This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/iUjA5-zowUQNvgRjE68BZNBeaJc.roa File: iUjA5-zowUQNvgRjE68BZNBeaJc.roa (raw, json) Hash identifier: 2YZZJqfjMiJEM/TbJsXYsUjZHG10veLYlz1R58c65kI= Subject key identifier: 89:48:C0:E7:EC:E8:C1:44:0D:BE:04:63:13:AF:01:64:D0:5E:68:97 Certificate issuer: /CN=37431f1be9fdc2419098479cde457bbf79571759 Certificate serial: 019AA060E28C9D2B6D7E1EABBDDDA2A14A75 Authority key identifier: 37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/iUjA5-zowUQNvgRjE68BZNBeaJc.roa Signing time: Thu 20 Nov 2025 08:28:15 +0000 ROA not before: Thu 20 Nov 2025 08:28:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41717 IP address blocks: 185.211.135.0/24 maxlen: 32 2a0b:65c0:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 23:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:60:e2:8c:9d:2b:6d:7e:1e:ab:bd:dd:a2:a1:4a:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37431f1be9fdc2419098479cde457bbf79571759 Validity Not Before: Nov 20 08:28:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8948c0e7ece8c1440dbe046313af0164d05e6897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f3:23:ba:bd:30:25:bc:ec:ee:dd:77:d4:8c: 5b:7e:ba:f4:77:60:46:e6:67:fb:1a:4a:b4:a8:d8: 68:2e:ac:5b:c6:70:c0:b2:35:64:b5:33:d0:2c:61: 1b:80:bb:9f:21:d9:9b:35:ee:37:9b:39:15:ad:59: cb:2a:d3:59:be:37:59:2b:34:1e:27:6a:c3:fb:66: d0:76:aa:ab:81:11:7b:ab:72:42:2b:b7:fd:f5:0f: 24:b0:76:db:04:01:d8:1a:f0:9b:12:fc:86:96:94: 45:ba:21:5e:23:70:f5:d4:d0:cd:4e:e7:04:9d:cf: 84:53:70:43:1c:bd:24:d7:bc:e7:48:68:42:03:59: a0:26:91:6e:c0:c3:22:9a:8b:50:83:74:f7:60:ac: 9e:60:19:b6:94:9c:ac:8a:24:5f:b4:c4:e8:6c:74: a1:0e:62:6c:b7:52:07:d6:2c:bb:63:0c:22:98:b5: 90:f6:ee:33:0e:58:c7:67:7c:8b:f1:1c:f9:54:9f: ba:3d:cb:c8:e3:29:7f:36:ee:7c:36:c1:52:35:a7: 50:8d:00:d6:57:38:c9:7d:a3:2e:ab:d9:34:db:53: 3b:d6:d8:9a:de:d0:dc:18:3a:7b:8e:b5:f4:e3:bf: 1b:22:a7:f3:50:3a:db:ea:17:bf:2f:20:3c:38:7c: 86:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:48:C0:E7:EC:E8:C1:44:0D:BE:04:63:13:AF:01:64:D0:5E:68:97 X509v3 Authority Key Identifier: keyid:37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/iUjA5-zowUQNvgRjE68BZNBeaJc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.135.0/24 IPv6: 2a0b:65c0:4::/48 Signature Algorithm: sha256WithRSAEncryption 30:c5:eb:66:a5:4b:5d:91:bd:aa:d9:6c:4d:92:ae:de:83:18: 18:44:c8:ef:8a:dd:d9:d0:38:a6:b3:ac:bf:76:b2:a8:8f:b9: 4a:3b:2d:aa:0e:46:33:dd:f7:6a:22:98:89:81:c9:78:13:37: fd:82:a3:77:7c:1f:36:af:a4:90:37:28:bf:ed:f3:5b:40:e6: f4:07:11:a3:20:b2:81:b9:49:33:d1:8c:36:c9:58:13:82:07: b0:69:92:62:89:56:8a:45:10:cb:47:d5:ac:55:da:17:bd:d9: c5:14:9a:b4:be:d7:f9:d7:1c:0f:6d:a6:91:58:c3:7a:2b:0f: 17:0b:52:a6:b3:99:33:e1:2b:11:9c:66:5d:6e:15:69:44:35: f5:6b:a8:fd:f0:cf:bd:5a:7f:f9:e8:71:ea:6e:cf:56:22:bb: 78:67:83:c7:a2:b7:e1:7f:98:dd:e2:63:d6:d7:5c:da:b3:09: 5b:cd:6a:98:d9:2f:f5:39:0a:dd:21:59:7c:82:11:4a:00:15: 23:57:e6:57:50:62:df:f5:f0:f7:97:05:d8:aa:30:8e:a9:dc: 2b:e5:cd:53:f3:56:3b:29:fc:3f:1f:a6:4f:f3:50:f9:b7:05: 0b:c7:c4:75:8f:5c:45:57:6e:bc:9a:47:43:01:f4:78:a6:6b: 8f:b6:26:82 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZqgYOKMnSttfh6rvd2ioUp1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NDMxZjFiZTlmZGMyNDE5MDk4NDc5Y2RlNDU3YmJmNzk1 NzE3NTkwHhcNMjUxMTIwMDgyODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTQ4YzBlN2VjZThjMTQ0MGRiZTA0NjMxM2FmMDE2NGQwNWU2ODk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfMjur0wJbzs7t131Ixbfrr0d2BG 5mf7Gkq0qNhoLqxbxnDAsjVktTPQLGEbgLufIdmbNe43mzkVrVnLKtNZvjdZKzQe J2rD+2bQdqqrgRF7q3JCK7f99Q8ksHbbBAHYGvCbEvyGlpRFuiFeI3D11NDNTucE nc+EU3BDHL0k17znSGhCA1mgJpFuwMMimotQg3T3YKyeYBm2lJysiiRftMTobHSh DmJst1IH1iy7YwwimLWQ9u4zDljHZ3yL8Rz5VJ+6PcvI4yl/Nu58NsFSNadQjQDW VzjJfaMuq9k021M71tia3tDcGDp7jrX0478bIqfzUDrb6he/LyA8OHyG+QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIlIwOfs6MFEDb4EYxOvAWTQXmiXMB8GA1UdIwQY MBaAFDdDHxvp/cJBkJhHnN5Fe795VxdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjBNZkctbjl3a0dRbUVlYzNrVjd2M2xYRjFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iNTM1NDctZDM0MC00MzkyLWFmNDYt NjE1OTYxMzEyYjUyLzEvaVVqQTUtem93VVFOdmdSakU2OEJaTkJlYUpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9iNTM1NDctZDM0MC00MzkyLWFmNDYtNjE1OTYxMzEyYjUy LzEvTjBNZkctbjl3a0dRbUVlYzNrVjd2M2xYRjFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAudOHMA8E AgACMAkDBwAqC2XAAAQwDQYJKoZIhvcNAQELBQADggEBADDF62alS12RvarZbE2S rt6DGBhEyO+K3dnQOKazrL92sqiPuUo7LaoORjPd92oimImByXgTN/2Co3d8Hzav pJA3KL/t81tA5vQHEaMgsoG5STPRjDbJWBOCB7BpkmKJVopFEMtH1axV2he92cUU mrS+1/nXHA9tppFYw3orDxcLUqazmTPhKxGcZl1uFWlENfVrqP3wz71af/nocepu z1Yiu3hng8eit+F/mN3iY9bXXNqzCVvNapjZL/U5Ct0hWXyCEUoAFSNX5ldQYt/1 8PeXBdiqMI6p3CvlzVPzVjsp/D8fpk/zUPm3BQvHxHWPXEVXbryaR0MB9Hima4+2 JoI= -----END CERTIFICATE-----Generated at Fri Dec 5 08:05:18 2025 by rpki-client