This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/2hYDKWQBkYm2pRG5fppJvMZY24E.roa File: 2hYDKWQBkYm2pRG5fppJvMZY24E.roa (raw, json) Hash identifier: MQ/dfxNlDnDDkfXYYr3j5Kix2lXs+X/K3X/wwN6AEdM= Subject key identifier: DA:16:03:29:64:01:91:89:B6:A5:11:B9:7E:9A:49:BC:C6:58:DB:81 Certificate issuer: /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44 Certificate serial: 019A971FD6BFE0165D3159DCB1CC973CDA2E Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/2hYDKWQBkYm2pRG5fppJvMZY24E.roa Signing time: Tue 18 Nov 2025 13:20:37 +0000 ROA not before: Tue 18 Nov 2025 13:20:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216020 IP address blocks: 185.224.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:1f:d6:bf:e0:16:5d:31:59:dc:b1:cc:97:3c:da:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44 Validity Not Before: Nov 18 13:20:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=da16032964019189b6a511b97e9a49bcc658db81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:af:89:91:f8:1a:df:ad:32:81:e9:44:be:31: f7:5e:d2:e5:f2:c4:24:92:65:6e:cd:58:6f:e9:62: 88:70:a6:ef:48:0c:ab:91:fb:2a:94:1d:5e:01:d3: 95:2c:13:8a:66:7c:18:30:b1:83:4a:62:bd:5d:e7: 3d:c6:28:dd:ee:d4:57:87:48:bc:71:61:81:30:1c: ae:fa:50:b9:41:b8:4b:d7:dd:8b:3f:ee:83:ea:30: aa:f1:6b:c5:9f:2c:30:5e:fd:6a:20:62:45:dc:71: 4f:39:36:88:73:b5:49:df:34:72:c0:d5:54:f3:bc: ce:c3:14:a9:99:01:2b:cb:da:8c:d6:90:9b:f8:18: 00:e0:1a:75:e7:e3:2c:d6:13:a5:8c:31:37:f0:61: 40:ed:2c:ee:99:d8:24:1d:e9:c7:15:07:53:da:79: 48:12:60:58:36:77:6b:93:1e:c1:bf:46:cf:7f:75: f3:b2:c4:25:94:e5:3e:32:8e:2e:86:7f:cd:66:4b: 44:c8:1c:2c:b0:c7:a6:5d:13:0b:82:8a:28:19:8d: c2:34:14:01:67:f0:f1:cb:ad:09:03:5d:ef:42:be: 09:3e:68:dd:09:3a:15:b8:0d:c5:cf:ea:b7:d5:f6: 75:d1:e8:7d:f4:de:a7:ef:72:c9:39:e0:50:8e:a4: 70:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:16:03:29:64:01:91:89:B6:A5:11:B9:7E:9A:49:BC:C6:58:DB:81 X509v3 Authority Key Identifier: keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/2hYDKWQBkYm2pRG5fppJvMZY24E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.224.0.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:ef:00:2e:8d:e1:46:15:7e:07:c5:3f:10:47:98:0e:f8:cf: 54:df:b1:3b:11:65:c8:ef:82:2e:3d:96:6c:10:ea:51:dd:8d: 1c:75:3b:3b:06:63:fa:9e:b3:12:74:13:47:29:91:ee:01:9e: f9:66:d9:8c:57:d9:5d:81:40:fa:5e:0c:03:55:bc:66:01:28: 71:4b:a3:c9:a5:31:7a:c4:cf:c7:13:c3:6e:17:9c:eb:2d:50: cf:15:32:09:8a:7e:1b:70:53:1b:01:45:e2:dd:c8:ef:0b:e6: 02:6d:21:15:69:77:5a:9b:5c:d9:6e:13:9b:f7:6c:18:b6:82: 51:03:88:e1:6a:b4:a4:c9:cf:46:a2:3e:34:7e:7c:13:0f:8d: d8:d2:13:d6:96:e9:b7:e4:f8:44:37:64:34:c9:1e:fa:2e:82: 8a:0b:bb:fe:99:7b:ea:dd:36:16:44:72:92:60:35:d1:9b:5d: d4:1c:fe:3d:3e:2c:69:a4:93:27:8b:3a:02:3f:11:b5:e9:4c: 34:b9:04:59:2f:d6:b1:77:42:5a:a0:41:68:9e:b5:a1:8b:b7: c6:60:fa:f4:80:fe:e6:f2:06:99:df:b3:46:32:07:b8:e2:b1: 50:8e:51:db:46:ad:4d:64:24:73:22:84:9d:a9:7d:f7:f6:0f: 1d:7d:51:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqXH9a/4BZdMVncscyXPNouMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmM2Y1NTRiODAyODFkZWEyYTMwMDMxOGFhYWQ2ZDJkOTdm MWNlNDQwHhcNMjUxMTE4MTMyMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTE2MDMyOTY0MDE5MTg5YjZhNTExYjk3ZTlhNDliY2M2NThkYjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK+Jkfga360ygelEvjH3XtLl8sQk kmVuzVhv6WKIcKbvSAyrkfsqlB1eAdOVLBOKZnwYMLGDSmK9Xec9xijd7tRXh0i8 cWGBMByu+lC5QbhL192LP+6D6jCq8WvFnywwXv1qIGJF3HFPOTaIc7VJ3zRywNVU 87zOwxSpmQEry9qM1pCb+BgA4Bp15+Ms1hOljDE38GFA7SzumdgkHenHFQdT2nlI EmBYNndrkx7Bv0bPf3XzssQllOU+Mo4uhn/NZktEyBwssMemXRMLgoooGY3CNBQB Z/Dxy60JA13vQr4JPmjdCToVuA3Fz+q31fZ10eh99N6n73LJOeBQjqRwUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNoWAylkAZGJtqURuX6aSbzGWNuBMB8GA1UdIwQY MBaAFD8/VUuAKB3qKjADGKqtbS2X8c5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHo5VlM0QW9IZW9xTUFNWXFxMXRMWmZ4emtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83OGQ1MjgtN2NkZi00NGMwLWFjZGQt ZjUzM2I4ZGY4MGE5LzEvMmhZREtXUUJrWW0ycFJHNWZwcEp2TVpZMjRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy83OGQ1MjgtN2NkZi00NGMwLWFjZGQtZjUzM2I4ZGY4MGE5 LzEvUHo5VlM0QW9IZW9xTUFNWXFxMXRMWmZ4emtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueAAMA0G CSqGSIb3DQEBCwUAA4IBAQAO7wAujeFGFX4HxT8QR5gO+M9U37E7EWXI74IuPZZs EOpR3Y0cdTs7BmP6nrMSdBNHKZHuAZ75ZtmMV9ldgUD6XgwDVbxmAShxS6PJpTF6 xM/HE8NuF5zrLVDPFTIJin4bcFMbAUXi3cjvC+YCbSEVaXdam1zZbhOb92wYtoJR A4jharSkyc9Goj40fnwTD43Y0hPWlum35PhEN2Q0yR76LoKKC7v+mXvq3TYWRHKS YDXRm13UHP49PixppJMnizoCPxG16Uw0uQRZL9axd0JaoEFonrWhi7fGYPr0gP7m 8gaZ37NGMge44rFQjlHbRq1NZCRzIoSdqX339g8dfVFG -----END CERTIFICATE-----Generated at Sat Dec 6 14:07:16 2025 by rpki-client