This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/2l-u740cwo47no9UP24NaXclLws.roa File: 2l-u740cwo47no9UP24NaXclLws.roa (raw, json) Hash identifier: lM2rzN2C7SnAMTBRoCC3QdlWciIf9zSS8vEa3CZyUHk= Subject key identifier: DA:5F:AE:EF:8D:1C:C2:8E:3B:9E:8F:54:3F:6E:0D:69:77:25:2F:0B Certificate issuer: /CN=08fe040242651353d556b8c4240082190f271d13 Certificate serial: 019ABFF240F5C90374832900843980CACE22 Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/2l-u740cwo47no9UP24NaXclLws.roa Signing time: Wed 26 Nov 2025 11:35:15 +0000 ROA not before: Wed 26 Nov 2025 11:35:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 81.85.63.0/24 maxlen: 24 185.22.168.0/24 maxlen: 24 185.22.170.0/24 maxlen: 24 185.22.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:f2:40:f5:c9:03:74:83:29:00:84:39:80:ca:ce:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08fe040242651353d556b8c4240082190f271d13 Validity Not Before: Nov 26 11:35:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=da5faeef8d1cc28e3b9e8f543f6e0d6977252f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:34:d3:3a:2c:0d:72:dc:a7:04:68:71:f7:bb: 07:7b:87:54:be:2d:8e:57:92:f6:29:83:72:ea:27: d2:49:3c:09:5a:93:05:46:cc:16:c5:46:49:77:db: 73:47:e1:02:02:89:01:81:e4:94:74:7e:e5:25:e7: fe:7a:f4:f8:b3:ee:70:c4:97:6c:59:b0:70:d2:7e: 55:87:72:3f:58:47:1e:c4:87:8e:09:59:21:28:02: a9:73:b4:f0:4f:56:40:a3:9c:d3:1b:50:b4:12:56: 28:35:30:9d:66:d3:03:2d:72:27:dc:8c:40:a8:41: 4c:68:1d:4a:25:62:bf:ff:e3:56:2b:f7:a9:93:42: d2:5e:cc:0b:53:40:89:b6:5a:c7:24:4e:89:65:d2: 78:aa:09:0f:41:ca:a8:99:e5:36:f6:54:0c:e2:6c: eb:01:4e:f7:02:60:34:72:c7:f6:85:95:88:b1:3f: df:90:dd:ea:e1:b1:bc:72:ee:4e:4e:7e:30:c3:ef: da:98:1e:39:35:ca:b8:68:77:e0:fc:5c:e5:f3:d9: a2:88:36:c1:25:55:24:22:47:b1:cb:4f:47:6c:e0: da:f8:f3:66:a9:e8:a2:d9:70:84:77:06:f7:fe:3a: f1:9c:60:67:fb:b7:56:43:7f:5d:e4:1c:58:11:16: 1e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:5F:AE:EF:8D:1C:C2:8E:3B:9E:8F:54:3F:6E:0D:69:77:25:2F:0B X509v3 Authority Key Identifier: keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/2l-u740cwo47no9UP24NaXclLws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.85.63.0/24 185.22.168.0/24 185.22.170.0/23 Signature Algorithm: sha256WithRSAEncryption 77:ac:2f:b1:11:9c:0c:87:6b:0c:42:29:b7:f4:94:ea:66:66: 8d:30:58:81:c9:05:bc:61:58:62:1a:00:83:0a:26:41:65:47: a1:de:45:65:9d:01:68:cf:82:53:74:f4:7d:75:62:25:cf:d6: f9:27:d5:38:75:aa:48:5e:e4:b4:dd:90:b1:c0:c3:8c:3b:01: ae:36:af:fa:70:72:19:23:8e:d4:0a:54:db:99:c0:ef:84:96: 6c:3e:68:4e:99:96:c9:15:6e:cd:83:d7:d8:4c:5b:ec:75:a0: 72:3a:95:7c:f2:a7:6a:b8:0f:12:1f:e1:51:06:25:4b:49:27: f2:e4:9a:55:c5:22:77:1d:72:fc:40:07:36:db:99:52:e6:21: 1f:7c:d6:04:c8:81:a7:fc:f5:21:5b:fd:5f:54:1b:00:29:5f: 8f:0a:f3:6e:0c:dd:28:85:e4:c9:21:43:c5:04:f6:fb:40:36: 63:13:31:b5:59:e3:f1:c8:33:49:1b:3e:4e:f8:55:b4:5b:4e: a4:cf:53:7c:45:7f:be:38:7a:30:a4:6b:30:5d:95:55:2d:e3: 89:66:b5:9f:ec:68:eb:24:6e:63:92:8d:90:a5:64:fe:c5:52: 13:84:3e:a0:b7:6e:d2:16:c3:e2:d4:b0:16:03:83:9e:02:b7: fb:78:1d:e3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZq/8kD1yQN0gykAhDmAys4iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZmUwNDAyNDI2NTEzNTNkNTU2YjhjNDI0MDA4MjE5MGYy NzFkMTMwHhcNMjUxMTI2MTEzNTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTVmYWVlZjhkMWNjMjhlM2I5ZThmNTQzZjZlMGQ2OTc3MjUyZjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDTTOiwNctynBGhx97sHe4dUvi2O V5L2KYNy6ifSSTwJWpMFRswWxUZJd9tzR+ECAokBgeSUdH7lJef+evT4s+5wxJds WbBw0n5Vh3I/WEcexIeOCVkhKAKpc7TwT1ZAo5zTG1C0ElYoNTCdZtMDLXIn3IxA qEFMaB1KJWK//+NWK/epk0LSXswLU0CJtlrHJE6JZdJ4qgkPQcqomeU29lQM4mzr AU73AmA0csf2hZWIsT/fkN3q4bG8cu5OTn4ww+/amB45Ncq4aHfg/Fzl89miiDbB JVUkIkexy09HbODa+PNmqeii2XCEdwb3/jrxnGBn+7dWQ39d5BxYERYeMQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNpfru+NHMKOO56PVD9uDWl3JS8LMB8GA1UdIwQY MBaAFAj+BAJCZRNT1Va4xCQAghkPJx0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80ZWJjMzMtZWU1NC00MzdjLThhMWIt ZGVjNDgwN2NkN2U2LzEvMmwtdTc0MGN3bzQ3bm85VVAyNE5hWGNsTHdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy80ZWJjMzMtZWU1NC00MzdjLThhMWItZGVjNDgwN2NkN2U2 LzEvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUVU/AwQA uRaoAwQBuRaqMA0GCSqGSIb3DQEBCwUAA4IBAQB3rC+xEZwMh2sMQim39JTqZmaN MFiByQW8YVhiGgCDCiZBZUeh3kVlnQFoz4JTdPR9dWIlz9b5J9U4dapIXuS03ZCx wMOMOwGuNq/6cHIZI47UClTbmcDvhJZsPmhOmZbJFW7Ng9fYTFvsdaByOpV88qdq uA8SH+FRBiVLSSfy5JpVxSJ3HXL8QAc225lS5iEffNYEyIGn/PUhW/1fVBsAKV+P CvNuDN0oheTJIUPFBPb7QDZjEzG1WePxyDNJGz5O+FW0W06kz1N8RX++OHowpGsw XZVVLeOJZrWf7GjrJG5jko2QpWT+xVIThD6gt27SFsPi1LAWA4OeArf7eB3j -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:53 2025 by rpki-client