This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/13LPCIXvES8LEtmN2UIoYKY4n_Y.roa File: 13LPCIXvES8LEtmN2UIoYKY4n_Y.roa (raw, json) Hash identifier: 4LIMWZOg9N973/gN0CnLf86/GLDB8ETEhEs1Mg+FxZA= Subject key identifier: D7:72:CF:08:85:EF:11:2F:0B:12:D9:8D:D9:42:28:60:A6:38:9F:F6 Certificate issuer: /CN=268f538e7916dc64cd6100cc10f6faa6bcba1874 Certificate serial: 019B0DA9A9A90BF0CF90FD2DDC1A35D124E1 Authority key identifier: 26:8F:53:8E:79:16:DC:64:CD:61:00:CC:10:F6:FA:A6:BC:BA:18:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/13LPCIXvES8LEtmN2UIoYKY4n_Y.roa Signing time: Thu 11 Dec 2025 13:46:21 +0000 ROA not before: Thu 11 Dec 2025 13:46:21 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206406 IP address blocks: 185.72.216.0/24 maxlen: 24 185.72.217.0/24 maxlen: 24 185.72.218.0/24 maxlen: 24 185.72.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:a9:a9:a9:0b:f0:cf:90:fd:2d:dc:1a:35:d1:24:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=268f538e7916dc64cd6100cc10f6faa6bcba1874 Validity Not Before: Dec 11 13:46:21 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d772cf0885ef112f0b12d98dd9422860a6389ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:63:64:af:2c:bd:4b:42:b0:f9:a4:6e:46:38: a7:88:8c:8d:2a:37:ce:8e:13:4a:46:79:dd:2a:3a: fb:81:0f:69:d7:eb:6a:c7:29:70:f8:29:81:ad:49: d0:ee:ca:57:20:39:25:ea:a6:0f:98:78:46:28:05: 0f:a3:29:d1:90:1b:bf:5e:80:da:f6:cc:07:9c:95: df:8d:0c:53:2e:10:60:9e:90:95:80:b5:10:75:e2: 20:08:f5:0c:51:08:a5:f7:31:b6:30:fd:78:ba:0b: f7:16:3b:da:c1:aa:9d:7e:c2:e7:a7:17:00:bf:d6: 87:e2:d8:a3:ca:ec:83:b0:94:ca:ba:9d:7d:4d:fa: 2e:f6:49:96:0b:c2:f8:eb:13:92:f4:93:e3:c5:f0: 66:bc:94:64:0c:e3:cd:28:3d:9f:e4:b3:c1:bc:98: 43:51:76:a9:de:b1:c1:a3:2e:80:42:a0:54:f2:4b: ea:81:ba:bb:ce:8b:25:56:2b:47:27:44:30:fc:69: 5a:63:b0:71:f3:ae:46:84:52:fc:20:53:f1:6d:98: 73:7c:17:10:c0:38:6f:be:f0:2f:3b:ed:81:2c:a0: f5:49:e8:94:74:e8:c0:0f:67:ff:4a:53:aa:6a:be: 2d:27:64:67:b6:4d:52:a4:32:47:40:11:e8:cf:1c: c0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:72:CF:08:85:EF:11:2F:0B:12:D9:8D:D9:42:28:60:A6:38:9F:F6 X509v3 Authority Key Identifier: keyid:26:8F:53:8E:79:16:DC:64:CD:61:00:CC:10:F6:FA:A6:BC:BA:18:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/13LPCIXvES8LEtmN2UIoYKY4n_Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.72.216.0/22 Signature Algorithm: sha256WithRSAEncryption 30:52:ae:05:33:09:e6:83:46:0a:0f:3c:c7:c1:bf:ce:13:08: 5d:44:d3:ed:91:28:5e:f8:2c:32:8f:e5:77:b8:da:cb:79:18: 78:48:f7:4a:be:e5:40:28:05:b3:7b:b8:9f:d0:d9:b6:25:02: e0:be:7d:f5:2c:a2:ee:f3:e8:ab:c0:57:f8:12:cb:b3:e9:2d: 8d:9d:c0:5b:59:2b:dc:75:0a:0f:68:42:95:12:2a:2f:96:40: 3c:9d:8c:2a:37:fc:62:e1:d4:e1:51:fb:03:29:1c:7a:52:34: 48:c7:d1:17:d1:65:15:b5:a3:de:8a:2a:d0:33:8e:d3:f3:8d: 47:84:20:bb:c4:f4:b2:26:99:27:5f:1d:3f:15:92:ad:bf:03: 65:58:3b:2c:6e:8e:64:2f:0b:73:40:97:1f:e0:0f:b6:42:bb: 9c:c1:01:80:dd:fa:86:27:8b:9e:da:f4:63:70:91:07:4d:3b: 88:31:db:e0:bf:46:f7:e4:fc:45:0a:d4:05:23:8a:93:95:6b: d9:c6:3c:d3:9d:4c:c3:d6:46:89:e7:1c:a8:98:d3:95:a7:43: ad:f5:70:5e:91:1d:46:e3:3d:41:2a:ed:15:53:1b:67:f0:26: 34:55:ca:f7:e9:14:85:2c:fc:ae:2f:a0:10:e4:51:80:a2:7b: 01:53:87:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsNqampC/DPkP0t3Bo10SThMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2OGY1MzhlNzkxNmRjNjRjZDYxMDBjYzEwZjZmYWE2YmNi YTE4NzQwHhcNMjUxMjExMTM0NjIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzcyY2YwODg1ZWYxMTJmMGIxMmQ5OGRkOTQyMjg2MGE2Mzg5ZmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WNkryy9S0Kw+aRuRjiniIyNKjfO jhNKRnndKjr7gQ9p1+tqxylw+CmBrUnQ7spXIDkl6qYPmHhGKAUPoynRkBu/XoDa 9swHnJXfjQxTLhBgnpCVgLUQdeIgCPUMUQil9zG2MP14ugv3FjvawaqdfsLnpxcA v9aH4tijyuyDsJTKup19Tfou9kmWC8L46xOS9JPjxfBmvJRkDOPNKD2f5LPBvJhD UXap3rHBoy6AQqBU8kvqgbq7zoslVitHJ0Qw/GlaY7Bx865GhFL8IFPxbZhzfBcQ wDhvvvAvO+2BLKD1SeiUdOjAD2f/SlOqar4tJ2Rntk1SpDJHQBHozxzAfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNdyzwiF7xEvCxLZjdlCKGCmOJ/2MB8GA1UdIwQY MBaAFCaPU455FtxkzWEAzBD2+qa8uhh0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm85VGpua1czR1ROWVFETUVQYjZwcnk2R0hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lODA4NDktMDY5ZS00OTY2LWJlMmMt NjBkYjNmNWVmZDllLzEvMTNMUENJWHZFUzhMRXRtTjJVSW9ZS1k0bl9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9lODA4NDktMDY5ZS00OTY2LWJlMmMtNjBkYjNmNWVmZDll LzEvSm85VGpua1czR1ROWVFETUVQYjZwcnk2R0hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUjYMA0G CSqGSIb3DQEBCwUAA4IBAQAwUq4FMwnmg0YKDzzHwb/OEwhdRNPtkShe+Cwyj+V3 uNrLeRh4SPdKvuVAKAWze7if0Nm2JQLgvn31LKLu8+irwFf4Esuz6S2NncBbWSvc dQoPaEKVEiovlkA8nYwqN/xi4dThUfsDKRx6UjRIx9EX0WUVtaPeiirQM47T841H hCC7xPSyJpknXx0/FZKtvwNlWDssbo5kLwtzQJcf4A+2QrucwQGA3fqGJ4ue2vRj cJEHTTuIMdvgv0b35PxFCtQFI4qTlWvZxjzTnUzD1kaJ5xyomNOVp0Ot9XBekR1G 4z1BKu0VUxtn8CY0Vcr36RSFLPyuL6AQ5FGAonsBU4eF -----END CERTIFICATE-----Generated at Fri Dec 19 09:39:57 2025 by rpki-client