This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/d28wWwBXF7wZOaWJd6qwT3PVrxQ.roa File: d28wWwBXF7wZOaWJd6qwT3PVrxQ.roa (raw, json) Hash identifier: KkRypZGbs6Pg3NFKFlWtxFDByCJE0sYuwQPwJi599do= Subject key identifier: 77:6F:30:5B:00:57:17:BC:19:39:A5:89:77:AA:B0:4F:73:D5:AF:14 Certificate issuer: /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112 Certificate serial: 019B0D099219712DADEC2D37CF7FD552A069 Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/d28wWwBXF7wZOaWJd6qwT3PVrxQ.roa Signing time: Thu 11 Dec 2025 10:51:29 +0000 ROA not before: Thu 11 Dec 2025 10:51:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48863 IP address blocks: 185.80.156.0/22 maxlen: 22 213.138.160.0/20 maxlen: 20 213.138.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:09:92:19:71:2d:ad:ec:2d:37:cf:7f:d5:52:a0:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112 Validity Not Before: Dec 11 10:51:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=776f305b005717bc1939a58977aab04f73d5af14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7d:c9:a8:a5:ec:02:b0:b9:a4:f2:a8:af:49: b6:9d:c1:23:4a:c6:ed:5e:b5:f0:73:00:dd:ef:5f: ce:98:a4:35:82:bc:99:b9:99:f8:18:79:56:82:f7: 4f:d3:ca:1d:9e:5c:f0:45:c4:d3:04:d4:10:23:e2: b0:09:bf:46:d5:77:fa:4d:10:fc:e7:64:bc:b5:3c: 81:9b:52:38:78:50:e1:d1:58:7e:c3:29:ce:60:65: 2e:a9:46:66:89:b3:c3:30:95:a7:5d:9f:e6:fd:24: 3e:93:7b:9b:f0:10:fd:a1:fb:8f:d1:58:dd:dc:ad: 5f:19:ea:fb:35:8a:fd:7b:43:97:ec:06:b9:86:3b: 12:3b:f5:e9:8c:94:c6:af:ea:1b:bc:62:f8:3b:4d: 3f:57:7f:42:1f:07:e7:be:90:21:81:ad:8a:64:79: 24:e8:db:bd:e2:49:8b:d2:07:47:53:af:2e:a6:32: f9:bd:09:48:a1:15:85:87:e7:52:21:1e:59:46:76: 0d:26:6d:45:d1:b2:5a:bb:b9:18:fa:b9:39:c9:a9: ef:bc:0f:29:f2:bd:f1:f5:57:6a:f9:e4:46:14:5f: cb:3f:4c:9b:f2:b0:8a:57:4a:61:59:04:0c:39:a4: c3:f0:b4:be:6a:69:e1:64:ba:69:a9:dd:71:54:84: 37:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:6F:30:5B:00:57:17:BC:19:39:A5:89:77:AA:B0:4F:73:D5:AF:14 X509v3 Authority Key Identifier: keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/d28wWwBXF7wZOaWJd6qwT3PVrxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.80.156.0/22 213.138.160.0-213.138.183.255 Signature Algorithm: sha256WithRSAEncryption 36:f2:e5:2c:09:c4:1d:0e:7b:2f:21:f1:da:27:82:14:1b:f4: c5:c9:ac:10:f3:fa:e7:90:a3:b7:48:6b:67:d9:5d:bd:b5:f6: 69:80:06:7f:21:36:95:d3:34:45:01:15:b4:c1:90:15:12:7c: 0a:7b:bf:28:69:d0:59:52:fe:4d:94:cd:e6:e2:0d:6a:93:d6: f0:e2:93:f5:f5:38:9d:75:b7:cf:9a:dd:e9:34:e4:01:ee:3b: e2:48:a9:e8:b7:ec:1b:7a:e1:32:2d:dc:ad:c0:d3:7b:d3:82: 8e:90:86:41:3a:93:ec:80:b7:70:48:71:65:91:d5:3b:29:a0: 8d:06:19:35:15:28:a8:69:88:bb:08:76:31:11:39:a3:d5:a6: 58:c7:88:b7:e4:b6:5e:d0:ad:ac:5a:d3:7e:1d:11:ff:e6:cc: c0:e2:60:57:77:39:fc:9e:d1:f5:b0:43:05:48:0a:13:19:a1: 8a:e6:45:6b:2e:06:57:50:99:3b:28:5a:76:c0:0c:0d:15:72: cb:65:86:3a:84:5b:71:29:95:11:65:cd:e6:e2:ed:f4:d6:59: 7a:88:20:20:e7:44:fa:98:d2:58:b4:79:cc:89:81:c9:1f:75: 03:3d:c8:f0:21:cf:ce:1d:cb:ba:8e:0f:12:c8:c4:79:51:76: 8a:c9:c6:d0 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZsNCZIZcS2t7C03z3/VUqBpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YWM0OWQxY2NkY2FlZGQ5YTEzZjQ4MDNkZjFhZWRjZTZk YzExMTIwHhcNMjUxMjExMTA1MTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzZmMzA1YjAwNTcxN2JjMTkzOWE1ODk3N2FhYjA0ZjczZDVhZjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH3JqKXsArC5pPKor0m2ncEjSsbt XrXwcwDd71/OmKQ1gryZuZn4GHlWgvdP08odnlzwRcTTBNQQI+KwCb9G1Xf6TRD8 52S8tTyBm1I4eFDh0Vh+wynOYGUuqUZmibPDMJWnXZ/m/SQ+k3ub8BD9ofuP0Vjd 3K1fGer7NYr9e0OX7Aa5hjsSO/XpjJTGr+obvGL4O00/V39CHwfnvpAhga2KZHkk 6Nu94kmL0gdHU68upjL5vQlIoRWFh+dSIR5ZRnYNJm1F0bJau7kY+rk5yanvvA8p 8r3x9Vdq+eRGFF/LP0yb8rCKV0phWQQMOaTD8LS+amnhZLppqd1xVIQ3WwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFHdvMFsAVxe8GTmliXeqsE9z1a8UMB8GA1UdIwQY MBaAFLmsSdHM3K7dmhP0gD3xrtzm3BESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWF4SjBjemNydDJhRV9TQVBmR3UzT2JjRVJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81MzcxOTEtMTE3OS00OGVjLWFkOWYt ZmZlNDNhNTJkM2Y2LzEvZDI4d1d3QlhGN3daT2FXSmQ2cXdUM1BWcnhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC81MzcxOTEtMTE3OS00OGVjLWFkOWYtZmZlNDNhNTJkM2Y2 LzEvdWF4SjBjemNydDJhRV9TQVBmR3UzT2JjRVJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCuVCcMAwD BAXViqADBAPVirAwDQYJKoZIhvcNAQELBQADggEBADby5SwJxB0Oey8h8donghQb 9MXJrBDz+ueQo7dIa2fZXb219mmABn8hNpXTNEUBFbTBkBUSfAp7vyhp0FlS/k2U zebiDWqT1vDik/X1OJ11t8+a3ek05AHuO+JIqei37Bt64TIt3K3A03vTgo6QhkE6 k+yAt3BIcWWR1TspoI0GGTUVKKhpiLsIdjEROaPVpljHiLfktl7Qraxa034dEf/m zMDiYFd3Ofye0fWwQwVIChMZoYrmRWsuBldQmTsoWnbADA0VcstlhjqEW3EplRFl zebi7fTWWXqIICDnRPqY0li0ecyJgckfdQM9yPAhz84dy7qODxLIxHlRdorJxtA= -----END CERTIFICATE-----Generated at Fri Dec 12 15:43:26 2025 by rpki-client