This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/rjGmFkwnUYXEX0cUD6PtZIhDgCQ.roa File: rjGmFkwnUYXEX0cUD6PtZIhDgCQ.roa (raw, json) Hash identifier: 8lyI42qGGJpOurvj2Ytg7oiHPag1u3DuPow/DXZUQqs= Subject key identifier: AE:31:A6:16:4C:27:51:85:C4:5F:47:14:0F:A3:ED:64:88:43:80:24 Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef Certificate serial: 019A67871645B79861B59B0346C47A7408F0 Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/rjGmFkwnUYXEX0cUD6PtZIhDgCQ.roa Signing time: Sun 09 Nov 2025 07:31:37 +0000 ROA not before: Sun 09 Nov 2025 07:31:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211181 IP address blocks: 185.113.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:67:87:16:45:b7:98:61:b5:9b:03:46:c4:7a:74:08:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef Validity Not Before: Nov 9 07:31:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ae31a6164c275185c45f47140fa3ed6488438024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:37:3c:84:fa:b2:8c:99:bb:59:55:4e:a2:d2: 2a:5e:f4:13:38:aa:74:ae:51:2b:ca:67:a2:38:db: b5:5d:1f:03:5c:bd:0a:73:2a:80:4d:5e:30:bd:78: 92:cd:79:ce:74:53:26:78:a6:4a:75:8b:aa:10:8e: d6:01:5c:fe:09:9a:70:ff:3b:0b:33:c8:15:9e:2c: 96:de:9e:97:a6:b6:4e:89:3d:a5:1a:4a:cc:9a:69: cb:33:61:76:1a:a5:23:26:be:62:67:c9:ef:4a:d7: bb:da:95:fe:f7:ec:c5:a0:54:71:7d:a4:32:ed:e2: 8f:80:d8:20:20:46:9f:af:80:d8:f1:63:4f:6b:a0: e7:92:15:ee:f9:2a:a0:3f:6a:99:92:34:e9:db:5d: 4d:12:93:f6:53:ae:45:3f:a3:6a:31:a6:36:3d:d2: ee:cc:8f:f4:cd:dd:5d:cb:0c:a7:43:fd:2a:34:4e: 18:cf:ce:07:82:01:79:c7:73:f3:4e:22:19:99:a0: 53:0b:b3:d8:52:5c:10:60:73:b6:60:28:4e:2b:5d: 0a:09:be:14:be:b6:9c:27:13:5b:91:a5:4d:c6:4a: 7d:b0:ad:74:2b:74:dd:aa:df:c9:05:62:e6:38:dc: 1d:af:9d:dd:5d:d5:bb:6e:1f:32:8c:bd:d4:94:c5: c7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:31:A6:16:4C:27:51:85:C4:5F:47:14:0F:A3:ED:64:88:43:80:24 X509v3 Authority Key Identifier: keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/rjGmFkwnUYXEX0cUD6PtZIhDgCQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.113.107.0/24 Signature Algorithm: sha256WithRSAEncryption 96:5a:f7:33:b4:f7:20:c8:95:2b:52:ca:a3:65:36:21:60:4f: 52:90:18:88:2e:90:cd:71:5e:f9:18:48:dd:6f:02:31:11:42: 53:d9:a3:34:55:f9:9c:10:30:83:d2:68:87:4c:bc:53:c6:a0: 16:13:73:29:a1:4f:36:59:74:02:e8:d1:f8:66:d7:d1:83:6b: a4:f2:4c:a3:ba:29:e2:62:50:2e:5b:31:2e:19:d2:15:39:54: 8a:5b:ff:9c:f0:44:d4:82:90:7f:69:7c:4d:1a:62:de:ee:50: 70:4d:23:d7:3d:5c:0a:56:19:3b:a5:3b:64:ad:7e:f9:27:fe: d5:85:0e:f7:38:b4:57:68:76:e9:6a:93:9f:a4:15:84:ad:d3: 5d:cc:10:ac:ee:77:8d:8d:89:b5:52:55:51:27:76:57:ff:da: 02:07:97:ea:67:52:12:20:7e:24:fb:37:bf:70:b8:06:a9:99: 4a:d7:c3:f5:a3:a8:6f:66:d4:ae:7f:3c:73:86:b0:62:12:4b: 4b:0d:eb:83:a1:85:f5:d6:3c:dc:e1:2e:d1:82:a3:b0:b7:17: 83:a1:fc:ec:e9:fa:ed:5c:6f:96:d9:a6:eb:7b:e1:6b:91:22: b8:17:42:44:b3:e7:fe:8f:67:04:26:7e:20:f4:83:ea:6f:98: a2:13:6e:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpnhxZFt5hhtZsDRsR6dAjwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDk4YTE5MDViYmQzMzgxNTMzODI4ZjZiN2ZkMjI3MTcw NDMxZWYwHhcNMjUxMTA5MDczMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTMxYTYxNjRjMjc1MTg1YzQ1ZjQ3MTQwZmEzZWQ2NDg4NDM4MDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTc8hPqyjJm7WVVOotIqXvQTOKp0 rlErymeiONu1XR8DXL0KcyqATV4wvXiSzXnOdFMmeKZKdYuqEI7WAVz+CZpw/zsL M8gVniyW3p6XprZOiT2lGkrMmmnLM2F2GqUjJr5iZ8nvSte72pX+9+zFoFRxfaQy 7eKPgNggIEafr4DY8WNPa6DnkhXu+SqgP2qZkjTp211NEpP2U65FP6NqMaY2PdLu zI/0zd1dywynQ/0qNE4Yz84HggF5x3PzTiIZmaBTC7PYUlwQYHO2YChOK10KCb4U vracJxNbkaVNxkp9sK10K3Tdqt/JBWLmONwdr53dXdW7bh8yjL3UlMXHCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK4xphZMJ1GFxF9HFA+j7WSIQ4AkMB8GA1UdIwQY MBaAFMEJihkFu9M4FTOCj2t/0icXBDHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUt YjJhNzEzZDJlYWIyLzEvcmpHbUZrd25VWVhFWDBjVUQ2UHRaSWhEZ0NRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUtYjJhNzEzZDJlYWIy LzEvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXFrMA0G CSqGSIb3DQEBCwUAA4IBAQCWWvcztPcgyJUrUsqjZTYhYE9SkBiILpDNcV75GEjd bwIxEUJT2aM0VfmcEDCD0miHTLxTxqAWE3MpoU82WXQC6NH4ZtfRg2uk8kyjuini YlAuWzEuGdIVOVSKW/+c8ETUgpB/aXxNGmLe7lBwTSPXPVwKVhk7pTtkrX75J/7V hQ73OLRXaHbpapOfpBWErdNdzBCs7neNjYm1UlVRJ3ZX/9oCB5fqZ1ISIH4k+ze/ cLgGqZlK18P1o6hvZtSufzxzhrBiEktLDeuDoYX11jzc4S7RgqOwtxeDofzs6frt XG+W2abre+FrkSK4F0JEs+f+j2cEJn4g9IPqb5iiE260 -----END CERTIFICATE-----Generated at Wed Dec 17 04:12:14 2025 by rpki-client