This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_RuNT9MiWxcSqnX0lExyvMzs8wk.roa File: _RuNT9MiWxcSqnX0lExyvMzs8wk.roa (raw, json) Hash identifier: 28gd0ONFmtedlcHAJtbBVytAkF7+cXByxr9HAT0dg5s= Subject key identifier: FD:1B:8D:4F:D3:22:5B:17:12:AA:75:F4:94:4C:72:BC:CC:EC:F3:09 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019AA0F38A2BBADA7A812CDB6EF5F7F441C6 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_RuNT9MiWxcSqnX0lExyvMzs8wk.roa Signing time: Thu 20 Nov 2025 11:08:26 +0000 ROA not before: Thu 20 Nov 2025 11:08:26 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21859 IP address blocks: 185.223.82.0/24 maxlen: 24 185.227.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 21 Nov 2025 09:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:f3:8a:2b:ba:da:7a:81:2c:db:6e:f5:f7:f4:41:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Nov 20 11:08:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fd1b8d4fd3225b1712aa75f4944c72bcccecf309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:eb:8a:e0:3c:73:b6:cf:ca:d7:4e:b5:da:91: 17:fe:52:62:c2:04:58:09:c4:75:d9:cb:c4:4e:05: 43:7d:aa:ed:13:b6:c3:2e:b8:c0:8c:19:61:7b:30: 7b:df:21:83:2a:11:cf:6e:3a:2f:6d:b6:8d:5f:3d: 5f:33:8e:aa:35:fe:bb:d9:d5:bb:c2:80:32:50:96: 16:0f:32:92:18:d9:9a:3f:bc:79:14:4b:c5:c3:6a: 82:09:32:d9:72:dc:b3:ff:36:ee:1e:00:74:9b:ff: 7a:86:1c:61:ae:88:39:2e:af:24:21:69:28:84:4a: 18:a6:34:f3:5e:72:1c:a1:3b:11:24:13:dc:88:f3: 0c:8a:6a:32:c1:c0:1b:9e:57:57:cd:7d:c9:fa:c8: e6:69:b2:be:21:3f:42:5e:0b:ac:82:04:87:0b:40: 1e:52:89:50:b1:ee:4e:72:cc:62:0e:68:f3:50:8c: 14:cc:b2:84:17:d4:7a:b2:2c:2e:a6:ab:16:12:7d: ca:b5:34:77:5d:37:c9:23:58:06:12:22:eb:17:5a: 8f:f5:7c:43:6e:f6:60:ed:3d:c1:aa:8e:78:02:c9: 1c:b8:81:20:fd:47:85:7d:b7:af:93:4c:74:f5:33: c6:2a:e5:fc:07:75:4a:ff:c2:cc:51:83:36:a4:fc: 8a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:1B:8D:4F:D3:22:5B:17:12:AA:75:F4:94:4C:72:BC:CC:EC:F3:09 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_RuNT9MiWxcSqnX0lExyvMzs8wk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.223.82.0/24 185.227.144.0/24 Signature Algorithm: sha256WithRSAEncryption 08:e1:1b:6f:35:e8:42:80:0a:87:40:9f:13:f1:96:23:89:97: d1:16:8c:81:56:b3:d9:2a:81:13:e0:44:a6:be:6b:37:e8:74: fa:38:a6:b7:07:dd:28:be:4f:58:4e:e4:13:76:d9:05:be:5d: 1b:3f:1f:9e:97:54:cc:91:76:c9:66:f1:41:d9:76:5f:14:a3: d0:3a:ff:a8:c3:78:4d:c5:6f:8e:3b:73:fd:bf:51:f4:bd:49: 55:e1:1e:9e:56:33:06:b3:46:2a:8b:b4:09:e9:3e:23:5d:6a: 74:91:00:5c:b7:2d:a7:be:dc:8b:ec:c5:80:5d:13:53:4b:57: 4f:1a:bb:01:22:3a:11:9a:ff:09:03:31:ef:e4:d8:1d:e8:30: fb:b5:2b:da:52:79:94:c7:18:2d:18:b7:8e:12:f3:be:f9:93: e3:60:2e:32:21:c2:68:17:a5:73:40:ac:02:f2:cc:37:cc:e8: b4:01:f9:3a:5e:f3:11:08:db:7f:66:f8:36:fa:33:22:58:26: 36:16:e9:f6:92:e0:ff:53:b3:c4:41:9e:19:ab:dd:37:e3:81: 5f:5e:8d:8c:5f:01:0e:9e:2b:1e:d9:6c:fa:ea:d9:ae:c7:d4: 56:9c:6c:d6:e6:2c:b5:70:5b:11:97:d6:51:e4:63:24:5c:ea: a2:4c:c3:50 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqg84orutp6gSzbbvX39EHGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjUxMTIwMTEwODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDFiOGQ0ZmQzMjI1YjE3MTJhYTc1ZjQ5NDRjNzJiY2NjZWNmMzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuuK4Dxzts/K10612pEX/lJiwgRY CcR12cvETgVDfartE7bDLrjAjBlhezB73yGDKhHPbjovbbaNXz1fM46qNf672dW7 woAyUJYWDzKSGNmaP7x5FEvFw2qCCTLZctyz/zbuHgB0m/96hhxhrog5Lq8kIWko hEoYpjTzXnIcoTsRJBPciPMMimoywcAbnldXzX3J+sjmabK+IT9CXgusggSHC0Ae UolQse5OcsxiDmjzUIwUzLKEF9R6siwupqsWEn3KtTR3XTfJI1gGEiLrF1qP9XxD bvZg7T3Bqo54AskcuIEg/UeFfbevk0x09TPGKuX8B3VK/8LMUYM2pPyK3wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP0bjU/TIlsXEqp19JRMcrzM7PMJMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvX1J1TlQ5TWlXeGNTcW5YMGxFeHl2TXpzOHdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAud9SAwQA ueOQMA0GCSqGSIb3DQEBCwUAA4IBAQAI4RtvNehCgAqHQJ8T8ZYjiZfRFoyBVrPZ KoET4ESmvms36HT6OKa3B90ovk9YTuQTdtkFvl0bPx+el1TMkXbJZvFB2XZfFKPQ Ov+ow3hNxW+OO3P9v1H0vUlV4R6eVjMGs0Yqi7QJ6T4jXWp0kQBcty2nvtyL7MWA XRNTS1dPGrsBIjoRmv8JAzHv5Ngd6DD7tSvaUnmUxxgtGLeOEvO++ZPjYC4yIcJo F6VzQKwC8sw3zOi0Afk6XvMRCNt/Zvg2+jMiWCY2Fun2kuD/U7PEQZ4Zq90344Ff Xo2MXwEOnise2Wz66tmux9RWnGzW5iy1cFsRl9ZR5GMkXOqiTMNQ -----END CERTIFICATE-----Generated at Thu Nov 20 14:02:00 2025 by rpki-client