This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/DEAqR7ouXdK_VgFpEIt6V4-R3vU.roa File: DEAqR7ouXdK_VgFpEIt6V4-R3vU.roa (raw, json) Hash identifier: wMwsT7eO243EJyubJoTSggJw5Rb7OJyY/cli5aPuyUQ= Subject key identifier: 0C:40:2A:47:BA:2E:5D:D2:BF:56:01:69:10:8B:7A:57:8F:91:DE:F5 Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a Certificate serial: 019AFD75889908BCCF55B0BBCEB71C4E35F3 Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/DEAqR7ouXdK_VgFpEIt6V4-R3vU.roa Signing time: Mon 08 Dec 2025 10:15:29 +0000 ROA not before: Mon 08 Dec 2025 10:15:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 61106 IP address blocks: 81.162.54.0/23 maxlen: 24 82.115.50.0/23 maxlen: 23 82.115.50.0/24 maxlen: 24 82.115.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:75:88:99:08:bc:cf:55:b0:bb:ce:b7:1c:4e:35:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a Validity Not Before: Dec 8 10:15:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0c402a47ba2e5dd2bf560169108b7a578f91def5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ec:e0:c3:44:54:de:24:e4:f0:5c:8f:d4:81: 40:56:63:d7:b2:9b:4f:0c:44:2d:7e:a6:ad:94:e8: ab:e0:25:c4:dc:0e:55:15:e6:2c:40:23:4f:53:be: 13:17:fd:39:4d:ac:a6:91:55:d9:58:ea:8b:62:f2: 33:ae:ba:f0:3d:86:6f:b5:2f:2a:85:e9:9a:3e:97: 8f:1c:8a:d6:99:48:ca:f1:7f:51:97:41:ae:7b:77: ff:22:7f:8b:09:91:c6:41:93:80:70:76:46:0c:d1: 6e:7f:b6:27:a1:a1:7a:b8:24:51:db:88:58:6e:dc: 27:dd:bf:9a:ba:87:fb:13:ec:00:57:aa:db:85:f2: dc:4b:bc:66:87:8e:b3:9a:42:17:d2:0e:6e:4b:a6: 79:61:7f:ae:d0:a8:02:47:07:03:dd:e2:a6:fe:e3: 84:cd:68:54:9c:9e:d7:33:44:d6:80:17:91:20:9a: c5:6e:c3:f2:b2:6c:74:40:5c:d8:1f:84:bc:2e:7d: 52:50:60:13:4c:99:3f:fc:41:52:b8:65:fc:9d:ff: 24:14:56:0f:ce:6e:fd:a2:ac:73:ac:3b:20:45:e1: d9:11:36:c4:a2:9b:23:cb:73:63:5a:c0:13:de:95: 10:28:bd:cc:62:d1:2a:a5:65:bc:56:80:f2:3a:dc: c4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:40:2A:47:BA:2E:5D:D2:BF:56:01:69:10:8B:7A:57:8F:91:DE:F5 X509v3 Authority Key Identifier: keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/DEAqR7ouXdK_VgFpEIt6V4-R3vU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.162.54.0/23 82.115.50.0/23 Signature Algorithm: sha256WithRSAEncryption 80:f5:e8:ba:04:e1:d9:63:de:fc:8c:7a:8d:1f:c6:78:d2:f6: 6a:f9:71:35:83:fe:3c:e3:6a:58:cb:1e:78:f6:d9:13:05:82: 6a:3d:90:f1:4e:04:ab:36:d3:f7:13:0b:13:1c:cf:63:f3:cb: c0:4b:a9:2e:19:6c:ec:48:0a:ef:11:d2:72:6e:ee:e2:f5:a1: 75:1f:de:dc:5f:6f:e2:00:42:09:01:f7:fd:e8:2c:ae:89:d5: cb:5a:be:6a:86:71:31:f9:b5:6a:54:d0:5c:b5:b3:0a:7b:2e: 7f:31:31:5c:30:e2:8e:7d:be:fd:5a:e2:d3:bc:d0:11:a7:fe: a8:4d:4c:de:98:b1:5e:e7:17:35:c6:dc:a6:45:be:aa:dc:b4: 16:2c:f7:61:de:8a:88:07:ba:e3:93:a3:db:91:f6:de:6f:ee: 29:ab:53:05:d9:ab:fd:34:38:a7:2a:4e:97:47:41:5a:27:46: 4b:43:0d:45:d0:c7:09:a9:bc:2e:23:bd:2e:94:86:2c:c5:d8: c1:9d:98:f9:0a:f4:ef:83:e1:9a:30:ec:0b:9e:9c:39:db:73: 90:35:15:03:6f:4c:09:bd:3f:4d:f2:36:60:74:15:36:de:1d: ff:58:aa:21:1f:d2:cb:d8:66:ab:5e:43:06:91:ab:a3:af:79: b7:9d:5f:8e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZr9dYiZCLzPVbC7zrccTjXzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NDdiNTlkMjFlYTM2YjMwNjJmY2E4MGNlNzVjMTYxNmFm NTExOWEwHhcNMjUxMjA4MTAxNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzQwMmE0N2JhMmU1ZGQyYmY1NjAxNjkxMDhiN2E1NzhmOTFkZWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOzgw0RU3iTk8FyP1IFAVmPXsptP DEQtfqatlOir4CXE3A5VFeYsQCNPU74TF/05TaymkVXZWOqLYvIzrrrwPYZvtS8q hemaPpePHIrWmUjK8X9Rl0Gue3f/In+LCZHGQZOAcHZGDNFuf7YnoaF6uCRR24hY btwn3b+auof7E+wAV6rbhfLcS7xmh46zmkIX0g5uS6Z5YX+u0KgCRwcD3eKm/uOE zWhUnJ7XM0TWgBeRIJrFbsPysmx0QFzYH4S8Ln1SUGATTJk//EFSuGX8nf8kFFYP zm79oqxzrDsgReHZETbEopsjy3NjWsAT3pUQKL3MYtEqpWW8VoDyOtzE7QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAxAKke6Ll3Sv1YBaRCLelePkd71MB8GA1UdIwQY MBaAFBhHtZ0h6jazBi/KgM51wWFq9RGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0VlMW5TSHFOck1HTDhxQXpuWEJZV3IxRVpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zODI0Y2QtZTUyNy00YWRjLWE0MTIt ZjkxYmI1MTc5MjE3LzEvREVBcVI3b3VYZEtfVmdGcEVJdDZWNC1SM3ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8zODI0Y2QtZTUyNy00YWRjLWE0MTItZjkxYmI1MTc5MjE3 LzEvR0VlMW5TSHFOck1HTDhxQXpuWEJZV3IxRVpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUaI2AwQB UnMyMA0GCSqGSIb3DQEBCwUAA4IBAQCA9ei6BOHZY978jHqNH8Z40vZq+XE1g/48 42pYyx549tkTBYJqPZDxTgSrNtP3EwsTHM9j88vAS6kuGWzsSArvEdJybu7i9aF1 H97cX2/iAEIJAff96CyuidXLWr5qhnEx+bVqVNBctbMKey5/MTFcMOKOfb79WuLT vNARp/6oTUzemLFe5xc1xtymRb6q3LQWLPdh3oqIB7rjk6Pbkfbeb+4pq1MF2av9 NDinKk6XR0FaJ0ZLQw1F0McJqbwuI70ulIYsxdjBnZj5CvTvg+GaMOwLnpw523OQ NRUDb0wJvT9N8jZgdBU23h3/WKohH9LL2GarXkMGkaujr3m3nV+O -----END CERTIFICATE-----Generated at Tue Dec 16 04:08:41 2025 by rpki-client