This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rN8MAa2hIMy5Bs1qAX7Y37fJuIY.roa File: rN8MAa2hIMy5Bs1qAX7Y37fJuIY.roa (raw, json) Hash identifier: B7l+0fs4woGvh6TD8G3PO9Xe2sO97mDxE0p73V023mw= Subject key identifier: AC:DF:0C:01:AD:A1:20:CC:B9:06:CD:6A:01:7E:D8:DF:B7:C9:B8:86 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019A9520380E1C40F298401D1EDD082DFB38 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rN8MAa2hIMy5Bs1qAX7Y37fJuIY.roa Signing time: Tue 18 Nov 2025 04:01:47 +0000 ROA not before: Tue 18 Nov 2025 04:01:47 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43641 IP address blocks: 194.58.222.0/24 maxlen: 24 194.87.1.0/24 maxlen: 24 194.87.153.0/24 maxlen: 24 195.58.57.0/24 maxlen: 24 212.193.16.0/24 maxlen: 24 212.193.17.0/24 maxlen: 24 212.193.19.0/24 maxlen: 24 212.193.21.0/24 maxlen: 24 212.193.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:95:20:38:0e:1c:40:f2:98:40:1d:1e:dd:08:2d:fb:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Nov 18 04:01:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=acdf0c01ada120ccb906cd6a017ed8dfb7c9b886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:01:dd:e3:22:e8:22:74:22:02:7f:80:26:f5: 40:01:82:b0:d7:89:25:19:bf:90:b3:3f:cb:b5:eb: a4:32:9d:20:12:4d:e4:e8:ba:6f:e5:2d:b7:e2:d7: 1a:47:94:94:a9:fb:fe:ac:5b:bb:b4:f3:e4:ca:1b: 86:5a:d7:e8:aa:b6:f0:5d:8b:c3:a6:8e:4c:28:53: 2c:b2:40:d9:24:0e:d4:96:f7:82:5e:6c:94:0a:25: d5:99:7d:79:8e:ba:ef:04:42:47:12:37:64:4b:80: bb:8f:19:b8:c3:75:ee:86:9c:5c:70:83:ed:20:c0: 39:1d:99:75:be:0e:2e:0b:5c:7e:3a:67:ad:d8:52: 41:c4:27:81:4f:16:d3:3c:7d:63:cb:17:e7:12:bb: 50:ba:1c:4c:22:e2:73:c4:28:56:5e:fe:c9:90:db: 9d:8b:95:52:4f:c4:ed:d5:46:5d:14:81:75:73:e8: 08:ef:c6:fb:00:e1:c4:db:7c:93:b0:87:cd:cc:c8: 38:83:87:ea:61:5c:4c:44:7f:3c:2a:e5:f2:40:a2: 1c:87:cf:a2:b7:85:97:e7:88:12:01:29:8c:9f:73: 89:52:6e:e4:c7:90:73:51:7d:7f:42:c3:e4:d5:e2: ee:80:43:39:d4:22:a0:87:90:3f:ba:1a:d3:41:af: 57:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:DF:0C:01:AD:A1:20:CC:B9:06:CD:6A:01:7E:D8:DF:B7:C9:B8:86 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rN8MAa2hIMy5Bs1qAX7Y37fJuIY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.58.222.0/24 194.87.1.0/24 194.87.153.0/24 195.58.57.0/24 212.193.16.0/23 212.193.19.0/24 212.193.21.0-212.193.22.255 Signature Algorithm: sha256WithRSAEncryption 0e:d3:0c:72:64:55:80:b6:f8:09:b5:95:a1:d5:25:79:09:cf: fb:ff:a6:f6:d4:e2:8a:93:b0:47:2e:4e:74:fe:73:eb:23:e1: de:fb:91:6c:a0:81:fc:a5:29:f6:49:16:9a:e8:c2:78:2c:49: a7:6c:15:0a:5b:bd:e2:fc:0f:5d:9c:08:c5:54:37:32:d0:ec: 4f:0b:fb:c7:0e:6b:7c:ae:cf:22:79:0e:16:94:77:f3:7c:34: 10:a5:e1:94:f6:15:08:1d:d2:ca:a1:c8:1a:d1:d1:97:22:34: 3a:01:07:6a:62:53:b5:80:08:99:e7:41:22:e9:32:4d:7c:63: 35:5c:93:a4:42:98:6e:27:4f:78:16:44:a7:39:89:e1:16:ab: 12:da:32:7e:3e:75:30:af:7a:fc:9f:f3:75:8d:1b:bd:99:ad: 3b:f5:d0:2d:20:07:57:1c:0d:57:49:d2:5f:2a:9d:e3:95:e3: 97:3a:b6:c1:54:98:4d:24:03:ec:6c:64:99:8c:76:59:08:78: e9:17:43:7f:79:54:b1:3f:6e:79:38:8d:d0:db:e9:37:81:8c: 09:ed:48:2e:97:22:10:59:72:e2:c7:60:52:ba:bd:22:bf:76: 3a:8b:50:ce:7b:cb:ca:36:88:a9:8a:a8:ac:37:31:7b:14:ee: 36:c0:35:8f -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZqVIDgOHEDymEAdHt0ILfs4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjUxMTE4MDQwMTQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2RmMGMwMWFkYTEyMGNjYjkwNmNkNmEwMTdlZDhkZmI3YzliODg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwHd4yLoInQiAn+AJvVAAYKw14kl Gb+Qsz/LteukMp0gEk3k6Lpv5S234tcaR5SUqfv+rFu7tPPkyhuGWtfoqrbwXYvD po5MKFMsskDZJA7UlveCXmyUCiXVmX15jrrvBEJHEjdkS4C7jxm4w3XuhpxccIPt IMA5HZl1vg4uC1x+Omet2FJBxCeBTxbTPH1jyxfnErtQuhxMIuJzxChWXv7JkNud i5VST8Tt1UZdFIF1c+gI78b7AOHE23yTsIfNzMg4g4fqYVxMRH88KuXyQKIch8+i t4WX54gSASmMn3OJUm7kx5BzUX1/QsPk1eLugEM51CKgh5A/uhrTQa9X9QIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFKzfDAGtoSDMuQbNagF+2N+3ybiGMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvck44TUFhMmhJTXk1QnMxcUFYN1kzN2ZKdUlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAwjreAwQA wlcBAwQAwleZAwQAwzo5AwQB1MEQAwQA1METMAwDBADUwRUDBADUwRYwDQYJKoZI hvcNAQELBQADggEBAA7TDHJkVYC2+Am1laHVJXkJz/v/pvbU4oqTsEcuTnT+c+sj 4d77kWyggfylKfZJFprowngsSadsFQpbveL8D12cCMVUNzLQ7E8L+8cOa3yuzyJ5 DhaUd/N8NBCl4ZT2FQgd0sqhyBrR0ZciNDoBB2piU7WACJnnQSLpMk18YzVck6RC mG4nT3gWRKc5ieEWqxLaMn4+dTCvevyf83WNG72ZrTv10C0gB1ccDVdJ0l8qneOV 45c6tsFUmE0kA+xsZJmMdlkIeOkXQ395VLE/bnk4jdDb6TeBjAntSC6XIhBZcuLH YFK6vSK/djqLUM57y8o2iKmKqKw3MXsU7jbANY8= -----END CERTIFICATE-----Generated at Fri Dec 5 06:32:17 2025 by rpki-client