This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/C1tAEFoIcdJAtF2ExZVQXIH_FsY.roa File: C1tAEFoIcdJAtF2ExZVQXIH_FsY.roa (raw, json) Hash identifier: 4q/3ob8n81loULFL00VzaUuNzAhMUIybAm+ctGIuwP0= Subject key identifier: 0B:5B:40:10:5A:08:71:D2:40:B4:5D:84:C5:95:50:5C:81:FF:16:C6 Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Certificate serial: 019A5A94942779B6BFAED5920ABDB9235EF8 Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/C1tAEFoIcdJAtF2ExZVQXIH_FsY.roa Signing time: Thu 06 Nov 2025 19:11:17 +0000 ROA not before: Thu 06 Nov 2025 19:11:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41952 IP address blocks: 185.228.206.0/24 maxlen: 24 193.32.192.0/24 maxlen: 24 193.32.193.0/24 maxlen: 24 193.32.194.0/24 maxlen: 24 193.32.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5a:94:94:27:79:b6:bf:ae:d5:92:0a:bd:b9:23:5e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Validity Not Before: Nov 6 19:11:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0b5b40105a0871d240b45d84c595505c81ff16c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:68:c2:36:c9:ba:12:91:1a:f7:9b:6c:8b:2f: be:ef:ea:b2:d7:72:d3:fa:55:2e:2b:b6:ec:8c:5e: 81:a0:9f:45:13:e3:ad:88:eb:73:eb:92:a6:9c:87: fe:cf:5d:ff:23:35:68:dd:dd:e3:63:b0:e5:c9:b0: 9b:37:6b:d9:07:b2:7a:c4:5f:fa:6b:b1:47:1d:e6: e1:8f:5b:99:86:94:91:56:0f:29:0c:cb:64:86:4e: 9d:fd:ec:3a:74:15:27:c0:0b:4c:20:fc:49:d4:3c: 4c:05:ea:e3:0e:6c:f1:93:e7:5a:96:9e:13:96:88: d9:56:55:a6:06:8e:b4:4e:c9:90:da:37:c8:bb:73: 7e:d7:66:56:56:79:da:c2:6b:c2:33:61:d2:8a:46: e2:1c:27:55:cf:66:e9:0e:9f:7f:a0:17:19:33:98: 45:77:53:23:b1:8a:38:c8:8d:6f:ab:79:f6:ec:50: af:0b:72:78:a6:3a:de:d3:16:5e:70:6c:81:80:fb: 07:a1:95:93:ac:c9:b5:50:70:06:55:1f:f3:c1:8f: 43:74:db:9d:2f:dd:3c:24:2c:41:e2:c6:36:9e:dc: c7:36:f2:31:dc:01:d3:f4:68:45:6b:88:8c:b8:22: 11:9e:77:5a:17:59:1d:88:c4:21:58:8d:1d:46:c6: 83:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5B:40:10:5A:08:71:D2:40:B4:5D:84:C5:95:50:5C:81:FF:16:C6 X509v3 Authority Key Identifier: keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/C1tAEFoIcdJAtF2ExZVQXIH_FsY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.228.206.0/24 193.32.192.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:0f:46:02:cd:a8:26:50:00:b3:6f:a4:5b:3d:56:a2:29:9a: dd:fb:fd:2f:be:54:1d:eb:75:72:d8:55:29:c7:d8:e5:31:59: cc:92:73:0f:ce:27:00:ae:b9:b3:7a:e3:2e:5a:83:12:cf:e6: fb:c1:ae:c9:28:1e:68:0f:42:1c:c5:ae:70:f2:b1:d2:b2:c7: 73:4f:4d:51:e4:69:a9:6b:01:9a:97:94:49:7e:a6:69:ca:f6: 3c:6c:0b:3d:b7:9a:a4:14:de:f1:4d:c3:d6:d1:0f:4b:92:66: 8a:37:07:76:03:10:6c:82:8f:87:46:f9:7b:60:c1:db:3f:28: 29:6f:1d:d0:12:35:42:a9:a8:78:b6:8c:d8:11:f3:38:65:29: 62:bd:79:d3:07:eb:12:a1:89:4d:6e:54:a3:64:60:5a:00:75: f7:b8:ca:d0:82:02:87:53:e4:1a:f4:7d:55:58:73:2e:6e:29: 40:6a:6a:47:63:9f:cd:fe:59:03:65:fb:63:24:dd:88:79:cb: d7:08:45:50:b9:1f:33:4c:3a:02:e1:98:d9:8f:05:54:11:35: c2:f0:85:36:cc:fa:15:47:b6:d7:ed:f2:7a:b2:d4:7b:b3:ba: 29:36:7d:ce:74:ba:84:0c:ce:04:51:5a:58:20:65:f7:1f:ff: 49:8f:e8:2e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZpalJQneba/rtWSCr25I174MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk YzJhZjkwHhcNMjUxMTA2MTkxMTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjViNDAxMDVhMDg3MWQyNDBiNDVkODRjNTk1NTA1YzgxZmYxNmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2jCNsm6EpEa95tsiy++7+qy13LT +lUuK7bsjF6BoJ9FE+OtiOtz65KmnIf+z13/IzVo3d3jY7DlybCbN2vZB7J6xF/6 a7FHHebhj1uZhpSRVg8pDMtkhk6d/ew6dBUnwAtMIPxJ1DxMBerjDmzxk+dalp4T lojZVlWmBo60TsmQ2jfIu3N+12ZWVnnawmvCM2HSikbiHCdVz2bpDp9/oBcZM5hF d1MjsYo4yI1vq3n27FCvC3J4pjre0xZecGyBgPsHoZWTrMm1UHAGVR/zwY9DdNud L908JCxB4sY2ntzHNvIx3AHT9GhFa4iMuCIRnndaF1kdiMQhWI0dRsaDhwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAtbQBBaCHHSQLRdhMWVUFyB/xbGMB8GA1UdIwQY MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt N2E5MzY3NTFkYjFiLzEvQzF0QUVGb0ljZEpBdEYyRXhaVlFYSUhfRnNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAueTOAwQC wSDAMA0GCSqGSIb3DQEBCwUAA4IBAQB8D0YCzagmUACzb6RbPVaiKZrd+/0vvlQd 63Vy2FUpx9jlMVnMknMPzicArrmzeuMuWoMSz+b7wa7JKB5oD0Icxa5w8rHSssdz T01R5GmpawGal5RJfqZpyvY8bAs9t5qkFN7xTcPW0Q9LkmaKNwd2AxBsgo+HRvl7 YMHbPygpbx3QEjVCqah4tozYEfM4ZSlivXnTB+sSoYlNblSjZGBaAHX3uMrQggKH U+Qa9H1VWHMubilAampHY5/N/lkDZftjJN2IecvXCEVQuR8zTDoC4ZjZjwVUETXC 8IU2zPoVR7bX7fJ6stR7s7opNn3OdLqEDM4EUVpYIGX3H/9Jj+gu -----END CERTIFICATE-----Generated at Sat Dec 6 12:39:14 2025 by rpki-client