This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/L4ebS5DYuu1WMDLPNVuFPfYY3-A.roa File: L4ebS5DYuu1WMDLPNVuFPfYY3-A.roa (raw, json) Hash identifier: aKfpqocUWLfizAyD84ddOvn90vsZei+gl4YQ6Ps+5Nw= Subject key identifier: 2F:87:9B:4B:90:D8:BA:ED:56:30:32:CF:35:5B:85:3D:F6:18:DF:E0 Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Certificate serial: 019A720D7C4AAEDEC2CD195ACEB1FF29F024 Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/L4ebS5DYuu1WMDLPNVuFPfYY3-A.roa Signing time: Tue 11 Nov 2025 08:34:37 +0000 ROA not before: Tue 11 Nov 2025 08:34:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50124 IP address blocks: 91.108.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:72:0d:7c:4a:ae:de:c2:cd:19:5a:ce:b1:ff:29:f0:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Validity Not Before: Nov 11 08:34:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2f879b4b90d8baed563032cf355b853df618dfe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e7:58:02:53:75:96:04:cc:6e:5e:23:5e:28: c7:82:e4:23:69:4b:a6:69:b5:4b:b1:a2:f3:cc:07: b0:84:a9:d2:00:f6:29:8d:46:11:be:12:8f:26:36: 17:c5:c3:0a:ca:fe:df:b6:50:b9:2f:c1:00:66:c7: 61:f8:f0:06:6f:8e:f5:6f:22:c7:fa:1b:0e:75:ee: 32:a0:1e:db:90:f3:94:c1:12:70:34:4a:9c:3b:34: c3:df:1f:29:7f:3e:6e:ac:dd:70:ee:f1:8d:d1:28: ae:e2:89:9c:8f:b4:a6:1c:70:cc:c8:ef:7c:3f:94: 43:9d:84:9b:ba:7a:dc:17:ff:46:4e:53:77:50:0b: e4:72:2b:5d:e9:b5:f3:97:4c:88:8f:32:4a:53:4a: 92:8e:8e:6f:48:3c:f3:c6:15:cf:d7:27:20:ff:9c: 44:c9:e8:25:43:85:28:ee:ed:7f:d1:c1:71:e6:ce: 0e:8a:d5:2a:73:85:6a:55:41:f6:6d:05:53:46:8c: 75:bc:26:fa:ea:c5:2a:e3:53:f9:e8:ed:9e:96:54: 5b:20:3e:1c:f6:2a:f7:79:15:86:6a:ec:61:ae:53: fa:31:b4:d9:c7:a8:2a:61:f8:0a:47:ad:15:f3:8c: a8:ce:f5:b7:8f:d6:22:9f:99:59:f9:fb:78:1d:04: 51:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:87:9B:4B:90:D8:BA:ED:56:30:32:CF:35:5B:85:3D:F6:18:DF:E0 X509v3 Authority Key Identifier: keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/L4ebS5DYuu1WMDLPNVuFPfYY3-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.253.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:cc:c2:73:3e:b3:30:6f:97:5a:b4:5f:2d:6c:f0:d0:92:39: ab:91:4e:de:d5:85:94:76:17:49:fe:22:02:ac:2c:cf:23:05: 2f:7c:10:38:10:f1:a2:8f:16:01:72:06:4f:5b:d9:9c:ec:dd: 05:35:0c:73:5b:cc:09:c5:f4:b7:c1:7b:21:4c:05:66:23:a3: 5d:ff:d7:33:b6:f7:00:eb:03:d9:53:e5:d6:e9:6b:b4:8a:b2: fb:22:b9:d7:81:1c:67:cc:b5:f2:8b:6b:bf:ca:50:68:43:05: 05:e4:7e:3c:55:68:e3:f7:a5:4d:f2:2b:6c:2c:60:48:98:a3: a7:7a:f7:8f:af:8b:1c:86:ae:34:5b:af:73:0e:fa:06:a4:78: 5a:29:d0:e7:93:dc:5c:1e:c3:c6:d8:16:8f:7e:6b:35:fb:da: cf:5e:d7:e9:e7:5f:3b:95:fc:7e:a6:fa:dc:32:28:06:33:d4: e1:5b:4c:b6:7b:74:56:e8:38:ff:c6:a0:ca:8f:01:e3:54:f5: c6:5b:82:1d:7a:50:1e:67:ca:08:36:6d:44:d1:c5:d9:14:02: dd:f5:37:02:1c:3b:6c:5c:2b:c6:fb:c6:75:45:5a:a0:ec:91: 52:66:d5:e9:0d:f5:c3:07:8e:8b:b2:88:c0:b8:d4:68:22:f0: 44:7b:3f:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpyDXxKrt7CzRlazrH/KfAkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm NzMzMzkwHhcNMjUxMTExMDgzNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjg3OWI0YjkwZDhiYWVkNTYzMDMyY2YzNTViODUzZGY2MThkZmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2udYAlN1lgTMbl4jXijHguQjaUum abVLsaLzzAewhKnSAPYpjUYRvhKPJjYXxcMKyv7ftlC5L8EAZsdh+PAGb471byLH +hsOde4yoB7bkPOUwRJwNEqcOzTD3x8pfz5urN1w7vGN0Siu4omcj7SmHHDMyO98 P5RDnYSbunrcF/9GTlN3UAvkcitd6bXzl0yIjzJKU0qSjo5vSDzzxhXP1ycg/5xE yeglQ4Uo7u1/0cFx5s4OitUqc4VqVUH2bQVTRox1vCb66sUq41P56O2ellRbID4c 9ir3eRWGauxhrlP6MbTZx6gqYfgKR60V84yozvW3j9Yin5lZ+ft4HQRRvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC+Hm0uQ2LrtVjAyzzVbhT32GN/gMB8GA1UdIwQY MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt ZGE3NTQzMGIxNmY2LzEvTDRlYlM1RFl1dTFXTURMUE5WdUZQZllZMy1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2 LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2z9MA0G CSqGSIb3DQEBCwUAA4IBAQBrzMJzPrMwb5datF8tbPDQkjmrkU7e1YWUdhdJ/iIC rCzPIwUvfBA4EPGijxYBcgZPW9mc7N0FNQxzW8wJxfS3wXshTAVmI6Nd/9cztvcA 6wPZU+XW6Wu0irL7IrnXgRxnzLXyi2u/ylBoQwUF5H48VWjj96VN8itsLGBImKOn evePr4schq40W69zDvoGpHhaKdDnk9xcHsPG2BaPfms1+9rPXtfp5187lfx+pvrc MigGM9ThW0y2e3RW6Dj/xqDKjwHjVPXGW4IdelAeZ8oINm1E0cXZFALd9TcCHDts XCvG+8Z1RVqg7JFSZtXpDfXDB46LsojAuNRoIvBEez9h -----END CERTIFICATE-----Generated at Sat Dec 6 18:39:36 2025 by rpki-client