This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/E91jvk64DSRhm8AVd6hF7uJr2Pw.roa File: E91jvk64DSRhm8AVd6hF7uJr2Pw.roa (raw, json) Hash identifier: aX6JYe6Vw1Lp+xGzuH3h+WZ1ze63bqdxs+b3skdG9/A= Subject key identifier: 13:DD:63:BE:4E:B8:0D:24:61:9B:C0:15:77:A8:45:EE:E2:6B:D8:FC Certificate issuer: /CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff Certificate serial: 019AC070984DB8A8684EAB319C311688ECDD Authority key identifier: E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/E91jvk64DSRhm8AVd6hF7uJr2Pw.roa Signing time: Wed 26 Nov 2025 13:53:15 +0000 ROA not before: Wed 26 Nov 2025 13:53:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51580 IP address blocks: 185.29.73.0/24 maxlen: 24 185.29.74.0/23 maxlen: 24 185.29.74.0/24 maxlen: 24 185.29.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c0:70:98:4d:b8:a8:68:4e:ab:31:9c:31:16:88:ec:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff Validity Not Before: Nov 26 13:53:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=13dd63be4eb80d24619bc01577a845eee26bd8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:91:b3:d5:6b:0e:a1:87:06:01:a1:86:6a:33: 14:1a:ec:2d:fb:17:f5:31:c3:44:43:43:82:20:75: 64:60:b1:f2:c5:ce:ab:38:4a:a6:4d:3c:96:57:73: 94:7a:a0:b0:82:20:1e:31:e2:ae:39:9e:54:f7:8e: c1:49:10:1e:1d:14:85:f5:85:9b:6b:47:0b:96:d9: 1f:c4:5a:e9:6a:8c:dd:0c:54:e5:a3:c2:98:a3:f3: e0:1c:a3:d3:61:39:3a:06:d1:53:e7:e5:62:8d:f8: 4e:2f:21:26:84:4c:f8:94:98:99:be:3c:a3:6f:81: f8:9f:c8:e1:20:29:7e:10:fe:26:e6:ba:dc:9c:ce: 70:c9:18:bc:7d:d4:9a:cf:d4:5a:ff:08:3a:a9:ba: 2e:28:31:92:61:fc:cf:bc:40:0a:93:4e:60:a5:cb: db:39:75:ca:37:95:65:d9:98:b3:5d:3b:2e:fd:19: 7b:f1:59:9d:f7:39:3e:93:aa:a5:ff:27:2c:db:71: 32:8b:d8:04:34:63:55:cf:a6:75:8f:e9:4f:23:36: a5:1c:53:0d:4b:71:24:01:e1:f7:d6:cb:82:fa:2a: 26:4c:c1:63:9e:e0:d1:25:64:9b:4f:6b:75:80:a3: ae:44:ff:1b:cc:ee:d3:f4:be:99:3e:28:30:38:89: e4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:DD:63:BE:4E:B8:0D:24:61:9B:C0:15:77:A8:45:EE:E2:6B:D8:FC X509v3 Authority Key Identifier: keyid:E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/E91jvk64DSRhm8AVd6hF7uJr2Pw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.29.73.0-185.29.75.255 Signature Algorithm: sha256WithRSAEncryption 93:76:ff:ec:72:d2:84:75:20:e3:5b:d6:02:dd:3f:85:f2:49: 2a:bb:b7:29:62:d0:e4:86:99:7f:cb:56:53:b1:e0:27:1b:71: 8f:8e:e4:19:d6:6d:d6:fe:e4:10:59:22:c1:de:d8:58:bd:06: a1:09:46:d4:1e:7a:e8:49:28:eb:68:85:b2:75:49:28:53:1f: 62:9d:f8:fd:7f:67:9d:1f:bb:84:05:6e:59:c6:d4:9e:ac:10: 2f:1e:b5:88:c1:b6:46:42:16:1f:54:bb:29:0e:14:41:2f:56: af:8d:53:e0:42:c5:ac:9f:4b:28:3d:75:e6:9b:a3:3d:f6:2c: 8b:47:57:bd:7e:47:2a:96:26:fc:63:4c:9e:30:66:be:27:c1: d8:5a:8a:ba:bf:17:7c:56:24:f5:bd:64:14:59:a9:19:75:f9: 33:25:34:fd:7c:c5:6c:b2:ca:f1:a1:9d:91:5f:97:ad:a4:8c: d1:03:d3:aa:1c:f8:ce:b1:8c:50:78:e7:83:aa:0d:43:20:69: b0:13:c6:14:8d:96:a2:cf:88:98:84:51:29:30:0b:38:a6:72: f7:5c:af:a9:55:9d:99:6a:98:30:75:aa:db:7e:f8:e9:71:67: 26:03:40:77:07:7d:58:97:72:0c:92:e8:19:a7:70:65:f7:7b: 4b:6c:3a:de -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZrAcJhNuKhoTqsxnDEWiOzdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMDQ0OWZlN2Y0YjJjZjFmN2ZkNjcwZTU4MmViY2M5N2U0 NWY3ZmYwHhcNMjUxMTI2MTM1MzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2RkNjNiZTRlYjgwZDI0NjE5YmMwMTU3N2E4NDVlZWUyNmJkOGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpGz1WsOoYcGAaGGajMUGuwt+xf1 McNEQ0OCIHVkYLHyxc6rOEqmTTyWV3OUeqCwgiAeMeKuOZ5U947BSRAeHRSF9YWb a0cLltkfxFrpaozdDFTlo8KYo/PgHKPTYTk6BtFT5+VijfhOLyEmhEz4lJiZvjyj b4H4n8jhICl+EP4m5rrcnM5wyRi8fdSaz9Ra/wg6qbouKDGSYfzPvEAKk05gpcvb OXXKN5Vl2ZizXTsu/Rl78Vmd9zk+k6ql/ycs23Eyi9gENGNVz6Z1j+lPIzalHFMN S3EkAeH31suC+iomTMFjnuDRJWSbT2t1gKOuRP8bzO7T9L6ZPigwOInkcQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFBPdY75OuA0kYZvAFXeoRe7ia9j8MB8GA1UdIwQY MBaAFOIESf5/Syzx9/1nDlguvMl+Rff/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGdSSl9uOUxMUEgzX1djT1dDNjh5WDVGOV84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZGM4NzktMTFiOS00ZmE2LTg0MWQt OTA2YTkxZWU5ZmU0LzEvRTkxanZrNjREU1JobThBVmQ2aEY3dUpyMlB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zZGM4NzktMTFiOS00ZmE2LTg0MWQtOTA2YTkxZWU5ZmU0 LzEvNGdSSl9uOUxMUEgzX1djT1dDNjh5WDVGOV84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5HUkD BAK5HUgwDQYJKoZIhvcNAQELBQADggEBAJN2/+xy0oR1IONb1gLdP4XySSq7tyli 0OSGmX/LVlOx4CcbcY+O5BnWbdb+5BBZIsHe2Fi9BqEJRtQeeuhJKOtohbJ1SShT H2Kd+P1/Z50fu4QFblnG1J6sEC8etYjBtkZCFh9UuykOFEEvVq+NU+BCxayfSyg9 deaboz32LItHV71+RyqWJvxjTJ4wZr4nwdhairq/F3xWJPW9ZBRZqRl1+TMlNP18 xWyyyvGhnZFfl62kjNED06oc+M6xjFB454OqDUMgabATxhSNlqLPiJiEUSkwCzim cvdcr6lVnZlqmDB1qtt++OlxZyYDQHcHfViXcgyS6BmncGX3e0tsOt4= -----END CERTIFICATE-----Generated at Sat Dec 6 12:53:34 2025 by rpki-client