This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/gnoWiTg9hgEzQ6gqtMY2i0HIbfw.roa File: gnoWiTg9hgEzQ6gqtMY2i0HIbfw.roa (raw, json) Hash identifier: v03lbv6y6cN0EVAqhcRuY7bo4eSqoMod3VriVHmxRXM= Subject key identifier: 82:7A:16:89:38:3D:86:01:33:43:A8:2A:B4:C6:36:8B:41:C8:6D:FC Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B0855A83454B8BAEDB90A666F1E6B0E5D Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/gnoWiTg9hgEzQ6gqtMY2i0HIbfw.roa Signing time: Wed 10 Dec 2025 12:56:29 +0000 ROA not before: Wed 10 Dec 2025 12:56:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213999 IP address blocks: 95.214.251.0/24 maxlen: 24 185.161.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:55:a8:34:54:b8:ba:ed:b9:0a:66:6f:1e:6b:0e:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Dec 10 12:56:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=827a1689383d86013343a82ab4c6368b41c86dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4e:a9:9e:02:53:19:38:8f:e3:20:5a:97:f2: b6:f6:4d:92:57:28:83:ba:1d:37:d0:50:f9:47:0f: 7f:cb:bb:0e:f8:f3:c6:90:cb:4b:26:8c:bc:7b:f6: 4c:64:e1:ed:6f:c3:60:5d:64:76:92:58:5d:ef:89: 85:91:ae:15:fa:3d:47:a8:fc:13:78:b0:32:4a:88: 23:dc:d7:e7:a8:23:7a:93:d0:a5:fd:9f:ab:6d:76: 60:33:65:36:bb:23:5b:9c:4b:79:75:9f:50:39:7e: a5:71:94:d6:6a:e6:dc:9e:45:7b:a5:14:a2:67:3c: a2:6b:1e:86:6e:4a:88:07:a4:85:16:f7:db:01:69: a5:ff:e4:63:bf:10:5c:f4:c0:08:11:fc:7d:51:83: 5c:07:84:7b:5d:96:b6:63:60:9b:b0:37:a9:75:d9: 84:90:ec:c7:f6:5d:1a:71:ab:56:91:e3:33:0d:13: 66:34:9e:9f:44:bb:2e:0d:55:43:76:e3:da:05:e3: 86:7a:fe:d4:9e:df:17:89:d4:18:c0:cd:d9:34:08: 18:01:a5:30:3b:4d:eb:87:96:8c:75:8e:db:52:14: a4:ed:e5:9c:34:03:84:9f:ee:e5:a8:06:ea:54:91: af:63:b0:5d:ce:fb:38:cb:6e:5e:ee:ab:72:4a:99: f3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7A:16:89:38:3D:86:01:33:43:A8:2A:B4:C6:36:8B:41:C8:6D:FC X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/gnoWiTg9hgEzQ6gqtMY2i0HIbfw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.214.251.0/24 185.161.69.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:31:cd:60:21:1d:b8:73:03:a8:5f:54:25:f4:8f:6d:75:3f: 3a:97:d3:64:75:8f:7d:9e:fb:61:06:01:12:75:f4:24:a7:3f: aa:e1:80:cf:90:94:81:96:fc:1a:83:51:6f:75:e4:47:8c:8f: 08:35:32:74:4c:04:25:89:ad:4e:89:c7:ab:bf:61:e2:60:0e: b7:23:ca:41:af:28:fb:da:c3:a8:4e:3c:75:81:61:65:79:fd: 7e:d1:e4:62:4f:82:95:99:3f:7c:24:f0:ef:fc:96:4f:80:fb: 34:4f:ba:21:7c:7a:b8:fc:1b:b5:15:fa:2c:3d:2a:44:df:8d: c9:7f:08:22:87:80:20:60:a3:96:47:af:6f:8e:0d:e5:9d:d2: 77:44:c3:c2:4c:d7:3d:5b:52:62:64:60:59:ee:a5:26:5a:62: 6b:90:08:be:1d:48:ca:a5:50:30:f8:95:7e:78:42:db:eb:1b: 97:f7:f4:30:1b:fc:f3:ed:81:ed:38:bc:fc:06:79:12:c5:71: 42:c9:72:15:bb:85:b6:6f:d9:d1:fa:c4:9f:de:9f:b5:ca:bc: d5:c1:72:19:b6:8e:99:df:45:e8:c0:27:ec:5a:e5:7f:bb:b0: d4:95:a7:fc:ab:9b:44:c6:e4:51:cc:f0:ee:3e:6d:9d:9f:16: 36:c8:89:92 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsIVag0VLi67bkKZm8eaw5dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjUxMjEwMTI1NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjdhMTY4OTM4M2Q4NjAxMzM0M2E4MmFiNGM2MzY4YjQxYzg2ZGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU6pngJTGTiP4yBal/K29k2SVyiD uh030FD5Rw9/y7sO+PPGkMtLJoy8e/ZMZOHtb8NgXWR2klhd74mFka4V+j1HqPwT eLAySogj3NfnqCN6k9Cl/Z+rbXZgM2U2uyNbnEt5dZ9QOX6lcZTWaubcnkV7pRSi Zzyiax6GbkqIB6SFFvfbAWml/+RjvxBc9MAIEfx9UYNcB4R7XZa2Y2CbsDepddmE kOzH9l0acatWkeMzDRNmNJ6fRLsuDVVDduPaBeOGev7Unt8XidQYwM3ZNAgYAaUw O03rh5aMdY7bUhSk7eWcNAOEn+7lqAbqVJGvY7Bdzvs4y25e7qtySpnzhQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIJ6Fok4PYYBM0OoKrTGNotByG38MB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvZ25vV2lUZzloZ0V6UTZncXRNWTJpMEhJYmZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAX9b7AwQA uaFFMA0GCSqGSIb3DQEBCwUAA4IBAQAbMc1gIR24cwOoX1Ql9I9tdT86l9NkdY99 nvthBgESdfQkpz+q4YDPkJSBlvwag1FvdeRHjI8INTJ0TAQlia1Oicerv2HiYA63 I8pBryj72sOoTjx1gWFlef1+0eRiT4KVmT98JPDv/JZPgPs0T7ohfHq4/Bu1Ffos PSpE343Jfwgih4AgYKOWR69vjg3lndJ3RMPCTNc9W1JiZGBZ7qUmWmJrkAi+HUjK pVAw+JV+eELb6xuX9/QwG/zz7YHtOLz8BnkSxXFCyXIVu4W2b9nR+sSf3p+1yrzV wXIZto6Z30XowCfsWuV/u7DUlaf8q5tExuRRzPDuPm2dnxY2yImS -----END CERTIFICATE-----Generated at Sat Dec 13 12:40:35 2025 by rpki-client