This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/JzEs0SCEwhGqiG1rh82MvFjkSUs.roa File: JzEs0SCEwhGqiG1rh82MvFjkSUs.roa (raw, json) Hash identifier: DdjK4mTZQRc7G6xoJt34kpnycSYAuRMwkrJLhcQsWFQ= Subject key identifier: 27:31:2C:D1:20:84:C2:11:AA:88:6D:6B:87:CD:8C:BC:58:E4:49:4B Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019AEE4ACABD10B1ABD9362E7DC43A94F2C3 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/JzEs0SCEwhGqiG1rh82MvFjkSUs.roa Signing time: Fri 05 Dec 2025 11:34:30 +0000 ROA not before: Fri 05 Dec 2025 11:34:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 400992 IP address blocks: 45.159.79.0/24 maxlen: 24 185.121.12.0/24 maxlen: 24 185.121.15.0/24 maxlen: 24 185.196.41.0/24 maxlen: 24 185.218.19.0/24 maxlen: 24 185.232.205.0/24 maxlen: 24 185.236.25.0/24 maxlen: 24 185.236.26.0/24 maxlen: 24 185.236.27.0/24 maxlen: 24 185.245.34.0/24 maxlen: 24 185.245.35.0/24 maxlen: 24 185.250.180.0/24 maxlen: 24 193.17.183.0/24 maxlen: 24 194.48.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:4a:ca:bd:10:b1:ab:d9:36:2e:7d:c4:3a:94:f2:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Dec 5 11:34:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=27312cd12084c211aa886d6b87cd8cbc58e4494b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3c:57:12:bf:76:46:85:88:3a:c7:bd:92:a5: a0:6b:91:63:a8:b1:05:2a:07:64:f3:2f:9e:28:17: c0:3b:39:df:0a:b1:27:ce:17:48:b4:f9:46:56:9f: a5:c2:8b:27:b9:4a:ea:e6:0f:02:64:32:54:99:f7: 3e:c8:08:9b:52:e3:47:dd:54:0d:25:89:29:2a:cb: a8:2e:f6:00:1f:c7:0e:c6:61:fe:aa:87:be:2f:79: 39:4f:98:00:78:e3:20:63:f2:16:61:f7:b2:d6:6c: 93:b7:84:ec:48:df:b6:50:f3:e0:b4:13:13:36:ff: 2e:74:8c:3e:92:c4:35:04:b9:62:92:0d:fb:a5:6d: 34:5a:2a:42:18:93:8e:6f:dc:3f:7c:7c:28:86:fa: 8d:fd:7f:be:e4:03:83:f0:c7:74:dc:d8:da:49:77: 9c:ec:c6:88:67:6d:5a:47:fb:a0:bb:43:47:00:30: cf:94:34:c0:6c:a1:5a:d5:0d:2c:5b:80:26:c8:d2: 6d:f5:f8:7c:0b:ef:75:71:51:61:3b:c0:bc:e6:b5: f3:6b:58:1a:52:6f:ea:22:82:b1:1d:03:83:7e:bc: 38:f4:9e:ce:64:1d:72:a7:40:3f:43:0c:49:b1:bf: 36:ec:5d:95:55:c0:9f:36:b2:e3:ec:b2:ae:1f:0e: 39:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:31:2C:D1:20:84:C2:11:AA:88:6D:6B:87:CD:8C:BC:58:E4:49:4B X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/JzEs0SCEwhGqiG1rh82MvFjkSUs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.79.0/24 185.121.12.0/24 185.121.15.0/24 185.196.41.0/24 185.218.19.0/24 185.232.205.0/24 185.236.25.0-185.236.27.255 185.245.34.0/23 185.250.180.0/24 193.17.183.0/24 194.48.142.0/24 Signature Algorithm: sha256WithRSAEncryption 84:f5:3a:0d:e9:71:b5:b5:3b:11:61:41:4c:53:7b:69:57:e9: c0:90:1f:fe:73:5a:46:46:6d:63:d2:93:1d:0c:ee:08:8d:c6: ef:84:aa:49:0a:ae:83:41:d5:1a:81:0c:eb:a0:5b:b5:56:29: 73:66:93:f0:72:42:dc:62:9b:42:d8:e1:9e:bf:b6:b9:5c:84: bd:62:eb:c3:f3:46:9d:52:e5:dc:96:88:f4:55:13:19:7f:5e: c9:5c:1d:43:ff:06:26:7d:70:29:f3:86:fb:ae:7c:69:c3:9b: b9:ca:fb:c6:4a:4d:c1:b6:0e:64:cb:f9:a9:92:34:95:28:51: 0e:de:82:0b:14:c3:05:6a:3b:63:f8:bc:43:19:ce:36:26:81: 73:d8:c7:39:c7:37:b1:5f:cd:6f:45:d8:b6:18:80:b4:b5:c8: 39:d3:2e:0f:bd:ee:72:6a:e9:70:5c:43:6b:54:e8:db:7c:0b: ce:1d:6c:80:79:1f:75:57:18:91:eb:d8:53:bd:4b:2a:15:05: a1:df:0c:17:ab:28:45:4b:66:7f:40:15:1b:fd:42:b4:2b:b3: 97:d7:86:0c:8b:e9:81:f4:8f:39:06:18:09:ba:21:21:1f:13: 40:54:35:60:27:bd:53:9e:20:58:b3:64:60:ec:8d:f9:97:f2: 99:75:c9:e8 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgISAZruSsq9ELGr2TYufcQ6lPLDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjUxMjA1MTEzNDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzMxMmNkMTIwODRjMjExYWE4ODZkNmI4N2NkOGNiYzU4ZTQ0OTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DxXEr92RoWIOse9kqWga5FjqLEF Kgdk8y+eKBfAOznfCrEnzhdItPlGVp+lwosnuUrq5g8CZDJUmfc+yAibUuNH3VQN JYkpKsuoLvYAH8cOxmH+qoe+L3k5T5gAeOMgY/IWYfey1myTt4TsSN+2UPPgtBMT Nv8udIw+ksQ1BLlikg37pW00WipCGJOOb9w/fHwohvqN/X++5AOD8Md03NjaSXec 7MaIZ21aR/ugu0NHADDPlDTAbKFa1Q0sW4AmyNJt9fh8C+91cVFhO8C85rXza1ga Um/qIoKxHQODfrw49J7OZB1yp0A/QwxJsb827F2VVcCfNrLj7LKuHw45wQIDAQAB o4ICTTCCAkkwHQYDVR0OBBYEFCcxLNEghMIRqohta4fNjLxY5ElLMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvSnpFczBTQ0V3aEdxaUcxcmg4Mk12RmprU1VzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQALZ9PAwQA uXkMAwQAuXkPAwQAucQpAwQAudoTAwQAuejNMAwDBAC57BkDBAK57BgDBAG59SID BAC5+rQDBADBEbcDBADCMI4wDQYJKoZIhvcNAQELBQADggEBAIT1Og3pcbW1OxFh QUxTe2lX6cCQH/5zWkZGbWPSkx0M7giNxu+EqkkKroNB1RqBDOugW7VWKXNmk/By Qtxim0LY4Z6/trlchL1i68PzRp1S5dyWiPRVExl/XslcHUP/BiZ9cCnzhvuufGnD m7nK+8ZKTcG2DmTL+amSNJUoUQ7eggsUwwVqO2P4vEMZzjYmgXPYxznHN7FfzW9F 2LYYgLS1yDnTLg+97nJq6XBcQ2tU6Nt8C84dbIB5H3VXGJHr2FO9SyoVBaHfDBer KEVLZn9AFRv9QrQrs5fXhgyL6YH0jzkGGAm6ISEfE0BUNWAnvVOeIFizZGDsjfmX 8pl1yeg= -----END CERTIFICATE-----Generated at Sat Dec 6 09:53:44 2025 by rpki-client