This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/2fpFEHBfghYTNwqTBl9TJR5nCzQ.roa File: 2fpFEHBfghYTNwqTBl9TJR5nCzQ.roa (raw, json) Hash identifier: GvNSmymW/APULsatcVc+5sOWx6SGb1lbz9qr0ZBM25g= Subject key identifier: D9:FA:45:10:70:5F:82:16:13:37:0A:93:06:5F:53:25:1E:67:0B:34 Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8 Certificate serial: 019A6FE7405DD58C0BAA7B92513E5F5DF644 Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/2fpFEHBfghYTNwqTBl9TJR5nCzQ.roa Signing time: Mon 10 Nov 2025 22:33:37 +0000 ROA not before: Mon 10 Nov 2025 22:33:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202015 IP address blocks: 77.83.199.0/24 maxlen: 24 79.141.160.0/23 maxlen: 23 79.141.162.0/23 maxlen: 23 79.141.172.0/24 maxlen: 24 79.141.173.0/24 maxlen: 24 85.158.111.0/24 maxlen: 24 89.46.38.0/24 maxlen: 24 91.193.19.0/24 maxlen: 24 185.33.84.0/23 maxlen: 23 185.33.86.0/23 maxlen: 23 185.253.119.0/24 maxlen: 24 193.42.38.0/24 maxlen: 24 193.111.208.0/24 maxlen: 24 194.124.229.0/24 maxlen: 24 2a01:8640:4::/48 maxlen: 48 2a01:8640:5::/48 maxlen: 48 2a01:8640:b::/48 maxlen: 48 2a01:8640:e::/48 maxlen: 48 2a01:8640:1e::/48 maxlen: 48 2a01:8640:1f::/48 maxlen: 48 2a01:8640:22::/48 maxlen: 48 2a01:8640:23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6f:e7:40:5d:d5:8c:0b:aa:7b:92:51:3e:5f:5d:f6:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8 Validity Not Before: Nov 10 22:33:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d9fa4510705f821613370a93065f53251e670b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9a:f6:2f:44:0f:ac:0e:ac:5b:1b:d2:60:4e: fc:23:ee:5b:a6:9d:74:c4:b8:72:af:7a:22:5b:ab: 4d:d7:89:ab:1f:88:f6:62:62:fc:ea:dd:11:20:a4: 41:1d:b7:70:4c:0e:58:50:6c:86:6e:d8:a9:7a:7e: eb:05:12:5d:2f:d1:30:a1:2a:91:16:82:33:99:5a: c6:a1:f9:c4:ac:8f:df:fe:f6:3d:f4:9c:8c:52:f9: 5b:4b:c3:92:06:27:d2:1e:6c:4a:7d:f8:b5:0e:ec: 72:59:86:6a:53:58:8e:a9:30:89:4c:c4:d3:5b:be: 3a:22:1c:cf:3b:e1:52:07:b7:d9:f0:0b:ef:f1:ff: 5c:eb:d3:92:e2:74:4e:4a:47:0b:82:43:87:e5:5e: f7:69:0e:1c:ea:44:74:d4:f9:bf:50:dd:cd:be:9a: 1d:db:f4:fe:00:d5:c9:42:17:9f:78:78:83:c2:c7: 8a:a2:56:3c:31:71:48:2f:67:84:d0:93:49:46:92: 8a:f2:de:9f:73:ab:ce:f0:13:81:98:58:ce:4d:60: 53:c0:27:13:af:bd:45:12:4e:42:75:c4:87:84:9c: f2:f0:34:d4:88:9f:10:e4:02:26:e7:5a:63:f1:36: 7b:d5:74:8c:7d:d1:3e:0d:44:07:c7:9d:85:19:9f: 08:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FA:45:10:70:5F:82:16:13:37:0A:93:06:5F:53:25:1E:67:0B:34 X509v3 Authority Key Identifier: keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/2fpFEHBfghYTNwqTBl9TJR5nCzQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.83.199.0/24 79.141.160.0/22 79.141.172.0/23 85.158.111.0/24 89.46.38.0/24 91.193.19.0/24 185.33.84.0/22 185.253.119.0/24 193.42.38.0/24 193.111.208.0/24 194.124.229.0/24 IPv6: 2a01:8640:4::/47 2a01:8640:b::/48 2a01:8640:e::/48 2a01:8640:1e::/47 2a01:8640:22::/47 Signature Algorithm: sha256WithRSAEncryption 41:80:24:b9:63:70:ea:29:bf:ff:0d:36:d1:ab:30:11:49:9b: 16:61:2d:7c:4d:aa:cc:d6:dd:36:d4:ae:31:6f:74:2f:a9:a5: e1:83:6b:27:8b:ff:1c:cd:9d:3b:45:5c:4e:9d:f5:d0:65:16: a5:ce:dc:0e:cd:e5:6f:36:7c:e6:28:58:74:30:b0:96:81:65: f7:c6:02:ab:d2:38:08:87:44:ca:da:a4:42:16:c4:92:0a:05: 39:39:42:cf:5a:7d:de:7a:87:40:e5:b5:73:aa:ce:b2:9d:3f: f9:ae:48:c5:3a:1f:5a:8c:8f:94:9c:4b:8e:a9:58:f5:78:7c: 23:b8:cb:d1:44:0b:d6:13:d6:15:a8:2a:71:f3:45:41:eb:8f: 02:df:e5:37:5b:7a:ed:ca:f4:9f:4d:e5:d4:ce:d0:3c:89:cd: 66:33:32:4a:65:ad:9f:a8:ff:20:25:cd:2f:52:2d:34:ec:20: 5b:cc:74:38:d3:3d:f2:46:f4:48:bb:26:ae:e1:c8:f3:c1:2d: 46:23:c6:32:1e:37:9c:0e:44:f3:a8:04:a3:dc:9b:95:21:80: f4:19:40:d0:a5:be:0e:41:80:2b:f1:11:8a:a9:03:f4:13:ad: 8f:21:43:3d:3b:31:b5:76:0b:27:a0:ee:06:c1:9a:09:5f:9b: 2d:8c:63:f0 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgISAZpv50Bd1YwLqnuSUT5fXfZEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MTI0MmMzM2JjMmUyZTllNDU4NTBhMGZjNjRhYjJjNzUw NmE0YjgwHhcNMjUxMTEwMjIzMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWZhNDUxMDcwNWY4MjE2MTMzNzBhOTMwNjVmNTMyNTFlNjcwYjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Jr2L0QPrA6sWxvSYE78I+5bpp10 xLhyr3oiW6tN14mrH4j2YmL86t0RIKRBHbdwTA5YUGyGbtipen7rBRJdL9EwoSqR FoIzmVrGofnErI/f/vY99JyMUvlbS8OSBifSHmxKffi1DuxyWYZqU1iOqTCJTMTT W746IhzPO+FSB7fZ8Avv8f9c69OS4nROSkcLgkOH5V73aQ4c6kR01Pm/UN3Nvpod 2/T+ANXJQhefeHiDwseKolY8MXFIL2eE0JNJRpKK8t6fc6vO8BOBmFjOTWBTwCcT r71FEk5CdcSHhJzy8DTUiJ8Q5AIm51pj8TZ71XSMfdE+DUQHx52FGZ8IHQIDAQAB o4ICfDCCAngwHQYDVR0OBBYEFNn6RRBwX4IWEzcKkwZfUyUeZws0MB8GA1UdIwQY MBaAFGkSQsM7wuLp5FhQoPxkqyx1BqS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjkt MzYyZmZlOGVlMjcwLzEvMmZwRkVIQmZnaFlUTndxVEJsOVRKUjVuQ3pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjktMzYyZmZlOGVlMjcw LzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGRBggrBgEFBQcBBwEB/wSBgTB/MEgEAgABMEIDBABNU8cD BAJPjaADBAFPjawDBABVnm8DBABZLiYDBABbwRMDBAK5IVQDBAC5/XcDBADBKiYD BADBb9ADBADCfOUwMwQCAAIwLQMHASoBhkAABAMHACoBhkAACwMHACoBhkAADgMH ASoBhkAAHgMHASoBhkAAIjANBgkqhkiG9w0BAQsFAAOCAQEAQYAkuWNw6im//w02 0aswEUmbFmEtfE2qzNbdNtSuMW90L6ml4YNrJ4v/HM2dO0VcTp310GUWpc7cDs3l bzZ85ihYdDCwloFl98YCq9I4CIdEytqkQhbEkgoFOTlCz1p93nqHQOW1c6rOsp0/ +a5IxTofWoyPlJxLjqlY9Xh8I7jL0UQL1hPWFagqcfNFQeuPAt/lN1t67cr0n03l 1M7QPInNZjMySmWtn6j/ICXNL1ItNOwgW8x0ONM98kb0SLsmruHI88EtRiPGMh43 nA5E86gEo9yblSGA9BlA0KW+DkGAK/ERiqkD9BOtjyFDPTsxtXYLJ6DuBsGaCV+b LYxj8A== -----END CERTIFICATE-----Generated at Sat Dec 6 21:30:14 2025 by rpki-client