This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/ERcLWlmYGZDQOdFnKv-pWqCPPeY.roa File: ERcLWlmYGZDQOdFnKv-pWqCPPeY.roa (raw, json) Hash identifier: 6WeJexgQz8aAWCC5JB6mfNqXh7Udjtm4qE1eCjI79Dg= Subject key identifier: 11:17:0B:5A:59:98:19:90:D0:39:D1:67:2A:FF:A9:5A:A0:8F:3D:E6 Certificate issuer: /CN=a7e05eeda36b1d86c5a3a3f0c0515bec4822e5f4 Certificate serial: 019B2C2DFBFE02ACE6C5E68BAA1D1735643C Authority key identifier: A7:E0:5E:ED:A3:6B:1D:86:C5:A3:A3:F0:C0:51:5B:EC:48:22:E5:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/ERcLWlmYGZDQOdFnKv-pWqCPPeY.roa Signing time: Wed 17 Dec 2025 11:59:29 +0000 ROA not before: Wed 17 Dec 2025 11:59:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42667 IP address blocks: 89.186.2.0/24 maxlen: 24 89.186.3.0/24 maxlen: 24 89.186.14.0/24 maxlen: 24 89.186.18.0/24 maxlen: 24 89.186.19.0/24 maxlen: 24 89.186.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.mft rsync://rpki.ripe.net/repository/DEFAULT/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2d:fb:fe:02:ac:e6:c5:e6:8b:aa:1d:17:35:64:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7e05eeda36b1d86c5a3a3f0c0515bec4822e5f4 Validity Not Before: Dec 17 11:59:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=11170b5a59981990d039d1672affa95aa08f3de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ff:a2:58:f3:9d:f6:c8:25:c3:80:da:eb:0c: 4f:e8:bc:19:e6:8f:b3:24:25:77:26:b1:ea:12:0c: ac:37:48:26:4a:0f:30:eb:56:3f:91:21:f8:d4:35: 40:8a:68:f3:dc:d1:29:08:1e:8b:d3:0a:bc:29:21: 29:4f:0d:3d:aa:45:2d:80:9b:5b:0a:64:19:4e:04: 03:ac:cc:cc:14:f1:7b:38:5f:52:f8:07:0c:83:b8: 1c:32:17:8a:0a:6e:45:c3:74:46:4a:80:2e:19:5e: db:38:83:54:f9:04:c3:96:f5:14:44:88:9d:7a:01: 5d:a1:18:17:f8:54:e5:d1:16:63:8e:42:7c:9a:63: ec:0b:80:86:20:94:e3:91:7c:42:e8:f8:0d:f3:48: 62:e8:f0:ee:ce:f0:d0:d9:df:51:bf:11:0b:42:f9: 31:af:2f:50:7e:12:d3:5d:0d:1c:92:13:ec:7b:84: 02:14:27:02:15:ae:60:1d:97:2a:91:d4:08:bc:04: 36:cf:99:f4:64:f1:a6:13:27:e8:8c:71:86:1f:32: 4f:71:82:fa:ac:0c:c2:d8:bc:94:ed:03:94:ed:7e: 9a:56:fc:0e:00:9f:b9:05:0d:cb:5f:eb:d7:a7:65: 70:50:04:eb:7f:68:c2:ea:fe:b3:0a:f3:88:90:ce: b5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:17:0B:5A:59:98:19:90:D0:39:D1:67:2A:FF:A9:5A:A0:8F:3D:E6 X509v3 Authority Key Identifier: keyid:A7:E0:5E:ED:A3:6B:1D:86:C5:A3:A3:F0:C0:51:5B:EC:48:22:E5:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/ERcLWlmYGZDQOdFnKv-pWqCPPeY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.186.2.0/23 89.186.14.0/24 89.186.18.0-89.186.20.255 Signature Algorithm: sha256WithRSAEncryption c5:3f:5e:13:f9:1c:08:6e:43:b5:4e:21:f5:ec:59:c1:ac:7f: a9:1e:d9:1d:c8:6c:7e:26:cf:32:2f:fc:7c:7e:e4:ae:a3:35: 7f:80:43:aa:b2:e1:1a:c0:2e:df:3d:ba:cc:5d:79:72:59:d3: 29:0b:fc:bb:25:fb:87:1b:5c:53:1c:35:42:7d:7a:22:8e:e1: 11:e7:3a:35:36:cf:62:7f:6b:97:7f:4d:1e:1b:f6:48:04:a4: 53:7f:50:94:06:c9:58:1d:8b:60:d5:27:a0:bf:cc:eb:ab:72: 55:09:f5:87:c1:12:fb:37:bf:81:a7:99:cd:bd:8d:2d:5e:14: bf:4e:59:da:b3:e0:7e:d3:30:b9:35:e3:f0:12:80:2a:e2:3a: b2:f6:c5:bc:7c:73:51:75:93:aa:fb:cb:ef:5c:2f:fc:e4:38: f3:ee:c3:8d:b2:d6:74:fe:a0:ba:40:c5:0c:c4:53:04:2a:80: d8:64:32:b2:c5:52:ce:e8:82:78:45:83:af:23:56:72:bc:74: f0:0f:b5:fc:b3:ab:b3:63:af:e5:db:c3:02:fe:2f:c8:30:12: 6f:88:12:44:2d:b4:c1:bc:ee:14:04:f1:8b:38:25:61:ef:b6: e3:b5:cb:c8:cc:3f:aa:b5:61:ca:81:ec:4d:f2:ea:ef:0a:ce: 99:fb:13:a9 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZssLfv+AqzmxeaLqh0XNWQ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZTA1ZWVkYTM2YjFkODZjNWEzYTNmMGMwNTE1YmVjNDgy MmU1ZjQwHhcNMjUxMjE3MTE1OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTE3MGI1YTU5OTgxOTkwZDAzOWQxNjcyYWZmYTk1YWEwOGYzZGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf+iWPOd9sglw4Da6wxP6LwZ5o+z JCV3JrHqEgysN0gmSg8w61Y/kSH41DVAimjz3NEpCB6L0wq8KSEpTw09qkUtgJtb CmQZTgQDrMzMFPF7OF9S+AcMg7gcMheKCm5Fw3RGSoAuGV7bOINU+QTDlvUURIid egFdoRgX+FTl0RZjjkJ8mmPsC4CGIJTjkXxC6PgN80hi6PDuzvDQ2d9RvxELQvkx ry9QfhLTXQ0ckhPse4QCFCcCFa5gHZcqkdQIvAQ2z5n0ZPGmEyfojHGGHzJPcYL6 rAzC2LyU7QOU7X6aVvwOAJ+5BQ3LX+vXp2VwUATrf2jC6v6zCvOIkM61XwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFBEXC1pZmBmQ0DnRZyr/qVqgjz3mMB8GA1UdIwQY MBaAFKfgXu2jax2GxaOj8MBRW+xIIuX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC1CZTdhTnJIWWJGbzZQd3dGRmI3RWdpNWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9mYTYwODAtM2NkZC00YjM0LThmMTMt MGRiMjk2ZDU0NTc4LzEvRVJjTFdsbVlHWkRRT2RGbkt2LXBXcUNQUGVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9mYTYwODAtM2NkZC00YjM0LThmMTMtMGRiMjk2ZDU0NTc4 LzEvcC1CZTdhTnJIWWJGbzZQd3dGRmI3RWdpNWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBWboCAwQA WboOMAwDBAFZuhIDBABZuhQwDQYJKoZIhvcNAQELBQADggEBAMU/XhP5HAhuQ7VO IfXsWcGsf6ke2R3IbH4mzzIv/Hx+5K6jNX+AQ6qy4RrALt89usxdeXJZ0ykL/Lsl +4cbXFMcNUJ9eiKO4RHnOjU2z2J/a5d/TR4b9kgEpFN/UJQGyVgdi2DVJ6C/zOur clUJ9YfBEvs3v4Gnmc29jS1eFL9OWdqz4H7TMLk14/ASgCriOrL2xbx8c1F1k6r7 y+9cL/zkOPPuw42y1nT+oLpAxQzEUwQqgNhkMrLFUs7ognhFg68jVnK8dPAPtfyz q7Njr+XbwwL+L8gwEm+IEkQttMG87hQE8Ys4JWHvtuO1y8jMP6q1YcqB7E3y6u8K zpn7E6k= -----END CERTIFICATE-----Generated at Fri Dec 26 17:19:37 2025 by rpki-client