This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/l1XxRj7o-P3W8wmEXVBnb1bkfvo.roa File: l1XxRj7o-P3W8wmEXVBnb1bkfvo.roa (raw, json) Hash identifier: IwtmXvPIohgfv/Rr2GiitjYO1RH0qPAOwSUdXn0V53k= Subject key identifier: 97:55:F1:46:3E:E8:F8:FD:D6:F3:09:84:5D:50:67:6F:56:E4:7E:FA Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019A48B576673C14C11AF84192AE21DCACED Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/l1XxRj7o-P3W8wmEXVBnb1bkfvo.roa Signing time: Mon 03 Nov 2025 07:54:03 +0000 ROA not before: Mon 03 Nov 2025 07:54:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6830 IP address blocks: 80.81.48.0/24 maxlen: 24 80.81.53.0/24 maxlen: 24 80.81.58.0/24 maxlen: 24 80.255.224.0/20 maxlen: 20 83.223.130.0/24 maxlen: 24 83.223.134.0/24 maxlen: 24 83.223.135.0/24 maxlen: 24 83.223.137.0/24 maxlen: 24 83.223.142.0/24 maxlen: 24 83.223.153.0/24 maxlen: 24 83.223.154.0/24 maxlen: 24 91.190.47.0/24 maxlen: 24 94.101.226.0/24 maxlen: 24 94.101.237.0/24 maxlen: 24 159.148.149.0/24 maxlen: 24 159.148.240.0/24 maxlen: 24 185.7.237.0/24 maxlen: 24 185.7.238.0/24 maxlen: 24 185.7.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 10:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:48:b5:76:67:3c:14:c1:1a:f8:41:92:ae:21:dc:ac:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Nov 3 07:54:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9755f1463ee8f8fdd6f309845d50676f56e47efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:19:16:12:01:0b:c2:21:46:af:c7:81:d2:a6: 1f:84:89:f7:b9:8e:ee:34:e5:fd:65:bb:ba:0d:2e: ea:48:e5:9f:96:7d:9f:8a:07:d0:4f:a9:7a:4c:20: 0e:fd:40:45:27:10:e1:fd:83:8d:ec:98:0d:ae:5b: 23:29:57:5b:ee:82:1c:1a:9e:dd:d4:02:7e:99:be: 9d:46:96:cf:01:f6:34:92:e7:f3:ab:6b:9e:19:8e: 58:dd:93:e7:5e:e6:9b:f9:e8:cd:d1:45:d3:40:e7: 87:94:24:5f:c0:98:4d:ae:ec:69:9b:70:71:14:57: 2d:17:48:0c:3d:6e:48:b2:e1:bd:07:03:df:9f:a6: 81:fc:e5:79:3c:8d:d1:a8:3e:38:ae:da:0a:4d:11: 32:39:c0:ff:de:f9:94:b4:5a:95:32:23:ca:5d:97: 65:dc:3f:d8:7c:a8:03:e4:99:5d:93:1d:b3:c7:f1: 6d:cc:60:e0:a8:67:ea:ce:50:68:6e:a0:05:79:d6: ec:7b:9b:fc:e2:a0:89:a8:f5:94:cf:eb:07:b5:ca: d5:da:cd:e1:92:09:e4:d9:e8:01:73:2f:6c:d5:f5: 56:93:73:f6:83:c5:18:8c:00:2f:1e:5a:79:fe:10: 26:c6:8d:a1:97:86:67:f1:9d:e2:38:d5:5e:8d:46: 97:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:55:F1:46:3E:E8:F8:FD:D6:F3:09:84:5D:50:67:6F:56:E4:7E:FA X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/l1XxRj7o-P3W8wmEXVBnb1bkfvo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.81.48.0/24 80.81.53.0/24 80.81.58.0/24 80.255.224.0/20 83.223.130.0/24 83.223.134.0/23 83.223.137.0/24 83.223.142.0/24 83.223.153.0-83.223.154.255 91.190.47.0/24 94.101.226.0/24 94.101.237.0/24 159.148.149.0/24 159.148.240.0/24 185.7.237.0-185.7.239.255 Signature Algorithm: sha256WithRSAEncryption 97:bd:85:bf:85:67:c2:1b:c6:84:33:c3:91:d3:6b:96:85:98: 8a:f5:f5:79:92:f4:d4:bd:3d:06:cb:8d:50:a2:7d:cc:f3:1e: 90:11:7e:cd:b1:c5:4f:ca:22:cc:e1:7e:d4:9c:cc:32:74:4d: 21:38:6b:d4:5a:ed:d7:74:dc:ef:a8:ae:c8:8f:73:fd:6b:62: 57:88:ab:84:f7:fe:51:54:d0:b6:1c:ca:6c:08:61:58:68:d1: 1d:4e:1b:d6:57:fd:c8:ca:87:25:51:eb:46:01:d3:0c:9f:3d: 96:a3:7a:3f:2c:38:57:cd:76:ac:b3:47:f0:9b:ad:82:6f:35: 75:24:d6:29:6c:42:27:8b:35:46:40:fa:f6:8d:68:89:68:79: d3:bc:ec:47:37:35:6f:2f:f2:47:6e:87:7a:5b:90:d6:02:dd: f2:9d:dd:da:fe:9d:c4:be:e7:f7:75:14:ff:79:0a:e4:c9:a9: 9a:31:a1:41:d5:ef:c1:3c:9a:58:e7:5c:22:00:3a:f1:0d:dc: 56:b9:c2:5a:67:d7:ae:1d:6d:09:f6:09:4c:a0:be:56:de:c9: f5:dd:e5:4d:a0:b5:bc:98:ee:8b:1b:85:e8:53:fa:1e:21:04: fc:65:3c:e0:6c:19:37:fd:3a:91:6c:ac:00:f6:c0:ef:00:c3: e6:28:c3:f7 -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgISAZpItXZnPBTBGvhBkq4h3KztMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjUxMTAzMDc1NDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzU1ZjE0NjNlZThmOGZkZDZmMzA5ODQ1ZDUwNjc2ZjU2ZTQ3ZWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxkWEgELwiFGr8eB0qYfhIn3uY7u NOX9Zbu6DS7qSOWfln2figfQT6l6TCAO/UBFJxDh/YON7JgNrlsjKVdb7oIcGp7d 1AJ+mb6dRpbPAfY0kufzq2ueGY5Y3ZPnXuab+ejN0UXTQOeHlCRfwJhNruxpm3Bx FFctF0gMPW5IsuG9BwPfn6aB/OV5PI3RqD44rtoKTREyOcD/3vmUtFqVMiPKXZdl 3D/YfKgD5Jldkx2zx/FtzGDgqGfqzlBobqAFedbse5v84qCJqPWUz+sHtcrV2s3h kgnk2egBcy9s1fVWk3P2g8UYjAAvHlp5/hAmxo2hl4Zn8Z3iONVejUaXJQIDAQAB o4ICbjCCAmowHQYDVR0OBBYEFJdV8UY+6Pj91vMJhF1QZ29W5H76MB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvbDFYeFJqN28tUDNXOHdtRVhWQm5iMWJrZnZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwagMEAFBRMAME AFBRNQMEAFBROgMEBFD/4AMEAFPfggMEAVPfhgMEAFPfiQMEAFPfjjAMAwQAU9+Z AwQAU9+aAwQAW74vAwQAXmXiAwQAXmXtAwQAn5SVAwQAn5TwMAwDBAC5B+0DBAS5 B+AwDQYJKoZIhvcNAQELBQADggEBAJe9hb+FZ8IbxoQzw5HTa5aFmIr19XmS9NS9 PQbLjVCifczzHpARfs2xxU/KIszhftSczDJ0TSE4a9Ra7dd03O+orsiPc/1rYleI q4T3/lFU0LYcymwIYVho0R1OG9ZX/cjKhyVR60YB0wyfPZajej8sOFfNdqyzR/Cb rYJvNXUk1ilsQieLNUZA+vaNaIloedO87Ec3NW8v8kduh3pbkNYC3fKd3dr+ncS+ 5/d1FP95CuTJqZoxoUHV78E8mljnXCIAOvEN3Fa5wlpn164dbQn2CUygvlbeyfXd 5U2gtbyY7osbhehT+h4hBPxlPOBsGTf9OpFsrAD2wO8Aw+Yow/c= -----END CERTIFICATE-----Generated at Fri Dec 5 13:17:01 2025 by rpki-client