This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/RFxrkGA2zH2WQjsUp2RXnNNqDn8.roa File: RFxrkGA2zH2WQjsUp2RXnNNqDn8.roa (raw, json) Hash identifier: Dj37juStZFglq0q0nO7RgArBR6ogM5/v0WvVt1lzaPs= Subject key identifier: 44:5C:6B:90:60:36:CC:7D:96:42:3B:14:A7:64:57:9C:D3:6A:0E:7F Certificate issuer: /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2 Certificate serial: 019AA596FDD4FDF18E38FB5BD6B7E7EEAA31 Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/RFxrkGA2zH2WQjsUp2RXnNNqDn8.roa Signing time: Fri 21 Nov 2025 08:45:27 +0000 ROA not before: Fri 21 Nov 2025 08:45:27 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57043 IP address blocks: 185.133.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:96:fd:d4:fd:f1:8e:38:fb:5b:d6:b7:e7:ee:aa:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2 Validity Not Before: Nov 21 08:45:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=445c6b906036cc7d96423b14a764579cd36a0e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:dc:99:a9:c2:4c:84:be:0c:46:cc:68:dd:f5: 30:58:1e:29:a1:6b:c7:a3:02:8a:84:30:30:1d:7b: 7d:c1:97:7c:2d:76:14:44:a3:5e:28:40:d7:a0:53: af:89:da:66:8f:90:aa:cf:c4:65:04:61:1f:17:7b: 8e:5e:12:96:a1:b4:99:e7:d6:72:f9:ed:fa:3e:4f: c8:52:82:9e:8f:89:ed:ef:76:de:f0:85:80:25:64: 4b:ae:d7:01:ba:77:69:e4:be:70:d9:65:90:e5:d4: 84:f1:1e:52:96:57:a2:8e:1f:a3:c4:f4:23:01:d6: 11:dd:bf:a7:61:80:59:aa:86:e4:67:5b:e5:e1:45: e3:6d:2e:bb:62:77:59:7c:a4:3b:c6:0d:ca:0a:48: 09:97:74:cd:a9:2a:f8:15:e8:d7:22:00:d3:f2:6f: 6e:3b:c5:bd:a5:b1:c9:23:75:e8:c5:3d:e9:a6:84: 86:c3:d7:51:15:6d:ea:3a:5b:57:94:53:87:09:7a: ec:df:4a:95:55:cc:81:8e:37:9d:f1:c7:cc:4c:53: 4f:6b:df:b8:ce:8c:59:60:d8:31:79:8e:89:56:18: c8:76:5b:72:59:9d:c9:bf:e0:50:d8:90:89:ac:7f: a7:ab:2c:34:89:aa:b7:93:ff:ca:5f:77:3f:db:b1: 1f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5C:6B:90:60:36:CC:7D:96:42:3B:14:A7:64:57:9C:D3:6A:0E:7F X509v3 Authority Key Identifier: keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/RFxrkGA2zH2WQjsUp2RXnNNqDn8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.173.0/24 Signature Algorithm: sha256WithRSAEncryption 01:1d:5f:bc:1d:4b:ad:2d:5a:54:b7:fe:6b:14:8e:03:e4:04: 35:0a:43:b3:9c:f6:5a:dd:dc:4d:20:b2:15:88:e0:ba:8d:2b: 02:c8:92:83:0c:a4:72:11:0e:60:0e:62:73:a4:d5:ea:dc:b5: 21:00:61:db:98:8c:df:26:7e:c2:e4:cd:a2:67:d1:ab:34:0b: b1:4c:6c:11:28:3d:8c:18:7a:7a:b7:b6:94:fa:2d:a3:4e:93: c9:59:41:25:ab:aa:a7:72:22:5b:95:e9:2e:f9:6a:be:51:ef: db:ad:a4:cd:72:de:a4:68:1d:8a:8d:17:73:63:46:91:2a:1c: 7c:3b:c4:7e:7d:8d:f0:45:a2:53:09:dd:6e:74:d4:57:aa:98: 7d:56:6b:30:04:e8:0a:f4:d0:04:9b:00:74:41:74:b6:20:4e: 84:39:f6:96:f0:5a:a0:c5:b4:d5:98:a6:3b:f0:2e:80:39:48: ed:41:3e:a2:66:0c:6b:df:cd:61:9d:16:53:e6:0f:c5:12:6a: 5a:b8:55:1d:b8:78:40:74:8b:00:cb:55:12:a7:2e:32:10:45: 90:0f:f7:04:86:64:e3:a9:9b:27:0b:fa:65:61:94:c5:a4:04: a4:68:41:fb:2a:96:af:e7:85:b7:35:e7:f6:ce:b2:0c:0b:af: 77:f7:da:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqllv3U/fGOOPtb1rfn7qoxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNjc0NWFkOTIzNTNkYThhODBjYjJlMGQyMjlkNjhjMmVm NTNkYjIwHhcNMjUxMTIxMDg0NTI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDVjNmI5MDYwMzZjYzdkOTY0MjNiMTRhNzY0NTc5Y2QzNmEwZTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdyZqcJMhL4MRsxo3fUwWB4poWvH owKKhDAwHXt9wZd8LXYURKNeKEDXoFOvidpmj5Cqz8RlBGEfF3uOXhKWobSZ59Zy +e36Pk/IUoKej4nt73be8IWAJWRLrtcBundp5L5w2WWQ5dSE8R5Slleijh+jxPQj AdYR3b+nYYBZqobkZ1vl4UXjbS67YndZfKQ7xg3KCkgJl3TNqSr4FejXIgDT8m9u O8W9pbHJI3XoxT3ppoSGw9dRFW3qOltXlFOHCXrs30qVVcyBjjed8cfMTFNPa9+4 zoxZYNgxeY6JVhjIdltyWZ3Jv+BQ2JCJrH+nqyw0iaq3k//KX3c/27EfjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFERca5BgNsx9lkI7FKdkV5zTag5/MB8GA1UdIwQY MBaAFHBnRa2SNT2oqAyy4NIp1owu9T2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTkt ZTIxNzYzYzY3MmZhLzEvUkZ4cmtHQTJ6SDJXUWpzVXAyUlhuTk5xRG44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTktZTIxNzYzYzY3MmZh LzEvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYWtMA0G CSqGSIb3DQEBCwUAA4IBAQABHV+8HUutLVpUt/5rFI4D5AQ1CkOznPZa3dxNILIV iOC6jSsCyJKDDKRyEQ5gDmJzpNXq3LUhAGHbmIzfJn7C5M2iZ9GrNAuxTGwRKD2M GHp6t7aU+i2jTpPJWUElq6qnciJbleku+Wq+Ue/braTNct6kaB2KjRdzY0aRKhx8 O8R+fY3wRaJTCd1udNRXqph9VmswBOgK9NAEmwB0QXS2IE6EOfaW8FqgxbTVmKY7 8C6AOUjtQT6iZgxr381hnRZT5g/FEmpauFUduHhAdIsAy1USpy4yEEWQD/cEhmTj qZsnC/plYZTFpASkaEH7Kpav54W3Nef2zrIMC69399rK -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:05 2025 by rpki-client