This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/rfgHyHyXnUEbHJgxdZkojcPjDmw.roa File: rfgHyHyXnUEbHJgxdZkojcPjDmw.roa (raw, json) Hash identifier: AKt21H+5INTrQEQI/BGd5/NNqHfVuyNscFCNibV7y5w= Subject key identifier: AD:F8:07:C8:7C:97:9D:41:1B:1C:98:31:75:99:28:8D:C3:E3:0E:6C Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Certificate serial: 019B037E0916C4187CCD5BCBD77CF81CFFFC Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/rfgHyHyXnUEbHJgxdZkojcPjDmw.roa Signing time: Tue 09 Dec 2025 14:22:30 +0000 ROA not before: Tue 09 Dec 2025 14:22:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199883 IP address blocks: 89.36.220.0/22 maxlen: 24 89.38.144.0/22 maxlen: 24 89.40.120.0/22 maxlen: 24 94.177.248.0/22 maxlen: 24 94.177.252.0/22 maxlen: 24 185.43.208.0/22 maxlen: 24 185.58.224.0/22 maxlen: 24 217.61.16.0/21 maxlen: 24 217.61.112.0/21 maxlen: 24 2a01:6e60::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:7e:09:16:c4:18:7c:cd:5b:cb:d7:7c:f8:1c:ff:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Validity Not Before: Dec 9 14:22:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=adf807c87c979d411b1c98317599288dc3e30e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:27:44:17:56:a2:23:6e:49:b6:37:df:7b:5a: df:6c:a2:46:a1:48:b1:89:3c:96:0b:73:46:30:a5: 83:9f:c1:6d:2f:70:32:eb:6f:29:73:8d:21:9a:34: 97:ff:db:79:12:93:2a:60:ff:93:f3:16:c6:1a:04: 76:8e:8b:c1:d6:3c:31:b5:08:ef:20:22:7a:05:ce: 93:5f:76:2e:e2:3e:3a:16:ba:f1:54:ad:ca:d3:31: 3a:5b:dd:13:29:54:fa:71:bf:8d:c0:ae:69:ad:82: e8:72:02:4a:4b:5e:24:3a:1b:e2:d9:7e:b0:c9:07: a4:ff:d5:33:4f:50:84:cc:eb:a7:02:99:e9:16:e0: 09:37:d7:c3:d2:a1:0c:07:3d:23:b5:2d:61:1e:88: 8f:5c:ae:2a:dc:ae:bf:fa:11:e2:d3:10:32:fb:c8: 29:eb:15:c6:8c:c3:f1:7e:5e:3a:47:1b:2d:25:e2: dd:a5:db:1f:8e:2a:95:8f:d8:26:9d:27:87:53:ba: 47:14:78:00:9e:7a:e0:5b:24:59:a9:dd:d0:90:80: 6c:b5:1b:23:e8:04:1f:03:b1:c0:27:77:14:d6:a5: 27:fc:a8:6a:1d:81:6a:72:e1:1b:45:24:07:d3:38: aa:e5:84:c3:1b:e3:50:0b:9f:b7:26:90:94:16:b8: 92:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F8:07:C8:7C:97:9D:41:1B:1C:98:31:75:99:28:8D:C3:E3:0E:6C X509v3 Authority Key Identifier: keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/rfgHyHyXnUEbHJgxdZkojcPjDmw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.36.220.0/22 89.38.144.0/22 89.40.120.0/22 94.177.248.0/21 185.43.208.0/22 185.58.224.0/22 217.61.16.0/21 217.61.112.0/21 IPv6: 2a01:6e60::/32 Signature Algorithm: sha256WithRSAEncryption 12:7e:98:fa:1a:3d:e3:4d:c4:39:85:b6:33:30:ec:10:b0:a1: f0:5e:50:8c:dc:cf:30:89:12:14:48:3f:23:c3:37:70:6f:a7: b5:6a:46:ac:a2:77:5b:63:dc:c8:75:39:0f:31:a0:5a:58:bd: 11:a9:ca:18:f1:22:27:73:62:41:f2:ae:dd:2d:2b:d0:12:d4: a7:21:c4:ac:cd:b1:6b:21:d6:5e:67:0f:cc:64:8e:2b:57:cb: bb:41:09:92:c9:7e:43:f6:95:bc:7a:70:ec:9e:7a:dc:8f:b5: f9:f6:b0:c5:b5:93:0e:b6:81:98:82:32:a9:da:36:12:c6:e7: e2:a4:8d:69:d0:5c:6f:8d:6d:33:23:f0:61:90:aa:2e:a1:de: 95:71:df:06:c0:0a:c5:36:c9:45:00:4c:e1:f4:69:bb:c0:0f: f8:a6:e7:0f:0e:d4:e7:92:dc:6b:00:88:4f:76:39:76:ff:d6: 3b:12:38:9b:c0:f0:70:a8:a0:fb:aa:f9:55:17:00:03:94:fe: a5:2a:52:e6:c2:6d:e9:3e:58:0c:54:01:ec:2a:0f:d8:6d:99: a9:e2:dc:a8:6d:5d:74:38:ad:78:8b:ba:67:bc:26:ed:5b:58: 61:b1:cc:b8:32:79:28:42:e1:33:8d:b2:41:76:4e:6a:7d:9b: 60:a3:93:77 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZsDfgkWxBh8zVvL13z4HP/8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5 Mzg2MWMwHhcNMjUxMjA5MTQyMjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGY4MDdjODdjOTc5ZDQxMWIxYzk4MzE3NTk5Mjg4ZGMzZTMwZTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyydEF1aiI25Jtjffe1rfbKJGoUix iTyWC3NGMKWDn8FtL3Ay628pc40hmjSX/9t5EpMqYP+T8xbGGgR2jovB1jwxtQjv ICJ6Bc6TX3Yu4j46FrrxVK3K0zE6W90TKVT6cb+NwK5prYLocgJKS14kOhvi2X6w yQek/9UzT1CEzOunApnpFuAJN9fD0qEMBz0jtS1hHoiPXK4q3K6/+hHi0xAy+8gp 6xXGjMPxfl46RxstJeLdpdsfjiqVj9gmnSeHU7pHFHgAnnrgWyRZqd3QkIBstRsj 6AQfA7HAJ3cU1qUn/KhqHYFqcuEbRSQH0ziq5YTDG+NQC5+3JpCUFriSdQIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFK34B8h8l51BGxyYMXWZKI3D4w5sMB8GA1UdIwQY MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt ODQyNjk0MTJkNTYxLzEvcmZnSHlIeVhuVUViSEpneGRaa29qY1BqRG13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQCWSTcAwQC WSaQAwQCWSh4AwQDXrH4AwQCuSvQAwQCuTrgAwQD2T0QAwQD2T1wMA0EAgACMAcD BQAqAW5gMA0GCSqGSIb3DQEBCwUAA4IBAQASfpj6Gj3jTcQ5hbYzMOwQsKHwXlCM 3M8wiRIUSD8jwzdwb6e1akasondbY9zIdTkPMaBaWL0RqcoY8SInc2JB8q7dLSvQ EtSnIcSszbFrIdZeZw/MZI4rV8u7QQmSyX5D9pW8enDsnnrcj7X59rDFtZMOtoGY gjKp2jYSxufipI1p0FxvjW0zI/BhkKouod6Vcd8GwArFNslFAEzh9Gm7wA/4pucP DtTnktxrAIhPdjl2/9Y7EjibwPBwqKD7qvlVFwADlP6lKlLmwm3pPlgMVAHsKg/Y bZmp4tyobV10OK14i7pnvCbtW1hhscy4MnkoQuEzjbJBdk5qfZtgo5N3 -----END CERTIFICATE-----Generated at Sun Dec 14 01:01:36 2025 by rpki-client