This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/trGLVLEbETkdoQfzTAxgA4VvfLQ.roa File: trGLVLEbETkdoQfzTAxgA4VvfLQ.roa (raw, json) Hash identifier: 2FPq9I43dwPLTtZTvTVrXSwvRWgm6ojSYSnF0bcYf2o= Subject key identifier: B6:B1:8B:54:B1:1B:11:39:1D:A1:07:F3:4C:0C:60:03:85:6F:7C:B4 Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019AEBC6424413428631AC9F0C143A9A8474 Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/trGLVLEbETkdoQfzTAxgA4VvfLQ.roa Signing time: Thu 04 Dec 2025 23:50:30 +0000 ROA not before: Thu 04 Dec 2025 23:50:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205960 IP address blocks: 2.59.152.0/22 maxlen: 22 2.59.153.0/24 maxlen: 24 2.59.154.0/24 maxlen: 24 45.91.224.0/22 maxlen: 22 45.91.225.0/24 maxlen: 24 45.142.152.0/22 maxlen: 22 91.204.224.0/22 maxlen: 22 91.204.224.0/24 maxlen: 24 91.204.225.0/24 maxlen: 24 91.204.226.0/24 maxlen: 24 91.204.227.0/24 maxlen: 24 185.202.100.0/22 maxlen: 22 185.202.101.0/24 maxlen: 24 185.202.103.0/24 maxlen: 24 193.239.150.0/23 maxlen: 23 193.239.151.0/24 maxlen: 24 193.239.154.0/23 maxlen: 23 194.126.215.0/24 maxlen: 24 194.126.219.0/24 maxlen: 24 194.126.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:eb:c6:42:44:13:42:86:31:ac:9f:0c:14:3a:9a:84:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Dec 4 23:50:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b6b18b54b11b11391da107f34c0c6003856f7cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a8:02:ad:2d:ca:3f:7e:81:66:7d:30:74:f7: bd:78:81:5a:1e:25:4d:37:bc:26:31:2b:be:8d:90: 19:3d:9a:4e:9a:a6:54:27:5e:3a:53:4f:ba:c9:bc: c6:74:8a:5b:f5:47:99:f4:18:c4:0a:70:d2:7e:21: 4e:ec:c2:71:da:d1:f2:11:88:18:3c:ce:b8:4b:54: 7d:33:d4:b3:f4:4f:43:0e:76:28:33:a6:e5:80:59: f4:77:9b:71:7b:2e:c7:2a:df:f5:9c:8a:a5:2e:49: 85:7d:3c:7a:6e:75:6e:ba:5e:1f:bf:45:85:bd:3f: 87:6e:8a:31:d4:37:dc:dc:91:c5:10:01:42:e8:b1: 4e:59:f4:26:a6:a0:d3:14:53:f7:c4:3d:0f:a4:94: 97:5b:6e:b4:23:b9:42:36:8d:4d:63:f0:f9:84:ca: 7d:b5:1b:b9:41:74:3b:13:2a:e7:9a:ce:b2:8b:0c: 1e:5e:7f:f9:b2:4e:ca:25:c0:2a:8d:6f:7b:a5:db: 09:c7:c3:3a:aa:f4:04:e9:b8:87:bf:c5:91:c5:3f: d4:8b:82:de:89:8d:49:65:a0:d2:08:fb:56:40:5c: 98:5f:f1:d0:f2:13:b0:f4:d6:e1:18:f1:89:69:1c: 74:0a:12:37:1f:a4:e8:fe:bc:12:17:bf:2a:3e:24: f6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B1:8B:54:B1:1B:11:39:1D:A1:07:F3:4C:0C:60:03:85:6F:7C:B4 X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/trGLVLEbETkdoQfzTAxgA4VvfLQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.152.0/22 45.91.224.0/22 45.142.152.0/22 91.204.224.0/22 185.202.100.0/22 193.239.150.0/23 193.239.154.0/23 194.126.215.0/24 194.126.219.0/24 194.126.227.0/24 Signature Algorithm: sha256WithRSAEncryption 36:95:a0:04:8b:36:55:a2:fc:b7:fe:9a:7e:bd:25:20:a2:a0: bc:ff:32:5e:ff:be:41:a6:4b:62:b3:67:f4:7c:96:34:1f:d0: 50:d0:e2:2e:1c:1f:8a:19:f1:1e:72:c8:11:04:2f:16:8e:18: 05:cb:cd:97:fe:95:b0:bd:2e:69:8b:b0:b7:63:20:77:3a:1f: 7a:0d:e2:1e:86:97:ef:18:4d:ee:f1:5a:f6:c4:81:14:7c:97: 73:50:52:91:7e:33:d5:48:23:a6:6c:da:95:4d:45:52:46:d0: ca:19:81:c9:82:3c:8d:be:94:95:51:c1:5d:1c:5f:22:db:02: 2f:f2:ce:87:a8:68:f8:5b:40:c6:11:01:28:da:97:5d:28:1b: e8:39:53:2e:a4:c2:d2:23:d9:aa:9f:f9:06:d2:69:38:73:ad: 8a:d1:62:c7:85:0d:68:6c:1f:3c:c3:e8:a2:f7:de:1d:6d:7b: d7:51:44:63:4a:26:63:ee:eb:d6:07:38:67:4c:5c:43:44:4a: 01:d7:bc:39:f3:88:ef:41:09:63:67:c0:15:57:ce:50:06:95: 12:5e:9a:9b:87:54:ff:71:25:36:a4:86:dd:91:bc:7c:41:da: ad:03:a4:14:0e:8d:48:c0:fe:17:1f:d7:59:ba:d4:fd:0c:27: 88:53:0a:e1 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZrrxkJEE0KGMayfDBQ6moR0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjUxMjA0MjM1MDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmIxOGI1NGIxMWIxMTM5MWRhMTA3ZjM0YzBjNjAwMzg1NmY3Y2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16gCrS3KP36BZn0wdPe9eIFaHiVN N7wmMSu+jZAZPZpOmqZUJ146U0+6ybzGdIpb9UeZ9BjECnDSfiFO7MJx2tHyEYgY PM64S1R9M9Sz9E9DDnYoM6blgFn0d5txey7HKt/1nIqlLkmFfTx6bnVuul4fv0WF vT+Hboox1Dfc3JHFEAFC6LFOWfQmpqDTFFP3xD0PpJSXW260I7lCNo1NY/D5hMp9 tRu5QXQ7Eyrnms6yiwweXn/5sk7KJcAqjW97pdsJx8M6qvQE6biHv8WRxT/Ui4Le iY1JZaDSCPtWQFyYX/HQ8hOw9NbhGPGJaRx0ChI3H6To/rwSF78qPiT23QIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFLaxi1SxGxE5HaEH80wMYAOFb3y0MB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvdHJHTFZMRWJFVGtkb1FmelRBeGdBNFZ2ZkxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQCAjuYAwQC LVvgAwQCLY6YAwQCW8zgAwQCucpkAwQBwe+WAwQBwe+aAwQAwn7XAwQAwn7bAwQA wn7jMA0GCSqGSIb3DQEBCwUAA4IBAQA2laAEizZVovy3/pp+vSUgoqC8/zJe/75B pktis2f0fJY0H9BQ0OIuHB+KGfEecsgRBC8WjhgFy82X/pWwvS5pi7C3YyB3Oh96 DeIehpfvGE3u8Vr2xIEUfJdzUFKRfjPVSCOmbNqVTUVSRtDKGYHJgjyNvpSVUcFd HF8i2wIv8s6HqGj4W0DGEQEo2pddKBvoOVMupMLSI9mqn/kG0mk4c62K0WLHhQ1o bB88w+ii994dbXvXUURjSiZj7uvWBzhnTFxDREoB17w584jvQQljZ8AVV85QBpUS Xpqbh1T/cSU2pIbdkbx8QdqtA6QUDo1IwP4XH9dZutT9DCeIUwrh -----END CERTIFICATE-----Generated at Fri Dec 12 04:04:29 2025 by rpki-client