This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2uRu7VoYr5y-2S-PYCcZNM_2PeQ.roa File: 2uRu7VoYr5y-2S-PYCcZNM_2PeQ.roa (raw, json) Hash identifier: ViioYENwkOSjuoaEDKVre3wbJe8WzLpAOyAV0Ho/8M0= Subject key identifier: DA:E4:6E:ED:5A:18:AF:9C:BE:D9:2F:8F:60:27:19:34:CF:F6:3D:E4 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B49A07086B8ECE283ED3398E4B729D2DB Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2uRu7VoYr5y-2S-PYCcZNM_2PeQ.roa Signing time: Tue 23 Dec 2025 05:13:29 +0000 ROA not before: Tue 23 Dec 2025 05:13:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205399 IP address blocks: 185.181.208.0/24 maxlen: 24 185.181.209.0/24 maxlen: 24 185.181.210.0/24 maxlen: 24 185.181.211.0/24 maxlen: 24 185.219.132.0/24 maxlen: 24 185.219.133.0/24 maxlen: 24 185.219.134.0/24 maxlen: 24 185.219.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:a0:70:86:b8:ec:e2:83:ed:33:98:e4:b7:29:d2:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Dec 23 05:13:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dae46eed5a18af9cbed92f8f60271934cff63de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7b:e7:53:70:e1:1b:22:36:ef:ff:70:a1:29: ed:02:d8:40:3a:30:ad:88:e9:82:8c:6b:23:ee:ac: 66:61:e9:09:26:16:1b:af:13:ed:42:7f:0f:5d:bf: cd:04:51:a4:18:e6:bc:05:3f:f8:4d:3a:68:30:e8: de:59:b3:c7:35:f2:7d:58:4d:1e:e6:1d:02:3c:98: 83:6f:57:7f:76:a0:f6:29:1a:92:f3:f2:43:ad:20: b8:04:bc:d4:eb:8b:16:e7:bc:7c:53:d0:91:a0:db: be:e8:e1:a6:64:b4:76:37:a8:a1:9d:aa:5a:68:7f: 8a:1f:d5:6e:6a:19:e5:df:3b:6a:dc:94:fd:b8:00: 58:13:c7:c9:f1:ab:55:7c:2a:9f:0f:ea:7c:a8:6f: 2e:1f:72:8e:d4:cd:26:e9:36:ed:ff:60:cc:2c:17: 74:1f:72:c8:62:40:07:27:7b:95:59:42:bc:10:01: a3:fd:c4:e8:06:14:62:1e:98:0d:e7:14:3d:72:87: 1c:87:4b:67:f9:b6:1a:a8:46:4e:19:23:f6:ea:d7: df:7f:2c:93:28:cd:53:44:e3:44:c3:47:57:7a:16: 4f:85:7f:fd:fb:2f:c4:d6:8a:66:dc:56:69:5f:44: 27:29:d5:b0:5c:eb:60:01:25:f2:cc:1c:69:0c:29: 56:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E4:6E:ED:5A:18:AF:9C:BE:D9:2F:8F:60:27:19:34:CF:F6:3D:E4 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2uRu7VoYr5y-2S-PYCcZNM_2PeQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.181.208.0/22 185.219.132.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:a7:6e:e3:86:47:80:0a:9e:d8:34:36:e5:f6:2c:28:1f:96: c0:c7:8b:02:96:02:01:00:0a:e4:2a:31:7c:ff:70:db:89:cc: 58:24:53:2b:f1:1a:b2:03:35:0e:77:c7:23:3d:32:82:80:bf: 1b:fb:27:ed:b6:12:32:64:b3:7f:e0:02:6a:2e:de:b2:df:71: f8:38:c9:26:81:1a:c3:64:47:b9:da:6c:f7:f9:f8:27:c1:ff: 7e:0c:c5:70:5e:56:d0:13:f3:78:f4:11:d3:9d:42:9e:a4:33: bd:e5:39:dd:bd:1d:92:ec:8b:06:53:4b:9e:51:f6:b7:70:46: 60:37:5b:52:aa:cc:b3:cf:79:48:55:60:9c:b8:ac:47:46:c8: df:d3:5d:e0:a1:af:b5:44:02:54:85:c8:35:1b:fb:15:43:98: 23:86:33:96:8e:f4:de:7d:23:cc:a9:bc:6f:4c:19:dd:96:57: 5e:2e:8c:30:20:f3:e3:6e:87:9c:83:67:4a:d1:21:e6:b3:9b: ca:c5:58:cd:f3:25:ca:5d:32:39:f4:e3:bd:57:dd:e2:e6:11: ce:56:0a:e2:c6:16:55:19:48:01:91:94:29:45:9f:c4:ed:e3: 26:dd:2e:16:a0:8e:ee:34:5b:40:98:a3:d3:9c:d1:bc:76:81: e3:40:75:c3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZtJoHCGuOzig+0zmOS3KdLbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjUxMjIzMDUxMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWU0NmVlZDVhMThhZjljYmVkOTJmOGY2MDI3MTkzNGNmZjYzZGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHvnU3DhGyI27/9woSntAthAOjCt iOmCjGsj7qxmYekJJhYbrxPtQn8PXb/NBFGkGOa8BT/4TTpoMOjeWbPHNfJ9WE0e 5h0CPJiDb1d/dqD2KRqS8/JDrSC4BLzU64sW57x8U9CRoNu+6OGmZLR2N6ihnapa aH+KH9Vuahnl3ztq3JT9uABYE8fJ8atVfCqfD+p8qG8uH3KO1M0m6Tbt/2DMLBd0 H3LIYkAHJ3uVWUK8EAGj/cToBhRiHpgN5xQ9cocch0tn+bYaqEZOGSP26tfffyyT KM1TRONEw0dXehZPhX/9+y/E1opm3FZpX0QnKdWwXOtgASXyzBxpDClWAwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNrkbu1aGK+cvtkvj2AnGTTP9j3kMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvMnVSdTdWb1lyNXktMlMtUFlDY1pOTV8yUGVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCubXQAwQC uduEMA0GCSqGSIb3DQEBCwUAA4IBAQALp27jhkeACp7YNDbl9iwoH5bAx4sClgIB AArkKjF8/3DbicxYJFMr8RqyAzUOd8cjPTKCgL8b+yftthIyZLN/4AJqLt6y33H4 OMkmgRrDZEe52mz3+fgnwf9+DMVwXlbQE/N49BHTnUKepDO95TndvR2S7IsGU0ue Ufa3cEZgN1tSqsyzz3lIVWCcuKxHRsjf013goa+1RAJUhcg1G/sVQ5gjhjOWjvTe fSPMqbxvTBndlldeLowwIPPjboecg2dK0SHms5vKxVjN8yXKXTI59OO9V93i5hHO VgrixhZVGUgBkZQpRZ/E7eMm3S4WoI7uNFtAmKPTnNG8doHjQHXD -----END CERTIFICATE-----Generated at Fri Dec 26 22:57:46 2025 by rpki-client