This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/yU6M8D2PmhF2Sd5R-vOSjFCLSRA.roa File: yU6M8D2PmhF2Sd5R-vOSjFCLSRA.roa (raw, json) Hash identifier: U9bGy/Y68QQJEGfI8xO2m7ZqBZYaniV4Y7/FY/rY8nM= Subject key identifier: C9:4E:8C:F0:3D:8F:9A:11:76:49:DE:51:FA:F3:92:8C:50:8B:49:10 Certificate issuer: /CN=25c15d8ec47a2b0e2043a7822db67ac23117cc87 Certificate serial: 019AFD71DEFD418BFDB208A5F5D4D6F6D54F Authority key identifier: 25:C1:5D:8E:C4:7A:2B:0E:20:43:A7:82:2D:B6:7A:C2:31:17:CC:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/yU6M8D2PmhF2Sd5R-vOSjFCLSRA.roa Signing time: Mon 08 Dec 2025 10:11:29 +0000 ROA not before: Mon 08 Dec 2025 10:11:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209442 IP address blocks: 185.221.252.0/22 maxlen: 22 185.221.252.0/24 maxlen: 24 185.221.253.0/24 maxlen: 24 185.221.254.0/24 maxlen: 24 185.221.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:71:de:fd:41:8b:fd:b2:08:a5:f5:d4:d6:f6:d5:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25c15d8ec47a2b0e2043a7822db67ac23117cc87 Validity Not Before: Dec 8 10:11:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c94e8cf03d8f9a117649de51faf3928c508b4910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3a:c9:23:e8:1b:3f:c7:3e:90:28:f7:55:4d: ff:32:fa:31:3a:3b:1c:db:b9:1b:b7:6d:c5:3b:14: e2:4a:a7:cc:b0:e2:34:fc:cb:61:64:09:11:33:4b: fe:1d:da:15:ec:c2:43:99:b6:a7:af:55:54:4d:17: bf:f6:0f:d9:f1:86:d0:03:ae:c3:bc:1c:0d:f4:5d: e4:ad:93:35:42:91:f9:d0:fb:74:ff:42:31:24:d5: 75:be:2b:9f:fe:25:64:74:c7:19:c6:f8:b8:2c:39: 0f:ad:c3:5e:c8:6b:5d:b5:0c:4e:27:b4:cb:d1:e2: a0:08:10:b3:67:3f:80:82:73:d1:6c:4f:c3:20:d9: aa:1b:c2:1c:79:97:0f:d3:19:91:aa:6c:41:2e:91: c2:8b:72:84:56:ea:8b:33:5e:5f:f0:91:aa:af:41: 38:cf:59:ad:52:e0:7d:cd:8a:71:b6:ab:08:13:dd: 1b:4b:a9:e5:aa:4e:79:3e:d6:27:2f:0c:37:c9:68: c8:a7:4e:0c:23:93:45:aa:4a:a7:7d:33:ae:a0:31: 3c:0a:d7:5e:a5:12:d0:44:b6:a1:b0:eb:25:e8:0e: 34:3b:e2:5e:8b:c7:16:64:5d:3a:53:22:54:52:bf: 41:a6:ee:75:f0:57:6c:be:af:08:90:24:c3:32:90: 5a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4E:8C:F0:3D:8F:9A:11:76:49:DE:51:FA:F3:92:8C:50:8B:49:10 X509v3 Authority Key Identifier: keyid:25:C1:5D:8E:C4:7A:2B:0E:20:43:A7:82:2D:B6:7A:C2:31:17:CC:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/yU6M8D2PmhF2Sd5R-vOSjFCLSRA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.221.252.0/22 Signature Algorithm: sha256WithRSAEncryption 10:c1:dc:88:20:25:ea:5b:9e:a3:88:32:82:22:73:7b:9a:8b: cb:03:e2:5f:fb:a9:e0:a9:54:b3:44:68:54:20:4f:e5:86:ac: df:81:24:4a:28:11:bd:33:e3:c5:85:bb:51:ba:a5:fe:43:44: d5:47:ff:00:a7:3f:2a:3b:39:02:62:6c:76:58:ed:44:e9:47: 11:c0:15:6f:ee:4a:2a:98:d7:56:8b:0b:33:96:e6:98:77:09: 17:80:a5:81:06:07:73:05:b7:2e:d2:04:32:e0:88:b0:8b:dc: a9:88:c1:d1:58:da:34:51:27:ae:80:ce:63:6a:0e:ae:27:18: dd:8b:eb:1a:bb:2a:9b:c5:90:f8:74:00:c8:c0:6d:3a:a6:93: 20:55:3d:61:5a:6e:e6:50:70:ca:61:4d:6f:44:49:ec:7b:0e: d5:f2:bc:d9:0e:09:d6:90:c1:be:85:b4:5d:f6:d9:ce:13:7a: d3:4e:7e:08:4b:55:4d:30:6a:e1:a2:41:67:c7:f1:c3:d1:09: 9d:85:38:07:13:0a:fe:5e:43:12:9d:39:7f:1f:7d:5e:38:24: d1:da:10:a5:4e:c7:46:ed:d7:f0:5f:50:3f:a2:13:e3:5e:bf: b4:81:77:d4:ac:21:bb:9f:26:55:bb:68:b2:13:0e:3c:28:d1: 11:75:90:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr9cd79QYv9sgil9dTW9tVPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YzE1ZDhlYzQ3YTJiMGUyMDQzYTc4MjJkYjY3YWMyMzEx N2NjODcwHhcNMjUxMjA4MTAxMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTRlOGNmMDNkOGY5YTExNzY0OWRlNTFmYWYzOTI4YzUwOGI0OTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDrJI+gbP8c+kCj3VU3/MvoxOjsc 27kbt23FOxTiSqfMsOI0/MthZAkRM0v+HdoV7MJDmbanr1VUTRe/9g/Z8YbQA67D vBwN9F3krZM1QpH50Pt0/0IxJNV1viuf/iVkdMcZxvi4LDkPrcNeyGtdtQxOJ7TL 0eKgCBCzZz+AgnPRbE/DINmqG8IceZcP0xmRqmxBLpHCi3KEVuqLM15f8JGqr0E4 z1mtUuB9zYpxtqsIE90bS6nlqk55PtYnLww3yWjIp04MI5NFqkqnfTOuoDE8Ctde pRLQRLahsOsl6A40O+Jei8cWZF06UyJUUr9Bpu518Fdsvq8IkCTDMpBahwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMlOjPA9j5oRdkneUfrzkoxQi0kQMB8GA1UdIwQY MBaAFCXBXY7EeisOIEOngi22esIxF8yHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmNGZGpzUjZLdzRnUTZlQ0xiWjZ3akVYekljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kN2MyZTgtNGYyNS00MDMwLWExYzYt NDNlMmIxNTk2NTdkLzEveVU2TThEMlBtaEYyU2Q1Ui12T1NqRkNMU1JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9kN2MyZTgtNGYyNS00MDMwLWExYzYtNDNlMmIxNTk2NTdk LzEvSmNGZGpzUjZLdzRnUTZlQ0xiWjZ3akVYekljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCud38MA0G CSqGSIb3DQEBCwUAA4IBAQAQwdyIICXqW56jiDKCInN7movLA+Jf+6ngqVSzRGhU IE/lhqzfgSRKKBG9M+PFhbtRuqX+Q0TVR/8Apz8qOzkCYmx2WO1E6UcRwBVv7koq mNdWiwszluaYdwkXgKWBBgdzBbcu0gQy4Iiwi9ypiMHRWNo0USeugM5jag6uJxjd i+sauyqbxZD4dADIwG06ppMgVT1hWm7mUHDKYU1vREnsew7V8rzZDgnWkMG+hbRd 9tnOE3rTTn4IS1VNMGrhokFnx/HD0QmdhTgHEwr+XkMSnTl/H31eOCTR2hClTsdG 7dfwX1A/ohPjXr+0gXfUrCG7nyZVu2iyEw48KNERdZAx -----END CERTIFICATE-----Generated at Mon Dec 15 19:46:22 2025 by rpki-client