This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/adGbdkMl-lEjDzmmbg_gY4B6_Y4.roa File: adGbdkMl-lEjDzmmbg_gY4B6_Y4.roa (raw, json) Hash identifier: uBuMikj07ALYDs7MNuBOkQurbgXfm0P5hvLj7SvVbUo= Subject key identifier: 69:D1:9B:76:43:25:FA:51:23:0F:39:A6:6E:0F:E0:63:80:7A:FD:8E Certificate issuer: /CN=7af57dd52c75fce39ffe2915469d9e656dbcb873 Certificate serial: 019AD926785BE4F2FD3481CA74F4FE13242D Authority key identifier: 7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/adGbdkMl-lEjDzmmbg_gY4B6_Y4.roa Signing time: Mon 01 Dec 2025 09:02:48 +0000 ROA not before: Mon 01 Dec 2025 09:02:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211261 IP address blocks: 92.246.82.0/24 maxlen: 24 92.246.83.0/24 maxlen: 24 103.226.192.0/24 maxlen: 24 103.226.194.0/23 maxlen: 23 103.229.168.0/24 maxlen: 24 103.229.170.0/24 maxlen: 24 103.229.171.0/24 maxlen: 24 185.117.46.0/24 maxlen: 24 185.117.47.0/24 maxlen: 24 185.145.68.0/24 maxlen: 24 185.145.69.0/24 maxlen: 24 185.145.71.0/24 maxlen: 24 185.167.181.0/24 maxlen: 24 185.201.4.0/24 maxlen: 24 185.204.200.0/24 maxlen: 24 185.204.201.0/24 maxlen: 24 185.204.203.0/24 maxlen: 24 185.223.176.0/24 maxlen: 24 185.223.177.0/24 maxlen: 24 185.223.179.0/24 maxlen: 24 185.237.212.0/24 maxlen: 24 185.237.213.0/24 maxlen: 24 185.237.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:26:78:5b:e4:f2:fd:34:81:ca:74:f4:fe:13:24:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7af57dd52c75fce39ffe2915469d9e656dbcb873 Validity Not Before: Dec 1 09:02:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69d19b764325fa51230f39a66e0fe063807afd8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d3:23:03:bb:c8:b3:60:91:03:a8:cf:10:91: ad:ee:a0:79:64:88:a2:a8:a7:3e:78:20:27:48:17: e7:66:c9:81:53:e6:6b:df:9a:ae:dc:5c:f4:3b:32: b4:6b:58:df:c9:ec:55:6f:60:c7:a9:07:15:3c:08: d1:b7:1c:00:90:c0:93:d7:66:f7:6d:07:44:8a:b5: b4:fd:73:7c:e4:2f:20:c3:54:d0:28:3c:b7:6e:dc: e7:a1:0a:57:52:49:35:c4:0b:4a:67:ee:c0:ff:a7: 8a:6a:d8:26:0a:10:34:17:3d:ee:3f:94:68:19:4c: 99:0d:f0:a4:5b:47:a0:c4:60:72:0e:76:d1:03:6e: df:67:1b:89:98:12:27:04:99:35:7a:36:bb:e9:8c: 96:36:38:62:2c:40:05:d9:19:71:5f:3f:4e:51:72: fe:24:ab:58:75:b2:07:e0:96:2c:8b:ed:fc:ac:a1: d4:ef:ca:14:14:fb:55:a7:b6:b1:cd:6c:a6:db:83: 56:9d:ab:f9:ce:b1:a1:02:13:53:e1:4c:30:f5:7f: 81:82:18:29:ab:c2:39:5a:8b:88:87:e4:f8:fc:02: 70:60:e5:00:8b:f9:7e:5a:9c:ba:07:44:a7:3a:93: a5:50:15:c0:1f:56:f3:22:bc:5b:7a:9e:c2:73:91: 72:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D1:9B:76:43:25:FA:51:23:0F:39:A6:6E:0F:E0:63:80:7A:FD:8E X509v3 Authority Key Identifier: keyid:7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/adGbdkMl-lEjDzmmbg_gY4B6_Y4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.246.82.0/23 103.226.192.0/24 103.226.194.0/23 103.229.168.0/24 103.229.170.0/23 185.117.46.0/23 185.145.68.0/23 185.145.71.0/24 185.167.181.0/24 185.201.4.0/24 185.204.200.0/23 185.204.203.0/24 185.223.176.0/23 185.223.179.0/24 185.237.212.0-185.237.214.255 Signature Algorithm: sha256WithRSAEncryption 81:34:36:8c:22:1e:d6:3d:8a:3f:8d:76:ac:11:4c:33:c4:a5: 28:12:90:aa:b9:12:6b:95:ce:f8:0b:0d:ae:1a:67:50:5d:cf: c1:c5:4b:79:e3:06:80:15:fb:c4:4f:f6:24:99:f5:e2:6a:30: 9f:84:aa:7e:96:8c:09:10:70:98:3c:24:a2:ab:3f:d6:00:4d: cc:23:3d:ca:f9:a2:a0:d4:2c:78:78:31:4a:f5:55:5e:93:b6: 2b:1f:7b:d5:fe:69:07:06:b9:8f:6b:27:c4:8e:de:6e:ed:f6: 76:38:6a:63:57:9b:47:5a:9d:35:1c:94:87:ff:e1:60:15:5f: 84:79:20:a8:e5:b4:b2:f8:8c:f6:31:50:28:41:0d:8e:39:97: 14:58:8c:2f:36:73:5d:b4:cf:aa:46:c6:cb:30:0d:f3:6c:30: 6a:4b:2d:9d:71:3e:d6:4f:71:97:75:a9:d2:79:fc:58:2a:c3: 72:e7:d5:0b:74:52:f6:51:22:7a:55:dd:4b:c8:64:e6:e3:79: 70:00:4f:df:20:3f:c8:b4:a9:cc:2c:c5:84:78:31:f6:ac:90: 57:cd:5b:b5:e3:1d:17:ab:3a:c6:91:ab:bd:c8:28:1f:b3:41: c2:1b:7b:54:52:e4:36:e8:38:24:c8:70:59:c4:90:c0:06:0e: e7:3d:d7:3d -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgISAZrZJnhb5PL9NIHKdPT+EyQtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZjU3ZGQ1MmM3NWZjZTM5ZmZlMjkxNTQ2OWQ5ZTY1NmRi Y2I4NzMwHhcNMjUxMjAxMDkwMjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWQxOWI3NjQzMjVmYTUxMjMwZjM5YTY2ZTBmZTA2MzgwN2FmZDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9MjA7vIs2CRA6jPEJGt7qB5ZIii qKc+eCAnSBfnZsmBU+Zr35qu3Fz0OzK0a1jfyexVb2DHqQcVPAjRtxwAkMCT12b3 bQdEirW0/XN85C8gw1TQKDy3btznoQpXUkk1xAtKZ+7A/6eKatgmChA0Fz3uP5Ro GUyZDfCkW0egxGByDnbRA27fZxuJmBInBJk1eja76YyWNjhiLEAF2RlxXz9OUXL+ JKtYdbIH4JYsi+38rKHU78oUFPtVp7axzWym24NWnav5zrGhAhNT4Uww9X+Bghgp q8I5WouIh+T4/AJwYOUAi/l+Wpy6B0SnOpOlUBXAH1bzIrxbep7Cc5FyVQIDAQAB o4ICZTCCAmEwHQYDVR0OBBYEFGnRm3ZDJfpRIw85pm4P4GOAev2OMB8GA1UdIwQY MBaAFHr1fdUsdfzjn/4pFUadnmVtvLhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXZWOTFTeDFfT09mX2lrVlJwMmVaVzI4dUhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84Nzk3ZGUtM2FlOS00ZTA1LTgwZmYt YzI1MzQwOTZjNjBkLzEvYWRHYmRrTWwtbEVqRHptbWJnX2dZNEI2X1k0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi84Nzk3ZGUtM2FlOS00ZTA1LTgwZmYtYzI1MzQwOTZjNjBk LzEvZXZWOTFTeDFfT09mX2lrVlJwMmVaVzI4dUhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAATBiAwQBXPZSAwQA Z+LAAwQBZ+LCAwQAZ+WoAwQBZ+WqAwQBuXUuAwQBuZFEAwQAuZFHAwQAuae1AwQA uckEAwQBuczIAwQAuczLAwQBud+wAwQAud+zMAwDBAK57dQDBAC57dYwDQYJKoZI hvcNAQELBQADggEBAIE0NowiHtY9ij+NdqwRTDPEpSgSkKq5EmuVzvgLDa4aZ1Bd z8HFS3njBoAV+8RP9iSZ9eJqMJ+Eqn6WjAkQcJg8JKKrP9YATcwjPcr5oqDULHh4 MUr1VV6Ttisfe9X+aQcGuY9rJ8SO3m7t9nY4amNXm0danTUclIf/4WAVX4R5IKjl tLL4jPYxUChBDY45lxRYjC82c120z6pGxsswDfNsMGpLLZ1xPtZPcZd1qdJ5/Fgq w3Ln1Qt0UvZRInpV3UvIZObjeXAAT98gP8i0qcwsxYR4MfaskFfNW7XjHRerOsaR q73IKB+zQcIbe1RS5DboOCTIcFnEkMAGDuc91z0= -----END CERTIFICATE-----Generated at Sat Dec 6 18:09:07 2025 by rpki-client