This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/v3biHIz9iCACLZeXN_eg8uesj-Q.roa File: v3biHIz9iCACLZeXN_eg8uesj-Q.roa (raw, json) Hash identifier: ujw9A7xfx5scenbbuXNKapwY0W4NLiOl0vr5ahhGLQY= Subject key identifier: BF:76:E2:1C:8C:FD:88:20:02:2D:97:97:37:F7:A0:F2:E7:AC:8F:E4 Certificate issuer: /CN=3061e6155e3f35f88e6b44cd355e6e936e921a6c Certificate serial: 019A97B33D83BD77D9D067E6B75D92316D23 Authority key identifier: 30:61:E6:15:5E:3F:35:F8:8E:6B:44:CD:35:5E:6E:93:6E:92:1A:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGHmFV4_NfiOa0TNNV5uk26SGmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/v3biHIz9iCACLZeXN_eg8uesj-Q.roa Signing time: Tue 18 Nov 2025 16:01:37 +0000 ROA not before: Tue 18 Nov 2025 16:01:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205637 IP address blocks: 185.211.184.0/22 maxlen: 22 185.211.184.0/23 maxlen: 23 185.211.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.mft rsync://rpki.ripe.net/repository/DEFAULT/MGHmFV4_NfiOa0TNNV5uk26SGmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:b3:3d:83:bd:77:d9:d0:67:e6:b7:5d:92:31:6d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3061e6155e3f35f88e6b44cd355e6e936e921a6c Validity Not Before: Nov 18 16:01:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bf76e21c8cfd8820022d979737f7a0f2e7ac8fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c1:6f:1b:d5:f1:8c:ae:7c:55:62:c9:be:94: c1:27:3a:d4:84:20:95:f8:26:3b:9e:50:c8:90:ee: c6:0a:46:5f:a7:4a:5f:05:c1:43:17:55:20:88:e2: 84:87:da:18:9b:09:66:dc:74:3b:4c:26:5a:30:d1: e6:ec:1d:2c:43:43:33:7c:e9:91:b2:8a:dc:3f:c1: 1b:fb:81:25:83:2b:ff:9a:af:ed:53:69:a5:c9:75: 05:fd:7c:9f:cb:a6:1b:66:32:ca:ac:13:b2:fd:7f: 95:74:95:de:3f:14:ff:90:67:1b:d6:c8:ae:d2:e2: 64:43:c5:0b:d0:bb:72:e0:91:35:c1:03:1c:f9:8a: 63:cc:6a:d3:1a:c0:06:40:ff:36:14:0a:dd:f8:fb: 07:d5:77:e9:be:bb:39:c2:49:08:96:b5:4e:94:e5: f6:b0:1e:e8:ac:26:a5:aa:f7:11:8d:f1:35:00:05: 9c:db:8f:85:cb:c3:32:3b:b5:c4:48:2a:6e:a7:85: 86:f4:66:1b:12:6f:4d:75:3c:11:fe:36:f3:01:7a: 98:57:c8:75:56:fc:f1:93:06:e7:f6:dc:b0:90:3b: 40:40:b2:9c:27:77:3f:ce:40:ca:b7:9b:79:1f:9b: 43:98:44:25:8a:46:77:30:1d:ba:dd:a4:fc:81:fa: 80:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:76:E2:1C:8C:FD:88:20:02:2D:97:97:37:F7:A0:F2:E7:AC:8F:E4 X509v3 Authority Key Identifier: keyid:30:61:E6:15:5E:3F:35:F8:8E:6B:44:CD:35:5E:6E:93:6E:92:1A:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGHmFV4_NfiOa0TNNV5uk26SGmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/v3biHIz9iCACLZeXN_eg8uesj-Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.184.0/22 Signature Algorithm: sha256WithRSAEncryption 96:ec:17:c8:9d:9d:72:37:10:d1:33:e6:29:e4:9c:bd:ee:ca: 85:18:c5:fd:75:1c:0f:a0:96:1d:a0:46:7d:31:1f:20:93:02: 68:f3:2a:54:c0:70:04:3e:41:1f:1d:17:9c:fd:5b:9e:2f:0e: b4:f4:55:41:98:f8:c0:f9:96:ef:84:b5:67:4a:7c:72:02:96: c1:9a:30:fb:72:80:44:54:2a:18:99:2f:73:3b:c1:60:86:81: 2b:40:3d:53:9a:2c:8e:23:d4:07:ba:02:ec:5e:68:5d:af:dd: de:2f:6e:f3:3a:59:ee:e1:a9:f7:a4:7e:4d:71:b3:a2:12:92: 37:d9:e3:a6:2e:87:05:94:6d:af:74:4f:ed:f0:91:02:f4:b9: 41:c4:b4:6d:83:a1:9c:62:91:2a:3d:50:60:b8:e6:a9:9b:7b: e0:04:df:6d:e6:5a:eb:b5:f9:d0:6f:4c:1d:14:b2:5d:1c:3b: da:ac:23:be:cf:87:80:24:1f:ab:f0:4a:68:d0:5e:fd:4e:73: 4e:d2:0c:e5:c9:e2:41:f3:6f:d5:ae:f2:70:cd:bf:6b:3b:cf: 45:06:88:08:b5:50:22:89:73:59:1f:61:3f:00:a2:12:c9:3f: e3:74:56:49:08:37:ae:36:1d:29:68:09:6c:2d:86:4d:c3:b2: de:d9:a2:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqXsz2DvXfZ0Gfmt12SMW0jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjFlNjE1NWUzZjM1Zjg4ZTZiNDRjZDM1NWU2ZTkzNmU5 MjFhNmMwHhcNMjUxMTE4MTYwMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjc2ZTIxYzhjZmQ4ODIwMDIyZDk3OTczN2Y3YTBmMmU3YWM4ZmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMFvG9XxjK58VWLJvpTBJzrUhCCV +CY7nlDIkO7GCkZfp0pfBcFDF1UgiOKEh9oYmwlm3HQ7TCZaMNHm7B0sQ0MzfOmR sorcP8Eb+4Elgyv/mq/tU2mlyXUF/Xyfy6YbZjLKrBOy/X+VdJXePxT/kGcb1siu 0uJkQ8UL0Lty4JE1wQMc+YpjzGrTGsAGQP82FArd+PsH1Xfpvrs5wkkIlrVOlOX2 sB7orCalqvcRjfE1AAWc24+Fy8MyO7XESCpup4WG9GYbEm9NdTwR/jbzAXqYV8h1 Vvzxkwbn9tywkDtAQLKcJ3c/zkDKt5t5H5tDmEQlikZ3MB263aT8gfqAkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL924hyM/YggAi2Xlzf3oPLnrI/kMB8GA1UdIwQY MBaAFDBh5hVePzX4jmtEzTVebpNukhpsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdIbUZWNF9OZmlPYTBUTk5WNXVrMjZTR213LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9kNTg0MDEtYTY3Yy00NTgzLWI5YjYt NjQxNjZjNjk1Mzc4LzEvdjNiaUhJejlpQ0FDTFplWE5fZWc4dWVzai1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9kNTg0MDEtYTY3Yy00NTgzLWI5YjYtNjQxNjZjNjk1Mzc4 LzEvTUdIbUZWNF9OZmlPYTBUTk5WNXVrMjZTR213LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudO4MA0G CSqGSIb3DQEBCwUAA4IBAQCW7BfInZ1yNxDRM+Yp5Jy97sqFGMX9dRwPoJYdoEZ9 MR8gkwJo8ypUwHAEPkEfHRec/VueLw609FVBmPjA+ZbvhLVnSnxyApbBmjD7coBE VCoYmS9zO8FghoErQD1TmiyOI9QHugLsXmhdr93eL27zOlnu4an3pH5NcbOiEpI3 2eOmLocFlG2vdE/t8JEC9LlBxLRtg6GcYpEqPVBguOapm3vgBN9t5lrrtfnQb0wd FLJdHDvarCO+z4eAJB+r8Epo0F79TnNO0gzlyeJB82/VrvJwzb9rO89FBogItVAi iXNZH2E/AKISyT/jdFZJCDeuNh0paAlsLYZNw7Le2aL/ -----END CERTIFICATE-----Generated at Sat Dec 6 14:06:14 2025 by rpki-client