This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gIl1ZzrENXwuHqUbd0Y3jln0C2k.roa File: gIl1ZzrENXwuHqUbd0Y3jln0C2k.roa (raw, json) Hash identifier: CjwCOAXYkThFP1cODJCEGFd5Cj3S18SL72N8AzrX+BA= Subject key identifier: 80:89:75:67:3A:C4:35:7C:2E:1E:A5:1B:77:46:37:8E:59:F4:0B:69 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019AE88B38BFB12C4154C124AF05F35A7739 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gIl1ZzrENXwuHqUbd0Y3jln0C2k.roa Signing time: Thu 04 Dec 2025 08:47:09 +0000 ROA not before: Thu 04 Dec 2025 08:47:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 28753 IP address blocks: 185.155.203.0/24 maxlen: 24 2a04:9f40::/29 maxlen: 29 2a05:b900::/29 maxlen: 29 2a06:1184:101::/48 maxlen: 48 2a06:3bc0::/29 maxlen: 29 2a07:8a40::/29 maxlen: 29 2a09:7b00::/29 maxlen: 29 2a09:b700::/29 maxlen: 29 2a0a:2d06:102::/48 maxlen: 48 2a0a:2d06:103::/48 maxlen: 48 2a0a:7d00::/29 maxlen: 29 2a0c:4880::/29 maxlen: 29 2a0c:7886:99::/48 maxlen: 48 2a0c:7886:100::/48 maxlen: 48 2a0e:15c7:99::/48 maxlen: 48 2a0f:17c0::/29 maxlen: 29 2a0f:1f80::/29 maxlen: 29 2a0f:2500::/29 maxlen: 29 2a0f:27c0::/29 maxlen: 29 2a0f:3640::/29 maxlen: 29 2a0f:7f00::/29 maxlen: 29 2a0f:a200::/29 maxlen: 29 2a0f:d200::/29 maxlen: 29 2a0f:db40::/29 maxlen: 29 2a10:34c0::/29 maxlen: 29 2a10:36c0::/29 maxlen: 29 2a11:8880::/29 maxlen: 29 2a12:4ac0::/29 maxlen: 29 2a12:ac43:1312::/48 maxlen: 48 2a12:ecc0:158::/48 maxlen: 48 2a12:ecc6:1312::/48 maxlen: 48 2a13:1380::/29 maxlen: 29 2a13:18c6:66::/48 maxlen: 48 2a13:18c6:88::/48 maxlen: 48 2a13:2cc0::/29 maxlen: 29 2a13:2d40::/29 maxlen: 29 2a13:2dc0::/29 maxlen: 29 2a13:2e40::/29 maxlen: 29 2a13:3040::/29 maxlen: 29 2a13:3380::/29 maxlen: 29 2a13:4900::/29 maxlen: 29 2a13:5b80::/29 maxlen: 29 2a13:7900::/29 maxlen: 29 2a13:7d80::/29 maxlen: 29 2a13:8200::/29 maxlen: 29 2a13:9080::/29 maxlen: 29 2a13:9180::/29 maxlen: 29 2a13:9480::/29 maxlen: 29 2a13:d100::/29 maxlen: 29 2a13:d700::/29 maxlen: 29 2a13:d900::/29 maxlen: 29 2a13:f900::/29 maxlen: 29 2a13:fb00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 19:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:8b:38:bf:b1:2c:41:54:c1:24:af:05:f3:5a:77:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 4 08:47:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=808975673ac4357c2e1ea51b7746378e59f40b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cb:a3:6b:0e:9e:a0:3d:90:41:2c:08:67:91: 06:70:7f:b2:11:4d:8e:5f:84:df:9d:33:02:d8:6c: 91:45:74:00:33:d6:9e:f1:69:25:a2:a1:23:d7:a4: 00:bc:5d:e5:14:bb:a9:8b:61:dd:fe:80:44:1c:eb: 06:75:9b:eb:9d:c8:ef:a7:a6:10:23:1f:12:91:dc: de:0f:16:21:98:7b:24:f8:df:d6:ed:94:c8:cb:97: 22:55:03:7e:b8:a6:f3:9c:ec:91:57:7e:f3:79:a5: f9:11:42:49:d7:27:a1:bc:ee:e7:e0:97:30:7a:ae: ee:a0:71:cf:d0:81:eb:41:f1:fc:51:7c:40:7f:fd: b8:0b:f9:96:99:a4:93:78:b9:25:79:8e:7b:ec:af: 72:15:dd:e8:4a:bf:ef:28:7e:78:b9:0e:96:b9:6b: 04:d5:39:b3:16:34:55:64:fc:93:cf:e8:fe:80:95: 89:71:e0:62:bd:08:6a:60:95:7f:f2:99:04:42:6d: 5c:12:27:9c:54:e4:c4:6a:f3:9e:89:25:15:f3:89: ee:35:d0:fe:3d:70:c7:7b:d8:42:cf:8f:e1:0e:2b: fd:75:b0:54:59:8d:c5:45:e0:9d:73:82:15:06:f6: 6f:e9:fe:77:f7:b6:41:55:fe:39:47:61:e2:d1:07: 11:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:89:75:67:3A:C4:35:7C:2E:1E:A5:1B:77:46:37:8E:59:F4:0B:69 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gIl1ZzrENXwuHqUbd0Y3jln0C2k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.203.0/24 IPv6: 2a04:9f40::/29 2a05:b900::/29 2a06:1184:101::/48 2a06:3bc0::/29 2a07:8a40::/29 2a09:7b00::/29 2a09:b700::/29 2a0a:2d06:102::/47 2a0a:7d00::/29 2a0c:4880::/29 2a0c:7886:99::/48 2a0c:7886:100::/48 2a0e:15c7:99::/48 2a0f:17c0::/29 2a0f:1f80::/29 2a0f:2500::/29 2a0f:27c0::/29 2a0f:3640::/29 2a0f:7f00::/29 2a0f:a200::/29 2a0f:d200::/29 2a0f:db40::/29 2a10:34c0::/29 2a10:36c0::/29 2a11:8880::/29 2a12:4ac0::/29 2a12:ac43:1312::/48 2a12:ecc0:158::/48 2a12:ecc6:1312::/48 2a13:1380::/29 2a13:18c6:66::/48 2a13:18c6:88::/48 2a13:2cc0::/29 2a13:2d40::/29 2a13:2dc0::/29 2a13:2e40::/29 2a13:3040::/29 2a13:3380::/29 2a13:4900::/29 2a13:5b80::/29 2a13:7900::/29 2a13:7d80::/29 2a13:8200::/29 2a13:9080::/29 2a13:9180::/29 2a13:9480::/29 2a13:d100::/29 2a13:d700::/29 2a13:d900::/29 2a13:f900::/29 2a13:fb00::/29 Signature Algorithm: sha256WithRSAEncryption 98:f1:67:b6:7f:9e:7f:e6:55:5c:d0:18:71:dc:0e:37:d0:68: 07:67:8d:42:79:35:ea:3d:de:98:cd:cb:c7:b4:1e:1a:7d:64: dc:59:6a:ea:d5:66:07:a2:f0:22:53:0e:7a:15:28:5c:86:aa: 71:b7:5c:0b:76:5c:01:de:23:84:be:5b:69:eb:33:7f:9d:10: d8:1e:93:6b:1a:5f:95:d4:4d:2d:d3:02:33:47:3e:31:4d:9a: d4:2c:a1:4c:b4:28:b0:09:fe:f7:78:cd:70:d0:5f:cc:b4:68: 23:0a:49:ea:45:84:4f:85:4d:d2:81:44:b9:95:36:7e:62:ff: 17:ac:57:89:21:52:bd:29:c0:b2:b2:be:e1:4a:d8:11:d6:69: 25:e1:92:0c:68:9f:0e:80:71:27:f6:0a:71:36:36:15:d0:a3: 27:b1:ad:d6:8c:6a:b6:2a:d1:4f:51:f1:d9:e3:2c:4e:57:4a: 9d:4d:16:67:d9:4c:d0:34:45:41:4f:1c:64:3c:3a:e6:f0:86: 5f:de:df:07:73:a5:89:9f:32:32:46:0a:aa:12:2b:8e:48:3a: d8:38:bb:6b:09:c9:54:d1:e4:b0:c6:f7:e1:0a:c9:8d:ab:01: 46:bb:68:c2:c2:03:bf:c5:b2:66:84:35:53:17:55:c5:5a:8c: b2:0c:09:91 -----BEGIN CERTIFICATE----- MIIGiDCCBXCgAwIBAgISAZroizi/sSxBVMEkrwXzWnc5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjA0MDg0NzA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDg5NzU2NzNhYzQzNTdjMmUxZWE1MWI3NzQ2Mzc4ZTU5ZjQwYjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8ujaw6eoD2QQSwIZ5EGcH+yEU2O X4TfnTMC2GyRRXQAM9ae8WkloqEj16QAvF3lFLupi2Hd/oBEHOsGdZvrncjvp6YQ Ix8SkdzeDxYhmHsk+N/W7ZTIy5ciVQN+uKbznOyRV37zeaX5EUJJ1yehvO7n4Jcw eq7uoHHP0IHrQfH8UXxAf/24C/mWmaSTeLkleY577K9yFd3oSr/vKH54uQ6WuWsE 1TmzFjRVZPyTz+j+gJWJceBivQhqYJV/8pkEQm1cEiecVOTEavOeiSUV84nuNdD+ PXDHe9hCz4/hDiv9dbBUWY3FReCdc4IVBvZv6f5397ZBVf45R2Hi0QcRIwIDAQAB o4IDlDCCA5AwHQYDVR0OBBYEFICJdWc6xDV8Lh6lG3dGN45Z9AtpMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvZ0lsMVp6ckVOWHd1SHFVYmQwWTNqbG4wQzJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBqAYIKwYBBQUHAQcBAf8EggGXMIIBkzAMBAIAATAGAwQA uZvLMIIBgQQCAAIwggF5AwUDKgSfQAMFAyoFuQADBwAqBhGEAQEDBQMqBjvAAwUD KgeKQAMFAyoJewADBQMqCbcAAwcBKgotBgECAwUDKgp9AAMFAyoMSIADBwAqDHiG AJkDBwAqDHiGAQADBwAqDhXHAJkDBQMqDxfAAwUDKg8fgAMFAyoPJQADBQMqDyfA AwUDKg82QAMFAyoPfwADBQMqD6IAAwUDKg/SAAMFAyoP20ADBQMqEDTAAwUDKhA2 wAMFAyoRiIADBQMqEkrAAwcAKhKsQxMSAwcAKhLswAFYAwcAKhLsxhMSAwUDKhMT gAMHACoTGMYAZgMHACoTGMYAiAMFAyoTLMADBQMqEy1AAwUDKhMtwAMFAyoTLkAD BQMqEzBAAwUDKhMzgAMFAyoTSQADBQMqE1uAAwUDKhN5AAMFAyoTfYADBQMqE4IA AwUDKhOQgAMFAyoTkYADBQMqE5SAAwUDKhPRAAMFAyoT1wADBQMqE9kAAwUDKhP5 AAMFAyoT+wAwDQYJKoZIhvcNAQELBQADggEBAJjxZ7Z/nn/mVVzQGHHcDjfQaAdn jUJ5Neo93pjNy8e0Hhp9ZNxZaurVZgei8CJTDnoVKFyGqnG3XAt2XAHeI4S+W2nr M3+dENgek2saX5XUTS3TAjNHPjFNmtQsoUy0KLAJ/vd4zXDQX8y0aCMKSepFhE+F TdKBRLmVNn5i/xesV4khUr0pwLKyvuFK2BHWaSXhkgxonw6AcSf2CnE2NhXQoyex rdaMarYq0U9R8dnjLE5XSp1NFmfZTNA0RUFPHGQ8Oubwhl/e3wdzpYmfMjJGCqoS K45IOtg4u2sJyVTR5LDG9+EKyY2rAUa7aMLCA7/FsmaENVMXVcVajLIMCZE= -----END CERTIFICATE-----Generated at Sat Dec 6 03:15:23 2025 by rpki-client