This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/8FvfLLhDVksryfiQvcQGH50S9l8.roa File: 8FvfLLhDVksryfiQvcQGH50S9l8.roa (raw, json) Hash identifier: Y6ZwtPZ/qOYxX0Ope9ofTfvB4VJme9ynbG6C6Iyw774= Subject key identifier: F0:5B:DF:2C:B8:43:56:4B:2B:C9:F8:90:BD:C4:06:1F:9D:12:F6:5F Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155 Certificate serial: 019A9BDB14FD6EFB6D70877D9B33E26DE9DD Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/8FvfLLhDVksryfiQvcQGH50S9l8.roa Signing time: Wed 19 Nov 2025 11:23:37 +0000 ROA not before: Wed 19 Nov 2025 11:23:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48678 IP address blocks: 94.154.41.0/24 maxlen: 24 94.154.43.0/24 maxlen: 24 94.154.44.0/24 maxlen: 24 94.154.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:db:14:fd:6e:fb:6d:70:87:7d:9b:33:e2:6d:e9:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155 Validity Not Before: Nov 19 11:23:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f05bdf2cb843564b2bc9f890bdc4061f9d12f65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:15:f1:81:6e:96:f6:60:67:06:64:7a:fe:dd: 81:65:d4:24:a7:5e:1c:fe:78:5b:99:51:5f:f9:34: b9:74:cc:7e:13:43:e7:36:64:19:a7:61:d3:40:b1: 28:f5:0e:98:52:db:0a:5d:28:1a:6e:a9:15:36:da: 69:07:2c:94:87:54:ff:24:d9:3f:fb:8c:5a:2d:31: 27:c9:75:8e:fc:aa:10:c9:a6:0c:bd:69:00:f4:7f: b1:cd:83:04:dc:52:5f:c8:4d:b7:13:f0:b2:48:36: ed:6a:e1:91:63:1e:2f:2d:16:66:06:4f:dd:14:af: d2:bd:a9:19:41:0f:e5:53:fc:d3:df:7b:3b:b3:be: 5d:af:cd:29:52:2b:9a:d1:52:0c:78:8c:43:4d:d3: 2b:5f:cf:db:0c:f0:f0:fc:21:24:33:5f:77:5c:69: 78:1e:b0:71:0c:15:75:6c:e7:06:db:bc:60:de:3c: 9a:c5:86:20:34:92:3f:59:3f:f4:55:8d:7a:b4:3e: 67:98:02:2f:13:0a:93:c5:79:07:0e:2a:3e:61:14: 79:c4:9c:d3:22:40:86:e8:83:e1:1d:89:7f:65:93: 82:ff:3b:7c:c2:29:79:42:be:4b:2e:19:5f:e4:d5: 07:3b:6d:6d:6f:98:24:fd:cf:92:e0:f1:78:05:9d: 36:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:5B:DF:2C:B8:43:56:4B:2B:C9:F8:90:BD:C4:06:1F:9D:12:F6:5F X509v3 Authority Key Identifier: keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/8FvfLLhDVksryfiQvcQGH50S9l8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.154.41.0/24 94.154.43.0-94.154.45.255 Signature Algorithm: sha256WithRSAEncryption 88:81:e5:72:da:54:d9:5f:2d:b3:eb:35:d1:83:f3:9f:4d:b8: 6a:a1:5c:ef:0b:9b:a0:e9:89:9c:1c:e9:a5:0f:d3:0b:4c:12: 92:2d:48:5a:60:48:56:37:4d:f6:a8:a7:11:1f:7c:89:92:2c: c6:a4:69:7c:55:5f:42:03:07:1e:dd:cd:08:ae:68:6d:a1:e4: f3:0f:e6:33:c0:88:7b:98:2a:75:b9:35:1b:61:02:a5:d7:c0: 23:e7:19:a0:9f:c6:46:bc:e5:c8:df:5f:a4:92:d9:0c:98:36: 5c:85:4f:0a:d3:58:fe:6d:80:ad:c4:c8:00:d7:f1:f4:72:d0: ba:d0:2c:27:18:7a:c3:ab:af:67:e0:aa:68:6b:76:f1:18:40: e0:7b:c8:43:47:40:24:69:21:3e:f9:5c:09:bd:21:ce:04:19: 31:35:2e:6f:fc:41:71:47:fc:54:4d:77:1d:fe:0b:4c:d0:01: 34:0b:47:8d:10:00:69:3e:48:3e:43:93:c4:b7:0c:ae:ed:33: 75:10:1e:3b:cb:87:6c:99:16:38:9d:99:7c:3b:03:d2:5a:c0: 7b:7d:de:8e:46:da:91:c2:88:6d:93:f2:65:7e:08:3d:03:40: 39:b2:e4:7c:cc:b9:d8:4e:3e:cb:71:06:0a:f4:35:cd:b2:5e: 15:9b:a0:54 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZqb2xT9bvttcId9mzPibendMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk NzExNTUwHhcNMjUxMTE5MTEyMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDViZGYyY2I4NDM1NjRiMmJjOWY4OTBiZGM0MDYxZjlkMTJmNjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRXxgW6W9mBnBmR6/t2BZdQkp14c /nhbmVFf+TS5dMx+E0PnNmQZp2HTQLEo9Q6YUtsKXSgabqkVNtppByyUh1T/JNk/ +4xaLTEnyXWO/KoQyaYMvWkA9H+xzYME3FJfyE23E/CySDbtauGRYx4vLRZmBk/d FK/SvakZQQ/lU/zT33s7s75dr80pUiua0VIMeIxDTdMrX8/bDPDw/CEkM193XGl4 HrBxDBV1bOcG27xg3jyaxYYgNJI/WT/0VY16tD5nmAIvEwqTxXkHDio+YRR5xJzT IkCG6IPhHYl/ZZOC/zt8wil5Qr5LLhlf5NUHO21tb5gk/c+S4PF4BZ026QIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFPBb3yy4Q1ZLK8n4kL3EBh+dEvZfMB8GA1UdIwQY MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt NjUyNDljYmM1NzNjLzEvOEZ2ZkxMaERWa3NyeWZpUXZjUUdINTBTOWw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAXpopMAwD BABemisDBAFemiwwDQYJKoZIhvcNAQELBQADggEBAIiB5XLaVNlfLbPrNdGD859N uGqhXO8Lm6DpiZwc6aUP0wtMEpItSFpgSFY3TfaopxEffImSLMakaXxVX0IDBx7d zQiuaG2h5PMP5jPAiHuYKnW5NRthAqXXwCPnGaCfxka85cjfX6SS2QyYNlyFTwrT WP5tgK3EyADX8fRy0LrQLCcYesOrr2fgqmhrdvEYQOB7yENHQCRpIT75XAm9Ic4E GTE1Lm/8QXFH/FRNdx3+C0zQATQLR40QAGk+SD5Dk8S3DK7tM3UQHjvLh2yZFjid mXw7A9JawHt93o5G2pHCiG2T8mV+CD0DQDmy5HzMudhOPstxBgr0Nc2yXhWboFQ= -----END CERTIFICATE-----Generated at Fri Dec 5 09:29:09 2025 by rpki-client