This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lAons6fAGmtuMpmOiJ7Hj-pcznc.roa File: lAons6fAGmtuMpmOiJ7Hj-pcznc.roa (raw, json) Hash identifier: 2ZTw1aswamheKtMbn3poVoBOFHLk61CyhVw93PzwbpI= Subject key identifier: 94:0A:27:B3:A7:C0:1A:6B:6E:32:99:8E:88:9E:C7:8F:EA:5C:CE:77 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019A772AB100861CD8B393933A07407DE393 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lAons6fAGmtuMpmOiJ7Hj-pcznc.roa Signing time: Wed 12 Nov 2025 08:24:37 +0000 ROA not before: Wed 12 Nov 2025 08:24:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209702 IP address blocks: 185.242.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 19:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:77:2a:b1:00:86:1c:d8:b3:93:93:3a:07:40:7d:e3:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Nov 12 08:24:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=940a27b3a7c01a6b6e32998e889ec78fea5cce77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:75:2e:bc:68:69:3b:9a:94:5e:6b:dc:a5:8f: 0d:7f:cf:ab:83:ce:87:96:f0:86:06:ce:96:d3:2a: 46:ff:a4:fc:59:60:88:b7:63:2a:7a:1a:54:f1:f7: db:32:a0:f5:00:17:da:37:ad:1d:c1:49:80:f0:89: 1d:27:d5:05:54:99:20:e2:92:e5:72:50:40:74:61: 46:fa:5c:68:cd:74:0c:27:c7:01:bb:f5:53:7d:26: fd:fd:7f:48:52:d1:f0:96:a0:a5:cf:fd:64:16:de: 81:2f:25:a0:2c:f8:54:0e:f4:b1:3c:a8:11:cd:bd: 70:f3:23:50:ce:2c:fa:20:af:46:d3:88:8e:e4:29: 1c:fe:8c:d4:25:dd:fb:7e:3b:aa:6f:54:00:26:1c: 5f:bd:02:fe:80:1c:c9:a2:45:22:ab:67:ab:54:bb: 78:19:ca:5c:10:33:4c:03:9f:a0:24:4d:30:89:a5: 39:0e:90:b8:39:38:40:2c:d6:b2:be:f4:ab:01:4a: f3:b7:ca:8d:5d:4c:f9:64:dd:3f:b7:5d:ad:08:e4: a6:a1:91:74:a5:c6:e4:68:0e:af:95:14:7c:39:22: e8:92:b6:90:79:cd:9e:73:2a:97:4a:99:64:0b:85: bb:9a:ef:2f:fb:71:bc:92:aa:d4:7a:df:5b:16:b1: ef:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:0A:27:B3:A7:C0:1A:6B:6E:32:99:8E:88:9E:C7:8F:EA:5C:CE:77 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lAons6fAGmtuMpmOiJ7Hj-pcznc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.246.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:df:dd:26:f0:b4:0b:dd:6b:a3:bd:1e:74:36:2f:95:f8:31: 53:19:51:fb:cd:e7:84:c5:eb:5e:0b:20:fb:b4:5c:53:e4:af: ad:ff:79:82:cc:55:2d:d0:2c:63:1a:7e:25:66:82:0c:62:00: 3d:27:d1:2b:fb:b8:3d:8d:27:ab:7d:05:88:10:be:0a:19:e0: 5c:c9:c6:5c:d4:4e:21:63:b6:c9:ea:77:e3:8a:49:4c:5c:65: ef:27:44:31:23:a8:a4:dd:82:92:46:4a:6c:11:39:a2:f5:b9: 55:df:a8:5b:1f:da:01:a9:06:0b:e9:65:1e:c6:c7:ea:e4:a9: 17:e3:94:05:5b:92:91:6a:0e:8d:df:7c:ed:ee:2e:23:ad:1e: 79:85:10:5b:51:9e:9b:41:f3:3a:aa:74:0e:51:a3:0a:74:93: 74:69:00:7f:70:24:ae:e3:ba:4d:9a:93:6c:3e:1a:5c:e3:88: 64:35:85:a8:d3:f9:96:ee:3c:ea:88:c0:47:d8:ef:c6:57:c7: 99:ba:ea:80:cc:fe:4d:5e:6a:4d:fe:7b:40:1e:0e:70:1e:37: 54:21:ef:3f:a3:4b:cf:94:c5:77:83:0c:3e:6b:40:0b:2f:22: 6c:ad:93:5c:76:3f:c5:2b:33:d8:1f:a4:9c:1a:a6:c6:b4:95: 89:53:f6:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp3KrEAhhzYs5OTOgdAfeOTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMTEyMDgyNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDBhMjdiM2E3YzAxYTZiNmUzMjk5OGU4ODllYzc4ZmVhNWNjZTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nUuvGhpO5qUXmvcpY8Nf8+rg86H lvCGBs6W0ypG/6T8WWCIt2MqehpU8ffbMqD1ABfaN60dwUmA8IkdJ9UFVJkg4pLl clBAdGFG+lxozXQMJ8cBu/VTfSb9/X9IUtHwlqClz/1kFt6BLyWgLPhUDvSxPKgR zb1w8yNQziz6IK9G04iO5Ckc/ozUJd37fjuqb1QAJhxfvQL+gBzJokUiq2erVLt4 GcpcEDNMA5+gJE0wiaU5DpC4OThALNayvvSrAUrzt8qNXUz5ZN0/t12tCOSmoZF0 pcbkaA6vlRR8OSLokraQec2ecyqXSplkC4W7mu8v+3G8kqrUet9bFrHvyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJQKJ7OnwBprbjKZjoiex4/qXM53MB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvbEFvbnM2ZkFHbXR1TXBtT2lKN0hqLXBjem5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufL2MA0G CSqGSIb3DQEBCwUAA4IBAQBf390m8LQL3WujvR50Ni+V+DFTGVH7zeeExeteCyD7 tFxT5K+t/3mCzFUt0CxjGn4lZoIMYgA9J9Er+7g9jSerfQWIEL4KGeBcycZc1E4h Y7bJ6nfjiklMXGXvJ0QxI6ik3YKSRkpsETmi9blV36hbH9oBqQYL6WUexsfq5KkX 45QFW5KRag6N33zt7i4jrR55hRBbUZ6bQfM6qnQOUaMKdJN0aQB/cCSu47pNmpNs Phpc44hkNYWo0/mW7jzqiMBH2O/GV8eZuuqAzP5NXmpN/ntAHg5wHjdUIe8/o0vP lMV3gww+a0ALLyJsrZNcdj/FKzPYH6ScGqbGtJWJU/Z1 -----END CERTIFICATE-----Generated at Sat Dec 6 03:14:40 2025 by rpki-client