This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/p_8FvngKjmLITizbNldEoC6LGv4.roa File: p_8FvngKjmLITizbNldEoC6LGv4.roa (raw, json) Hash identifier: N/fSzmwZu/FbuI0gwUdxFYVJzK7d4SGahDnYSUc+txs= Subject key identifier: A7:FF:05:BE:78:0A:8E:62:C8:4E:2C:DB:36:57:44:A0:2E:8B:1A:FE Certificate issuer: /CN=5b3358110dadf224e719914161731df5e56c4188 Certificate serial: 019AE45CF5FDD9575CE6F4FF60918446095A Authority key identifier: 5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/p_8FvngKjmLITizbNldEoC6LGv4.roa Signing time: Wed 03 Dec 2025 13:18:08 +0000 ROA not before: Wed 03 Dec 2025 13:18:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 28979 IP address blocks: 185.204.240.0/23 maxlen: 23 185.204.240.0/24 maxlen: 24 185.204.241.0/24 maxlen: 24 185.204.242.0/23 maxlen: 23 185.204.242.0/24 maxlen: 24 185.204.243.0/24 maxlen: 24 194.127.215.0/24 maxlen: 24 194.127.216.0/21 maxlen: 21 194.127.216.0/24 maxlen: 24 194.127.217.0/24 maxlen: 24 194.127.218.0/24 maxlen: 24 194.127.219.0/24 maxlen: 24 194.127.220.0/24 maxlen: 24 194.127.221.0/24 maxlen: 24 194.127.222.0/24 maxlen: 24 194.127.223.0/24 maxlen: 24 2a04:b647::/32 maxlen: 32 2a04:b647:fffd::/48 maxlen: 48 2a04:b647:fffe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:5c:f5:fd:d9:57:5c:e6:f4:ff:60:91:84:46:09:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b3358110dadf224e719914161731df5e56c4188 Validity Not Before: Dec 3 13:18:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a7ff05be780a8e62c84e2cdb365744a02e8b1afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:26:06:b7:9f:0a:cb:5e:f2:d5:65:fc:b4:98: 32:4d:cf:5c:08:d8:a6:f0:f7:c9:1d:8d:e5:96:03: 05:6f:f0:ee:d0:79:63:1a:5f:16:d3:ab:ea:a5:ad: ea:1b:71:8e:7b:12:55:cb:06:6c:1a:0b:43:1c:45: 3e:14:8e:9f:00:ec:87:19:43:af:6b:61:f2:7f:66: c5:17:ad:59:a4:ee:12:7f:5c:ca:f9:b6:e1:ee:e3: ae:49:4b:70:cf:f4:65:f1:8e:63:4f:af:50:42:64: 41:02:ef:21:68:e8:2a:22:c5:1a:5a:18:ad:f1:eb: da:60:a9:eb:21:ad:96:c8:c5:c1:fa:6f:dd:cd:6a: 35:87:95:6d:ea:cd:e1:90:31:14:38:63:ec:8b:05: 4a:f1:83:07:4c:40:7c:bc:80:5b:ca:c5:68:57:d9: 3a:5b:2a:76:5d:70:33:53:c1:37:cb:8a:4e:95:8b: 0a:8f:4f:0d:cb:66:7b:2d:be:1b:39:e1:23:f8:a8: b5:86:73:7f:7d:0b:ff:fc:0b:21:96:71:45:ac:26: ef:c7:d4:78:22:56:61:1b:16:5a:fe:76:af:d0:6b: 6e:65:58:f6:e9:ea:e8:3f:36:8d:e8:fd:12:69:b3: 65:94:77:38:78:96:f8:94:4f:9e:28:88:06:49:05: dd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FF:05:BE:78:0A:8E:62:C8:4E:2C:DB:36:57:44:A0:2E:8B:1A:FE X509v3 Authority Key Identifier: keyid:5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/p_8FvngKjmLITizbNldEoC6LGv4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.204.240.0/22 194.127.215.0-194.127.223.255 IPv6: 2a04:b647::/32 Signature Algorithm: sha256WithRSAEncryption 63:57:55:ea:a5:41:c3:58:bc:8d:83:5e:84:b1:ee:f0:76:d4: 90:0d:c6:8e:ea:48:5f:09:5c:e6:3e:18:fe:96:f4:bb:d5:d1: 69:62:9b:13:13:89:33:9e:cf:f6:f2:95:76:2d:a7:0f:ed:94: 54:ca:b1:64:a3:26:cd:a9:b0:08:8d:fc:1e:ce:53:0b:a5:85: 09:86:53:c0:1e:5f:6e:4a:c6:0d:db:e7:90:d6:49:3e:38:98: b9:38:12:0f:8d:cc:87:43:a7:ac:41:ac:fb:35:ab:66:9d:78: b7:cf:b5:6c:b4:5b:6e:a8:74:5c:a5:82:e9:ec:cd:ed:f6:19: a8:b7:e4:e8:7e:78:9a:c4:01:3b:ba:5a:d6:55:61:1b:71:d1: 41:3e:7f:ca:58:16:50:af:1f:9d:84:6b:c5:76:1a:c1:5c:55: e7:32:0f:99:f6:94:e9:ea:77:38:ab:c6:a9:71:c6:21:1b:92: c6:4a:74:f0:2b:83:b6:2d:8a:ed:c7:19:84:90:d7:30:10:9f: 95:1d:89:ed:8a:bd:a1:d5:17:37:8d:13:88:af:65:7f:66:d0: d4:db:41:26:18:75:72:1a:63:99:9d:bf:50:f2:b5:94:ac:3a: 7c:0e:19:59:66:06:54:ae:a0:ef:2e:c9:68:ae:a6:fc:66:04: 1e:c6:54:02 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZrkXPX92Vdc5vT/YJGERglaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMzM1ODExMGRhZGYyMjRlNzE5OTE0MTYxNzMxZGY1ZTU2 YzQxODgwHhcNMjUxMjAzMTMxODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2ZmMDViZTc4MGE4ZTYyYzg0ZTJjZGIzNjU3NDRhMDJlOGIxYWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviYGt58Ky17y1WX8tJgyTc9cCNim 8PfJHY3llgMFb/Du0HljGl8W06vqpa3qG3GOexJVywZsGgtDHEU+FI6fAOyHGUOv a2Hyf2bFF61ZpO4Sf1zK+bbh7uOuSUtwz/Rl8Y5jT69QQmRBAu8haOgqIsUaWhit 8evaYKnrIa2WyMXB+m/dzWo1h5Vt6s3hkDEUOGPsiwVK8YMHTEB8vIBbysVoV9k6 Wyp2XXAzU8E3y4pOlYsKj08Ny2Z7Lb4bOeEj+Ki1hnN/fQv//AshlnFFrCbvx9R4 IlZhGxZa/nav0GtuZVj26eroPzaN6P0SabNllHc4eJb4lE+eKIgGSQXdmQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFKf/Bb54Co5iyE4s2zZXRKAuixr+MB8GA1UdIwQY MBaAFFszWBENrfIk5xmRQWFzHfXlbEGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3pOWUVRMnQ4aVRuR1pGQllYTWQ5ZVZzUVlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83OTIzNzItM2QyYS00NGZkLTkxYTAt ZjQyNzJlZWMyODBkLzEvcF84RnZuZ0tqbUxJVGl6Yk5sZEVvQzZMR3Y0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC83OTIzNzItM2QyYS00NGZkLTkxYTAtZjQyNzJlZWMyODBk LzEvV3pOWUVRMnQ4aVRuR1pGQllYTWQ5ZVZzUVlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQCuczwMAwD BADCf9cDBAXCf8AwDQQCAAIwBwMFACoEtkcwDQYJKoZIhvcNAQELBQADggEBAGNX VeqlQcNYvI2DXoSx7vB21JANxo7qSF8JXOY+GP6W9LvV0WlimxMTiTOez/bylXYt pw/tlFTKsWSjJs2psAiN/B7OUwulhQmGU8AeX25Kxg3b55DWST44mLk4Eg+NzIdD p6xBrPs1q2adeLfPtWy0W26odFylgunsze32Gai35Oh+eJrEATu6WtZVYRtx0UE+ f8pYFlCvH52Ea8V2GsFcVecyD5n2lOnqdzirxqlxxiEbksZKdPArg7Ytiu3HGYSQ 1zAQn5Udie2KvaHVFzeNE4ivZX9m0NTbQSYYdXIaY5mdv1DytZSsOnwOGVlmBlSu oO8uyWiupvxmBB7GVAI= -----END CERTIFICATE-----Generated at Sat Dec 6 20:51:03 2025 by rpki-client