This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/Rw8RywHbsa_p7g8zsXuVy9RBQFI.roa File: Rw8RywHbsa_p7g8zsXuVy9RBQFI.roa (raw, json) Hash identifier: jD0IyjbZPbmU1TJt+Q9T2QY51OqVD1cOWjM2usjzUl4= Subject key identifier: 47:0F:11:CB:01:DB:B1:AF:E9:EE:0F:33:B1:7B:95:CB:D4:41:40:52 Certificate issuer: /CN=855bc1d7cf7b69c8eb51d0c6d54f7ffadf780ca7 Certificate serial: 019A973D237DC717A40BA346A8CA38C48A22 Authority key identifier: 85:5B:C1:D7:CF:7B:69:C8:EB:51:D0:C6:D5:4F:7F:FA:DF:78:0C:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVvB1897acjrUdDG1U9_-t94DKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/Rw8RywHbsa_p7g8zsXuVy9RBQFI.roa Signing time: Tue 18 Nov 2025 13:52:37 +0000 ROA not before: Tue 18 Nov 2025 13:52:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204624 IP address blocks: 109.71.186.0/24 maxlen: 24 109.71.187.0/24 maxlen: 24 2a0e:f640:6::/48 maxlen: 48 2a0e:f640:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/hVvB1897acjrUdDG1U9_-t94DKc.crl rsync://rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/hVvB1897acjrUdDG1U9_-t94DKc.mft rsync://rpki.ripe.net/repository/DEFAULT/hVvB1897acjrUdDG1U9_-t94DKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:3d:23:7d:c7:17:a4:0b:a3:46:a8:ca:38:c4:8a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855bc1d7cf7b69c8eb51d0c6d54f7ffadf780ca7 Validity Not Before: Nov 18 13:52:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=470f11cb01dbb1afe9ee0f33b17b95cbd4414052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a8:7e:2b:42:d8:03:7a:14:2e:18:4a:4e:fb: e4:5e:c1:ef:3a:51:4a:dd:56:ba:2c:be:4e:b8:ca: dd:d5:78:fc:69:5e:94:2e:f4:45:f2:4b:4b:8f:62: 98:53:3d:8d:d2:bd:bf:c8:15:8d:97:41:2f:6b:dc: 91:03:73:de:84:87:b3:c1:fb:b6:0b:e7:3a:dd:d0: e6:f5:e9:90:db:95:83:2b:66:e2:91:81:61:bb:fe: 7b:ef:11:61:d8:ee:58:88:95:f5:33:6d:2c:13:d2: 5e:1a:88:d8:8b:4e:af:8c:3f:9e:0a:29:fb:99:96: 64:07:c6:e1:0d:7e:5f:8c:fb:a5:2a:19:f1:b4:b6: f9:40:44:e7:0c:38:e4:0a:8a:de:a0:c9:9a:30:47: 5c:1f:dc:a2:b9:8d:73:7b:60:f4:4e:f9:08:e5:29: 87:27:f4:44:01:93:23:c4:92:e9:bf:52:b4:6e:ce: 71:56:c9:9f:09:d6:e8:66:8f:ca:52:b2:24:0f:24: 79:38:ea:0e:49:64:0a:e9:a9:c8:1f:15:5c:67:5a: 5e:be:a2:9d:a5:5f:ba:f1:41:1c:52:9b:89:b2:dc: d9:1f:a8:86:66:a9:5d:a4:86:60:b4:f5:d8:a9:bd: 84:fb:da:06:c4:43:c0:9e:2d:2b:e3:31:91:2e:b5: 67:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0F:11:CB:01:DB:B1:AF:E9:EE:0F:33:B1:7B:95:CB:D4:41:40:52 X509v3 Authority Key Identifier: keyid:85:5B:C1:D7:CF:7B:69:C8:EB:51:D0:C6:D5:4F:7F:FA:DF:78:0C:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVvB1897acjrUdDG1U9_-t94DKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/Rw8RywHbsa_p7g8zsXuVy9RBQFI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/hVvB1897acjrUdDG1U9_-t94DKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.71.186.0/23 IPv6: 2a0e:f640:6::/47 Signature Algorithm: sha256WithRSAEncryption 8d:5f:98:84:20:bf:28:9f:2a:3c:fb:59:71:52:31:c8:ee:a6: fc:22:38:76:15:6f:40:b9:5f:df:87:bd:32:e9:d0:2e:68:d1: 41:60:26:cf:c4:78:cd:e9:c2:c2:50:b7:81:61:07:e1:63:e7: d5:bb:b5:27:d3:32:f9:de:d3:cd:3a:61:ad:3b:35:1f:86:08: 40:3f:2e:36:22:20:04:dc:50:55:ca:38:6f:3f:fe:16:88:55: 13:d8:0f:72:94:e6:6b:92:4c:39:18:66:1b:39:88:e9:3f:70: 1f:cd:23:ca:8a:40:82:47:24:99:71:42:7d:7b:98:53:42:07: ce:6b:c6:92:44:30:78:00:02:ce:18:cc:d3:ed:d9:ae:9a:c0: 26:3a:8d:9d:b0:b9:ac:c5:d5:4f:4c:b0:53:d1:51:7c:d6:6d: 35:07:25:f3:4f:47:f0:c9:14:64:3b:73:47:a9:ab:2a:7b:1c: 92:fe:90:02:ef:b2:53:55:1c:27:da:34:74:54:a1:63:66:e1: 13:4e:d8:9d:23:63:52:af:9b:f2:c5:86:af:79:ab:e2:58:db: e3:f0:3a:07:3f:eb:bd:70:dc:82:4d:dc:d3:31:09:df:e7:dd: 90:b2:7e:6d:9f:d7:1f:c6:05:b2:5f:5c:17:8b:e8:38:fd:d3: 0f:de:f8:68 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZqXPSN9xxekC6NGqMo4xIoiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NWJjMWQ3Y2Y3YjY5YzhlYjUxZDBjNmQ1NGY3ZmZhZGY3 ODBjYTcwHhcNMjUxMTE4MTM1MjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzBmMTFjYjAxZGJiMWFmZTllZTBmMzNiMTdiOTVjYmQ0NDE0MDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsah+K0LYA3oULhhKTvvkXsHvOlFK 3Va6LL5OuMrd1Xj8aV6ULvRF8ktLj2KYUz2N0r2/yBWNl0Eva9yRA3PehIezwfu2 C+c63dDm9emQ25WDK2bikYFhu/577xFh2O5YiJX1M20sE9JeGojYi06vjD+eCin7 mZZkB8bhDX5fjPulKhnxtLb5QETnDDjkCoreoMmaMEdcH9yiuY1ze2D0TvkI5SmH J/REAZMjxJLpv1K0bs5xVsmfCdboZo/KUrIkDyR5OOoOSWQK6anIHxVcZ1pevqKd pV+68UEcUpuJstzZH6iGZqldpIZgtPXYqb2E+9oGxEPAni0r4zGRLrVnLQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFEcPEcsB27Gv6e4PM7F7lcvUQUBSMB8GA1UdIwQY MBaAFIVbwdfPe2nI61HQxtVPf/rfeAynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFZ2QjE4OTdhY2pyVWRERzFVOV8tdDk0REtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lM2Q2ZmYtOGZmYi00NzQxLThmYTQt MGNjNGQyZDI2ZjA2LzEvUnc4Unl3SGJzYV9wN2c4enNYdVZ5OVJCUUZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9lM2Q2ZmYtOGZmYi00NzQxLThmYTQtMGNjNGQyZDI2ZjA2 LzEvaFZ2QjE4OTdhY2pyVWRERzFVOV8tdDk0REtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBbUe6MA8E AgACMAkDBwEqDvZAAAYwDQYJKoZIhvcNAQELBQADggEBAI1fmIQgvyifKjz7WXFS McjupvwiOHYVb0C5X9+HvTLp0C5o0UFgJs/EeM3pwsJQt4FhB+Fj59W7tSfTMvne 0806Ya07NR+GCEA/LjYiIATcUFXKOG8//haIVRPYD3KU5muSTDkYZhs5iOk/cB/N I8qKQIJHJJlxQn17mFNCB85rxpJEMHgAAs4YzNPt2a6awCY6jZ2wuazF1U9MsFPR UXzWbTUHJfNPR/DJFGQ7c0epqyp7HJL+kALvslNVHCfaNHRUoWNm4RNO2J0jY1Kv m/LFhq95q+JY2+PwOgc/671w3IJN3NMxCd/n3ZCyfm2f1x/GBbJfXBeL6Dj90w/e +Gg= -----END CERTIFICATE-----Generated at Sat Dec 6 11:04:31 2025 by rpki-client