This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/V3b1pUrNPUDu2Ul1C4IhrgVkQRs.roa File: V3b1pUrNPUDu2Ul1C4IhrgVkQRs.roa (raw, json) Hash identifier: dxrTquYG42Ys8qetsbpiX5O4ENqzA4uq2vBMY/IPxyw= Subject key identifier: 57:76:F5:A5:4A:CD:3D:40:EE:D9:49:75:0B:82:21:AE:05:64:41:1B Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019A6DA03DBA704247A1114E546DE63BF2FC Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/V3b1pUrNPUDu2Ul1C4IhrgVkQRs.roa Signing time: Mon 10 Nov 2025 11:56:49 +0000 ROA not before: Mon 10 Nov 2025 11:56:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56534 IP address blocks: 82.179.248.0/22 maxlen: 22 85.142.82.0/24 maxlen: 24 85.142.164.0/22 maxlen: 22 85.142.168.0/21 maxlen: 21 85.142.176.0/22 maxlen: 22 85.142.192.0/22 maxlen: 24 85.142.208.0/22 maxlen: 22 85.142.252.0/24 maxlen: 24 85.143.144.0/22 maxlen: 22 85.143.160.0/21 maxlen: 21 85.143.176.0/22 maxlen: 22 85.143.184.0/22 maxlen: 22 85.143.203.0/24 maxlen: 24 85.143.204.0/22 maxlen: 22 85.143.250.0/24 maxlen: 24 85.143.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6d:a0:3d:ba:70:42:47:a1:11:4e:54:6d:e6:3b:f2:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Nov 10 11:56:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5776f5a54acd3d40eed949750b8221ae0564411b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7a:f2:f7:a5:f6:d1:35:80:b3:ef:9a:3a:40: 8e:8e:a0:78:b3:88:1f:95:e8:4f:71:52:f9:9b:df: d0:60:59:ab:82:26:79:50:20:29:c5:a6:6f:67:88: f3:9e:86:96:c3:a4:e1:1c:1e:eb:fd:39:b8:38:db: 1e:9c:65:fc:3e:40:06:f0:4b:23:e9:37:da:06:b7: ff:96:4c:e0:2f:a0:26:a8:6e:d5:04:12:a4:35:0c: 38:b9:bc:ff:af:38:5e:9e:cf:5a:e3:df:80:76:49: 6d:0e:c0:c5:e7:fd:c1:5b:da:79:2a:4a:fc:dc:91: d4:fc:4f:de:cf:f3:55:81:be:82:ad:3b:6d:2d:18: 0b:83:a2:d1:b4:28:02:84:c0:81:69:fc:9e:d3:d3: 06:8f:da:7f:36:86:03:ea:f5:c5:6a:c7:16:81:8d: c8:5d:57:f3:36:05:ef:7e:1e:59:1a:1b:51:29:5c: 72:b8:5f:ab:0c:20:b2:e4:f4:eb:e1:49:2a:dd:a5: 76:73:7f:53:12:6d:12:2a:36:9a:98:4d:74:a0:e5: 12:35:23:e4:fa:26:8b:bb:52:f9:40:0f:b9:16:c6: 85:18:99:54:37:06:0b:b6:05:78:b7:6c:14:9e:10: 95:9b:86:58:41:bb:77:30:ae:a6:de:ca:53:70:9a: 70:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:76:F5:A5:4A:CD:3D:40:EE:D9:49:75:0B:82:21:AE:05:64:41:1B X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/V3b1pUrNPUDu2Ul1C4IhrgVkQRs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.179.248.0/22 85.142.82.0/24 85.142.164.0-85.142.179.255 85.142.192.0/22 85.142.208.0/22 85.142.252.0/24 85.143.144.0/22 85.143.160.0/21 85.143.176.0/22 85.143.184.0/22 85.143.203.0-85.143.207.255 85.143.250.0/24 85.143.252.0/22 Signature Algorithm: sha256WithRSAEncryption 71:45:84:a7:29:d6:92:58:05:a9:0e:10:f3:44:0a:a6:bb:39: b4:eb:56:11:f5:e7:51:6e:ad:97:1a:de:05:95:84:00:af:9c: 42:99:f7:38:95:91:e9:88:43:45:58:cb:39:32:9f:14:ee:bc: 8e:aa:07:13:c7:17:63:93:2e:b1:80:a7:fb:0c:cd:d4:fb:8f: 7a:1f:51:e6:66:56:8b:ad:e6:78:f2:46:2b:6a:ea:b1:dd:0d: bd:34:0a:f8:2e:b0:f6:8c:4e:08:d6:42:12:e4:e2:7e:ad:6c: e9:32:9d:40:9f:64:ba:c7:fc:fc:32:9b:90:51:f0:f7:01:65: 74:db:d7:e2:9e:dc:7b:3a:e9:c5:e9:b6:19:f3:30:0a:12:dd: 28:31:d2:c7:d1:33:22:e1:19:f3:15:fc:16:40:d9:f7:27:b4: 61:ec:2c:20:e3:e8:e7:64:04:25:2a:c5:8b:5a:25:a7:ed:a9: ed:6e:af:e5:a1:f3:fb:17:bf:bc:34:4f:0b:93:87:e0:8c:64: 35:81:c9:7e:9d:b0:26:e9:7a:d2:7f:72:3d:cc:21:24:46:3d: 65:63:e6:da:7b:0b:29:6c:9a:8c:75:21:80:74:a0:ac:c7:96: d8:76:3c:cd:42:59:ee:8b:6c:46:d9:db:7b:45:10:3b:c1:c7: 77:15:83:cb -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgISAZptoD26cEJHoRFOVG3mO/L8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjUxMTEwMTE1NjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Nzc2ZjVhNTRhY2QzZDQwZWVkOTQ5NzUwYjgyMjFhZTA1NjQ0MTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3ry96X20TWAs++aOkCOjqB4s4gf lehPcVL5m9/QYFmrgiZ5UCApxaZvZ4jznoaWw6ThHB7r/Tm4ONsenGX8PkAG8Esj 6TfaBrf/lkzgL6AmqG7VBBKkNQw4ubz/rzhens9a49+AdkltDsDF5/3BW9p5Kkr8 3JHU/E/ez/NVgb6CrTttLRgLg6LRtCgChMCBafye09MGj9p/NoYD6vXFascWgY3I XVfzNgXvfh5ZGhtRKVxyuF+rDCCy5PTr4Ukq3aV2c39TEm0SKjaamE10oOUSNSPk +iaLu1L5QA+5FsaFGJlUNwYLtgV4t2wUnhCVm4ZYQbt3MK6m3spTcJpwuwIDAQAB o4ICYTCCAl0wHQYDVR0OBBYEFFd29aVKzT1A7tlJdQuCIa4FZEEbMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvVjNiMXBVck5QVUR1MlVsMUM0SWhyZ1ZrUVJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBkBAIAATBeAwQCUrP4AwQA VY5SMAwDBAJVjqQDBAJVjrADBAJVjsADBAJVjtADBABVjvwDBAJVj5ADBANVj6AD BAJVj7ADBAJVj7gwDAMEAFWPywMEBFWPwAMEAFWP+gMEAlWP/DANBgkqhkiG9w0B AQsFAAOCAQEAcUWEpynWklgFqQ4Q80QKprs5tOtWEfXnUW6tlxreBZWEAK+cQpn3 OJWR6YhDRVjLOTKfFO68jqoHE8cXY5MusYCn+wzN1PuPeh9R5mZWi63mePJGK2rq sd0NvTQK+C6w9oxOCNZCEuTifq1s6TKdQJ9kusf8/DKbkFHw9wFldNvX4p7cezrp xem2GfMwChLdKDHSx9EzIuEZ8xX8FkDZ9ye0YewsIOPo52QEJSrFi1olp+2p7W6v 5aHz+xe/vDRPC5OH4IxkNYHJfp2wJul60n9yPcwhJEY9ZWPm2nsLKWyajHUhgHSg rMeW2HY8zUJZ7otsRtnbe0UQO8HHdxWDyw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:45:47 2025 by rpki-client