This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1-2kUbuBFwlxsSe0MNbFf63XejIQ.roa File: 1-2kUbuBFwlxsSe0MNbFf63XejIQ.roa (raw, json) Hash identifier: 8LX02VG0LO6F5n3rUaYdkliuSYUSRozcTT1ccGIbXxQ= Subject key identifier: FB:69:14:6E:E0:45:C2:5C:6C:49:ED:0C:35:B1:5F:EB:75:DE:8C:84 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B22EAC60D6E62DAE3E26EFBB448CAC2E0 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1-2kUbuBFwlxsSe0MNbFf63XejIQ.roa Signing time: Mon 15 Dec 2025 16:49:29 +0000 ROA not before: Mon 15 Dec 2025 16:49:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 128.0.118.0/24 maxlen: 32 185.115.206.0/24 maxlen: 32 185.133.195.0/24 maxlen: 32 185.137.181.0/24 maxlen: 32 185.146.195.0/24 maxlen: 32 185.205.68.0/24 maxlen: 32 185.207.212.0/24 maxlen: 32 185.251.234.0/24 maxlen: 32 194.113.164.0/24 maxlen: 32 194.113.169.0/24 maxlen: 32 194.113.170.0/24 maxlen: 32 194.113.172.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:ea:c6:0d:6e:62:da:e3:e2:6e:fb:b4:48:ca:c2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Dec 15 16:49:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fb69146ee045c25c6c49ed0c35b15feb75de8c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:4d:8a:4a:3e:3a:eb:fc:77:29:5b:0f:77:e4: ab:60:f4:31:35:b1:b0:91:98:f4:dd:03:cf:91:54: 9a:14:2a:0a:a0:e2:32:5d:60:22:3c:2c:16:65:53: e6:96:7e:58:a8:61:a7:9c:33:9c:67:c0:70:ba:19: 0b:25:0f:a6:6e:f2:0e:15:9c:db:5b:9f:8f:fc:a8: 66:64:30:31:84:12:a6:f8:d7:46:a6:3a:0a:47:5f: 4f:a2:34:2c:98:c9:86:8d:2c:87:09:fa:ca:10:37: 7d:d6:5e:8d:48:a7:36:f1:30:9f:df:5d:e7:33:a0: 52:ba:43:d4:f2:38:94:81:4c:61:d3:f0:12:35:01: db:45:04:7a:d5:a8:cb:df:60:e2:aa:79:3f:7b:01: 4a:8e:de:19:a0:76:bd:24:dc:23:6c:30:da:83:4c: 09:23:67:5a:31:96:93:d8:b3:65:2f:b0:0a:56:2d: 91:e5:da:85:d3:07:c7:91:3b:36:eb:6c:e9:f3:1a: a5:f3:f3:3c:b6:49:04:2c:1e:dd:56:16:6a:d9:b7: bd:de:c5:d0:88:99:83:37:0a:7e:d6:af:f1:34:c3: fd:40:da:97:e5:df:94:91:0f:83:d1:b3:bd:27:90: 04:90:70:de:54:0f:04:7b:45:63:1b:82:7c:27:b3: 16:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:69:14:6E:E0:45:C2:5C:6C:49:ED:0C:35:B1:5F:EB:75:DE:8C:84 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1-2kUbuBFwlxsSe0MNbFf63XejIQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.0.118.0/24 185.115.206.0/24 185.133.195.0/24 185.137.181.0/24 185.146.195.0/24 185.205.68.0/24 185.207.212.0/24 185.251.234.0/24 194.113.164.0/24 194.113.169.0-194.113.170.255 194.113.172.0/24 Signature Algorithm: sha256WithRSAEncryption cc:c3:62:1f:51:d1:6d:07:27:de:72:7b:99:a5:c4:09:42:f3: 4d:da:53:6e:47:aa:ea:ab:84:b0:b4:1a:40:d9:12:f2:92:fb: 36:9b:4d:8f:0d:b9:72:ae:bd:cd:9a:30:1f:0f:bb:cb:6d:6e: b4:d8:1f:3a:35:56:20:f9:cc:94:b3:93:d2:f2:50:9f:ce:f2: 10:28:9e:46:b0:6d:e5:f8:4a:82:44:71:6c:d7:99:3d:7d:74: 34:9a:c5:4e:49:d8:32:40:fc:e7:53:b9:6d:0a:8e:7a:8d:5e: b5:e6:3b:a1:c2:9f:10:ca:16:3c:1d:95:30:e0:5f:dc:60:e6: 20:c7:48:36:98:1a:a4:9f:6a:e6:e3:b3:e7:88:10:f1:c5:57: 68:af:b5:b2:c0:f5:11:18:a0:60:fa:af:33:78:8f:6d:8f:4d: 81:3d:36:7b:20:82:ea:1d:a4:38:37:3d:8e:c3:ef:8c:c4:12: ce:af:b6:0c:8f:5f:cf:72:03:c6:b3:5a:63:7e:ee:6f:43:19: bf:56:c9:64:9a:ad:93:c8:8a:bd:b8:19:6c:82:35:3a:b8:27: 6d:9c:8c:e0:fa:20:61:ed:a1:7a:1d:86:4d:34:ef:ab:d9:5f: 5d:06:dc:c3:34:1d:5b:45:c8:a0:48:9f:b5:67:64:9a:f7:c7: 3b:94:5c:ae -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZsi6sYNbmLa4+Ju+7RIysLgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjUxMjE1MTY0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjY5MTQ2ZWUwNDVjMjVjNmM0OWVkMGMzNWIxNWZlYjc1ZGU4Yzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8E2KSj466/x3KVsPd+SrYPQxNbGw kZj03QPPkVSaFCoKoOIyXWAiPCwWZVPmln5YqGGnnDOcZ8BwuhkLJQ+mbvIOFZzb W5+P/KhmZDAxhBKm+NdGpjoKR19PojQsmMmGjSyHCfrKEDd91l6NSKc28TCf313n M6BSukPU8jiUgUxh0/ASNQHbRQR61ajL32Diqnk/ewFKjt4ZoHa9JNwjbDDag0wJ I2daMZaT2LNlL7AKVi2R5dqF0wfHkTs262zp8xql8/M8tkkELB7dVhZq2be93sXQ iJmDNwp+1q/xNMP9QNqX5d+UkQ+D0bO9J5AEkHDeVA8Ee0VjG4J8J7MW8QIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFPtpFG7gRcJcbEntDDWxX+t13oyEMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvMS0ya1VidUJGd2x4c1NlME1OYkZmNjNYZWpJUS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNj Mi8xL2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBjBggrBgEFBQcBBwEB/wRUMFIwUAQCAAEwSgMEAIAAdgME ALlzzgMEALmFwwMEALmJtQMEALmSwwMEALnNRAMEALnP1AMEALn76gMEAMJxpDAM AwQAwnGpAwQAwnGqAwQAwnGsMA0GCSqGSIb3DQEBCwUAA4IBAQDMw2IfUdFtByfe cnuZpcQJQvNN2lNuR6rqq4SwtBpA2RLykvs2m02PDblyrr3NmjAfD7vLbW602B86 NVYg+cyUs5PS8lCfzvIQKJ5GsG3l+EqCRHFs15k9fXQ0msVOSdgyQPznU7ltCo56 jV615juhwp8QyhY8HZUw4F/cYOYgx0g2mBqkn2rm47PniBDxxVdor7WywPURGKBg +q8zeI9tj02BPTZ7IILqHaQ4Nz2Ow++MxBLOr7YMj1/PcgPGs1pjfu5vQxm/Vslk mq2TyIq9uBlsgjU6uCdtnIzg+iBh7aF6HYZNNO+r2V9dBtzDNB1bRcigSJ+1Z2Sa 98c7lFyu -----END CERTIFICATE-----Generated at Wed Dec 17 20:07:26 2025 by rpki-client