This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/gURf01mi6fRhdfTo38uZuQ8ns90.roa File: gURf01mi6fRhdfTo38uZuQ8ns90.roa (raw, json) Hash identifier: 19sy00QGgSOlMIKX5uqSoejtSxRzajUjvtb7yMJ8G5w= Subject key identifier: 81:44:5F:D3:59:A2:E9:F4:61:75:F4:E8:DF:CB:99:B9:0F:27:B3:DD Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Certificate serial: 019A9BAD4F958230651AA1AB2FEE9A4C5810 Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/gURf01mi6fRhdfTo38uZuQ8ns90.roa Signing time: Wed 19 Nov 2025 10:33:37 +0000 ROA not before: Wed 19 Nov 2025 10:33:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48678 IP address blocks: 91.228.12.0/24 maxlen: 24 91.228.14.0/24 maxlen: 24 91.228.15.0/24 maxlen: 24 94.154.37.0/24 maxlen: 24 94.154.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:ad:4f:95:82:30:65:1a:a1:ab:2f:ee:9a:4c:58:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Validity Not Before: Nov 19 10:33:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=81445fd359a2e9f46175f4e8dfcb99b90f27b3dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:db:16:48:f3:6e:8b:f9:2a:6c:a1:0d:64:5c: 66:ba:dd:c8:1a:0a:9c:d1:86:b7:46:a2:03:2a:6d: 3d:6f:66:73:fa:a8:93:3a:35:be:1b:19:f9:d5:e9: 1b:34:ab:1c:13:f2:41:2f:db:cc:46:d4:2d:0c:1d: 74:a4:4c:56:28:06:1c:03:9d:fa:18:27:75:4b:b0: c6:ad:d5:f3:b8:80:d9:62:ee:a2:7b:ac:6b:11:ab: fb:53:22:08:2d:e2:79:8f:35:c9:4b:71:dd:44:ba: 1a:68:02:89:8f:02:0d:54:c0:8c:8d:16:5b:aa:ec: 5e:3d:be:a8:a7:8f:01:72:da:b0:80:78:41:8b:09: 86:21:d0:53:5a:9f:64:76:0c:4d:98:4b:a9:b0:8e: e7:9c:f9:97:35:9c:fd:c5:29:27:09:c1:fc:70:1c: 3c:d0:ab:24:8d:38:87:c6:8f:03:5f:c5:68:ce:48: 73:06:7a:d0:fa:4a:d0:e6:80:09:6a:0a:b3:c0:85: 7b:b9:01:ac:c6:29:cc:85:8a:37:a6:26:e0:da:fe: 5c:1b:4d:fc:83:93:f6:b3:00:99:9d:6d:85:2b:98: f3:95:ac:83:c5:4e:e6:4e:cf:3d:a9:5d:fd:c9:63: 0e:0b:48:b9:4b:5e:c7:57:ee:27:8f:05:d3:63:b8: b1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:44:5F:D3:59:A2:E9:F4:61:75:F4:E8:DF:CB:99:B9:0F:27:B3:DD X509v3 Authority Key Identifier: keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/gURf01mi6fRhdfTo38uZuQ8ns90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.228.12.0/24 91.228.14.0/23 94.154.37.0-94.154.38.255 Signature Algorithm: sha256WithRSAEncryption b6:8f:61:e4:bf:c0:fa:5a:80:cd:72:c2:28:ab:22:d9:c4:40: 3e:94:90:ff:a8:2b:ff:31:0f:2a:ff:2a:d1:a0:7a:9f:e8:9a: ce:d2:ee:4a:a2:a2:db:c0:a3:f9:c6:2f:f9:d8:9d:64:17:d4: 90:c4:bb:20:85:f8:48:26:83:3a:6a:b5:19:ce:cf:f9:29:82: d7:7d:73:00:3d:20:88:9b:fd:7c:05:e6:23:31:83:6f:bd:c8: 6b:53:4a:65:92:a7:40:4b:aa:c2:6e:0a:5b:77:46:b7:ca:de: 57:4c:e2:8b:fe:86:bd:fe:60:7f:fe:50:bc:66:a9:f8:e0:5e: ec:78:c7:c3:49:36:94:7c:4d:ac:e2:20:97:a2:d2:87:18:da: 63:70:c2:ae:ea:34:80:ec:30:dc:a5:c5:e7:ff:11:95:0b:90: ba:72:1c:b3:93:a6:f6:01:91:11:4b:f8:28:e3:08:a3:8c:53: f5:57:b8:41:6e:c2:31:14:f3:de:7d:31:f0:11:40:f7:32:9c: 0e:23:73:1d:0f:7b:0e:d2:4e:a6:c0:06:03:73:4e:35:8a:e8: 39:4a:65:6a:c8:83:15:d6:1e:6a:97:81:26:f8:c1:53:ef:39: df:16:d0:95:70:eb:25:4b:e5:de:0a:c9:0e:a4:a2:ae:da:26: ed:4e:a6:fe -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZqbrU+VgjBlGqGrL+6aTFgQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5 MjFmODgwHhcNMjUxMTE5MTAzMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTQ0NWZkMzU5YTJlOWY0NjE3NWY0ZThkZmNiOTliOTBmMjdiM2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9sWSPNui/kqbKENZFxmut3IGgqc 0Ya3RqIDKm09b2Zz+qiTOjW+Gxn51ekbNKscE/JBL9vMRtQtDB10pExWKAYcA536 GCd1S7DGrdXzuIDZYu6ie6xrEav7UyIILeJ5jzXJS3HdRLoaaAKJjwINVMCMjRZb quxePb6op48BctqwgHhBiwmGIdBTWp9kdgxNmEupsI7nnPmXNZz9xSknCcH8cBw8 0KskjTiHxo8DX8VozkhzBnrQ+krQ5oAJagqzwIV7uQGsxinMhYo3pibg2v5cG038 g5P2swCZnW2FK5jzlayDxU7mTs89qV39yWMOC0i5S17HV+4njwXTY7ix/wIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFIFEX9NZoun0YXX06N/LmbkPJ7PdMB8GA1UdIwQY MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt YTE4NGYzNTU2ZTQzLzEvZ1VSZjAxbWk2ZlJoZGZUbzM4dVp1UThuczkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAW+QMAwQB W+QOMAwDBABemiUDBABemiYwDQYJKoZIhvcNAQELBQADggEBALaPYeS/wPpagM1y wiirItnEQD6UkP+oK/8xDyr/KtGgep/oms7S7kqiotvAo/nGL/nYnWQX1JDEuyCF +EgmgzpqtRnOz/kpgtd9cwA9IIib/XwF5iMxg2+9yGtTSmWSp0BLqsJuClt3RrfK 3ldM4ov+hr3+YH/+ULxmqfjgXux4x8NJNpR8TaziIJei0ocY2mNwwq7qNIDsMNyl xef/EZULkLpyHLOTpvYBkRFL+CjjCKOMU/VXuEFuwjEU8959MfARQPcynA4jcx0P ew7STqbABgNzTjWK6DlKZWrIgxXWHmqXgSb4wVPvOd8W0JVw6yVL5d4KyQ6koq7a Ju1Opv4= -----END CERTIFICATE-----Generated at Fri Dec 5 09:26:59 2025 by rpki-client