This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/2N3gruHZDCPK265xXUyOsvm36iA.roa File: 2N3gruHZDCPK265xXUyOsvm36iA.roa (raw, json) Hash identifier: +gsY/XMgl8iz4ZHF0gocyniXHtonZauMpYYVY+vH58w= Subject key identifier: D8:DD:E0:AE:E1:D9:0C:23:CA:DB:AE:71:5D:4C:8E:B2:F9:B7:EA:20 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019A916C7E341CE6A5A01628D01FD2BED10F Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/2N3gruHZDCPK265xXUyOsvm36iA.roa Signing time: Mon 17 Nov 2025 10:46:37 +0000 ROA not before: Mon 17 Nov 2025 10:46:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 398465 IP address blocks: 178.254.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 21:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:6c:7e:34:1c:e6:a5:a0:16:28:d0:1f:d2:be:d1:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Nov 17 10:46:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d8dde0aee1d90c23cadbae715d4c8eb2f9b7ea20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:38:6e:33:3d:83:78:77:22:2f:de:02:13:c8: 59:55:7f:aa:b5:97:07:cd:45:8b:04:62:15:a7:4b: 0b:7c:d9:48:69:9d:9d:f4:e6:f9:eb:24:c9:c3:85: f9:11:1d:ed:5a:b9:e0:fb:88:b9:c5:75:b8:18:60: 09:a0:81:98:8f:32:84:81:03:45:6c:56:29:2c:70: e9:8f:77:58:1d:fa:22:82:c3:a4:5b:5f:d9:47:b6: a2:38:fc:20:87:c8:fc:94:a3:45:b7:74:18:29:58: 3b:5c:3a:4c:c6:3d:63:48:47:ca:ef:82:e6:5a:dd: ff:dc:24:83:2d:e8:d6:94:ec:0c:7b:00:9d:e3:b8: a1:29:93:40:d0:25:35:08:f0:21:cb:01:72:f2:06: 4a:ef:2d:99:a4:fb:65:c4:03:fd:4f:21:20:14:30: 34:e9:65:e1:7d:76:ae:f8:51:4a:7c:1e:54:b4:28: bb:4a:f7:d6:25:6e:df:a1:b4:db:41:72:e9:dc:78: 39:a9:9f:89:42:8f:71:3b:d3:b3:91:aa:18:aa:6a: 6b:96:d1:12:ac:bc:ea:a6:92:75:66:8d:13:dc:70: d5:a5:9c:91:27:94:36:88:2e:d0:a4:ab:4d:a6:09: 81:e6:fb:07:4d:58:ac:63:a0:1a:ca:2e:fd:0f:73: 72:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DD:E0:AE:E1:D9:0C:23:CA:DB:AE:71:5D:4C:8E:B2:F9:B7:EA:20 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/2N3gruHZDCPK265xXUyOsvm36iA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.254.182.0/24 Signature Algorithm: sha256WithRSAEncryption 72:87:6a:2f:7b:85:01:2d:09:a2:36:65:a2:48:05:90:f9:41: 4e:fe:59:06:c7:8a:88:fe:89:52:cd:56:c5:ee:f0:d4:d4:e4: 94:8a:de:3f:27:77:84:be:11:d8:bb:0d:0a:12:95:e1:03:71: fd:c0:0e:3b:87:5f:14:87:a6:f2:3e:98:11:ad:a0:dd:a2:79: 20:5c:b2:d2:31:c8:38:c6:98:d2:3e:2f:de:b6:09:b7:64:05: 87:01:d4:df:b2:e3:e1:d2:f6:56:78:5f:be:b5:37:54:0d:76: 9b:59:ef:be:54:38:a5:0e:35:d9:96:a6:b9:83:32:8b:df:d3: 12:bc:b6:b6:ac:da:8e:30:df:ed:7e:4f:05:6f:c0:29:64:cf: 45:76:ef:3a:60:06:45:bb:0a:9b:02:35:40:94:92:c7:b0:e8: 7c:4d:54:af:b2:84:6b:46:82:e5:35:b5:71:34:0c:c7:26:09: 08:11:bd:f3:bd:98:01:62:39:b6:42:a7:a4:7d:e6:20:a1:54: a0:67:dd:61:c5:18:6e:04:7a:86:5c:40:39:43:95:cc:24:b8: b9:84:1d:24:ee:f4:b6:af:cd:ea:cb:4d:8c:15:f7:73:2d:ba: ee:54:24:a5:17:49:8e:3f:ad:c6:46:e6:b1:e0:bd:ad:4a:05: ba:bc:dd:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqRbH40HOaloBYo0B/SvtEPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjUxMTE3MTA0NjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGRkZTBhZWUxZDkwYzIzY2FkYmFlNzE1ZDRjOGViMmY5YjdlYTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqThuMz2DeHciL94CE8hZVX+qtZcH zUWLBGIVp0sLfNlIaZ2d9Ob56yTJw4X5ER3tWrng+4i5xXW4GGAJoIGYjzKEgQNF bFYpLHDpj3dYHfoigsOkW1/ZR7aiOPwgh8j8lKNFt3QYKVg7XDpMxj1jSEfK74Lm Wt3/3CSDLejWlOwMewCd47ihKZNA0CU1CPAhywFy8gZK7y2ZpPtlxAP9TyEgFDA0 6WXhfXau+FFKfB5UtCi7SvfWJW7fobTbQXLp3Hg5qZ+JQo9xO9OzkaoYqmprltES rLzqppJ1Zo0T3HDVpZyRJ5Q2iC7QpKtNpgmB5vsHTVisY6Aayi79D3NylwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNjd4K7h2QwjytuucV1MjrL5t+ogMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvMk4zZ3J1SFpEQ1BLMjY1eFhVeU9zdm0zNmlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv62MA0G CSqGSIb3DQEBCwUAA4IBAQByh2ove4UBLQmiNmWiSAWQ+UFO/lkGx4qI/olSzVbF 7vDU1OSUit4/J3eEvhHYuw0KEpXhA3H9wA47h18Uh6byPpgRraDdonkgXLLSMcg4 xpjSPi/etgm3ZAWHAdTfsuPh0vZWeF++tTdUDXabWe++VDilDjXZlqa5gzKL39MS vLa2rNqOMN/tfk8Fb8ApZM9Fdu86YAZFuwqbAjVAlJLHsOh8TVSvsoRrRoLlNbVx NAzHJgkIEb3zvZgBYjm2QqekfeYgoVSgZ91hxRhuBHqGXEA5Q5XMJLi5hB0k7vS2 r83qy02MFfdzLbruVCSlF0mOP63GRuax4L2tSgW6vN3X -----END CERTIFICATE-----Generated at Sun Nov 23 05:21:52 2025 by rpki-client