBu35L Iss1s58AtDa1lRLinwnVpAJSB6M30eHeFaUcD06rjGPA0X2i1eFyJ7+VjaifEPGn sGRz/BTnfXf82VmcayIOIa7GUK8ZEe3c7hzF71LF+nTiKidvjl/U08p+QKvsWFfT iKM7bjfHUkxsJy5q3yAcSVaOwRMg1WxWxHHxb4ff4xlIaMoWYiQydAFWFd6rMY7V 3QQKKGm/BJ9sMa/oEO5CQBF1MnpBDHrzFwv4/0eWFfmWGE3IeWeNDquMMQIDAQAB o4ICOjCCAjYwHQYDVR0OBBYEFJT9pwBCYiIlHLEM3sTrkpP1HISuMB8GA1UdIwQY MBaAFKdt2drXWHf30o0U4I3FWxMwvRO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQt MmFjNmZmNzViZWIwLzEvbFAybkFFSmlJaVVjc1F6ZXhPdVNrX1VjaEs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQtMmFjNmZmNzViZWIw LzEvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAuBAIAATAoMAwDBAJVdewD BABVde4wDAMEALkRcQMEALkRcgMEAblJyAMEALmlTTANBAIAAjAHAwUAKgQHwTAN BgkqhkiG9w0BAQsFAAOCAQEA1V9yDsb3/fuTJZ7QvytoR2ID18J29uHsQ3XmiJTr CfVbrP1gZ1ITV61YIE9W0t7fXQO0qdzVGh1hr8ZbDSocy66DN7gxcFkqJAeazcCt 74OZvj0JJwrQ4PoPFLq24dEcGFl+eTnwEGJd+3rUkxRy7BZ7V81KjjCSTa+V5FhW P+qn5p93AHZnV4/WWVmN9zHi0cp2GU5PW3plCqh+w59JLuzMgUt/vR7iNEza2HQ9 UTupzEMvO0FI+5rvwzEIzlbAsUB4jR7VbtKlCh6HXS+e2EM2gribMybpZErDnls6 69xO8auSR8XP3I/quu/Jhq4IfHBlNTmC6sFLowuU9/Ba4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 05:42:16 2025 by rpki-client