This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/sLaCmrc25_HB_7xkPXCsj-CC6Q4.roa File: sLaCmrc25_HB_7xkPXCsj-CC6Q4.roa (raw, json) Hash identifier: JLvSyoM/qseyQmqt6JCBjOhUB38og+Ev5p0f+kLC9T4= Subject key identifier: B0:B6:82:9A:B7:36:E7:F1:C1:FF:BC:64:3D:70:AC:8F:E0:82:E9:0E Certificate issuer: /CN=794f551e97a132542e3b056e905de8f3dba24c9c Certificate serial: 019A7F5FD29FEB50A584DBAC52470077D636 Authority key identifier: 79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/sLaCmrc25_HB_7xkPXCsj-CC6Q4.roa Signing time: Thu 13 Nov 2025 22:39:37 +0000 ROA not before: Thu 13 Nov 2025 22:39:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47597 IP address blocks: 185.152.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7f:5f:d2:9f:eb:50:a5:84:db:ac:52:47:00:77:d6:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=794f551e97a132542e3b056e905de8f3dba24c9c Validity Not Before: Nov 13 22:39:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b0b6829ab736e7f1c1ffbc643d70ac8fe082e90e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:51:35:25:59:c6:87:8e:b7:25:1a:f3:51:89: a5:2f:a7:c2:b7:42:6a:21:15:3c:71:55:56:eb:25: f5:d7:ee:c5:4e:33:00:7c:83:5c:dc:ac:b4:41:df: e5:83:9e:37:fe:79:08:bd:9c:a3:98:0c:ec:c7:d1: 50:f0:29:d9:90:a1:75:32:a8:2d:0f:ec:78:39:25: c1:99:31:ba:a7:da:27:e4:bf:bf:b0:f4:bf:61:16: 74:b6:c7:40:2b:d5:46:c8:4a:02:13:89:2d:fb:d9: 71:f2:76:2d:cd:1c:4b:d1:18:78:db:85:6c:44:83: 3d:24:1e:ff:66:fc:7b:89:0a:0e:84:8e:9a:d9:2d: c9:39:9f:c9:a5:fe:84:c0:ef:b3:b9:a2:d2:a8:2e: ac:f7:f6:b7:95:9f:e6:8d:3d:fe:a2:a0:08:74:2f: cf:d3:d1:e3:aa:31:94:d4:34:a1:a4:35:36:ab:ea: 67:b8:8a:3e:b5:c1:e8:61:ac:65:64:46:2a:c0:ff: cf:38:f0:49:6f:33:50:e9:71:31:3e:ca:41:75:95: 8a:57:4d:d4:2e:e8:50:61:41:d3:5a:75:a4:b0:44: a9:ae:c2:cb:3a:89:66:e3:6c:8d:c5:d9:c9:8c:76: 0b:9f:b2:6f:5b:2a:68:58:ac:92:c0:ba:f2:2c:0b: 69:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B6:82:9A:B7:36:E7:F1:C1:FF:BC:64:3D:70:AC:8F:E0:82:E9:0E X509v3 Authority Key Identifier: keyid:79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/sLaCmrc25_HB_7xkPXCsj-CC6Q4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.152.140.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:5c:9d:3e:e7:a0:ae:6f:7b:8f:bd:ce:b0:f3:96:4e:4b:70: 2d:42:44:89:f8:fd:7b:fc:05:4d:f5:ad:e4:12:87:9f:bf:db: 14:78:e3:06:e1:71:ec:34:82:fb:9d:45:f5:ee:ee:a4:b9:34: 9d:da:53:a0:95:c4:bb:a1:14:de:13:c1:31:81:33:71:66:5f: 53:eb:0e:64:bf:29:ba:0f:df:3d:46:4c:6a:f3:bd:72:19:8f: cc:32:63:e0:2d:68:fe:c8:2c:fa:a4:11:63:11:04:f2:8f:06: a3:ca:a3:e9:0f:0b:31:d7:40:59:c8:78:7e:62:60:01:4f:49: 5c:86:e4:11:58:a8:bb:fc:48:42:61:f2:70:2d:ba:6d:36:d6: b8:e0:53:cc:ef:08:0b:58:74:5b:b3:31:5e:07:bd:01:9f:27: 7c:9f:04:31:eb:ab:8f:76:43:5e:02:82:e8:1a:05:13:c0:bc: bf:8d:6a:0e:ee:6f:14:ff:80:e1:79:ef:b1:e8:60:35:38:00: 67:39:83:a1:41:fb:ac:52:0c:1b:e0:87:96:55:25:0d:18:89: c0:3b:c2:72:26:d3:72:76:c6:c9:b0:6a:9b:dc:46:5c:a5:18: 4f:84:98:6b:e8:a9:ca:50:fa:89:7e:01:ec:69:17:85:82:38: ab:9f:49:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp/X9Kf61ClhNusUkcAd9Y2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NGY1NTFlOTdhMTMyNTQyZTNiMDU2ZTkwNWRlOGYzZGJh MjRjOWMwHhcNMjUxMTEzMjIzOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGI2ODI5YWI3MzZlN2YxYzFmZmJjNjQzZDcwYWM4ZmUwODJlOTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFE1JVnGh463JRrzUYmlL6fCt0Jq IRU8cVVW6yX11+7FTjMAfINc3Ky0Qd/lg543/nkIvZyjmAzsx9FQ8CnZkKF1Mqgt D+x4OSXBmTG6p9on5L+/sPS/YRZ0tsdAK9VGyEoCE4kt+9lx8nYtzRxL0Rh424Vs RIM9JB7/Zvx7iQoOhI6a2S3JOZ/Jpf6EwO+zuaLSqC6s9/a3lZ/mjT3+oqAIdC/P 09HjqjGU1DShpDU2q+pnuIo+tcHoYaxlZEYqwP/POPBJbzNQ6XExPspBdZWKV03U LuhQYUHTWnWksESprsLLOolm42yNxdnJjHYLn7JvWypoWKySwLryLAtpwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLC2gpq3Nufxwf+8ZD1wrI/ggukOMB8GA1UdIwQY MBaAFHlPVR6XoTJULjsFbpBd6PPbokycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVU5VkhwZWhNbFF1T3dWdWtGM284OXVpVEp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xOTI1ZTctMTY5NC00M2VkLThmYmMt NDM2ODU4ODc0MzZjLzEvc0xhQ21yYzI1X0hCXzd4a1BYQ3NqLUNDNlE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8xOTI1ZTctMTY5NC00M2VkLThmYmMtNDM2ODU4ODc0MzZj LzEvZVU5VkhwZWhNbFF1T3dWdWtGM284OXVpVEp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZiMMA0G CSqGSIb3DQEBCwUAA4IBAQAqXJ0+56Cub3uPvc6w85ZOS3AtQkSJ+P17/AVN9a3k Eoefv9sUeOMG4XHsNIL7nUX17u6kuTSd2lOglcS7oRTeE8ExgTNxZl9T6w5kvym6 D989Rkxq871yGY/MMmPgLWj+yCz6pBFjEQTyjwajyqPpDwsx10BZyHh+YmABT0lc huQRWKi7/EhCYfJwLbptNta44FPM7wgLWHRbszFeB70Bnyd8nwQx66uPdkNeAoLo GgUTwLy/jWoO7m8U/4Dhee+x6GA1OABnOYOhQfusUgwb4IeWVSUNGInAO8JyJtNy dsbJsGqb3EZcpRhPhJhr6KnKUPqJfgHsaReFgjirn0kz -----END CERTIFICATE-----Generated at Sat Dec 6 05:43:59 2025 by rpki-client