This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/tsKs3V1yaPsaIU0A6Ecds5AAehw.roa File: tsKs3V1yaPsaIU0A6Ecds5AAehw.roa (raw, json) Hash identifier: 3OwpSQsxFg7VVIA27B3b/Nz+rgtO4rMjVai/LlIFcFg= Subject key identifier: B6:C2:AC:DD:5D:72:68:FB:1A:21:4D:00:E8:47:1D:B3:90:00:7A:1C Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046 Certificate serial: 019A918B9DD686B349B46378E6C79791C323 Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/tsKs3V1yaPsaIU0A6Ecds5AAehw.roa Signing time: Mon 17 Nov 2025 11:20:37 +0000 ROA not before: Mon 17 Nov 2025 11:20:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12670 IP address blocks: 92.102.0.0/16 maxlen: 16 92.103.0.0/18 maxlen: 18 92.103.64.0/18 maxlen: 18 185.204.172.0/22 maxlen: 22 212.99.0.0/17 maxlen: 17 212.103.0.0/19 maxlen: 19 213.30.128.0/18 maxlen: 18 213.244.0.0/19 maxlen: 19 217.66.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:8b:9d:d6:86:b3:49:b4:63:78:e6:c7:97:91:c3:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046 Validity Not Before: Nov 17 11:20:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b6c2acdd5d7268fb1a214d00e8471db390007a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:27:20:3c:ee:6b:4c:a8:b4:05:6f:3e:b1:61: be:f9:b9:c0:93:7f:11:d5:fa:66:aa:90:ee:bb:08: 4a:b2:4f:93:a8:4c:db:f7:35:de:a6:3c:a9:2e:76: 92:27:ca:4e:c9:74:14:cc:ea:66:91:e2:5d:9b:69: 76:18:9d:ae:f5:1b:aa:9c:96:44:8f:0c:93:76:d0: 12:bf:0a:e9:2c:0e:e9:8b:d9:90:fc:d9:e7:e2:f9: 65:e2:16:9e:54:e9:31:80:26:d2:33:c8:ab:ab:78: 1e:44:b7:38:4a:4d:dd:6d:92:cc:9f:64:c6:a0:5f: 06:0d:72:30:d1:08:27:db:cd:ac:94:05:e9:68:45: 37:f2:03:4d:fc:29:bc:af:b3:9d:fc:ee:25:08:f2: dd:c7:69:5d:ed:d1:94:4a:a6:1b:fa:2d:b8:04:4b: 2b:c8:e1:de:42:c0:21:fc:5b:c1:c3:be:7e:12:e9: 8e:c0:cb:7f:1d:b3:9f:45:64:fe:c6:22:d8:0d:9b: 59:a2:1e:2d:a6:99:d2:c0:a8:e8:17:ec:3f:49:67: 57:27:31:80:5d:b5:ed:c1:a0:6b:da:2c:58:a3:26: 6f:ae:76:42:be:89:d5:d6:2e:75:78:3c:70:75:0c: 2f:1d:45:48:fa:eb:06:7e:c4:e1:ea:2c:77:4c:fe: ca:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C2:AC:DD:5D:72:68:FB:1A:21:4D:00:E8:47:1D:B3:90:00:7A:1C X509v3 Authority Key Identifier: keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/tsKs3V1yaPsaIU0A6Ecds5AAehw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.102.0.0-92.103.127.255 185.204.172.0/22 212.99.0.0/17 212.103.0.0/19 213.30.128.0/18 213.244.0.0/19 217.66.112.0/20 Signature Algorithm: sha256WithRSAEncryption 85:9b:02:4e:0c:de:9d:cd:49:2d:f4:f5:07:16:d8:b9:bb:92: 8e:23:66:42:8b:1b:5a:ee:33:42:cb:29:24:a6:d9:ab:60:f8: 0c:89:f6:82:c7:79:13:7b:60:3e:f2:47:61:51:e7:84:bc:9f: 74:7b:6a:98:c4:39:f3:9c:a7:d3:c8:38:8b:fa:0c:af:2a:7f: 3c:d0:92:12:b0:25:00:f6:22:ef:2d:d3:e2:88:30:4f:cd:75: 8d:f1:75:9f:93:08:54:65:f6:0c:71:35:b9:a0:06:41:24:ab: 34:2e:22:9f:7c:bf:13:07:fa:7a:fa:0b:93:83:44:6c:e7:c1: 7d:d5:94:75:ab:3a:78:58:c8:4a:18:da:7a:34:1b:03:92:c4: 47:58:4e:7b:b0:35:77:d5:ae:a6:5c:15:04:75:c9:1d:26:49: 96:a7:47:14:f4:b6:a7:63:1a:70:3c:e8:95:9d:2d:e0:3b:dc: f4:6b:33:02:a0:e2:f1:04:2d:4b:8d:81:36:e1:af:d2:9f:7b: f5:6b:97:c3:e8:dd:8c:c1:ad:b3:88:b1:6b:64:96:53:29:bc: 33:63:34:e5:ad:bb:38:2e:ab:93:58:2d:1c:87:dc:bf:12:7e: 78:ea:92:ab:fa:e1:46:3a:b8:4c:70:c7:41:ce:15:c6:70:8e: be:a0:19:7a -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgISAZqRi53WhrNJtGN45seXkcMjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZTI4MTBmNDliMzZmZGQ2NDFjMzI2YmQxZGU0ZTQyZDEy OGIwNDYwHhcNMjUxMTE3MTEyMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmMyYWNkZDVkNzI2OGZiMWEyMTRkMDBlODQ3MWRiMzkwMDA3YTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoycgPO5rTKi0BW8+sWG++bnAk38R 1fpmqpDuuwhKsk+TqEzb9zXepjypLnaSJ8pOyXQUzOpmkeJdm2l2GJ2u9RuqnJZE jwyTdtASvwrpLA7pi9mQ/Nnn4vll4haeVOkxgCbSM8irq3geRLc4Sk3dbZLMn2TG oF8GDXIw0Qgn282slAXpaEU38gNN/Cm8r7Od/O4lCPLdx2ld7dGUSqYb+i24BEsr yOHeQsAh/FvBw75+EumOwMt/HbOfRWT+xiLYDZtZoh4tppnSwKjoF+w/SWdXJzGA XbXtwaBr2ixYoyZvrnZCvonV1i51eDxwdQwvHUVI+usGfsTh6ix3TP7KqQIDAQAB o4ICNDCCAjAwHQYDVR0OBBYEFLbCrN1dcmj7GiFNAOhHHbOQAHocMB8GA1UdIwQY MBaAFPLigQ9Js2/dZBwya9HeTkLRKLBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAt NTBkMmI3MGJjZjMxLzEvdHNLczNWMXlhUHNhSVUwQTZFY2RzNUFBZWh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAtNTBkMmI3MGJjZjMx LzEvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTA3BAIAATAxMAsDAwFcZgME B1xnAAMEArnMrAMEB9RjAAMEBdRnAAMEBtUegAMEBdX0AAMEBNlCcDANBgkqhkiG 9w0BAQsFAAOCAQEAhZsCTgzenc1JLfT1BxbYubuSjiNmQosbWu4zQsspJKbZq2D4 DIn2gsd5E3tgPvJHYVHnhLyfdHtqmMQ585yn08g4i/oMryp/PNCSErAlAPYi7y3T 4ogwT811jfF1n5MIVGX2DHE1uaAGQSSrNC4in3y/Ewf6evoLk4NEbOfBfdWUdas6 eFjIShjaejQbA5LER1hOe7A1d9WuplwVBHXJHSZJlqdHFPS2p2MacDzolZ0t4Dvc 9GszAqDi8QQtS42BNuGv0p979WuXw+jdjMGts4ixa2SWUym8M2M05a27OC6rk1gt HIfcvxJ+eOqSq/rhRjq4THDHQc4VxnCOvqAZeg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:22:44 2025 by rpki-client