This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/EyLJPLoc1mf1XKSvIsGtzo0HWV0.roa File: EyLJPLoc1mf1XKSvIsGtzo0HWV0.roa (raw, json) Hash identifier: VgIFzU52fyCieiST8EuwqC7zFrwO10To39Vg1ZioEQ8= Subject key identifier: 13:22:C9:3C:BA:1C:D6:67:F5:5C:A4:AF:22:C1:AD:CE:8D:07:59:5D Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02 Certificate serial: 019AC68925FA4E991FB80F1D589A79A98EF8 Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/EyLJPLoc1mf1XKSvIsGtzo0HWV0.roa Signing time: Thu 27 Nov 2025 18:17:48 +0000 ROA not before: Thu 27 Nov 2025 18:17:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 5.102.37.0/24 maxlen: 24 5.102.38.0/24 maxlen: 24 5.102.39.0/24 maxlen: 24 195.222.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c6:89:25:fa:4e:99:1f:b8:0f:1d:58:9a:79:a9:8e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02 Validity Not Before: Nov 27 18:17:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1322c93cba1cd667f55ca4af22c1adce8d07595d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:54:31:db:e5:05:88:13:93:e0:9f:4e:93:6c: 9c:78:5a:04:e7:f1:58:31:49:2e:3e:ae:76:8b:1e: d6:fd:1b:91:c5:c2:99:86:a7:85:43:b8:d2:e8:4b: 10:76:10:25:c3:3e:f5:d8:1b:b3:db:4f:2d:92:60: a9:77:46:05:93:cf:61:c8:01:66:42:ad:b8:f5:df: 47:68:ad:6a:e6:f6:64:b7:d1:d6:66:90:f1:7b:e9: 8a:2b:cc:5b:94:d1:50:8f:29:b1:f3:5a:da:67:6a: 6b:c4:61:8e:a7:9e:6d:d5:d5:78:a3:fb:d1:ef:84: 0f:67:7e:5d:3f:58:bb:3b:d2:8c:ed:f3:87:d1:6f: a2:1c:45:65:5b:3d:09:a0:b0:97:c1:ee:b4:0c:1d: c6:c1:9e:00:98:d5:99:c9:3c:a9:44:89:0a:c5:fd: a2:b7:0b:55:55:06:c4:92:dd:75:92:71:cf:09:fd: 62:49:e5:d4:f4:df:7b:e2:d9:6e:72:d8:0f:d0:96: e1:38:7a:34:84:b3:97:07:ee:b3:54:62:90:a4:7c: 5d:a7:26:ff:30:f8:91:7c:00:eb:96:96:04:4a:c1: 14:a4:39:b9:2e:6d:6e:73:23:89:aa:7b:12:1d:a7: dc:b6:c1:ad:b0:4c:77:fb:79:13:b2:e6:73:51:90: 62:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:22:C9:3C:BA:1C:D6:67:F5:5C:A4:AF:22:C1:AD:CE:8D:07:59:5D X509v3 Authority Key Identifier: keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/EyLJPLoc1mf1XKSvIsGtzo0HWV0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.102.37.0-5.102.39.255 195.222.127.0/24 Signature Algorithm: sha256WithRSAEncryption 24:57:4b:a0:74:e8:af:7a:d6:cb:d3:9f:0e:bf:c8:c2:ce:98: c0:d1:85:fa:36:04:62:10:35:6a:01:59:3a:d1:fc:6a:e2:d7: e4:40:23:d2:25:4f:98:a7:6b:5e:95:33:f6:66:b7:65:63:53: 0c:02:76:de:5f:94:6a:01:71:ff:bb:1e:39:6a:83:fe:60:a1: 31:cd:f5:a9:76:20:ab:08:a2:f3:9c:41:a8:3c:93:a1:ee:ac: f1:0c:e2:2b:4c:e7:22:99:b6:66:1d:f3:d3:e8:73:a8:e8:b9: 94:63:8d:44:72:f7:80:f6:49:13:6c:ce:46:a8:f3:b1:6c:28: 4c:b6:67:b9:ab:14:4a:e0:48:f9:ba:32:67:5b:54:d2:e5:0a: 83:11:e8:df:a0:d6:71:46:d3:21:39:9d:87:ef:3e:d4:a3:5a: 01:b8:72:21:76:ba:06:49:a1:f8:f1:ae:9c:d2:82:b1:27:22: 99:a3:59:e1:40:b1:4e:f5:5e:af:19:58:b1:c5:c2:9b:74:da: 85:68:29:3d:db:20:e5:4a:5a:a1:d9:28:b6:06:05:ac:59:dc: 68:c4:26:51:ec:31:cb:62:d8:a9:eb:69:4c:79:0e:01:7d:74: d4:ff:37:ea:f5:c6:55:f3:de:2f:3c:7d:9a:54:df:cb:fd:98: 22:7b:44:4b -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZrGiSX6TpkfuA8dWJp5qY74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZGY3NmM1NGI5ZTY5MzVjMzBhOWI0YzliYTkzMDlhYzQ3 MGVjMDIwHhcNMjUxMTI3MTgxNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzIyYzkzY2JhMWNkNjY3ZjU1Y2E0YWYyMmMxYWRjZThkMDc1OTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFQx2+UFiBOT4J9Ok2yceFoE5/FY MUkuPq52ix7W/RuRxcKZhqeFQ7jS6EsQdhAlwz712Buz208tkmCpd0YFk89hyAFm Qq249d9HaK1q5vZkt9HWZpDxe+mKK8xblNFQjymx81raZ2prxGGOp55t1dV4o/vR 74QPZ35dP1i7O9KM7fOH0W+iHEVlWz0JoLCXwe60DB3GwZ4AmNWZyTypRIkKxf2i twtVVQbEkt11knHPCf1iSeXU9N974tluctgP0JbhOHo0hLOXB+6zVGKQpHxdpyb/ MPiRfADrlpYESsEUpDm5Lm1ucyOJqnsSHafctsGtsEx3+3kTsuZzUZBi4QIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFBMiyTy6HNZn9VykryLBrc6NB1ldMB8GA1UdIwQY MBaAFIvfdsVLnmk1wwqbTJupMJrEcOwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgt OGQyMTg2NjUwMjdkLzEvRXlMSlBMb2MxbWYxWEtTdklzR3R6bzBIV1YwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgtOGQyMTg2NjUwMjdk LzEvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAFZiUD BAMFZiADBADD3n8wDQYJKoZIhvcNAQELBQADggEBACRXS6B06K961svTnw6/yMLO mMDRhfo2BGIQNWoBWTrR/Gri1+RAI9IlT5ina16VM/Zmt2VjUwwCdt5flGoBcf+7 Hjlqg/5goTHN9al2IKsIovOcQag8k6HurPEM4itM5yKZtmYd89Poc6jouZRjjURy 94D2SRNszkao87FsKEy2Z7mrFErgSPm6MmdbVNLlCoMR6N+g1nFG0yE5nYfvPtSj WgG4ciF2ugZJofjxrpzSgrEnIpmjWeFAsU71Xq8ZWLHFwpt02oVoKT3bIOVKWqHZ KLYGBaxZ3GjEJlHsMcti2KnraUx5DgF9dNT/N+r1xlXz3i88fZpU38v9mCJ7REs= -----END CERTIFICATE-----Generated at Sat Dec 6 18:07:46 2025 by rpki-client