This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/25mxXJh2G2nCKlFkslbkjTaimw0.roa File: 25mxXJh2G2nCKlFkslbkjTaimw0.roa (raw, json) Hash identifier: gLUrLyzzoWyt075KRiHPrRM9zqSzPbD5AydPzwej0ts= Subject key identifier: DB:99:B1:5C:98:76:1B:69:C2:2A:51:64:B2:56:E4:8D:36:A2:9B:0D Certificate issuer: /CN=03196c89e554dbe4774522759906e2581a174694 Certificate serial: 019B79EBAE05D293FB02D9D5DC2B88543B52 Authority key identifier: 03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/25mxXJh2G2nCKlFkslbkjTaimw0.roa Signing time: Thu 01 Jan 2026 14:17:27 +0000 ROA not before: Thu 01 Jan 2026 14:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215092 IP address blocks: 146.66.160.0/19 maxlen: 19 146.66.192.0/20 maxlen: 20 178.252.64.0/18 maxlen: 18 2a0b:c0c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:ae:05:d2:93:fb:02:d9:d5:dc:2b:88:54:3b:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03196c89e554dbe4774522759906e2581a174694 Validity Not Before: Jan 1 14:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db99b15c98761b69c22a5164b256e48d36a29b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3e:7d:ca:33:1e:ef:d9:8f:12:fd:96:8c:9d: d4:f6:da:77:f9:5d:86:be:b3:97:16:05:ea:df:9a: 9c:2b:6d:3e:32:27:f2:d3:6d:da:dc:30:56:ad:67: 27:f0:5f:2f:e6:51:9b:d4:d7:1c:d0:c1:29:f3:98: 18:b9:e3:fd:40:4d:6f:d6:2a:98:ff:47:fe:c3:c3: 33:2f:6c:c2:a9:48:fe:71:4a:15:18:55:81:a7:b2: a6:ec:d0:86:08:18:db:bd:89:67:86:a0:0c:f0:d2: 3c:61:fb:35:fe:d3:05:d7:5e:f2:37:05:bc:03:76: c9:95:10:5d:bf:e2:75:37:12:d0:03:87:91:69:4c: c6:01:35:3a:00:01:92:cc:a0:c4:b8:d6:86:c8:f1: 08:09:78:37:98:cf:b3:92:b1:57:17:0b:34:2b:35: 36:39:0d:6c:bf:41:54:92:2e:3c:b0:18:bb:60:18: dd:bf:39:d2:9e:05:50:e6:69:38:8e:09:a7:ca:db: 3b:28:5c:85:e3:95:48:a1:85:3d:ea:74:b0:bf:e9: 74:cf:51:cc:61:0d:e1:cb:54:98:30:38:66:56:af: f6:e6:c7:8e:73:07:65:d6:0a:12:f5:18:d8:5a:af: 9d:1f:75:53:8e:3c:db:90:d9:f8:29:54:26:2c:a7: 42:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:99:B1:5C:98:76:1B:69:C2:2A:51:64:B2:56:E4:8D:36:A2:9B:0D X509v3 Authority Key Identifier: keyid:03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/25mxXJh2G2nCKlFkslbkjTaimw0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.66.160.0-146.66.207.255 178.252.64.0/18 IPv6: 2a0b:c0c0::/29 Signature Algorithm: sha256WithRSAEncryption 40:6c:c3:c4:42:6f:2d:5c:ee:92:b7:98:7b:4d:be:89:c6:72: 2a:58:b2:e1:20:32:6f:0a:53:0a:62:8c:22:9d:ab:ec:97:a2: 1f:4f:91:70:d7:51:9b:10:4a:fc:78:eb:89:9f:bc:89:b2:c5: 67:73:ec:b9:3a:bf:2a:1e:fc:c5:93:0f:58:61:9c:e6:39:24: bc:d4:28:b8:79:3f:fa:ba:b4:26:2d:c8:84:5b:98:dc:1e:be: 03:49:1f:bb:14:df:30:89:aa:80:8f:6a:0b:60:34:8c:1c:75: b1:b5:cd:60:23:a8:65:2f:ce:dc:cc:25:55:93:9f:80:f5:ce: 0c:e4:c5:43:f9:2c:b5:b5:28:ee:11:c4:f9:7a:78:3b:11:8d: 3f:c3:63:99:44:5d:78:17:22:2d:c0:76:72:a8:d0:a1:d0:ed: f6:b2:94:f7:51:6c:20:2f:ea:31:a5:ba:fc:b0:e1:9b:84:d0: 2f:cb:72:31:6f:f2:1b:26:ba:ad:3b:74:df:59:27:87:b0:07: 5f:7f:55:7d:90:a0:6f:53:db:0b:ad:c2:61:a4:c4:57:16:65: 23:32:04:c1:b1:dc:7e:82:bd:34:77:d2:36:67:b9:4a:aa:d2: af:81:12:f5:42:44:df:e8:44:31:a6:d5:81:74:ba:8c:06:47: ac:41:5f:a5 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt5664F0pP7AtnV3CuIVDtSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMTk2Yzg5ZTU1NGRiZTQ3NzQ1MjI3NTk5MDZlMjU4MWEx NzQ2OTQwHhcNMjYwMTAxMTQxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjk5YjE1Yzk4NzYxYjY5YzIyYTUxNjRiMjU2ZTQ4ZDM2YTI5YjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlz59yjMe79mPEv2WjJ3U9tp3+V2G vrOXFgXq35qcK20+Mify023a3DBWrWcn8F8v5lGb1Ncc0MEp85gYueP9QE1v1iqY /0f+w8MzL2zCqUj+cUoVGFWBp7Km7NCGCBjbvYlnhqAM8NI8Yfs1/tMF117yNwW8 A3bJlRBdv+J1NxLQA4eRaUzGATU6AAGSzKDEuNaGyPEICXg3mM+zkrFXFws0KzU2 OQ1sv0FUki48sBi7YBjdvznSngVQ5mk4jgmnyts7KFyF45VIoYU96nSwv+l0z1HM YQ3hy1SYMDhmVq/25seOcwdl1goS9RjYWq+dH3VTjjzbkNn4KVQmLKdCZwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFNuZsVyYdhtpwipRZLJW5I02opsNMB8GA1UdIwQY MBaAFAMZbInlVNvkd0UidZkG4lgaF0aUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXhsc2llVlUyLVIzUlNKMW1RYmlXQm9YUnBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85ZWQ3NmItMzVhNi00YTlkLTlmYTYt ODUxN2E4ZjM1NWFlLzEvMjVteFhKaDJHMm5DS2xGa3NsYmtqVGFpbXcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi85ZWQ3NmItMzVhNi00YTlkLTlmYTYtODUxN2E4ZjM1NWFl LzEvQXhsc2llVlUyLVIzUlNKMW1RYmlXQm9YUnBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUMAwDBAWSQqAD BASSQsADBAay/EAwDQQCAAIwBwMFAyoLwMAwDQYJKoZIhvcNAQELBQADggEBAEBs w8RCby1c7pK3mHtNvonGcipYsuEgMm8KUwpijCKdq+yXoh9PkXDXUZsQSvx464mf vImyxWdz7Lk6vyoe/MWTD1hhnOY5JLzUKLh5P/q6tCYtyIRbmNwevgNJH7sU3zCJ qoCPagtgNIwcdbG1zWAjqGUvztzMJVWTn4D1zgzkxUP5LLW1KO4RxPl6eDsRjT/D Y5lEXXgXIi3AdnKo0KHQ7faylPdRbCAv6jGluvyw4ZuE0C/LcjFv8hsmuq07dN9Z J4ewB19/VX2QoG9T2wutwmGkxFcWZSMyBMGx3H6CvTR30jZnuUqq0q+BEvVCRN/o RDGm1YF0uowGR6xBX6U= -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:58 2026 by rpki-client