This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/s9klMDIRoFSXuMNPqltbcwKZS2w.roa File: s9klMDIRoFSXuMNPqltbcwKZS2w.roa (raw, json) Hash identifier: +LZq9RTe9w8HLTdvr+e4YH/M/UNAuRw6fFf2hBCbGyk= Subject key identifier: B3:D9:25:30:32:11:A0:54:97:B8:C3:4F:AA:5B:5B:73:02:99:4B:6C Certificate issuer: /CN=76f311ef1581a00e437cd704b6281ac8621afc56 Certificate serial: 019A928C9F278A8BECCC2F6EF0C3253EEFC1 Authority key identifier: 76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/s9klMDIRoFSXuMNPqltbcwKZS2w.roa Signing time: Mon 17 Nov 2025 16:01:20 +0000 ROA not before: Mon 17 Nov 2025 16:01:20 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49544 IP address blocks: 185.38.20.0/22 maxlen: 24 194.2.155.0/24 maxlen: 24 194.169.249.0/24 maxlen: 24 195.22.144.0/23 maxlen: 24 212.104.206.0/23 maxlen: 24 2a04:7141::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:92:8c:9f:27:8a:8b:ec:cc:2f:6e:f0:c3:25:3e:ef:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76f311ef1581a00e437cd704b6281ac8621afc56 Validity Not Before: Nov 17 16:01:20 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b3d925303211a05497b8c34faa5b5b7302994b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ad:4f:36:17:94:73:39:9c:16:6c:26:96:c6: d7:4f:89:38:d2:a6:9e:13:85:99:6c:d5:59:ed:ab: f2:c2:ef:c9:82:00:8d:70:14:33:4d:ca:81:ee:a4: 14:d3:3e:ee:62:3b:d5:f3:df:fe:77:a9:10:eb:3d: a2:89:9b:52:8a:c9:2d:4f:c0:e8:f2:7c:fc:ce:e7: c9:9a:7f:c5:bb:bc:a5:84:9e:5f:d4:e4:f6:57:25: b3:fd:f1:18:53:a0:fb:ff:ef:d8:60:fd:e9:92:44: e0:2e:de:c0:df:58:09:17:15:ac:41:fa:97:0a:bd: 35:8a:ec:b5:c0:be:36:0b:eb:8e:f2:a2:e6:eb:b2: 57:ce:36:f5:cb:5a:76:f4:15:dc:99:40:0e:fb:bb: 8c:0e:f2:b8:8c:81:f2:27:0a:0e:48:96:bb:5c:cf: 48:6b:12:d5:e6:9c:8d:d7:d4:5f:3c:41:4f:17:35: e9:9c:6a:b8:c0:aa:f0:43:3f:45:b0:b9:3f:c8:be: 33:1c:ae:c3:39:e7:dc:ef:ca:64:27:7c:2f:a1:31: 8f:90:88:cc:15:fa:04:fa:d7:e5:ff:db:63:37:19: 56:4c:0c:02:bc:13:ec:52:b3:46:47:c9:23:01:44: 74:b4:8d:c8:06:0b:eb:82:97:0b:72:dd:7e:5a:8f: 57:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D9:25:30:32:11:A0:54:97:B8:C3:4F:AA:5B:5B:73:02:99:4B:6C X509v3 Authority Key Identifier: keyid:76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/s9klMDIRoFSXuMNPqltbcwKZS2w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.38.20.0/22 194.2.155.0/24 194.169.249.0/24 195.22.144.0/23 212.104.206.0/23 IPv6: 2a04:7141::/36 Signature Algorithm: sha256WithRSAEncryption 7d:9f:e4:45:80:8d:cc:80:a2:5f:3d:3d:8d:ff:95:03:5a:ce: 36:e7:4d:9e:65:93:77:6e:37:f9:be:68:10:d4:31:a3:15:a9: a5:cc:bd:24:60:18:0c:b0:23:5e:d6:27:2d:d9:36:a9:f1:19: 3c:e3:a6:7c:91:47:35:f2:45:d7:28:1c:38:29:05:91:3a:4c: b7:a2:09:cb:9f:90:52:88:31:06:f7:ee:11:f1:0a:7f:d1:99: 7d:32:62:59:cc:bc:cf:70:82:52:48:28:bf:fb:4f:04:fd:f7: 44:76:b7:4e:9e:45:0d:b6:7c:15:c6:85:12:97:c6:f2:45:b8: 64:17:03:ac:44:20:e1:41:1d:f1:37:3d:65:d7:cd:04:1b:e6: 4a:8d:3c:b8:ea:03:51:e7:c9:e2:36:59:b4:fa:c0:1c:5b:1a: 58:2f:b6:31:61:d9:dd:3f:27:ed:e3:03:cf:c0:41:6d:ca:9f: ce:76:d6:4f:6a:bb:d1:de:93:fb:0e:2e:d5:e5:fa:90:31:f8: ed:8c:98:90:af:57:95:df:c3:59:53:48:ba:73:fe:70:91:d2: 4c:8f:b5:d4:d5:be:72:52:c3:bd:f0:b4:b4:9b:03:c9:c6:82: 20:bc:c3:a5:b3:8b:b6:ab:db:41:3a:1e:a1:53:34:5f:95:bc: 09:4e:ad:20 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZqSjJ8niovszC9u8MMlPu/BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2ZjMxMWVmMTU4MWEwMGU0MzdjZDcwNGI2MjgxYWM4NjIx YWZjNTYwHhcNMjUxMTE3MTYwMTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2Q5MjUzMDMyMTFhMDU0OTdiOGMzNGZhYTViNWI3MzAyOTk0YjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo61PNheUczmcFmwmlsbXT4k40qae E4WZbNVZ7avywu/JggCNcBQzTcqB7qQU0z7uYjvV89/+d6kQ6z2iiZtSisktT8Do 8nz8zufJmn/Fu7ylhJ5f1OT2VyWz/fEYU6D7/+/YYP3pkkTgLt7A31gJFxWsQfqX Cr01iuy1wL42C+uO8qLm67JXzjb1y1p29BXcmUAO+7uMDvK4jIHyJwoOSJa7XM9I axLV5pyN19RfPEFPFzXpnGq4wKrwQz9FsLk/yL4zHK7DOefc78pkJ3wvoTGPkIjM FfoE+tfl/9tjNxlWTAwCvBPsUrNGR8kjAUR0tI3IBgvrgpcLct1+Wo9XZwIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFLPZJTAyEaBUl7jDT6pbW3MCmUtsMB8GA1UdIwQY MBaAFHbzEe8VgaAOQ3zXBLYoGshiGvxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHZNUjd4V0JvQTVEZk5jRXRpZ2F5R0lhX0ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS81MjUyMjQtNzhlYS00OWU0LTk3NDkt MTY5NDMxMjk2YzU5LzEvczlrbE1ESVJvRlNYdU1OUHFsdGJjd0taUzJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS81MjUyMjQtNzhlYS00OWU0LTk3NDktMTY5NDMxMjk2YzU5 LzEvZHZNUjd4V0JvQTVEZk5jRXRpZ2F5R0lhX0ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAkBAIAATAeAwQCuSYUAwQA wgKbAwQAwqn5AwQBwxaQAwQB1GjOMA4EAgACMAgDBgQqBHFBADANBgkqhkiG9w0B AQsFAAOCAQEAfZ/kRYCNzICiXz09jf+VA1rONudNnmWTd243+b5oENQxoxWppcy9 JGAYDLAjXtYnLdk2qfEZPOOmfJFHNfJF1ygcOCkFkTpMt6IJy5+QUogxBvfuEfEK f9GZfTJiWcy8z3CCUkgov/tPBP33RHa3Tp5FDbZ8FcaFEpfG8kW4ZBcDrEQg4UEd 8Tc9ZdfNBBvmSo08uOoDUefJ4jZZtPrAHFsaWC+2MWHZ3T8n7eMDz8BBbcqfznbW T2q70d6T+w4u1eX6kDH47YyYkK9Xld/DWVNIunP+cJHSTI+11NW+clLDvfC0tJsD ycaCILzDpbOLtqvbQToeoVM0X5W8CU6tIA== -----END CERTIFICATE-----Generated at Fri Dec 5 18:33:12 2025 by rpki-client