This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/ERmIvRGk-00ya9qPgHlmyIlXqNM.roa File: ERmIvRGk-00ya9qPgHlmyIlXqNM.roa (raw, json) Hash identifier: 7Oj9dL8nIHY1zRXrWVKqgUCFNfjEYqWZkAH6EiPqwQs= Subject key identifier: 11:19:88:BD:11:A4:FB:4D:32:6B:DA:8F:80:79:66:C8:89:57:A8:D3 Certificate issuer: /CN=c4c032935e9633df8b19925df0bd25b81c6863b7 Certificate serial: 019B0E799DAA175947B458232BD8F3BAA784 Authority key identifier: C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/ERmIvRGk-00ya9qPgHlmyIlXqNM.roa Signing time: Thu 11 Dec 2025 17:33:29 +0000 ROA not before: Thu 11 Dec 2025 17:33:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59909 IP address blocks: 168.222.188.0/22 maxlen: 22 185.67.108.0/22 maxlen: 24 185.67.108.0/24 maxlen: 24 185.67.109.0/24 maxlen: 24 185.67.110.0/24 maxlen: 24 185.67.111.0/24 maxlen: 24 2a05:e40::/29 maxlen: 38 2a05:e40:1000::/38 maxlen: 38 2a05:e40:2000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 05:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:79:9d:aa:17:59:47:b4:58:23:2b:d8:f3:ba:a7:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4c032935e9633df8b19925df0bd25b81c6863b7 Validity Not Before: Dec 11 17:33:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=111988bd11a4fb4d326bda8f807966c88957a8d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ae:cc:0a:a5:b9:dc:ee:e1:d3:37:9d:22:05: b3:74:63:f1:71:86:a2:af:1d:15:92:da:f0:18:0c: a4:ed:e1:d8:5f:04:3d:4a:4f:57:1e:32:be:a5:51: 19:67:74:78:3b:fc:b9:a0:23:a7:b7:47:52:57:24: a6:73:1b:db:18:eb:67:4b:65:a2:6b:55:b7:29:d2: 7b:88:d6:75:08:19:2f:f8:4b:5b:36:cb:d3:5d:cc: c0:fa:91:11:b7:8f:44:b3:fc:3d:72:6f:70:9b:71: e7:04:dc:f0:8e:de:c5:00:72:38:be:73:0b:bb:70: c7:4f:2c:1a:2e:ee:92:21:d9:71:df:10:49:3a:d9: 5f:38:ae:85:48:a2:91:95:f4:59:75:1d:b1:33:0f: c4:ee:84:dd:b0:f3:97:f2:fd:bd:da:84:31:28:a3: 59:08:50:a8:38:e4:0a:db:53:8e:56:a8:56:c1:e4: 39:5e:96:f3:be:36:b8:0c:95:e6:cf:6b:c0:98:1b: d2:60:5e:2d:64:51:40:65:2e:cf:5c:d9:91:ef:ea: 8c:4a:e5:9f:cd:e6:89:30:81:a0:85:82:c7:71:2d: e8:e8:55:c6:e3:18:d6:41:4b:33:8f:3d:9b:54:c1: ec:4b:0b:b1:39:11:fd:ec:6a:0b:d7:7c:25:48:90: 21:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:19:88:BD:11:A4:FB:4D:32:6B:DA:8F:80:79:66:C8:89:57:A8:D3 X509v3 Authority Key Identifier: keyid:C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/ERmIvRGk-00ya9qPgHlmyIlXqNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.222.188.0/22 185.67.108.0/22 IPv6: 2a05:e40::/29 Signature Algorithm: sha256WithRSAEncryption 8b:2d:3d:74:21:7f:93:ff:1e:a5:42:49:e0:f2:c6:4f:2d:47: e5:d4:42:fd:b1:9a:49:4c:69:74:77:e4:2f:b9:a4:aa:e9:d2: 57:99:f7:ae:0e:db:bc:2e:c1:9c:86:11:8a:17:06:f7:65:c6: 45:74:da:4d:14:b7:83:54:bf:ae:9a:43:ff:7d:9f:58:91:a3: cb:77:46:d5:ef:d2:0a:73:e6:93:8c:a9:65:1e:ca:f9:4d:90: c8:a7:45:e6:4a:3b:aa:ff:8c:2e:60:a5:bd:bd:84:a9:18:88: 6e:e1:2a:02:cb:ab:d5:f3:80:ba:9d:a3:b3:c1:e2:e6:03:06: d6:44:f5:9b:c3:f1:2b:54:74:44:78:48:98:a7:ed:7d:ad:53: 20:8b:96:19:94:90:c9:45:b7:66:9a:5a:36:f5:88:48:74:aa: 52:18:76:3f:c2:53:23:20:f6:51:e0:9a:bd:42:f9:ff:b0:19: 63:80:1a:74:ce:d7:3a:5e:be:67:d2:4f:28:d4:15:dd:6b:2a: bf:47:fd:66:e0:02:bb:53:61:f3:9c:e3:f5:c9:61:2e:ab:a1: 7f:91:b8:f4:21:ae:1c:6b:15:04:ff:58:27:b7:78:f8:49:64: 59:e5:de:f8:14:cd:58:88:6c:56:93:4a:c4:0e:72:78:3f:7c: 17:4c:83:ab -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZsOeZ2qF1lHtFgjK9jzuqeEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YzAzMjkzNWU5NjMzZGY4YjE5OTI1ZGYwYmQyNWI4MWM2 ODYzYjcwHhcNMjUxMjExMTczMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTE5ODhiZDExYTRmYjRkMzI2YmRhOGY4MDc5NjZjODg5NTdhOGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK7MCqW53O7h0zedIgWzdGPxcYai rx0VktrwGAyk7eHYXwQ9Sk9XHjK+pVEZZ3R4O/y5oCOnt0dSVySmcxvbGOtnS2Wi a1W3KdJ7iNZ1CBkv+EtbNsvTXczA+pERt49Es/w9cm9wm3HnBNzwjt7FAHI4vnML u3DHTywaLu6SIdlx3xBJOtlfOK6FSKKRlfRZdR2xMw/E7oTdsPOX8v292oQxKKNZ CFCoOOQK21OOVqhWweQ5Xpbzvja4DJXmz2vAmBvSYF4tZFFAZS7PXNmR7+qMSuWf zeaJMIGghYLHcS3o6FXG4xjWQUszjz2bVMHsSwuxORH97GoL13wlSJAhiQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBEZiL0RpPtNMmvaj4B5ZsiJV6jTMB8GA1UdIwQY MBaAFMTAMpNeljPfixmSXfC9JbgcaGO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE1BeWsxNldNOS1MR1pKZDhMMGx1QnhvWTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lMDAxMzktZWRiNi00MTFiLWE5YjIt OWVhOWNhMTc0MmRiLzEvRVJtSXZSR2stMDB5YTlxUGdIbG15SWxYcU5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lMDAxMzktZWRiNi00MTFiLWE5YjItOWVhOWNhMTc0MmRi LzEveE1BeWsxNldNOS1MR1pKZDhMMGx1QnhvWTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCqN68AwQC uUNsMA0EAgACMAcDBQMqBQ5AMA0GCSqGSIb3DQEBCwUAA4IBAQCLLT10IX+T/x6l Qkng8sZPLUfl1EL9sZpJTGl0d+QvuaSq6dJXmfeuDtu8LsGchhGKFwb3ZcZFdNpN FLeDVL+umkP/fZ9YkaPLd0bV79IKc+aTjKllHsr5TZDIp0XmSjuq/4wuYKW9vYSp GIhu4SoCy6vV84C6naOzweLmAwbWRPWbw/ErVHREeEiYp+19rVMgi5YZlJDJRbdm mlo29YhIdKpSGHY/wlMjIPZR4Jq9Qvn/sBljgBp0ztc6Xr5n0k8o1BXdayq/R/1m 4AK7U2HznOP1yWEuq6F/kbj0Ia4caxUE/1gnt3j4SWRZ5d74FM1YiGxWk0rEDnJ4 P3wXTIOr -----END CERTIFICATE-----Generated at Tue Dec 16 11:36:49 2025 by rpki-client