This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/jmqRsuy9qQkUPeQ372m1KVmUm0Y.roa File: jmqRsuy9qQkUPeQ372m1KVmUm0Y.roa (raw, json) Hash identifier: z9nO7OrTD7V+7NYFDciSzCdGUenMxnQfYKHhLdiznOo= Subject key identifier: 8E:6A:91:B2:EC:BD:A9:09:14:3D:E4:37:EF:69:B5:29:59:94:9B:46 Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Certificate serial: 019A818C772ED25E8FE4CF9D7903633FA514 Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/jmqRsuy9qQkUPeQ372m1KVmUm0Y.roa Signing time: Fri 14 Nov 2025 08:47:37 +0000 ROA not before: Fri 14 Nov 2025 08:47:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 52194 IP address blocks: 185.202.3.0/24 maxlen: 24 194.176.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:8c:77:2e:d2:5e:8f:e4:cf:9d:79:03:63:3f:a5:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Validity Not Before: Nov 14 08:47:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8e6a91b2ecbda909143de437ef69b52959949b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e8:e8:b9:db:6f:19:ad:1f:f2:6e:ce:8e:99: 54:da:33:43:44:cf:b0:4c:d2:52:f5:05:e3:52:e4: 79:0a:ae:ed:03:ff:0a:45:47:cf:09:4f:9b:88:3b: 5f:2b:a4:c7:40:2d:bd:5d:af:b9:d1:85:73:d6:a5: a7:76:4a:fc:ed:2c:3f:b0:fe:ff:06:b5:ae:0f:30: eb:40:b4:c0:60:44:2d:68:d7:7c:ae:91:74:47:59: 39:1b:04:14:01:8a:bc:f4:8a:6a:4c:2c:f9:2e:b4: 93:7f:b7:fc:bb:57:4f:73:d5:ac:30:3d:f1:e4:d5: f8:e3:36:48:19:42:7f:4a:09:e9:31:f7:8a:e5:a0: 41:8b:76:8a:5d:9b:77:4b:de:cc:70:3e:92:07:28: 6c:22:7c:3b:3c:39:c3:4f:c4:75:11:df:0e:4d:75: c7:40:dd:40:60:b0:8c:e5:f1:66:aa:f4:2c:cd:58: 0f:60:64:40:52:cd:3c:18:2c:90:7c:62:7c:88:2e: c9:1a:29:b8:e3:b7:d6:3b:12:38:18:94:7a:35:e4: b3:ca:83:9b:e9:9b:58:9d:cb:00:2e:6a:52:da:3d: a7:9a:e8:10:09:75:e2:10:2e:05:a5:9f:83:56:92: 2c:f9:63:d1:53:f0:39:ed:05:92:4c:8f:65:2f:9f: c9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6A:91:B2:EC:BD:A9:09:14:3D:E4:37:EF:69:B5:29:59:94:9B:46 X509v3 Authority Key Identifier: keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/jmqRsuy9qQkUPeQ372m1KVmUm0Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.202.3.0/24 194.176.118.0/24 Signature Algorithm: sha256WithRSAEncryption 15:2e:88:0c:14:21:2d:e8:ba:21:91:8a:dd:bc:31:13:46:c5: a9:a4:f6:23:af:c1:c1:cb:bf:70:b6:09:c3:0e:f1:cd:49:ce: 90:d3:e3:d0:e9:f0:54:7e:b4:44:d0:94:dd:de:80:ef:d1:7f: a3:4a:eb:00:25:46:b5:56:d4:9b:6a:5f:b9:a8:15:24:3b:5c: 0b:73:62:90:69:b6:62:02:61:bb:41:b4:bf:85:e7:47:93:b7: aa:13:8f:d8:26:50:e5:1a:d0:f9:ad:24:e8:b3:36:40:33:d0: cd:7c:6f:0e:e5:8a:94:4c:85:a8:41:4f:29:97:0b:69:79:03: 8b:25:f8:16:9d:9e:ae:42:cd:87:7a:8a:e0:00:e8:44:13:eb: 47:14:36:a9:d7:92:ac:4a:c3:1e:82:7b:a4:7b:97:fc:e1:20: ff:0f:5b:bf:81:7a:28:23:4e:db:97:fc:97:f1:66:aa:6d:4e: 21:44:77:6c:32:45:f1:7f:e3:26:8c:e5:a5:45:c9:9e:fd:09: f1:cf:3c:b7:38:4f:da:70:22:d5:9d:98:e0:e2:f9:b2:0c:1d: b0:56:a9:3d:1a:b0:e5:8b:d6:33:f3:c8:a4:9f:d4:23:dd:b8: 7d:39:13:13:e3:1e:7f:06:a0:b1:ca:db:1b:f8:fa:f8:b4:9f: 1e:4c:f7:7b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqBjHcu0l6P5M+deQNjP6UUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2 Njk0NmYwHhcNMjUxMTE0MDg0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTZhOTFiMmVjYmRhOTA5MTQzZGU0MzdlZjY5YjUyOTU5OTQ5YjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOjoudtvGa0f8m7OjplU2jNDRM+w TNJS9QXjUuR5Cq7tA/8KRUfPCU+biDtfK6THQC29Xa+50YVz1qWndkr87Sw/sP7/ BrWuDzDrQLTAYEQtaNd8rpF0R1k5GwQUAYq89IpqTCz5LrSTf7f8u1dPc9WsMD3x 5NX44zZIGUJ/SgnpMfeK5aBBi3aKXZt3S97McD6SByhsInw7PDnDT8R1Ed8OTXXH QN1AYLCM5fFmqvQszVgPYGRAUs08GCyQfGJ8iC7JGim447fWOxI4GJR6NeSzyoOb 6ZtYncsALmpS2j2nmugQCXXiEC4FpZ+DVpIs+WPRU/A57QWSTI9lL5/JqQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI5qkbLsvakJFD3kN+9ptSlZlJtGMB8GA1UdIwQY MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct MDhhZDk0MTAxZDdlLzEvam1xUnN1eTlxUWtVUGVRMzcybTFLVm1VbTBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAucoDAwQA wrB2MA0GCSqGSIb3DQEBCwUAA4IBAQAVLogMFCEt6LohkYrdvDETRsWppPYjr8HB y79wtgnDDvHNSc6Q0+PQ6fBUfrRE0JTd3oDv0X+jSusAJUa1VtSbal+5qBUkO1wL c2KQabZiAmG7QbS/hedHk7eqE4/YJlDlGtD5rSToszZAM9DNfG8O5YqUTIWoQU8p lwtpeQOLJfgWnZ6uQs2HeorgAOhEE+tHFDap15KsSsMegnuke5f84SD/D1u/gXoo I07bl/yX8WaqbU4hRHdsMkXxf+MmjOWlRcme/Qnxzzy3OE/acCLVnZjg4vmyDB2w Vqk9GrDli9Yz88ikn9Qj3bh9ORMT4x5/BqCxytsb+Pr4tJ8eTPd7 -----END CERTIFICATE-----Generated at Sat Dec 6 13:20:01 2025 by rpki-client