This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/3XkmMUl7M1nMmiPcb7LUVevLIyY.roa File: 3XkmMUl7M1nMmiPcb7LUVevLIyY.roa (raw, json) Hash identifier: Pdr72/2Gt/q0gBSGYVJo0n8lS0yGcyhACoYNvfLSjWU= Subject key identifier: DD:79:26:31:49:7B:33:59:CC:9A:23:DC:6F:B2:D4:55:EB:CB:23:26 Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019AABCC29CA39D7FE533846CA1A04A264AB Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/3XkmMUl7M1nMmiPcb7LUVevLIyY.roa Signing time: Sat 22 Nov 2025 13:41:15 +0000 ROA not before: Sat 22 Nov 2025 13:41:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 85.239.145.0/24 maxlen: 24 85.239.152.0/24 maxlen: 24 85.239.154.0/24 maxlen: 24 178.239.117.0/24 maxlen: 24 178.239.118.0/24 maxlen: 24 178.239.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 22:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:cc:29:ca:39:d7:fe:53:38:46:ca:1a:04:a2:64:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Nov 22 13:41:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dd792631497b3359cc9a23dc6fb2d455ebcb2326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:03:d2:7c:3e:d5:b9:f0:3b:b1:44:43:da:7e: 1f:e7:d6:69:db:4c:a0:d5:f3:47:7b:97:87:51:1b: 36:f6:24:d5:de:46:b9:6f:fb:19:04:02:a2:cc:75: 7d:a2:cc:f5:5e:48:58:8e:91:48:c7:d0:b3:2c:8a: ff:72:05:bb:14:3d:43:61:f8:53:51:ec:e5:24:11: c5:5e:be:f6:ef:f1:c0:e9:8e:d8:57:61:0f:47:c8: e5:55:25:76:27:12:11:12:96:03:45:b7:13:68:56: 67:47:75:7e:15:86:ac:f3:ac:da:0f:42:99:71:cf: 64:cc:0e:84:47:5d:d7:d4:f9:6f:1e:09:44:b9:a4: 38:f5:8c:24:be:a2:34:2d:3d:bc:19:67:5c:41:21: ad:45:ca:f9:28:37:78:c4:6c:9a:17:b7:1b:c6:c9: 56:80:65:33:b3:39:4b:49:40:ef:88:d0:9f:5d:b4: 9b:05:cb:d4:52:07:c5:27:8b:e8:48:84:64:94:10: 89:4c:e0:f3:24:45:7a:d4:19:b3:90:aa:ab:3e:f0: c7:e3:6c:b6:e4:39:80:b5:85:9b:14:c8:2b:09:9c: c8:9c:b2:5b:da:6b:d0:46:6e:23:f4:23:a5:16:28: b1:26:71:11:e2:b6:6c:02:e5:b4:f4:f4:3e:51:c3: 4f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:79:26:31:49:7B:33:59:CC:9A:23:DC:6F:B2:D4:55:EB:CB:23:26 X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/3XkmMUl7M1nMmiPcb7LUVevLIyY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.239.145.0/24 85.239.152.0/24 85.239.154.0/24 178.239.117.0-178.239.119.255 Signature Algorithm: sha256WithRSAEncryption 82:c6:fc:53:bd:b0:bf:b5:d7:39:c1:de:68:53:dd:c5:a5:dd: ba:99:c1:2e:66:45:23:bb:e5:9f:09:75:a6:19:9b:28:56:1a: 46:93:e1:5a:f0:b0:e0:e7:a9:0d:97:ed:49:0f:d0:7b:2b:fd: 48:8e:95:8d:97:7d:77:a7:b8:50:4d:77:b4:db:88:40:6c:55: 3a:a1:03:29:51:d1:13:81:24:9a:12:7b:93:f6:87:30:1c:1d: 8e:07:a1:da:74:3e:75:08:bd:2a:a1:ca:b2:7f:5c:2f:05:af: d6:a8:15:36:3a:92:39:65:a2:ce:39:2a:64:69:c6:72:c3:db: 93:8c:e9:69:18:00:e2:d6:48:52:cd:e5:75:b8:a7:95:8d:ec: 2a:3f:23:10:fb:0c:15:ac:77:70:cd:2e:5a:01:79:0e:e3:ec: 38:ba:7e:62:74:7e:00:c5:b0:4a:62:7d:fa:36:e0:5f:25:e0: bb:84:b8:ab:f6:46:06:f1:ab:6b:e8:52:11:67:7a:72:68:6b: e7:9c:13:38:36:ac:f0:c5:b7:5b:0b:7b:f9:75:d5:8e:a9:1b: 0f:66:c3:01:99:15:48:2a:1f:7d:b1:e7:42:4f:0f:1b:b3:f2: 1f:ae:51:82:28:09:71:36:6f:93:a8:b9:ed:4c:7a:80:a0:f5: 19:a0:0d:80 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZqrzCnKOdf+UzhGyhoEomSrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjUxMTIyMTM0MTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDc5MjYzMTQ5N2IzMzU5Y2M5YTIzZGM2ZmIyZDQ1NWViY2IyMzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+wPSfD7VufA7sURD2n4f59Zp20yg 1fNHe5eHURs29iTV3ka5b/sZBAKizHV9osz1XkhYjpFIx9CzLIr/cgW7FD1DYfhT UezlJBHFXr727/HA6Y7YV2EPR8jlVSV2JxIREpYDRbcTaFZnR3V+FYas86zaD0KZ cc9kzA6ER13X1PlvHglEuaQ49YwkvqI0LT28GWdcQSGtRcr5KDd4xGyaF7cbxslW gGUzszlLSUDviNCfXbSbBcvUUgfFJ4voSIRklBCJTODzJEV61BmzkKqrPvDH42y2 5DmAtYWbFMgrCZzInLJb2mvQRm4j9COlFiixJnER4rZsAuW09PQ+UcNPQwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFN15JjFJezNZzJoj3G+y1FXryyMmMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvM1hrbU1VbDdNMW5NbWlQY2I3TFVWZXZMSXlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAVe+RAwQA Ve+YAwQAVe+aMAwDBACy73UDBAOy73AwDQYJKoZIhvcNAQELBQADggEBAILG/FO9 sL+11znB3mhT3cWl3bqZwS5mRSO75Z8JdaYZmyhWGkaT4VrwsODnqQ2X7UkP0Hsr /UiOlY2XfXenuFBNd7TbiEBsVTqhAylR0ROBJJoSe5P2hzAcHY4Hodp0PnUIvSqh yrJ/XC8Fr9aoFTY6kjllos45KmRpxnLD25OM6WkYAOLWSFLN5XW4p5WN7Co/IxD7 DBWsd3DNLloBeQ7j7Di6fmJ0fgDFsEpiffo24F8l4LuEuKv2Rgbxq2voUhFnenJo a+ecEzg2rPDFt1sLe/l11Y6pGw9mwwGZFUgqH32x50JPDxuz8h+uUYIoCXE2b5Oo ue1MeoCg9RmgDYA= -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:43 2025 by rpki-client