This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/Pg2SMjH2JbUsvVVMZE_VQhr2wAM.roa File: Pg2SMjH2JbUsvVVMZE_VQhr2wAM.roa (raw, json) Hash identifier: Ty3UWb4K9/+Q0Fy9Hogc3ux1omBtFmBjEcK12mnGt2s= Subject key identifier: 3E:0D:92:32:31:F6:25:B5:2C:BD:55:4C:64:4F:D5:42:1A:F6:C0:03 Certificate issuer: /CN=011d88246ab57e204dea51e9243c67252dcba585 Certificate serial: 019AE488E8396B13AB2C3D0A4E595E19EB46 Authority key identifier: 01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/Pg2SMjH2JbUsvVVMZE_VQhr2wAM.roa Signing time: Wed 03 Dec 2025 14:06:08 +0000 ROA not before: Wed 03 Dec 2025 14:06:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206530 IP address blocks: 185.180.146.0/24 maxlen: 24 194.26.198.0/24 maxlen: 24 2a13:ab80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 17:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:88:e8:39:6b:13:ab:2c:3d:0a:4e:59:5e:19:eb:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=011d88246ab57e204dea51e9243c67252dcba585 Validity Not Before: Dec 3 14:06:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3e0d923231f625b52cbd554c644fd5421af6c003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:47:59:b4:91:80:9a:14:c8:cd:b4:aa:46:4f: bb:13:16:a2:57:c0:a4:9e:57:d6:86:80:08:b9:ad: 3b:7f:44:a0:57:52:15:0d:75:b4:90:05:5d:95:1f: 92:45:89:83:a4:bf:2b:16:2d:c7:e5:fd:26:04:58: c3:72:65:b4:55:50:b2:d9:04:37:38:bd:7d:fc:63: 56:b1:3b:5a:43:3a:6e:95:4e:05:be:0c:e3:7a:51: 12:0f:1b:a7:53:87:32:14:7c:50:ca:33:51:75:a4: 27:9e:05:7f:64:d1:ed:8c:78:8f:c9:2a:a2:29:f5: 9d:64:ad:f1:89:bc:da:52:96:b3:9e:09:55:69:0f: 94:44:c7:86:97:80:4b:b7:08:34:01:dc:a2:73:2d: fb:42:2f:8c:19:51:ff:86:d9:08:dd:18:ac:9c:78: ef:91:16:ce:a5:a0:d9:ab:ab:52:c0:2c:b4:a0:ac: f7:6b:e1:ad:cf:90:cf:32:98:35:2f:c3:f6:e2:28: 7b:1f:55:ef:23:c7:bd:23:9c:bd:a2:8d:a0:03:f0: e9:4b:4a:d1:94:ed:1c:0f:da:b2:3e:35:c5:bd:44: aa:d8:a8:3f:07:47:02:9c:49:05:64:78:2e:07:c2: 4f:fb:d2:b3:c1:ab:12:51:8b:a6:20:f9:b5:87:f6: 55:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:0D:92:32:31:F6:25:B5:2C:BD:55:4C:64:4F:D5:42:1A:F6:C0:03 X509v3 Authority Key Identifier: keyid:01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/Pg2SMjH2JbUsvVVMZE_VQhr2wAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.180.146.0/24 194.26.198.0/24 IPv6: 2a13:ab80::/32 Signature Algorithm: sha256WithRSAEncryption 47:16:08:fa:57:a4:90:9d:d4:01:af:74:55:c3:1a:cd:05:e1: 3b:18:72:38:61:a5:47:ff:89:e0:7b:e8:fc:5d:66:24:e6:69: b0:7a:e0:13:8a:fc:cd:4e:2c:1e:d8:65:22:ee:18:0e:7e:d3: d3:87:5b:01:8a:75:fd:74:19:dc:74:a6:a1:49:7e:38:e2:1e: 0f:c9:ab:66:7e:25:03:29:68:87:8c:33:0e:8b:65:ba:9a:fa: 6a:41:b3:3c:d5:1b:cc:ce:f6:fb:f9:d2:18:7c:f0:35:0f:22: 17:03:98:ac:9b:50:ef:e4:d4:b3:87:77:ec:c0:03:1b:51:f8: 85:b0:7e:36:f8:32:19:2d:1b:a8:07:25:13:cc:15:53:30:86: f6:7d:80:e1:01:84:77:61:b0:1f:91:9d:7e:86:2d:0b:bb:68: 80:d1:00:59:81:ad:d7:8c:fe:03:14:c4:43:a3:d5:60:4e:9c: 64:09:3a:43:ea:13:a7:8b:bf:65:83:25:7e:66:95:3a:b3:c0: d9:02:b9:77:78:a1:75:d0:83:b5:dd:59:b2:f9:18:c9:aa:3c: c3:4d:f1:e7:91:c0:23:55:d2:d7:ad:79:7c:02:0a:51:3c:d1: 5b:d5:80:72:0a:0f:a1:2b:90:ed:76:2c:25:49:d9:e8:8f:b3: 28:e6:6a:4a -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZrkiOg5axOrLD0KTlleGetGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMWQ4ODI0NmFiNTdlMjA0ZGVhNTFlOTI0M2M2NzI1MmRj YmE1ODUwHhcNMjUxMjAzMTQwNjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTBkOTIzMjMxZjYyNWI1MmNiZDU1NGM2NDRmZDU0MjFhZjZjMDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikdZtJGAmhTIzbSqRk+7ExaiV8Ck nlfWhoAIua07f0SgV1IVDXW0kAVdlR+SRYmDpL8rFi3H5f0mBFjDcmW0VVCy2QQ3 OL19/GNWsTtaQzpulU4FvgzjelESDxunU4cyFHxQyjNRdaQnngV/ZNHtjHiPySqi KfWdZK3xibzaUpaznglVaQ+URMeGl4BLtwg0Adyicy37Qi+MGVH/htkI3RisnHjv kRbOpaDZq6tSwCy0oKz3a+Gtz5DPMpg1L8P24ih7H1XvI8e9I5y9oo2gA/DpS0rR lO0cD9qyPjXFvUSq2Kg/B0cCnEkFZHguB8JP+9KzwasSUYumIPm1h/ZVxwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFD4NkjIx9iW1LL1VTGRP1UIa9sADMB8GA1UdIwQY MBaAFAEdiCRqtX4gTepR6SQ8ZyUty6WFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVIySUpHcTFmaUJONmxIcEpEeG5KUzNMcFlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jZDk5NzYtMmNkMi00NjZmLWFiZTct MDA4YTgwZjZmZjExLzEvUGcyU01qSDJKYlVzdlZWTVpFX1ZRaHIyd0FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jZDk5NzYtMmNkMi00NjZmLWFiZTctMDA4YTgwZjZmZjEx LzEvQVIySUpHcTFmaUJONmxIcEpEeG5KUzNMcFlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAubSSAwQA whrGMA0EAgACMAcDBQAqE6uAMA0GCSqGSIb3DQEBCwUAA4IBAQBHFgj6V6SQndQB r3RVwxrNBeE7GHI4YaVH/4nge+j8XWYk5mmweuATivzNTiwe2GUi7hgOftPTh1sB inX9dBncdKahSX444h4PyatmfiUDKWiHjDMOi2W6mvpqQbM81RvMzvb7+dIYfPA1 DyIXA5ism1Dv5NSzh3fswAMbUfiFsH42+DIZLRuoByUTzBVTMIb2fYDhAYR3YbAf kZ1+hi0Lu2iA0QBZga3XjP4DFMRDo9VgTpxkCTpD6hOni79lgyV+ZpU6s8DZArl3 eKF10IO13Vmy+RjJqjzDTfHnkcAjVdLXrXl8AgpRPNFb1YByCg+hK5DtdiwlSdno j7Mo5mpK -----END CERTIFICATE-----Generated at Wed Dec 17 03:43:43 2025 by rpki-client