This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/G_e3YSqYAX0sTWP5ZIgUxrclesc.roa File: G_e3YSqYAX0sTWP5ZIgUxrclesc.roa (raw, json) Hash identifier: ZO1I857zyVtc1skT7PHPYJ5rAOdh6XGavLJ4e3panbM= Subject key identifier: 1B:F7:B7:61:2A:98:01:7D:2C:4D:63:F9:64:88:14:C6:B7:25:7A:C7 Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321 Certificate serial: 019A591AC3C88602D60324725D181C9CF28B Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/G_e3YSqYAX0sTWP5ZIgUxrclesc.roa Signing time: Thu 06 Nov 2025 12:18:37 +0000 ROA not before: Thu 06 Nov 2025 12:18:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48678 IP address blocks: 185.7.241.0/24 maxlen: 24 185.7.242.0/24 maxlen: 24 2a14:db80:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:59:1a:c3:c8:86:02:d6:03:24:72:5d:18:1c:9c:f2:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321 Validity Not Before: Nov 6 12:18:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1bf7b7612a98017d2c4d63f9648814c6b7257ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d0:33:9e:79:3e:cc:36:bc:e0:93:b9:07:2a: d3:3d:c2:39:db:58:02:3f:89:b2:a0:83:da:7f:42: d9:64:72:48:f9:8b:fb:d5:96:02:15:d7:2f:2b:88: ad:2d:bd:44:cf:3a:ec:5f:ac:47:20:dc:2e:c1:1b: b4:33:c5:b7:af:8d:68:0d:59:df:9a:70:b5:17:72: bc:63:2d:d7:a0:57:cb:56:bd:97:6a:b5:fa:0c:c6: 2b:aa:d8:82:eb:76:dd:13:07:c0:5f:b1:b1:6d:5c: 8f:ea:d1:24:a0:97:73:94:21:25:f3:da:1b:67:f6: a5:0a:47:d3:5d:c1:9e:ec:90:00:99:80:1c:86:78: b5:c4:57:7d:30:2f:a4:63:ce:3a:47:85:2b:8e:3c: 8d:94:54:cd:f3:16:f7:18:72:24:39:78:21:f1:04: 3d:b2:68:b5:5e:df:93:2f:7b:a8:73:62:fe:c7:4b: 27:b7:45:d0:5d:a7:8c:ba:18:2b:ef:6b:2f:ed:20: bb:c4:e6:eb:01:23:70:27:f7:e4:a2:27:f0:25:12: 45:9b:2e:62:6f:f7:fd:72:23:08:03:2d:8d:fd:76: 2c:91:cf:c5:6e:7a:f2:2f:51:c1:97:50:60:d6:74: 67:8a:61:c2:4e:11:42:c4:cd:db:97:c4:bd:ff:89: 48:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F7:B7:61:2A:98:01:7D:2C:4D:63:F9:64:88:14:C6:B7:25:7A:C7 X509v3 Authority Key Identifier: keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/G_e3YSqYAX0sTWP5ZIgUxrclesc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.7.241.0-185.7.242.255 IPv6: 2a14:db80:6::/48 Signature Algorithm: sha256WithRSAEncryption 06:eb:1a:70:59:99:72:39:8e:24:99:a1:b2:91:b7:cf:c6:0e: cc:3c:ff:ad:ac:cf:24:14:16:8b:4a:13:d2:ce:1e:82:10:5f: b9:20:83:71:53:a1:22:6d:a3:fe:72:e8:b5:f7:0b:53:a5:7b: 26:19:5d:61:cf:fe:56:9f:92:70:2d:84:95:9f:a2:53:00:58: 28:93:76:51:bf:e5:08:84:30:e7:30:06:c3:88:a1:7c:b9:0b: 11:2d:ea:8e:a3:59:13:5d:d1:d7:92:1d:cb:39:85:c0:0b:99: ed:f3:cf:b2:5e:25:a4:d9:c4:48:af:22:bc:ba:60:99:96:07: 89:ed:39:18:48:05:74:3d:c7:62:34:e6:0a:72:fc:b4:c5:84: 48:ce:71:b3:af:fd:37:7b:c0:6b:d8:31:0c:24:c8:2b:33:4d: d0:b3:d8:ca:98:b3:a8:e5:96:f3:57:a8:f3:16:02:ce:38:7a: 57:79:e9:d0:55:3c:45:96:d0:20:fb:47:4f:1d:cf:78:2e:96: 99:dd:85:36:41:a5:56:8e:b0:a3:b0:94:e4:bc:74:9a:a3:e2: 51:40:7c:91:8b:0e:37:f6:66:b2:60:37:70:87:b1:8e:56:cf: b0:18:9e:2f:93:79:d0:51:7a:e8:93:14:e3:c3:86:a6:0c:64: 25:46:2d:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpZGsPIhgLWAyRyXRgcnPKLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx ZDMzMjEwHhcNMjUxMTA2MTIxODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmY3Yjc2MTJhOTgwMTdkMmM0ZDYzZjk2NDg4MTRjNmI3MjU3YWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9Aznnk+zDa84JO5ByrTPcI521gC P4myoIPaf0LZZHJI+Yv71ZYCFdcvK4itLb1EzzrsX6xHINwuwRu0M8W3r41oDVnf mnC1F3K8Yy3XoFfLVr2XarX6DMYrqtiC63bdEwfAX7GxbVyP6tEkoJdzlCEl89ob Z/alCkfTXcGe7JAAmYAchni1xFd9MC+kY846R4UrjjyNlFTN8xb3GHIkOXgh8QQ9 smi1Xt+TL3uoc2L+x0snt0XQXaeMuhgr72sv7SC7xObrASNwJ/fkoifwJRJFmy5i b/f9ciMIAy2N/XYskc/FbnryL1HBl1Bg1nRnimHCThFCxM3bl8S9/4lITwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBv3t2EqmAF9LE1j+WSIFMa3JXrHMB8GA1UdIwQY MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt NDNkZjQ3ZDVhMWU3LzEvR19lM1lTcVlBWDBzVFdQNVpJZ1V4cmNsZXNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3 LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAC5B/ED BAC5B/IwDwQCAAIwCQMHACoU24AABjANBgkqhkiG9w0BAQsFAAOCAQEABusacFmZ cjmOJJmhspG3z8YOzDz/razPJBQWi0oT0s4eghBfuSCDcVOhIm2j/nLotfcLU6V7 JhldYc/+Vp+ScC2ElZ+iUwBYKJN2Ub/lCIQw5zAGw4ihfLkLES3qjqNZE13R15Id yzmFwAuZ7fPPsl4lpNnESK8ivLpgmZYHie05GEgFdD3HYjTmCnL8tMWESM5xs6/9 N3vAa9gxDCTIKzNN0LPYypizqOWW81eo8xYCzjh6V3np0FU8RZbQIPtHTx3PeC6W md2FNkGlVo6wo7CU5Lx0mqPiUUB8kYsON/ZmsmA3cIexjlbPsBieL5N50FF66JMU 48OGpgxkJUYtPA== -----END CERTIFICATE-----Generated at Fri Dec 5 09:26:47 2025 by rpki-client