This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/l2K3UPPwWSak00nH0k5g-UJha88.roa File: l2K3UPPwWSak00nH0k5g-UJha88.roa (raw, json) Hash identifier: MIgrKmbxIErs2DaTxprrSlP7xibsEN8jyV7iAc3QerY= Subject key identifier: 97:62:B7:50:F3:F0:59:26:A4:D3:49:C7:D2:4E:60:F9:42:61:6B:CF Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019ADADCF0A7C119C4003751F49DF88334EF Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/l2K3UPPwWSak00nH0k5g-UJha88.roa Signing time: Mon 01 Dec 2025 17:01:43 +0000 ROA not before: Mon 01 Dec 2025 17:01:43 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 33993 IP address blocks: 2.56.178.0/24 maxlen: 24 45.12.114.0/24 maxlen: 24 45.12.115.0/24 maxlen: 24 45.128.49.0/24 maxlen: 24 45.128.53.0/24 maxlen: 24 141.98.188.0/24 maxlen: 24 141.98.189.0/24 maxlen: 24 141.98.190.0/24 maxlen: 24 141.98.191.0/24 maxlen: 24 171.22.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 09:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:dc:f0:a7:c1:19:c4:00:37:51:f4:9d:f8:83:34:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Dec 1 17:01:43 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9762b750f3f05926a4d349c7d24e60f942616bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f5:1d:d1:87:0c:3f:56:7e:f6:ab:be:d3:9a: cb:72:2a:54:5b:aa:30:e0:aa:89:22:c3:9f:db:ec: e8:f4:8b:63:22:88:b4:31:5c:92:f0:d4:00:ae:bf: 32:49:e5:fc:63:2b:2d:fc:29:56:35:d7:5d:cd:fc: fb:ec:1b:e6:2c:a0:b9:f6:71:f3:27:b0:e9:f1:68: 61:b6:dd:c2:3f:ef:38:31:44:5f:4e:59:b3:2b:05: d3:0e:17:7f:06:3f:ee:84:d2:9b:07:3f:4e:ac:bc: 5d:d1:eb:5f:17:da:07:02:7a:79:ef:4d:86:4b:27: 1e:6b:b9:fa:7b:c5:f1:b7:da:93:f1:a9:07:9a:2f: 1d:b3:02:67:fe:c3:c8:2b:4d:58:41:95:02:b4:5c: 58:89:e9:82:fa:12:a8:6f:42:e0:a4:18:cc:6b:55: ac:cb:8a:2b:bd:18:49:20:02:d6:8d:90:96:ba:91: dd:38:41:a1:8e:1b:4d:54:85:e0:68:f7:7f:2f:08: 88:a2:2a:12:62:d9:b4:11:31:04:f8:2d:37:08:19: 3c:10:98:08:8b:3f:35:d6:c5:5d:17:ee:f8:fe:2e: 53:14:87:d3:77:d6:54:b1:dd:d4:f0:60:4a:04:99: c6:a5:e0:19:20:0f:66:09:bf:8a:e4:18:52:06:c7: 05:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:62:B7:50:F3:F0:59:26:A4:D3:49:C7:D2:4E:60:F9:42:61:6B:CF X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/l2K3UPPwWSak00nH0k5g-UJha88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.178.0/24 45.12.114.0/23 45.128.49.0/24 45.128.53.0/24 141.98.188.0/22 171.22.119.0/24 Signature Algorithm: sha256WithRSAEncryption d0:ce:9e:f5:3d:68:18:00:d2:62:90:bf:84:f0:20:fe:60:20: 6d:24:37:69:c3:a7:bd:02:09:b9:77:81:2d:15:f1:2f:7f:f7: ba:4c:41:68:87:86:b7:89:7c:ae:b7:8e:97:a4:44:a2:e1:1f: b6:4c:cf:9d:a7:98:77:c0:42:ad:79:ad:37:e4:5f:f0:a4:61: 37:2f:8a:9a:04:57:5e:70:74:43:00:f5:17:05:07:6d:50:d6: cc:41:02:b0:c5:56:3a:70:82:2f:3c:ff:80:ee:f0:0e:67:52: a3:66:3a:bd:6b:8d:78:20:a2:1f:f7:4d:dd:a7:0e:53:c1:8f: 3c:dc:f4:51:d2:d1:cb:6a:5a:88:fa:fe:b6:2f:69:99:53:9f: 38:22:a1:f5:04:5d:da:ed:15:84:7b:47:ee:b3:54:cb:f4:25: c1:56:6b:0f:30:79:ac:4d:c2:f1:8e:59:fd:30:59:b0:3b:21: ec:c4:96:99:ab:90:4b:ab:7f:a7:1f:ba:f6:06:66:8c:aa:a1: 46:7a:36:5c:69:b3:bb:46:c8:ef:68:a3:11:bd:94:77:b7:b8: ea:d5:78:1a:93:84:0f:9a:bc:1c:5a:c6:1d:91:e2:05:c2:65: 30:83:30:e8:ad:67:7e:ca:f8:05:83:1c:61:b2:03:79:31:ca: 3b:c4:ac:bb -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZra3PCnwRnEADdR9J34gzTvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjUxMjAxMTcwMTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzYyYjc1MGYzZjA1OTI2YTRkMzQ5YzdkMjRlNjBmOTQyNjE2YmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/Ud0YcMP1Z+9qu+05rLcipUW6ow 4KqJIsOf2+zo9ItjIoi0MVyS8NQArr8ySeX8Yyst/ClWNdddzfz77BvmLKC59nHz J7Dp8Whhtt3CP+84MURfTlmzKwXTDhd/Bj/uhNKbBz9OrLxd0etfF9oHAnp5702G Sycea7n6e8Xxt9qT8akHmi8dswJn/sPIK01YQZUCtFxYiemC+hKob0LgpBjMa1Ws y4orvRhJIALWjZCWupHdOEGhjhtNVIXgaPd/LwiIoioSYtm0ETEE+C03CBk8EJgI iz811sVdF+74/i5TFIfTd9ZUsd3U8GBKBJnGpeAZIA9mCb+K5BhSBscF/QIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFJdit1Dz8FkmpNNJx9JOYPlCYWvPMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvbDJLM1VQUHdXU2FrMDBuSDBrNWctVUpoYTg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAAjiyAwQB LQxyAwQALYAxAwQALYA1AwQCjWK8AwQAqxZ3MA0GCSqGSIb3DQEBCwUAA4IBAQDQ zp71PWgYANJikL+E8CD+YCBtJDdpw6e9Agm5d4EtFfEvf/e6TEFoh4a3iXyut46X pESi4R+2TM+dp5h3wEKtea035F/wpGE3L4qaBFdecHRDAPUXBQdtUNbMQQKwxVY6 cIIvPP+A7vAOZ1KjZjq9a414IKIf903dpw5TwY883PRR0tHLalqI+v62L2mZU584 IqH1BF3a7RWEe0fus1TL9CXBVmsPMHmsTcLxjln9MFmwOyHsxJaZq5BLq3+nH7r2 BmaMqqFGejZcabO7RsjvaKMRvZR3t7jq1Xgak4QPmrwcWsYdkeIFwmUwgzDorWd+ yvgFgxxhsgN5Mco7xKy7 -----END CERTIFICATE-----Generated at Fri Dec 5 16:41:13 2025 by rpki-client