This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/j-g4O52bZEUxSu_6zXDvFKIKW-s.roa File: j-g4O52bZEUxSu_6zXDvFKIKW-s.roa (raw, json) Hash identifier: /WqdN6gST6znMSNmoYRfF+zJ/x7YCMAZ5DLq6fglCYU= Subject key identifier: 8F:E8:38:3B:9D:9B:64:45:31:4A:EF:FA:CD:70:EF:14:A2:0A:5B:EB Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Certificate serial: 019A737AC745E8F47616CDCFDA4AD76EC36A Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/j-g4O52bZEUxSu_6zXDvFKIKW-s.roa Signing time: Tue 11 Nov 2025 15:13:37 +0000 ROA not before: Tue 11 Nov 2025 15:13:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199653 IP address blocks: 89.36.212.0/22 maxlen: 24 89.38.148.0/22 maxlen: 24 89.40.112.0/22 maxlen: 24 94.177.232.0/21 maxlen: 24 94.177.240.0/22 maxlen: 24 185.8.48.0/22 maxlen: 24 185.35.64.0/22 maxlen: 24 2a03:2c40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:7a:c7:45:e8:f4:76:16:cd:cf:da:4a:d7:6e:c3:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Validity Not Before: Nov 11 15:13:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8fe8383b9d9b6445314aeffacd70ef14a20a5beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a2:e5:23:56:ee:3e:ba:88:42:05:cc:bd:90: 09:b9:39:d2:6c:13:85:76:0f:01:f7:f5:d2:69:53: 81:4a:bd:c4:b7:8a:81:2a:bb:95:f9:af:ea:9c:a9: 9d:99:c2:3b:1e:e9:d7:ce:ed:4f:e6:b9:b3:af:9e: a0:ed:1d:80:19:2f:c3:8d:d1:78:69:3b:3e:d8:df: b8:dd:84:31:5d:af:71:e6:c0:b2:14:50:81:10:66: 28:90:6c:ce:4f:01:a6:f8:8d:5a:69:62:32:8f:62: 67:c8:25:8b:5d:07:af:d2:96:ac:66:c8:a7:06:78: fd:07:3a:b5:62:65:61:c6:6b:9d:45:ed:46:e3:6c: bd:b1:c7:46:23:18:0e:34:6c:b9:0d:64:d8:6c:8b: 77:f7:2e:4a:92:04:6e:30:70:7b:85:e5:80:d7:6f: a1:ae:86:2a:ad:c7:44:67:f5:a4:26:d6:c0:77:f8: 6f:7e:76:b4:91:4d:36:76:53:f6:23:37:ae:8d:58: f8:1e:07:e6:2c:47:b2:d4:51:a4:7d:e8:69:4e:8a: 92:f9:c7:71:1d:ed:32:78:b7:6c:57:c9:a6:34:2f: 13:b3:dd:26:63:b8:b7:2c:03:fc:eb:d5:d9:bf:7a: a2:32:65:a5:86:58:0b:02:84:99:78:3a:6e:7d:d8: 11:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E8:38:3B:9D:9B:64:45:31:4A:EF:FA:CD:70:EF:14:A2:0A:5B:EB X509v3 Authority Key Identifier: keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/j-g4O52bZEUxSu_6zXDvFKIKW-s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.36.212.0/22 89.38.148.0/22 89.40.112.0/22 94.177.232.0-94.177.243.255 185.8.48.0/22 185.35.64.0/22 IPv6: 2a03:2c40::/32 Signature Algorithm: sha256WithRSAEncryption b4:db:24:63:61:a2:95:22:3b:7a:39:52:f5:ba:ce:ad:23:ac: c0:2e:5d:44:51:3e:67:4f:1e:b0:b5:4c:38:6f:f2:8c:37:3b: cc:d4:2d:53:e3:5c:e6:97:74:f9:a3:dc:24:23:a4:7f:0f:c6: 09:8e:dc:cd:32:e2:36:25:89:ff:29:2c:02:f7:bf:69:28:a2: 05:c6:e8:23:79:4d:4f:34:a0:9f:37:3f:35:9c:64:94:f1:e0: 78:0f:a7:35:87:d8:23:06:55:5d:af:5d:10:99:54:78:07:85: ef:29:42:44:c7:5d:0e:1c:b6:aa:c0:c0:0f:5b:3b:06:87:b7: 71:53:f8:44:7d:dd:eb:0a:13:5a:2c:09:e0:02:73:41:19:f0: 28:f7:08:27:90:1d:fd:6a:60:6c:61:d9:18:55:4e:df:64:6c: e1:36:47:82:50:81:36:85:0e:a9:e0:f6:c4:c3:e0:33:5d:e7: 61:88:06:83:fe:87:a0:a0:45:c9:4c:23:87:85:02:8e:d8:93: b4:09:12:d7:3b:f4:fe:88:77:96:9e:73:e8:c1:2e:24:0b:26: 2b:89:e5:06:07:a0:48:fb:e3:d9:b7:d4:b7:8a:5f:35:4e:c1: e9:3d:20:26:9e:4e:87:cb:6f:3a:ed:ca:71:65:fc:0e:19:60: 23:39:90:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgISAZpzesdF6PR2Fs3P2krXbsNqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5 Mzg2MWMwHhcNMjUxMTExMTUxMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmU4MzgzYjlkOWI2NDQ1MzE0YWVmZmFjZDcwZWYxNGEyMGE1YmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqLlI1buPrqIQgXMvZAJuTnSbBOF dg8B9/XSaVOBSr3Et4qBKruV+a/qnKmdmcI7HunXzu1P5rmzr56g7R2AGS/DjdF4 aTs+2N+43YQxXa9x5sCyFFCBEGYokGzOTwGm+I1aaWIyj2JnyCWLXQev0pasZsin Bnj9Bzq1YmVhxmudRe1G42y9scdGIxgONGy5DWTYbIt39y5KkgRuMHB7heWA12+h roYqrcdEZ/WkJtbAd/hvfna0kU02dlP2IzeujVj4HgfmLEey1FGkfehpToqS+cdx He0yeLdsV8mmNC8Ts90mY7i3LAP869XZv3qiMmWlhlgLAoSZeDpufdgRqQIDAQAB o4ICPjCCAjowHQYDVR0OBBYEFI/oODudm2RFMUrv+s1w7xSiClvrMB8GA1UdIwQY MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt ODQyNjk0MTJkNTYxLzEvai1nNE81MmJaRVV4U3VfNnpYRHZGS0lLVy1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAyBAIAATAsAwQCWSTUAwQC WSaUAwQCWShwMAwDBANesegDBAJesfADBAK5CDADBAK5I0AwDQQCAAIwBwMFACoD LEAwDQYJKoZIhvcNAQELBQADggEBALTbJGNhopUiO3o5UvW6zq0jrMAuXURRPmdP HrC1TDhv8ow3O8zULVPjXOaXdPmj3CQjpH8PxgmO3M0y4jYlif8pLAL3v2koogXG 6CN5TU80oJ83PzWcZJTx4HgPpzWH2CMGVV2vXRCZVHgHhe8pQkTHXQ4ctqrAwA9b OwaHt3FT+ER93esKE1osCeACc0EZ8Cj3CCeQHf1qYGxh2RhVTt9kbOE2R4JQgTaF Dqng9sTD4DNd52GIBoP+h6CgRclMI4eFAo7Yk7QJEtc79P6Id5aec+jBLiQLJiuJ 5QYHoEj749m31LeKXzVOwek9ICaeTofLbzrtynFl/A4ZYCM5kBs= -----END CERTIFICATE-----Generated at Sat Dec 6 18:22:23 2025 by rpki-client