This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/15l6GcmtBitHJjc-TIx2jp_ftA0.roa File: 15l6GcmtBitHJjc-TIx2jp_ftA0.roa (raw, json) Hash identifier: WUSHAd/2f1J5gqrAUBHY0LWX82YSkJayrODt6gkvkGA= Subject key identifier: D7:99:7A:19:C9:AD:06:2B:47:26:37:3E:4C:8C:76:8E:9F:DF:B4:0D Certificate issuer: /CN=ccd7947ec83136ef9446316235686a9102562c44 Certificate serial: 019B4BC87EF617E73C52D7B977EC85960210 Authority key identifier: CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/15l6GcmtBitHJjc-TIx2jp_ftA0.roa Signing time: Tue 23 Dec 2025 15:16:29 +0000 ROA not before: Tue 23 Dec 2025 15:16:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202617 IP address blocks: 84.247.18.0/24 maxlen: 24 93.113.103.0/24 maxlen: 24 93.113.109.0/24 maxlen: 24 104.249.12.0/22 maxlen: 24 185.159.0.0/22 maxlen: 22 185.159.0.0/24 maxlen: 24 185.159.1.0/24 maxlen: 24 185.159.2.0/24 maxlen: 24 185.216.12.0/24 maxlen: 24 185.254.65.0/24 maxlen: 24 2a07:b0c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:c8:7e:f6:17:e7:3c:52:d7:b9:77:ec:85:96:02:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccd7947ec83136ef9446316235686a9102562c44 Validity Not Before: Dec 23 15:16:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d7997a19c9ad062b4726373e4c8c768e9fdfb40d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9f:15:94:69:12:52:c8:13:50:cb:19:fb:a5: 93:2d:30:5f:de:9a:ff:25:b5:97:0c:5f:87:ad:3f: c3:c4:38:29:48:46:71:78:65:f8:eb:c3:c4:a3:16: 2f:6c:09:f0:fa:1f:98:52:41:d3:45:9a:a0:de:fd: df:a2:e2:1f:53:96:35:8b:fe:c1:dd:03:f3:3b:89: 74:6a:e7:f3:26:25:56:bb:26:17:e3:4c:f5:8c:2a: e3:20:ae:c6:98:ad:77:ae:7a:30:8b:a7:9a:0f:b7: 6c:0b:75:78:af:45:ad:b1:e3:3c:ab:4d:d9:32:7d: 0a:c6:71:5b:8b:3a:68:c3:ee:45:c4:55:5d:bc:ae: ed:3f:7f:82:21:a5:46:32:66:31:fc:67:e2:b0:c3: 15:3b:dc:51:61:ff:6c:c4:6e:85:27:8e:d1:27:3e: 88:88:a0:3c:18:da:11:8f:23:ea:db:8e:65:8e:b4: fb:2f:d4:31:ee:79:66:ed:4e:a8:90:ab:96:86:05: 33:23:5e:5c:88:bd:73:71:a6:e0:95:65:90:f0:fb: 76:85:dd:ff:ec:6f:95:f8:48:e8:19:cd:40:4d:e2: 14:b5:3d:5f:a2:cc:07:f9:cb:27:eb:0a:4b:70:d2: 8f:8f:1e:8d:bb:d1:1b:eb:c3:cb:4a:5d:7c:d7:75: f8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:99:7A:19:C9:AD:06:2B:47:26:37:3E:4C:8C:76:8E:9F:DF:B4:0D X509v3 Authority Key Identifier: keyid:CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/15l6GcmtBitHJjc-TIx2jp_ftA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.247.18.0/24 93.113.103.0/24 93.113.109.0/24 104.249.12.0/22 185.159.0.0/22 185.216.12.0/24 185.254.65.0/24 IPv6: 2a07:b0c0::/29 Signature Algorithm: sha256WithRSAEncryption 16:51:62:6f:b9:0b:18:bb:5d:4f:f9:d2:0b:2d:4e:d0:81:a1: f5:22:01:3a:5a:de:9c:9e:db:81:e3:db:2b:a0:68:86:4d:de: b5:19:d8:c8:5e:7e:a5:ec:9d:60:0a:07:6c:34:08:e4:a0:1d: 8d:1b:5b:b3:9e:c4:c1:e8:a1:de:43:12:b2:80:c3:99:4b:1e: 29:aa:6d:59:ed:54:24:74:74:b6:3f:fb:f3:b1:ca:98:3e:3d: 8d:32:92:04:0a:5b:53:38:72:04:d9:02:7b:16:cc:30:de:0d: e4:d5:c7:27:35:ce:9d:ab:0f:6e:1b:2c:62:ba:f7:4c:54:6d: 26:51:77:83:0f:f9:fa:e5:03:57:32:22:42:1c:65:6d:f5:6b: 73:7a:7b:42:60:52:9c:bd:c6:02:1f:a7:c1:eb:bd:39:14:cf: da:c1:0d:d5:6b:0c:a5:7b:55:ed:87:7d:3c:0c:99:6e:b8:dc: d2:9a:68:04:79:2a:17:d7:e1:b9:6a:88:a9:97:c0:bf:cd:0d: cc:7d:be:c3:89:45:75:f4:02:c3:0f:f2:d6:7f:3e:b8:d7:34: d4:82:da:05:21:f2:4a:0b:52:c7:3e:45:b0:be:e3:1d:23:33: 3d:59:a1:c6:1a:04:8d:b2:8b:14:d1:6d:ec:1c:4a:9d:5a:9d: fd:2a:00:e3 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZtLyH72F+c8Ute5d+yFlgIQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZDc5NDdlYzgzMTM2ZWY5NDQ2MzE2MjM1Njg2YTkxMDI1 NjJjNDQwHhcNMjUxMjIzMTUxNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzk5N2ExOWM5YWQwNjJiNDcyNjM3M2U0YzhjNzY4ZTlmZGZiNDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ8VlGkSUsgTUMsZ+6WTLTBf3pr/ JbWXDF+HrT/DxDgpSEZxeGX468PEoxYvbAnw+h+YUkHTRZqg3v3fouIfU5Y1i/7B 3QPzO4l0aufzJiVWuyYX40z1jCrjIK7GmK13rnowi6eaD7dsC3V4r0WtseM8q03Z Mn0KxnFbizpow+5FxFVdvK7tP3+CIaVGMmYx/GfisMMVO9xRYf9sxG6FJ47RJz6I iKA8GNoRjyPq245ljrT7L9Qx7nlm7U6okKuWhgUzI15ciL1zcabglWWQ8Pt2hd3/ 7G+V+EjoGc1ATeIUtT1foswH+csn6wpLcNKPjx6Nu9Eb68PLSl1813X4BQIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFNeZehnJrQYrRyY3PkyMdo6f37QNMB8GA1UdIwQY MBaAFMzXlH7IMTbvlEYxYjVoapECVixEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lYWI3N2QtODMxYS00M2JjLThjYmUt Mjg4NzY2MDYxZDk4LzEvMTVsNkdjbXRCaXRISmpjLVRJeDJqcF9mdEEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9lYWI3N2QtODMxYS00M2JjLThjYmUtMjg4NzY2MDYxZDk4 LzEvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQAVPcSAwQA XXFnAwQAXXFtAwQCaPkMAwQCuZ8AAwQAudgMAwQAuf5BMA0EAgACMAcDBQMqB7DA MA0GCSqGSIb3DQEBCwUAA4IBAQAWUWJvuQsYu11P+dILLU7QgaH1IgE6Wt6cntuB 49sroGiGTd61GdjIXn6l7J1gCgdsNAjkoB2NG1uznsTB6KHeQxKygMOZSx4pqm1Z 7VQkdHS2P/vzscqYPj2NMpIECltTOHIE2QJ7Fsww3g3k1ccnNc6dqw9uGyxiuvdM VG0mUXeDD/n65QNXMiJCHGVt9WtzentCYFKcvcYCH6fB6705FM/awQ3Vawyle1Xt h308DJluuNzSmmgEeSoX1+G5aoipl8C/zQ3Mfb7DiUV19ALDD/LWfz641zTUgtoF IfJKC1LHPkWwvuMdIzM9WaHGGgSNsosU0W3sHEqdWp39KgDj -----END CERTIFICATE-----Generated at Fri Dec 26 17:36:53 2025 by rpki-client