This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/rullXasaggDRq85qkchvmXmvfZY.roa File: rullXasaggDRq85qkchvmXmvfZY.roa (raw, json) Hash identifier: qK7vzmt1ZIQMh/v4JWoZrRMkgNEwMqtDeTGlVHvLyEM= Subject key identifier: AE:E9:65:5D:AB:1A:82:00:D1:AB:CE:6A:91:C8:6F:99:79:AF:7D:96 Certificate issuer: /CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7 Certificate serial: 019AE308FC65D6B068CECCC6EDF61BA5400A Authority key identifier: 1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/rullXasaggDRq85qkchvmXmvfZY.roa Signing time: Wed 03 Dec 2025 07:06:48 +0000 ROA not before: Wed 03 Dec 2025 07:06:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41176 IP address blocks: 89.108.0.0/18 maxlen: 18 89.108.20.0/24 maxlen: 24 89.108.26.0/23 maxlen: 23 89.108.26.0/24 maxlen: 24 89.108.27.0/24 maxlen: 24 89.108.28.0/24 maxlen: 24 89.108.29.0/24 maxlen: 24 89.108.30.0/24 maxlen: 24 89.108.60.0/22 maxlen: 22 185.20.152.0/22 maxlen: 22 185.20.152.0/24 maxlen: 24 188.117.64.0/18 maxlen: 18 188.117.72.0/22 maxlen: 22 188.117.76.0/22 maxlen: 22 188.117.76.0/24 maxlen: 24 188.117.77.0/24 maxlen: 24 188.117.78.0/24 maxlen: 24 188.117.80.0/23 maxlen: 23 188.117.80.0/24 maxlen: 24 188.117.81.0/24 maxlen: 24 188.117.82.0/24 maxlen: 24 188.117.84.0/22 maxlen: 22 188.117.84.0/24 maxlen: 24 188.117.85.0/24 maxlen: 24 188.117.86.0/24 maxlen: 24 188.117.87.0/24 maxlen: 24 188.117.88.0/24 maxlen: 24 188.117.93.0/24 maxlen: 24 188.117.96.0/21 maxlen: 21 188.117.100.0/23 maxlen: 23 188.117.104.0/24 maxlen: 24 188.117.107.0/24 maxlen: 24 188.117.108.0/24 maxlen: 24 188.117.109.0/24 maxlen: 24 188.117.116.0/24 maxlen: 24 188.117.117.0/24 maxlen: 24 188.117.119.0/24 maxlen: 24 188.117.124.0/24 maxlen: 24 212.76.64.0/19 maxlen: 19 212.76.64.0/24 maxlen: 24 212.76.68.0/24 maxlen: 24 212.76.69.0/24 maxlen: 24 212.76.70.0/24 maxlen: 24 212.76.73.0/24 maxlen: 24 212.76.83.0/24 maxlen: 24 212.76.85.0/24 maxlen: 24 212.76.88.0/24 maxlen: 24 212.76.95.0/24 maxlen: 24 213.236.32.0/19 maxlen: 19 213.236.35.0/24 maxlen: 24 213.236.36.0/24 maxlen: 24 213.236.37.0/24 maxlen: 24 213.236.38.0/24 maxlen: 24 213.236.39.0/24 maxlen: 24 213.236.41.0/24 maxlen: 24 213.236.48.0/24 maxlen: 24 213.236.53.0/24 maxlen: 24 213.236.56.0/21 maxlen: 21 213.236.56.0/22 maxlen: 22 213.236.59.0/24 maxlen: 24 213.236.60.0/22 maxlen: 22 213.236.60.0/24 maxlen: 24 213.236.62.0/24 maxlen: 24 2a02:d70::/32 maxlen: 32 2a02:d70:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:08:fc:65:d6:b0:68:ce:cc:c6:ed:f6:1b:a5:40:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7 Validity Not Before: Dec 3 07:06:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=aee9655dab1a8200d1abce6a91c86f9979af7d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:04:d5:74:a9:c5:13:16:ca:25:37:a3:9f:a5: 99:11:c0:e0:d5:45:55:ef:70:f6:0c:d2:c1:d5:e6: 88:9a:a9:b7:d5:d8:11:25:70:6c:97:3e:29:5f:f7: da:98:5e:5c:1c:3a:9b:ee:8a:a7:19:57:68:3e:b4: 4e:aa:f9:69:f9:7b:38:5d:a8:6e:c0:88:8b:a7:f0: 0e:11:a4:39:11:19:a1:dc:0a:f6:49:5b:63:e0:f5: db:e7:01:57:85:c7:df:54:d4:69:ec:fa:74:91:85: f5:5e:51:89:75:5b:4e:a3:f6:79:35:70:8a:4d:08: 4f:b2:80:74:52:e2:e0:8f:fc:57:2c:ba:62:63:b8: 88:3d:81:55:09:6f:32:c6:f3:70:46:b8:02:e4:40: 69:3e:b4:b7:a6:28:eb:46:09:d4:c6:c4:41:ef:74: 79:3b:1d:38:8d:6c:38:ab:6b:ed:ca:84:19:e6:2e: 55:66:a3:b6:8d:27:a2:d7:c1:c2:6e:a1:5e:b0:ce: f5:09:57:a3:d0:dc:9d:2c:6f:0c:9b:70:7d:32:46: 38:26:05:28:86:cd:0d:39:e2:d9:93:39:c2:d0:03: 43:5a:0e:97:4c:5f:4e:3c:28:c6:ca:03:38:1f:b1: c0:5c:a2:d6:59:d3:ff:21:34:97:60:18:ff:87:48: 10:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E9:65:5D:AB:1A:82:00:D1:AB:CE:6A:91:C8:6F:99:79:AF:7D:96 X509v3 Authority Key Identifier: keyid:1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/rullXasaggDRq85qkchvmXmvfZY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.108.0.0/18 185.20.152.0/22 188.117.64.0/18 212.76.64.0/19 213.236.32.0/19 IPv6: 2a02:d70::/32 Signature Algorithm: sha256WithRSAEncryption 78:d3:a6:80:26:39:54:56:66:8c:51:39:ec:7c:b9:f4:76:df: 3b:b6:7c:58:44:f8:5b:a8:b1:19:7f:1d:2a:b4:e2:83:32:b5: fb:a4:9b:91:28:32:d6:65:a9:ae:7b:b7:a1:b3:76:fd:6d:a3: d6:3f:b3:a8:34:4f:26:6a:10:74:4b:76:77:87:6c:7c:24:80: e0:43:f4:73:76:80:b9:ba:bd:cb:8a:8c:55:ae:0b:32:b5:77: af:a1:33:1c:d9:a2:74:12:48:d9:bf:06:6f:9e:f4:42:e4:a0: f1:6f:31:20:6e:c4:2c:86:15:18:8e:0c:4a:f7:fc:92:67:02: ef:e2:72:25:fe:c2:87:d7:5b:c0:16:51:7a:40:91:f6:66:03: 40:3d:fd:30:9a:4c:50:4c:f6:89:04:92:fc:1f:fd:be:fd:2c: f4:b2:c7:1f:b3:28:95:da:f9:8d:ea:d1:77:05:94:1f:eb:d9: 9e:86:0d:72:b2:f1:e2:d2:af:2d:28:bb:e0:a3:e3:36:42:b9: f6:27:e9:af:09:9e:da:ae:4c:ae:41:33:96:aa:2b:51:7f:dd: be:0f:75:b1:11:f1:5e:ef:09:00:d2:3a:3f:48:c7:fc:d9:a2: 88:49:4d:70:60:87:17:af:19:5b:5c:34:09:af:0a:40:53:22: 4c:8a:6b:b5 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZrjCPxl1rBozszG7fYbpUAKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMmE0YmZkMmMwYzY5NzY1YTgyOTllZjc0OTY1Zjg2MmE3 MTQ4YjcwHhcNMjUxMjAzMDcwNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWU5NjU1ZGFiMWE4MjAwZDFhYmNlNmE5MWM4NmY5OTc5YWY3ZDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkATVdKnFExbKJTejn6WZEcDg1UVV 73D2DNLB1eaImqm31dgRJXBslz4pX/famF5cHDqb7oqnGVdoPrROqvlp+Xs4Xahu wIiLp/AOEaQ5ERmh3Ar2SVtj4PXb5wFXhcffVNRp7Pp0kYX1XlGJdVtOo/Z5NXCK TQhPsoB0UuLgj/xXLLpiY7iIPYFVCW8yxvNwRrgC5EBpPrS3pijrRgnUxsRB73R5 Ox04jWw4q2vtyoQZ5i5VZqO2jSei18HCbqFesM71CVej0NydLG8Mm3B9MkY4JgUo hs0NOeLZkznC0ANDWg6XTF9OPCjGygM4H7HAXKLWWdP/ITSXYBj/h0gQTwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFK7pZV2rGoIA0avOapHIb5l5r32WMB8GA1UdIwQY MBaAFBoqS/0sDGl2WoKZ73SWX4YqcUi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82NzdhZjgtODUzZS00OTNiLThiODUt YmI3MDgwMGMyYTY1LzEvcnVsbFhhc2FnZ0RScTg1cWtjaHZtWG12ZlpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82NzdhZjgtODUzZS00OTNiLThiODUtYmI3MDgwMGMyYTY1 LzEvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQGWWwAAwQC uRSYAwQGvHVAAwQF1ExAAwQF1ewgMA0EAgACMAcDBQAqAg1wMA0GCSqGSIb3DQEB CwUAA4IBAQB406aAJjlUVmaMUTnsfLn0dt87tnxYRPhbqLEZfx0qtOKDMrX7pJuR KDLWZamue7ehs3b9baPWP7OoNE8mahB0S3Z3h2x8JIDgQ/RzdoC5ur3LioxVrgsy tXevoTMc2aJ0EkjZvwZvnvRC5KDxbzEgbsQshhUYjgxK9/ySZwLv4nIl/sKH11vA FlF6QJH2ZgNAPf0wmkxQTPaJBJL8H/2+/Sz0sscfsyiV2vmN6tF3BZQf69mehg1y svHi0q8tKLvgo+M2Qrn2J+mvCZ7arkyuQTOWqitRf92+D3WxEfFe7wkA0jo/SMf8 2aKISU1wYIcXrxlbXDQJrwpAUyJMimu1 -----END CERTIFICATE-----Generated at Sat Dec 6 14:05:21 2025 by rpki-client