This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/L0Wgt6xy2_efOy0o9WcyrAyNUp4.roa File: L0Wgt6xy2_efOy0o9WcyrAyNUp4.roa (raw, json) Hash identifier: yeLYvznrSt7d+qJl0WN+vNuuMTz+k0iTPIwg6DAcL4g= Subject key identifier: 2F:45:A0:B7:AC:72:DB:F7:9F:3B:2D:28:F5:67:32:AC:0C:8D:52:9E Certificate issuer: /CN=3061e6155e3f35f88e6b44cd355e6e936e921a6c Certificate serial: 019A97B428C08B6535C4ADA67679B70EA9F5 Authority key identifier: 30:61:E6:15:5E:3F:35:F8:8E:6B:44:CD:35:5E:6E:93:6E:92:1A:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGHmFV4_NfiOa0TNNV5uk26SGmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/L0Wgt6xy2_efOy0o9WcyrAyNUp4.roa Signing time: Tue 18 Nov 2025 16:02:37 +0000 ROA not before: Tue 18 Nov 2025 16:02:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 33915 IP address blocks: 185.211.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.mft rsync://rpki.ripe.net/repository/DEFAULT/MGHmFV4_NfiOa0TNNV5uk26SGmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:b4:28:c0:8b:65:35:c4:ad:a6:76:79:b7:0e:a9:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3061e6155e3f35f88e6b44cd355e6e936e921a6c Validity Not Before: Nov 18 16:02:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2f45a0b7ac72dbf79f3b2d28f56732ac0c8d529e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:04:5a:4f:0e:66:a1:6e:6a:16:3e:8a:cd:9d: ea:e6:a6:da:61:87:d1:02:81:ee:ab:36:26:cf:b8: c5:e1:35:1b:88:55:56:d1:c7:1d:80:cf:45:e4:20: e8:ac:b0:9c:f5:4f:74:f7:10:11:ba:c7:ca:f1:d2: 2e:59:ef:35:59:b9:2e:cf:2b:c8:19:34:d1:25:51: 34:0b:d1:16:28:ae:f1:4f:f3:91:14:70:81:66:3a: d9:58:3f:ff:45:df:33:c1:cb:a8:b4:20:9f:28:fd: 9f:ce:b0:24:cf:fa:8a:2e:30:67:67:15:c8:6d:45: 73:99:ab:f1:cd:bd:fd:a8:57:dc:2c:20:96:5e:9b: 2e:9a:bd:92:c0:75:f9:35:b0:2b:10:f3:a7:6c:eb: bf:1e:2f:f2:68:94:24:6f:21:98:cd:02:7a:56:39: 89:c0:c4:ea:3f:6c:16:21:c0:0a:af:4c:4e:8f:28: 42:bb:47:26:c3:95:c5:05:57:7f:02:7e:dc:48:f2: 70:e1:12:c1:1d:aa:37:c4:1b:0a:5e:2f:b6:71:5f: 5c:87:b5:81:6c:a8:66:9a:50:c0:ee:11:a8:a1:aa: 1b:0d:20:b9:b8:df:c1:b9:e9:e1:60:fe:41:36:dc: e4:bb:01:cc:10:1e:12:24:9c:e3:43:3c:fe:66:d0: 09:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:45:A0:B7:AC:72:DB:F7:9F:3B:2D:28:F5:67:32:AC:0C:8D:52:9E X509v3 Authority Key Identifier: keyid:30:61:E6:15:5E:3F:35:F8:8E:6B:44:CD:35:5E:6E:93:6E:92:1A:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGHmFV4_NfiOa0TNNV5uk26SGmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/L0Wgt6xy2_efOy0o9WcyrAyNUp4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.187.0/24 Signature Algorithm: sha256WithRSAEncryption 76:0c:07:d7:fd:90:3d:e3:19:06:02:7f:cc:72:f6:ec:d1:c8: 05:0e:b9:4f:14:01:03:97:fc:63:6a:99:a6:c9:32:9c:a7:19: 68:fc:ae:90:79:d1:81:4c:1d:84:0b:94:a5:a3:26:52:f0:05: 9e:54:16:27:15:60:7d:bb:22:fd:6c:44:81:e5:70:11:46:27: c6:9a:7a:42:18:18:53:a5:7b:6e:2b:cf:61:c0:36:5d:cf:75: 2e:be:d5:d0:f7:06:e1:33:d7:5b:9d:99:5c:84:2e:1b:67:68: 56:3f:ee:da:73:15:dd:c5:4e:c7:b3:bd:2f:06:fc:99:d4:2c: bb:6f:4d:e7:82:76:21:ec:53:cd:0e:e8:e3:db:76:fd:d4:97: 0f:a4:36:40:2b:3d:ad:f4:18:7a:19:01:c2:a1:22:ab:48:74: 3f:80:e6:c1:95:a7:9a:6e:a4:c4:24:21:71:81:1c:cb:d8:01: 4e:ef:db:a6:59:4c:78:6d:67:45:53:78:90:dc:1f:e8:de:84: e2:a3:2c:e5:89:c8:ea:0c:20:c3:65:b4:37:fe:a5:1c:8f:7c: 9f:f5:71:b2:20:75:d8:f4:77:2f:d5:51:27:28:7b:1a:bf:6e: a7:00:bf:74:6e:36:9c:fa:8a:33:1d:bc:43:19:db:3f:cd:75: 80:76:52:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqXtCjAi2U1xK2mdnm3Dqn1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjFlNjE1NWUzZjM1Zjg4ZTZiNDRjZDM1NWU2ZTkzNmU5 MjFhNmMwHhcNMjUxMTE4MTYwMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjQ1YTBiN2FjNzJkYmY3OWYzYjJkMjhmNTY3MzJhYzBjOGQ1MjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQRaTw5moW5qFj6KzZ3q5qbaYYfR AoHuqzYmz7jF4TUbiFVW0ccdgM9F5CDorLCc9U909xARusfK8dIuWe81WbkuzyvI GTTRJVE0C9EWKK7xT/ORFHCBZjrZWD//Rd8zwcuotCCfKP2fzrAkz/qKLjBnZxXI bUVzmavxzb39qFfcLCCWXpsumr2SwHX5NbArEPOnbOu/Hi/yaJQkbyGYzQJ6VjmJ wMTqP2wWIcAKr0xOjyhCu0cmw5XFBVd/An7cSPJw4RLBHao3xBsKXi+2cV9ch7WB bKhmmlDA7hGooaobDSC5uN/BuenhYP5BNtzkuwHMEB4SJJzjQzz+ZtAJAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC9FoLesctv3nzstKPVnMqwMjVKeMB8GA1UdIwQY MBaAFDBh5hVePzX4jmtEzTVebpNukhpsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdIbUZWNF9OZmlPYTBUTk5WNXVrMjZTR213LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9kNTg0MDEtYTY3Yy00NTgzLWI5YjYt NjQxNjZjNjk1Mzc4LzEvTDBXZ3Q2eHkyX2VmT3kwbzlXY3lyQXlOVXA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9kNTg0MDEtYTY3Yy00NTgzLWI5YjYtNjQxNjZjNjk1Mzc4 LzEvTUdIbUZWNF9OZmlPYTBUTk5WNXVrMjZTR213LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudO7MA0G CSqGSIb3DQEBCwUAA4IBAQB2DAfX/ZA94xkGAn/Mcvbs0cgFDrlPFAEDl/xjapmm yTKcpxlo/K6QedGBTB2EC5SloyZS8AWeVBYnFWB9uyL9bESB5XARRifGmnpCGBhT pXtuK89hwDZdz3UuvtXQ9wbhM9dbnZlchC4bZ2hWP+7acxXdxU7Hs70vBvyZ1Cy7 b03ngnYh7FPNDujj23b91JcPpDZAKz2t9Bh6GQHCoSKrSHQ/gObBlaeabqTEJCFx gRzL2AFO79umWUx4bWdFU3iQ3B/o3oTioyzlicjqDCDDZbQ3/qUcj3yf9XGyIHXY 9Hcv1VEnKHsav26nAL90bjac+oozHbxDGds/zXWAdlIS -----END CERTIFICATE-----Generated at Sat Dec 6 15:50:34 2025 by rpki-client