This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/80lRq6T_N3r0hlhIY167TNw5pR8.roa File: 80lRq6T_N3r0hlhIY167TNw5pR8.roa (raw, json) Hash identifier: aDPooepEz2263Ou3nyeWXLzSBYKdprYy/0BnGstI/xc= Subject key identifier: F3:49:51:AB:A4:FF:37:7A:F4:86:58:48:63:5E:BB:4C:DC:39:A5:1F Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019AC63D2B06DA1DEDBA75DC215F68D1DD37 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/80lRq6T_N3r0hlhIY167TNw5pR8.roa Signing time: Thu 27 Nov 2025 16:54:48 +0000 ROA not before: Thu 27 Nov 2025 16:54:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57043 IP address blocks: 62.76.236.0/24 maxlen: 24 62.76.237.0/24 maxlen: 24 193.124.17.0/24 maxlen: 24 193.124.206.0/24 maxlen: 24 194.58.56.0/24 maxlen: 24 194.58.154.0/24 maxlen: 24 194.58.155.0/24 maxlen: 24 194.87.51.0/24 maxlen: 24 194.87.54.0/24 maxlen: 24 194.87.55.0/24 maxlen: 24 194.87.125.0/24 maxlen: 24 194.87.233.0/24 maxlen: 24 194.87.255.0/24 maxlen: 24 195.133.9.0/24 maxlen: 24 212.193.20.0/24 maxlen: 24 212.193.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:40:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c6:3d:2b:06:da:1d:ed:ba:75:dc:21:5f:68:d1:dd:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Nov 27 16:54:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f34951aba4ff377af4865848635ebb4cdc39a51f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e6:3d:7f:e0:16:0d:e1:bf:a2:3e:c1:8e:4e: 94:c8:c8:10:b5:bf:3f:e8:a4:3e:97:f2:ac:eb:72: 0a:04:a1:58:57:63:1a:53:48:ba:31:4a:3a:e5:52: 0f:47:ac:1c:4a:34:4f:d1:1f:54:ee:75:ac:8d:d2: 2f:18:e9:31:01:f7:e7:ad:a5:16:78:46:d5:aa:2c: 29:96:36:71:6b:a9:77:d2:06:6c:78:66:74:9f:a8: 25:18:79:b2:a3:5c:34:88:cc:1b:21:14:f7:6f:a1: 37:c4:f5:94:6f:d2:d1:3b:87:7d:62:91:61:35:49: 80:48:87:0f:5b:c4:56:63:a6:da:45:4f:eb:3a:30: 64:21:9f:a3:1b:12:09:24:06:19:78:b3:28:c1:16: 2b:ea:e6:62:ea:44:a5:ba:d2:75:2a:15:6b:c5:a6: 23:64:32:43:3d:5c:a8:8d:3e:ed:89:72:cf:b0:ec: c6:74:94:81:32:d4:2c:a0:f3:52:12:80:bf:eb:b7: 20:e1:99:d1:64:16:86:be:28:11:de:c6:b8:0c:3c: 5b:74:73:8a:da:0f:6e:18:b5:7f:b3:93:2f:38:6f: 38:ff:6d:19:4e:eb:5f:f0:21:74:8f:d9:38:a8:42: c8:c3:cd:26:df:5d:60:78:4b:02:d8:91:83:19:74: 78:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:49:51:AB:A4:FF:37:7A:F4:86:58:48:63:5E:BB:4C:DC:39:A5:1F X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/80lRq6T_N3r0hlhIY167TNw5pR8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.236.0/23 193.124.17.0/24 193.124.206.0/24 194.58.56.0/24 194.58.154.0/23 194.87.51.0/24 194.87.54.0/23 194.87.125.0/24 194.87.233.0/24 194.87.255.0/24 195.133.9.0/24 212.193.20.0/24 212.193.23.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:7a:3f:90:25:5a:86:91:7b:e9:a7:d8:c5:b2:bc:3f:01:c7: f2:f1:cc:d1:64:62:c2:65:da:2d:69:8e:48:f7:5b:54:f1:eb: 50:d3:ca:28:57:51:0c:fa:4b:9e:44:37:07:e8:8a:70:34:50: d3:e5:6e:08:f7:ab:9a:5e:02:13:12:30:e0:93:e8:c2:01:4d: 83:21:88:52:fb:21:50:07:e6:ec:18:61:89:bf:40:cf:c4:ee: e8:a4:30:60:ab:0d:10:6f:46:70:50:ea:61:aa:7b:a4:f2:93: 4c:ea:a9:69:0c:4a:0a:b4:ba:91:45:29:30:54:da:93:fc:8c: b9:58:44:83:41:e3:05:8b:c1:7d:0c:db:1f:7e:6b:ce:81:67: 74:f6:98:6d:2a:58:29:6f:74:62:90:09:93:d1:a8:b4:02:b5: c8:68:36:69:5d:b8:d0:4f:4b:74:75:8a:fd:68:6b:56:f2:42: ae:7c:c5:b1:30:42:5b:70:92:d2:cc:59:e0:34:cf:a3:b9:4f: ee:a8:64:e1:ba:94:67:e6:a8:dd:c4:10:da:d2:c7:f1:f0:32: 69:5e:4e:64:c2:97:a0:92:83:10:e9:83:ae:80:7d:84:f8:eb: 49:a2:ee:e3:3b:2c:f0:02:aa:23:a4:3c:ad:0c:2f:eb:34:60: 35:bd:90:8d -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZrGPSsG2h3tunXcIV9o0d03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjUxMTI3MTY1NDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzQ5NTFhYmE0ZmYzNzdhZjQ4NjU4NDg2MzVlYmI0Y2RjMzlhNTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+Y9f+AWDeG/oj7Bjk6UyMgQtb8/ 6KQ+l/Ks63IKBKFYV2MaU0i6MUo65VIPR6wcSjRP0R9U7nWsjdIvGOkxAffnraUW eEbVqiwpljZxa6l30gZseGZ0n6glGHmyo1w0iMwbIRT3b6E3xPWUb9LRO4d9YpFh NUmASIcPW8RWY6baRU/rOjBkIZ+jGxIJJAYZeLMowRYr6uZi6kSlutJ1KhVrxaYj ZDJDPVyojT7tiXLPsOzGdJSBMtQsoPNSEoC/67cg4ZnRZBaGvigR3sa4DDxbdHOK 2g9uGLV/s5MvOG84/20ZTutf8CF0j9k4qELIw80m311geEsC2JGDGXR4QQIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFPNJUauk/zd69IZYSGNeu0zcOaUfMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvODBsUnE2VF9OM3IwaGxoSVkxNjdUTnc1cFI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQBPkzsAwQA wXwRAwQAwXzOAwQAwjo4AwQBwjqaAwQAwlczAwQBwlc2AwQAwld9AwQAwlfpAwQA wlf/AwQAw4UJAwQA1MEUAwQA1MEXMA0GCSqGSIb3DQEBCwUAA4IBAQA8ej+QJVqG kXvpp9jFsrw/Acfy8czRZGLCZdotaY5I91tU8etQ08ooV1EM+kueRDcH6IpwNFDT 5W4I96uaXgITEjDgk+jCAU2DIYhS+yFQB+bsGGGJv0DPxO7opDBgqw0Qb0ZwUOph qnuk8pNM6qlpDEoKtLqRRSkwVNqT/Iy5WESDQeMFi8F9DNsffmvOgWd09phtKlgp b3RikAmT0ai0ArXIaDZpXbjQT0t0dYr9aGtW8kKufMWxMEJbcJLSzFngNM+juU/u qGThupRn5qjdxBDa0sfx8DJpXk5kwpegkoMQ6YOugH2E+OtJou7jOyzwAqojpDyt DC/rNGA1vZCN -----END CERTIFICATE-----Generated at Fri Dec 5 16:41:11 2025 by rpki-client