This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/x5WuN2Ct0wQSQ5pHFLuLvj2Jpn0.roa File: x5WuN2Ct0wQSQ5pHFLuLvj2Jpn0.roa (raw, json) Hash identifier: i7EjevwEOq1w9owKcdSrzgI0hrXPahWhix+UMJ8xQyY= Subject key identifier: C7:95:AE:37:60:AD:D3:04:12:43:9A:47:14:BB:8B:BE:3D:89:A6:7D Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B0CED33161F9CDE10501B6AD11D6BEA15 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/x5WuN2Ct0wQSQ5pHFLuLvj2Jpn0.roa Signing time: Thu 11 Dec 2025 10:20:30 +0000 ROA not before: Thu 11 Dec 2025 10:20:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202736 IP address blocks: 185.225.1.0/24 maxlen: 24 194.5.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 04:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:ed:33:16:1f:9c:de:10:50:1b:6a:d1:1d:6b:ea:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Dec 11 10:20:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c795ae3760add30412439a4714bb8bbe3d89a67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:57:15:7a:75:03:aa:ac:aa:3d:b6:94:10:52: 81:a3:fb:49:74:36:33:a0:45:31:f5:28:60:c8:05: e6:30:d5:c5:7c:60:15:44:4a:0b:68:59:68:f0:16: 37:28:7e:d8:0e:23:95:6b:85:52:6e:a1:22:5f:e9: 14:79:c9:8f:72:54:13:00:f8:ad:4f:e5:a8:58:52: a0:f0:72:41:87:70:78:ad:6f:2a:7c:70:d3:3f:36: e4:d4:92:16:9e:bb:c1:31:81:54:41:e0:ff:e3:15: 33:1a:72:42:78:a1:f3:99:e0:fb:06:19:80:af:6b: 44:25:9c:ad:bd:51:ef:4c:a0:9d:77:e4:d2:15:ca: ad:9c:21:fd:48:66:ed:8d:89:8b:c4:48:91:69:de: cb:3a:ea:da:7c:bc:c0:13:28:bd:8b:c0:09:f6:66: 3b:e0:f4:22:a6:3e:f2:5d:cc:8c:66:5b:28:95:f0: db:8e:f3:fe:ff:4b:21:62:78:67:05:86:3f:25:2a: 5e:5d:68:d9:cc:e1:c5:11:27:aa:13:0b:37:22:6d: be:12:04:5c:39:ad:0d:51:90:d0:11:21:54:ea:11: 8a:97:e1:4c:dd:af:a8:b0:68:e5:87:3b:2c:0c:72: 66:f2:44:31:1f:5e:3c:9d:e6:d3:5d:91:49:ec:a4: 74:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:95:AE:37:60:AD:D3:04:12:43:9A:47:14:BB:8B:BE:3D:89:A6:7D X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/x5WuN2Ct0wQSQ5pHFLuLvj2Jpn0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.1.0/24 194.5.64.0/24 Signature Algorithm: sha256WithRSAEncryption 34:a5:23:7f:a5:96:39:5c:b3:ee:98:69:1b:c6:e9:db:84:18: c6:70:5b:36:1a:84:0d:f6:57:59:24:ce:66:45:da:e8:b9:57: 97:7a:4d:a8:a8:22:75:28:c2:96:16:7f:e8:b9:27:a7:5b:fc: e8:56:4d:4c:8a:33:da:ac:33:f4:7d:dd:9e:0b:52:ca:51:5b: 6c:13:fb:34:2d:78:07:7d:24:5e:40:74:c5:ec:c3:61:34:16: 79:67:4b:87:85:40:7f:06:c8:89:18:06:5d:a4:8e:87:c8:96: 31:a8:d3:5d:1d:42:ea:36:1e:27:99:aa:c5:bc:8f:f6:ef:d6: 94:a7:e7:61:27:a7:9b:5b:b4:ae:52:00:8b:1e:0a:54:db:79: a9:ac:c1:68:0f:db:f8:95:93:c0:16:1b:84:12:5d:ec:a5:d1: 91:dc:af:d4:12:49:ae:08:14:d6:df:35:f5:1a:6f:76:cc:45: 16:f7:76:18:76:e6:15:64:c1:54:e3:43:31:f2:0c:5e:bf:56: 9f:28:7b:21:28:d5:73:17:98:d1:cd:7d:35:32:83:3f:35:34: dd:2d:ac:78:19:2a:8c:07:0a:bc:9e:42:de:e7:14:03:95:eb: fd:f6:60:15:88:d4:30:02:38:62:bb:53:6d:5e:6a:c0:70:c2: c4:7d:c7:8a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsM7TMWH5zeEFAbatEda+oVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjUxMjExMTAyMDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzk1YWUzNzYwYWRkMzA0MTI0MzlhNDcxNGJiOGJiZTNkODlhNjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1cVenUDqqyqPbaUEFKBo/tJdDYz oEUx9ShgyAXmMNXFfGAVREoLaFlo8BY3KH7YDiOVa4VSbqEiX+kUecmPclQTAPit T+WoWFKg8HJBh3B4rW8qfHDTPzbk1JIWnrvBMYFUQeD/4xUzGnJCeKHzmeD7BhmA r2tEJZytvVHvTKCdd+TSFcqtnCH9SGbtjYmLxEiRad7LOurafLzAEyi9i8AJ9mY7 4PQipj7yXcyMZlsolfDbjvP+/0shYnhnBYY/JSpeXWjZzOHFESeqEws3Im2+EgRc Oa0NUZDQESFU6hGKl+FM3a+osGjlhzssDHJm8kQxH148nebTXZFJ7KR0AQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMeVrjdgrdMEEkOaRxS7i749iaZ9MB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEveDVXdU4yQ3Qwd1FTUTVwSEZMdUx2ajJKcG4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAueEBAwQA wgVAMA0GCSqGSIb3DQEBCwUAA4IBAQA0pSN/pZY5XLPumGkbxunbhBjGcFs2GoQN 9ldZJM5mRdrouVeXek2oqCJ1KMKWFn/ouSenW/zoVk1MijParDP0fd2eC1LKUVts E/s0LXgHfSReQHTF7MNhNBZ5Z0uHhUB/BsiJGAZdpI6HyJYxqNNdHULqNh4nmarF vI/279aUp+dhJ6ebW7SuUgCLHgpU23mprMFoD9v4lZPAFhuEEl3spdGR3K/UEkmu CBTW3zX1Gm92zEUW93YYduYVZMFU40Mx8gxev1afKHshKNVzF5jRzX01MoM/NTTd Lax4GSqMBwq8nkLe5xQDlev99mAViNQwAjhiu1NtXmrAcMLEfceK -----END CERTIFICATE-----Generated at Fri Dec 12 09:46:17 2025 by rpki-client