This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/SDt8i6ZmouVZn1Q1Ls-7SvRP8gc.roa File: SDt8i6ZmouVZn1Q1Ls-7SvRP8gc.roa (raw, json) Hash identifier: pSWkwwdJuITOogB9fYE7WeRIrWunvXKbsDF9fkGUQdM= Subject key identifier: 48:3B:7C:8B:A6:66:A2:E5:59:9F:54:35:2E:CF:BB:4A:F4:4F:F2:07 Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Certificate serial: 019AC70DE6EE53841D8005DD5FCF6302BBD2 Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/SDt8i6ZmouVZn1Q1Ls-7SvRP8gc.roa Signing time: Thu 27 Nov 2025 20:42:48 +0000 ROA not before: Thu 27 Nov 2025 20:42:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51202 IP address blocks: 31.25.11.0/24 maxlen: 24 62.169.152.0/24 maxlen: 24 89.36.32.0/24 maxlen: 24 89.36.35.0/24 maxlen: 24 109.175.211.0/24 maxlen: 24 185.121.132.0/24 maxlen: 24 185.121.133.0/24 maxlen: 24 185.121.135.0/24 maxlen: 24 185.144.70.0/24 maxlen: 24 185.144.71.0/24 maxlen: 24 212.232.18.0/24 maxlen: 24 212.232.19.0/24 maxlen: 24 2a0c:2500::/29 maxlen: 48 2a0c:2501::/32 maxlen: 48 2a0c:2502::/32 maxlen: 48 2a0c:2503::/32 maxlen: 48 2a14:6781::/32 maxlen: 48 2a14:6781:305::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 05:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c7:0d:e6:ee:53:84:1d:80:05:dd:5f:cf:63:02:bb:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Validity Not Before: Nov 27 20:42:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=483b7c8ba666a2e5599f54352ecfbb4af44ff207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4f:4e:95:dc:cc:d7:f6:a8:df:4c:72:ef:bc: 4d:d2:24:73:35:ca:da:d5:e5:ce:f8:f9:bd:e0:bf: 14:7c:86:60:a7:2e:af:10:51:65:ac:2f:16:b3:72: 29:a0:63:4e:ba:9e:72:74:01:46:92:04:50:c8:82: a1:13:ef:9e:b5:87:04:cf:06:8d:a9:ed:98:11:9f: 2b:89:22:e8:0e:87:fb:c5:b6:fb:78:da:3c:a5:f2: 1d:b0:19:c7:31:55:44:70:3a:d5:77:2e:7c:05:40: a6:2c:81:fe:9b:ab:4b:0c:98:b8:0c:97:8e:bb:ab: f0:47:71:e4:30:b8:87:05:68:8f:41:01:68:f5:29: b2:98:29:92:5b:56:0d:be:0a:e5:a3:34:c5:d3:d7: 08:a3:ea:ae:e2:93:3b:ff:9a:1d:02:19:ec:57:ac: f6:6c:f1:9d:74:44:64:70:db:f9:e7:c9:0b:18:3f: 99:48:ba:b1:13:d7:36:3d:20:d4:46:4b:8b:ee:56: 56:99:05:82:a8:41:70:9f:b2:a4:12:f3:f4:dc:45: ff:05:a8:8b:b4:25:f9:46:17:57:36:a2:ff:80:1d: dd:bf:cf:7c:d3:36:d6:11:ab:ef:65:e6:68:34:cd: 3f:1e:65:54:42:5f:e8:f1:03:45:1c:46:8a:2a:13: 3b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:3B:7C:8B:A6:66:A2:E5:59:9F:54:35:2E:CF:BB:4A:F4:4F:F2:07 X509v3 Authority Key Identifier: keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/SDt8i6ZmouVZn1Q1Ls-7SvRP8gc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.25.11.0/24 62.169.152.0/24 89.36.32.0/24 89.36.35.0/24 109.175.211.0/24 185.121.132.0/23 185.121.135.0/24 185.144.70.0/23 212.232.18.0/23 IPv6: 2a0c:2500::/29 2a14:6781::/32 Signature Algorithm: sha256WithRSAEncryption 78:fe:81:31:2d:08:61:f5:4b:4f:6a:be:da:ee:ff:7f:4a:db: 63:4b:75:27:85:0c:40:70:db:0f:c2:f9:d5:45:d6:ac:26:ba: 7d:9d:c3:a2:11:09:64:3b:24:74:17:14:c9:97:fa:e2:3d:d0: dc:7b:b8:55:e0:cd:76:20:0f:d0:b3:17:1d:af:dc:8a:39:00: e1:43:0c:42:7a:0e:c7:90:6d:2d:a3:46:2c:87:67:e5:60:cc: a4:c6:29:01:eb:fa:f8:b2:71:19:32:e0:b5:70:41:90:aa:71: 9d:d6:1d:f5:4f:c9:ac:6c:55:22:09:4a:3d:c2:b0:40:86:6e: bd:52:d2:4d:cb:a2:4f:c9:9d:e1:0e:e3:dc:51:53:f8:16:bf: 0d:11:4f:3c:2d:41:fb:58:aa:3e:3f:27:19:b1:cd:fa:44:48: d6:52:29:f6:bc:e1:d5:00:42:f1:59:6f:a9:13:63:8b:f4:1e: 34:90:d4:b9:b1:fe:3c:df:24:aa:81:8d:46:a7:6e:be:1c:26: bf:4c:9d:90:10:df:97:e3:93:31:02:84:5d:db:37:3c:94:e9: 23:2e:f8:14:8e:1b:3c:7f:7e:08:16:96:ff:69:5d:ad:29:e2: 95:95:e9:d0:24:c3:13:aa:f0:a5:36:03:e0:35:ca:4c:fa:e0: 28:32:4d:41 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZrHDebuU4QdgAXdX89jArvSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx YmM3N2YwHhcNMjUxMTI3MjA0MjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODNiN2M4YmE2NjZhMmU1NTk5ZjU0MzUyZWNmYmI0YWY0NGZmMjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE9OldzM1/ao30xy77xN0iRzNcra 1eXO+Pm94L8UfIZgpy6vEFFlrC8Ws3IpoGNOup5ydAFGkgRQyIKhE++etYcEzwaN qe2YEZ8riSLoDof7xbb7eNo8pfIdsBnHMVVEcDrVdy58BUCmLIH+m6tLDJi4DJeO u6vwR3HkMLiHBWiPQQFo9SmymCmSW1YNvgrlozTF09cIo+qu4pM7/5odAhnsV6z2 bPGddERkcNv558kLGD+ZSLqxE9c2PSDURkuL7lZWmQWCqEFwn7KkEvP03EX/BaiL tCX5RhdXNqL/gB3dv8980zbWEavvZeZoNM0/HmVUQl/o8QNFHEaKKhM7MQIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFEg7fIumZqLlWZ9UNS7Pu0r0T/IHMB8GA1UdIwQY MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt YWE2ZWQ0ZGFmYjNiLzEvU0R0OGk2Wm1vdVZabjFRMUxzLTdTdlJQOGdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDA8BAIAATA2AwQAHxkLAwQA PqmYAwQAWSQgAwQAWSQjAwQAba/TAwQBuXmEAwQAuXmHAwQBuZBGAwQB1OgSMBQE AgACMA4DBQMqDCUAAwUAKhRngTANBgkqhkiG9w0BAQsFAAOCAQEAeP6BMS0IYfVL T2q+2u7/f0rbY0t1J4UMQHDbD8L51UXWrCa6fZ3DohEJZDskdBcUyZf64j3Q3Hu4 VeDNdiAP0LMXHa/cijkA4UMMQnoOx5BtLaNGLIdn5WDMpMYpAev6+LJxGTLgtXBB kKpxndYd9U/JrGxVIglKPcKwQIZuvVLSTcuiT8md4Q7j3FFT+Ba/DRFPPC1B+1iq Pj8nGbHN+kRI1lIp9rzh1QBC8VlvqRNji/QeNJDUubH+PN8kqoGNRqduvhwmv0yd kBDfl+OTMQKEXds3PJTpIy74FI4bPH9+CBaW/2ldrSnilZXp0CTDE6rwpTYD4DXK TPrgKDJNQQ== -----END CERTIFICATE-----Generated at Sun Dec 7 12:19:40 2025 by rpki-client