This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/2xaWrb1-4OT0U9bLDZSwwSK2tqA.roa File: 2xaWrb1-4OT0U9bLDZSwwSK2tqA.roa (raw, json) Hash identifier: 0LB/aOIzX/frrKrGjbW090tz75gQlCrQGkZL/XUgeGo= Subject key identifier: DB:16:96:AD:BD:7E:E0:E4:F4:53:D6:CB:0D:94:B0:C1:22:B6:B6:A0 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019A7C7DE897C54D56AB2085AF72E6E4A5B1 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/2xaWrb1-4OT0U9bLDZSwwSK2tqA.roa Signing time: Thu 13 Nov 2025 09:13:37 +0000 ROA not before: Thu 13 Nov 2025 09:13:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9009 IP address blocks: 62.192.113.0/24 maxlen: 24 92.71.2.0/23 maxlen: 24 92.71.4.0/23 maxlen: 24 92.71.26.0/23 maxlen: 24 92.71.28.0/22 maxlen: 24 92.71.36.0/23 maxlen: 24 92.71.48.0/21 maxlen: 24 92.71.56.0/22 maxlen: 24 92.71.62.0/23 maxlen: 24 135.196.4.0/24 maxlen: 24 135.196.24.0/23 maxlen: 24 135.196.28.0/23 maxlen: 24 135.196.88.0/23 maxlen: 24 135.196.102.0/23 maxlen: 24 135.196.108.0/22 maxlen: 24 135.196.132.0/23 maxlen: 24 135.196.144.0/22 maxlen: 24 135.196.156.0/23 maxlen: 24 135.196.164.0/23 maxlen: 24 135.196.172.0/23 maxlen: 24 135.196.176.0/23 maxlen: 24 135.196.202.0/24 maxlen: 24 135.196.204.0/24 maxlen: 24 195.86.223.0/24 maxlen: 24 213.201.140.0/24 maxlen: 24 213.201.148.0/24 maxlen: 24 213.201.154.0/23 maxlen: 24 213.201.158.0/24 maxlen: 24 213.201.163.0/24 maxlen: 24 213.201.166.0/23 maxlen: 24 213.201.171.0/24 maxlen: 24 213.201.174.0/23 maxlen: 24 213.201.179.0/24 maxlen: 24 213.201.182.0/23 maxlen: 24 213.201.186.0/23 maxlen: 24 213.201.190.0/23 maxlen: 24 213.201.194.0/23 maxlen: 24 213.201.196.0/23 maxlen: 24 213.201.198.0/24 maxlen: 24 213.201.200.0/24 maxlen: 24 213.201.202.0/24 maxlen: 24 213.201.204.0/24 maxlen: 24 213.201.208.0/23 maxlen: 24 213.201.214.0/23 maxlen: 24 213.201.218.0/23 maxlen: 24 213.201.222.0/23 maxlen: 24 213.201.226.0/23 maxlen: 24 213.201.228.0/23 maxlen: 24 213.201.234.0/23 maxlen: 24 213.201.238.0/23 maxlen: 24 217.8.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 04:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7c:7d:e8:97:c5:4d:56:ab:20:85:af:72:e6:e4:a5:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Nov 13 09:13:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=db1696adbd7ee0e4f453d6cb0d94b0c122b6b6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:30:81:24:37:47:f3:11:9a:b3:33:98:24:61: 42:58:37:33:6b:00:95:c6:7c:1f:d0:ee:12:60:d5: 0b:7d:1c:c9:da:cf:f2:4f:b3:32:fe:f2:9b:9f:22: 06:05:97:4b:1c:89:e4:68:0e:1c:2e:1f:4b:bd:98: d0:0d:e1:d2:a1:f0:1a:d0:be:b0:c2:99:20:e5:37: 76:08:48:56:a3:8d:de:55:d4:2d:e9:df:11:17:85: 8d:e1:41:65:3a:f3:d0:78:00:62:ef:52:87:9e:39: 9d:cf:91:46:56:49:48:c2:14:93:6e:a4:f5:12:dd: 22:81:8f:af:c2:99:61:2f:58:45:ab:b1:38:55:58: 6c:97:12:d7:84:ab:a6:72:d1:d8:82:b7:62:c0:3d: 84:54:38:cf:a4:7a:44:25:08:5e:88:f9:e8:76:e7: 39:18:7b:9a:02:5f:e9:95:47:33:4d:27:cc:f3:bf: 55:f2:e9:c3:ab:8f:f1:a4:77:bb:5c:16:a3:30:15: 97:d7:7d:58:a9:82:23:58:7e:85:3c:a8:5e:fb:70: 15:51:98:81:0f:9d:47:48:0f:d6:4a:84:eb:2e:18: 29:64:b8:d6:74:f5:cf:f0:11:6b:20:d2:5e:a6:ab: 25:7c:70:60:0d:d2:9c:1d:2b:a7:02:ce:ba:ab:88: 44:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:16:96:AD:BD:7E:E0:E4:F4:53:D6:CB:0D:94:B0:C1:22:B6:B6:A0 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/2xaWrb1-4OT0U9bLDZSwwSK2tqA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.192.113.0/24 92.71.2.0-92.71.5.255 92.71.26.0-92.71.31.255 92.71.36.0/23 92.71.48.0-92.71.59.255 92.71.62.0/23 135.196.4.0/24 135.196.24.0/23 135.196.28.0/23 135.196.88.0/23 135.196.102.0/23 135.196.108.0/22 135.196.132.0/23 135.196.144.0/22 135.196.156.0/23 135.196.164.0/23 135.196.172.0/23 135.196.176.0/23 135.196.202.0/24 135.196.204.0/24 195.86.223.0/24 213.201.140.0/24 213.201.148.0/24 213.201.154.0/23 213.201.158.0/24 213.201.163.0/24 213.201.166.0/23 213.201.171.0/24 213.201.174.0/23 213.201.179.0/24 213.201.182.0/23 213.201.186.0/23 213.201.190.0/23 213.201.194.0-213.201.198.255 213.201.200.0/24 213.201.202.0/24 213.201.204.0/24 213.201.208.0/23 213.201.214.0/23 213.201.218.0/23 213.201.222.0/23 213.201.226.0-213.201.229.255 213.201.234.0/23 213.201.238.0/23 217.8.218.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:2d:d6:74:38:7e:fa:0f:8d:60:0e:fa:2b:c7:d1:e9:8b:60: 26:6e:c8:55:51:ca:bc:b3:7e:48:3a:21:ff:4f:fc:0c:8c:cd: 2a:dd:39:5a:04:f5:11:ae:92:59:39:ee:5d:f1:0f:ac:eb:18: 5d:77:de:46:a2:f8:a6:51:b3:37:7e:66:f9:47:db:c6:ab:3f: c8:db:fe:30:5d:67:07:c6:bd:fd:04:2e:4c:4a:4a:6c:6b:8e: be:0d:f2:d8:ec:1f:d5:c5:d9:5b:fb:d4:a8:98:2e:90:12:57: 5f:03:02:8e:a6:8c:ec:69:1c:70:b7:a0:85:45:c5:da:ba:64: 10:5f:fe:f0:da:fa:52:ab:23:f3:8f:d5:68:40:6e:71:24:56: 1c:73:93:7d:3e:34:bb:2b:2d:18:a9:02:9f:41:68:92:4e:9f: 2f:eb:05:46:06:3f:8e:b5:af:d3:3b:d9:8e:ab:9a:26:e6:96: 28:a5:ea:63:91:57:3c:aa:a7:57:fc:29:b3:12:54:ce:c6:c1: 19:2b:0c:07:17:64:9a:21:e8:98:5e:23:eb:cd:23:49:3f:a0: 88:ec:08:d4:b7:f4:3e:12:82:71:39:12:7a:66:1a:fb:fe:0b: fe:51:58:db:e8:35:c3:cf:33:05:18:32:fd:0c:66:d3:9c:8d: bb:6b:ab:0c -----BEGIN CERTIFICATE----- MIIGNzCCBR+gAwIBAgISAZp8feiXxU1WqyCFr3Lm5KWxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjUxMTEzMDkxMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjE2OTZhZGJkN2VlMGU0ZjQ1M2Q2Y2IwZDk0YjBjMTIyYjZiNmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jCBJDdH8xGaszOYJGFCWDczawCV xnwf0O4SYNULfRzJ2s/yT7My/vKbnyIGBZdLHInkaA4cLh9LvZjQDeHSofAa0L6w wpkg5Td2CEhWo43eVdQt6d8RF4WN4UFlOvPQeABi71KHnjmdz5FGVklIwhSTbqT1 Et0igY+vwplhL1hFq7E4VVhslxLXhKumctHYgrdiwD2EVDjPpHpEJQheiPnoduc5 GHuaAl/plUczTSfM879V8unDq4/xpHe7XBajMBWX131YqYIjWH6FPKhe+3AVUZiB D51HSA/WSoTrLhgpZLjWdPXP8BFrINJepqslfHBgDdKcHSunAs66q4hExQIDAQAB o4IDQzCCAz8wHQYDVR0OBBYEFNsWlq29fuDk9FPWyw2UsMEitragMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvMnhhV3JiMS00T1QwVTliTERaU3d3U0sydHFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBVwYIKwYBBQUHAQcBAf8EggFGMIIBQjCCAT4EAgABMIIB NgMEAD7AcTAMAwQBXEcCAwQBXEcEMAwDBAFcRxoDBAVcRwADBAFcRyQwDAMEBFxH MAMEAlxHOAMEAVxHPgMEAIfEBAMEAYfEGAMEAYfEHAMEAYfEWAMEAYfEZgMEAofE bAMEAYfEhAMEAofEkAMEAYfEnAMEAYfEpAMEAYfErAMEAYfEsAMEAIfEygMEAIfE zAMEAMNW3wMEANXJjAMEANXJlAMEAdXJmgMEANXJngMEANXJowMEAdXJpgMEANXJ qwMEAdXJrgMEANXJswMEAdXJtgMEAdXJugMEAdXJvjAMAwQB1cnCAwQA1cnGAwQA 1cnIAwQA1cnKAwQA1cnMAwQB1cnQAwQB1cnWAwQB1cnaAwQB1cneMAwDBAHVyeID BAHVyeQDBAHVyeoDBAHVye4DBADZCNowDQYJKoZIhvcNAQELBQADggEBAIot1nQ4 fvoPjWAO+ivH0emLYCZuyFVRyryzfkg6If9P/AyMzSrdOVoE9RGuklk57l3xD6zr GF133kai+KZRszd+ZvlH28arP8jb/jBdZwfGvf0ELkxKSmxrjr4N8tjsH9XF2Vv7 1KiYLpASV18DAo6mjOxpHHC3oIVFxdq6ZBBf/vDa+lKrI/OP1WhAbnEkVhxzk30+ NLsrLRipAp9BaJJOny/rBUYGP461r9M72Y6rmibmliil6mORVzyqp1f8KbMSVM7G wRkrDAcXZJoh6JheI+vNI0k/oIjsCNS39D4SgnE5EnpmGvv+C/5RWNvoNcPPMwUY Mv0MZtOcjbtrqww= -----END CERTIFICATE-----Generated at Wed Dec 3 11:46:05 2025 by rpki-client