This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/1-T115Hn6ISqfHKEp1Ejx9Gs-LdM.roa File: 1-T115Hn6ISqfHKEp1Ejx9Gs-LdM.roa (raw, json) Hash identifier: hwD1bihujg4QKnIBffCm29/kZuX5tsYo4qsj399ZBlI= Subject key identifier: F9:3D:75:E4:79:FA:21:2A:9F:1C:A1:29:D4:48:F1:F4:6B:3E:2D:D3 Certificate issuer: /CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae Certificate serial: 019A1546585BEF2C045EA94C432986F593FE Authority key identifier: 0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/1-T115Hn6ISqfHKEp1Ejx9Gs-LdM.roa Signing time: Fri 24 Oct 2025 08:12:03 +0000 ROA not before: Fri 24 Oct 2025 08:12:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215510 IP address blocks: 185.210.225.0/24 maxlen: 24 185.238.139.0/24 maxlen: 24 2a13:100::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:15:46:58:5b:ef:2c:04:5e:a9:4c:43:29:86:f5:93:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae Validity Not Before: Oct 24 08:12:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f93d75e479fa212a9f1ca129d448f1f46b3e2dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d5:0d:1a:c9:76:89:3f:9a:a8:6b:87:ea:2b: ec:66:4f:3e:b2:93:00:55:1b:4c:ea:c6:3d:42:a2: 1f:0d:e6:79:52:0b:4b:ea:5c:87:3c:6c:ed:e6:63: 91:e5:05:80:35:66:f1:ac:c1:87:a7:55:0e:62:75: ff:26:b7:6d:98:52:91:59:7b:89:87:a7:3c:bc:e2: 4f:3c:bf:3b:c6:a2:1c:b3:24:b6:8a:32:4b:a4:37: d8:a4:24:ce:e6:a7:02:9e:c1:b5:7f:af:65:5f:02: dd:80:54:58:c0:28:16:b6:6d:7f:2a:4d:6d:99:07: 8c:74:2f:2d:7c:88:a7:cc:2d:04:81:86:17:73:b7: 4a:c9:d7:d4:47:64:46:63:7d:e6:ef:05:74:c5:80: 73:85:72:9d:02:73:4d:08:df:ce:4e:9f:18:c8:02: cd:9f:9d:d8:de:a4:72:0a:9f:8d:5e:48:a9:c6:d8: dc:63:ee:ca:fb:1a:f9:ad:a8:66:57:ee:7c:07:ee: 6a:d4:a7:51:bb:cf:3a:09:57:20:5c:e3:fe:5a:59: 80:ca:f7:5a:d0:9a:b0:f5:71:97:78:61:4a:ea:dd: 1d:47:39:2a:51:78:7c:29:bc:a2:a7:43:44:db:ba: 7e:0b:02:30:8a:40:47:2c:fa:d4:c5:0d:b7:2b:95: cc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3D:75:E4:79:FA:21:2A:9F:1C:A1:29:D4:48:F1:F4:6B:3E:2D:D3 X509v3 Authority Key Identifier: keyid:0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/1-T115Hn6ISqfHKEp1Ejx9Gs-LdM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.210.225.0/24 185.238.139.0/24 IPv6: 2a13:100::/29 Signature Algorithm: sha256WithRSAEncryption 6e:44:14:44:e0:71:82:34:49:0c:a6:47:1b:ce:ed:d6:85:20: 73:3f:70:96:4c:6c:2d:f8:b8:bd:cc:91:a4:85:bb:71:d4:0b: 50:c2:f0:13:41:bd:75:a2:e9:8d:d3:31:8e:ca:d6:d2:d3:98: 36:18:ff:89:89:ac:bf:7d:2e:65:d3:86:08:0b:36:0d:b6:12: 91:cb:ae:fc:61:a5:ed:41:a1:d1:e4:52:d9:49:59:97:f8:2e: dc:6e:bf:ba:2e:41:6a:f4:ce:93:00:df:ba:46:80:30:ff:be: 8d:be:77:13:f5:73:9e:b5:f8:18:96:97:2f:f3:c8:ae:aa:cd: 13:bb:45:52:aa:b8:0c:9c:f5:f5:b6:79:4d:63:fa:92:53:a7: 24:f7:6c:c2:2b:85:b4:5b:8a:98:48:61:7a:16:a4:f9:7b:e8: a0:c3:71:16:9b:67:49:7c:32:9d:52:79:0c:46:7e:df:80:ff: d4:25:94:7a:fc:b8:57:45:1e:de:32:25:5f:5b:26:e4:bc:bc: 64:dd:48:a1:ae:4e:db:77:21:c3:35:aa:b1:e2:aa:9b:6a:b8: b6:d4:ee:b1:ce:85:1b:0e:6e:30:47:a9:e3:3a:5b:ac:97:f3: 25:30:b2:d8:25:fd:ee:26:97:c7:8f:8d:b7:24:08:c9:fd:e2: 97:e3:a3:8d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZoVRlhb7ywEXqlMQymG9ZP+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMmQxZWRjMGNjNjk3NzQyY2Y0NzM2NGJiMWQxMWI4ZmY4 MDhlYWUwHhcNMjUxMDI0MDgxMjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTNkNzVlNDc5ZmEyMTJhOWYxY2ExMjlkNDQ4ZjFmNDZiM2UyZGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNUNGsl2iT+aqGuH6ivsZk8+spMA VRtM6sY9QqIfDeZ5UgtL6lyHPGzt5mOR5QWANWbxrMGHp1UOYnX/JrdtmFKRWXuJ h6c8vOJPPL87xqIcsyS2ijJLpDfYpCTO5qcCnsG1f69lXwLdgFRYwCgWtm1/Kk1t mQeMdC8tfIinzC0EgYYXc7dKydfUR2RGY33m7wV0xYBzhXKdAnNNCN/OTp8YyALN n53Y3qRyCp+NXkipxtjcY+7K+xr5rahmV+58B+5q1KdRu886CVcgXOP+WlmAyvda 0Jqw9XGXeGFK6t0dRzkqUXh8Kbyip0NE27p+CwIwikBHLPrUxQ23K5XMFQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFPk9deR5+iEqnxyhKdRI8fRrPi3TMB8GA1UdIwQY MBaAFA4tHtwMxpd0LPRzZLsdEbj/gI6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGkwZTNBekdsM1FzOUhOa3V4MFJ1UC1BanE0LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mNTk4YjgtM2EyZi00MTU1LTk1ZmQt NWY4MTY3MDI0OTY4LzEvMS1UMTE1SG42SVNxZkhLRXAxRWp4OUdzLUxkTS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZTgvZjU5OGI4LTNhMmYtNDE1NS05NWZkLTVmODE2NzAyNDk2 OC8xL0RpMGUzQXpHbDNRczlITmt1eDBSdVAtQWpxNC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEALnS4QME ALnuizANBAIAAjAHAwUDKhMBADANBgkqhkiG9w0BAQsFAAOCAQEAbkQUROBxgjRJ DKZHG87t1oUgcz9wlkxsLfi4vcyRpIW7cdQLUMLwE0G9daLpjdMxjsrW0tOYNhj/ iYmsv30uZdOGCAs2DbYSkcuu/GGl7UGh0eRS2UlZl/gu3G6/ui5BavTOkwDfukaA MP++jb53E/VznrX4GJaXL/PIrqrNE7tFUqq4DJz19bZ5TWP6klOnJPdswiuFtFuK mEhhehak+XvooMNxFptnSXwynVJ5DEZ+34D/1CWUevy4V0Ue3jIlX1sm5Ly8ZN1I oa5O23chwzWqseKqm2q4ttTusc6FGw5uMEep4zpbrJfzJTCy2CX97iaXx4+NtyQI yf3il+OjjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:07:59 2025 by rpki-client