This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/EyJebdgN_fWVOlchPG_q8jVIsTI.roa File: EyJebdgN_fWVOlchPG_q8jVIsTI.roa (raw, json) Hash identifier: pQpIAFQ+yM9up9856kTHZ8z3CJ8nyC04WtkTgvAhl0g= Subject key identifier: 13:22:5E:6D:D8:0D:FD:F5:95:3A:57:21:3C:6F:EA:F2:35:48:B1:32 Certificate issuer: /CN=c6c58ed1af964a7668e44397619ee1985a2491c5 Certificate serial: 019A5DEEBAA38CA0EDA79F1E43A589250C78 Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/EyJebdgN_fWVOlchPG_q8jVIsTI.roa Signing time: Fri 07 Nov 2025 10:48:37 +0000 ROA not before: Fri 07 Nov 2025 10:48:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 201237 IP address blocks: 185.81.20.0/24 maxlen: 24 185.81.21.0/24 maxlen: 24 185.81.22.0/24 maxlen: 24 185.81.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5d:ee:ba:a3:8c:a0:ed:a7:9f:1e:43:a5:89:25:0c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5 Validity Not Before: Nov 7 10:48:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=13225e6dd80dfdf5953a57213c6feaf23548b132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7c:5f:49:92:a1:dc:6e:e4:09:80:f6:8e:90: 20:d3:f1:2a:a7:a7:8e:70:10:28:98:47:01:05:68: 4d:4c:ee:80:69:f4:22:ea:37:aa:73:18:75:05:f5: 5d:42:70:c1:fb:ab:14:b9:58:3d:ed:ff:3b:69:23: 6c:00:97:cd:9b:d4:2d:49:d1:c3:b0:d6:8c:2f:44: fd:96:5a:d7:ce:31:9a:35:b0:b5:69:12:27:38:ad: 65:fe:d1:ca:0e:d9:1b:83:f6:2a:aa:84:64:f7:71: 4d:66:ea:f1:e7:17:aa:9f:c3:05:a7:9b:ab:91:da: ac:f7:0c:d2:02:09:99:cd:5f:e8:e9:99:a7:21:17: 89:ac:04:bd:75:9b:1f:25:b2:a6:15:dc:f8:63:90: c9:83:f4:7c:79:b2:07:bd:4e:f4:f1:dd:07:34:c3: d3:0f:b9:63:6c:c5:47:f5:be:a7:47:a5:50:d5:dc: 05:a2:fe:99:73:6f:cd:dd:fa:9d:00:f0:36:19:53: 23:15:d4:3a:df:9d:58:56:ec:93:75:21:bb:1a:ee: 55:3b:33:19:01:dc:ce:58:55:60:00:6c:73:09:48: 07:c1:73:cc:1a:09:52:4b:89:f2:90:6a:41:78:78: 12:af:ce:8e:7e:44:08:09:c9:d2:d8:4e:f1:8b:0f: ac:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:22:5E:6D:D8:0D:FD:F5:95:3A:57:21:3C:6F:EA:F2:35:48:B1:32 X509v3 Authority Key Identifier: keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/EyJebdgN_fWVOlchPG_q8jVIsTI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.81.20.0/22 Signature Algorithm: sha256WithRSAEncryption de:17:0f:61:5d:5a:32:37:3b:43:1b:da:16:9d:48:63:d7:5c: ea:91:94:b1:fa:9f:61:ee:ad:3b:1d:37:1a:a9:4c:88:43:be: 07:14:eb:43:8b:c4:6f:b2:c3:e6:1a:1b:fd:0e:4d:20:61:02: 99:e5:cc:f0:ec:52:b8:d2:b1:0e:9c:7f:49:64:6b:84:3b:38: 66:d7:91:2e:1d:16:64:20:74:75:4e:09:4b:e6:51:e6:32:8c: 8e:88:65:82:ff:6a:89:21:c0:f2:78:40:6c:c7:de:28:0b:f8: cb:90:62:04:3b:8e:6d:b4:9c:ee:b6:b3:b4:7d:71:8b:ab:ac: 21:91:85:a5:be:54:38:ea:b4:84:93:54:35:94:11:ca:b4:80: bd:dd:63:c5:d8:0f:9c:29:a6:9b:fe:4d:10:47:0c:6e:e1:d0: a7:f7:76:b3:38:1a:08:95:a7:e4:f2:de:3e:9e:0c:b5:8a:95: 9a:e1:63:c9:97:58:e3:5c:f5:c7:b6:f4:9a:d8:1c:e7:61:da: 5e:3c:bd:41:1e:a7:f4:d0:ec:f9:7b:a2:f7:3e:f5:57:db:a9: e5:77:cb:d6:2a:48:f9:76:ea:4b:e0:1a:92:5c:d4:74:77:31: 89:eb:68:ef:7b:d8:2d:b3:fe:85:62:2d:a8:f7:e3:c6:b6:c4: b9:d3:a1:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpd7rqjjKDtp58eQ6WJJQx4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YzU4ZWQxYWY5NjRhNzY2OGU0NDM5NzYxOWVlMTk4NWEy NDkxYzUwHhcNMjUxMTA3MTA0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzIyNWU2ZGQ4MGRmZGY1OTUzYTU3MjEzYzZmZWFmMjM1NDhiMTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHxfSZKh3G7kCYD2jpAg0/Eqp6eO cBAomEcBBWhNTO6AafQi6jeqcxh1BfVdQnDB+6sUuVg97f87aSNsAJfNm9QtSdHD sNaML0T9llrXzjGaNbC1aRInOK1l/tHKDtkbg/YqqoRk93FNZurx5xeqn8MFp5ur kdqs9wzSAgmZzV/o6ZmnIReJrAS9dZsfJbKmFdz4Y5DJg/R8ebIHvU708d0HNMPT D7ljbMVH9b6nR6VQ1dwFov6Zc2/N3fqdAPA2GVMjFdQ6351YVuyTdSG7Gu5VOzMZ AdzOWFVgAGxzCUgHwXPMGglSS4nykGpBeHgSr86OfkQICcnS2E7xiw+szQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBMiXm3YDf31lTpXITxv6vI1SLEyMB8GA1UdIwQY MBaAFMbFjtGvlkp2aORDl2Ge4ZhaJJHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mYzI4MTUtZDI5My00MGFmLWJmM2Mt MWM4YWZkMTlmZGJiLzEvRXlKZWJkZ05fZldWT2xjaFBHX3E4alZJc1RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9mYzI4MTUtZDI5My00MGFmLWJmM2MtMWM4YWZkMTlmZGJi LzEveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVEUMA0G CSqGSIb3DQEBCwUAA4IBAQDeFw9hXVoyNztDG9oWnUhj11zqkZSx+p9h7q07HTca qUyIQ74HFOtDi8RvssPmGhv9Dk0gYQKZ5czw7FK40rEOnH9JZGuEOzhm15EuHRZk IHR1TglL5lHmMoyOiGWC/2qJIcDyeEBsx94oC/jLkGIEO45ttJzutrO0fXGLq6wh kYWlvlQ46rSEk1Q1lBHKtIC93WPF2A+cKaab/k0QRwxu4dCn93azOBoIlafk8t4+ ngy1ipWa4WPJl1jjXPXHtvSa2BznYdpePL1BHqf00Oz5e6L3PvVX26nld8vWKkj5 dupL4BqSXNR0dzGJ62jve9gts/6FYi2o9+PGtsS506Hz -----END CERTIFICATE-----Generated at Sat Dec 6 23:57:53 2025 by rpki-client