This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/1vFOcaV-RCbQJU5U1jfBjA6Lh3c.roa File: 1vFOcaV-RCbQJU5U1jfBjA6Lh3c.roa (raw, json) Hash identifier: pWuu+zg+bbGYo2d0ALNCvIhHLHhkpqmwV0rFp7DDPAE= Subject key identifier: D6:F1:4E:71:A5:7E:44:26:D0:25:4E:54:D6:37:C1:8C:0E:8B:87:77 Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Certificate serial: 019B028205E3C1B984558D9BA3F7B0FC0A4C Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/1vFOcaV-RCbQJU5U1jfBjA6Lh3c.roa Signing time: Tue 09 Dec 2025 09:47:14 +0000 ROA not before: Tue 09 Dec 2025 09:47:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39238 IP address blocks: 91.195.125.0/24 maxlen: 24 91.229.112.0/23 maxlen: 23 185.202.0.0/24 maxlen: 24 185.202.1.0/24 maxlen: 24 185.202.2.0/24 maxlen: 24 213.108.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:82:05:e3:c1:b9:84:55:8d:9b:a3:f7:b0:fc:0a:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Validity Not Before: Dec 9 09:47:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d6f14e71a57e4426d0254e54d637c18c0e8b8777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cb:48:eb:8a:8a:9d:8c:79:80:cb:e1:9f:b4: ef:9f:64:81:93:72:da:5a:b2:d1:19:95:0b:82:e3: e2:ea:62:6b:51:7b:2b:95:7a:d3:20:ea:ae:0d:5a: d1:4b:cf:62:d3:79:21:81:17:7d:00:32:d6:84:56: 73:1b:08:9b:9b:7b:7b:bf:c1:cb:ee:24:95:25:23: e1:a2:46:60:23:c1:b6:29:cd:94:2f:60:c0:2d:51: 0e:62:c6:6f:39:dd:d9:ab:04:4e:ba:4f:49:ec:3d: 5a:04:b2:c5:b2:c2:c3:c0:58:b0:06:2f:3e:64:01: 11:00:21:d6:b4:19:4d:81:bc:1f:d2:85:9b:4e:a7: 87:25:64:01:c3:81:d3:be:be:24:df:fb:63:9b:11: 53:0f:3d:28:c6:72:cf:ef:17:1a:ca:c4:d0:86:35: 75:4a:a0:7b:86:9f:56:21:54:72:4d:da:dd:58:04: 37:26:c2:aa:05:9c:e3:6d:aa:d1:64:5d:ef:5a:f8: b3:d7:cb:13:7f:df:5b:cf:92:b9:0b:fd:f2:74:3b: 3b:2f:92:cb:d3:48:99:da:1e:82:ba:b6:6e:44:e1: 7c:3b:e5:cb:8a:78:4a:97:f7:7c:bf:6c:a7:fd:39: b0:01:a1:c7:e4:a1:fe:eb:79:f8:f4:99:34:74:f2: ba:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F1:4E:71:A5:7E:44:26:D0:25:4E:54:D6:37:C1:8C:0E:8B:87:77 X509v3 Authority Key Identifier: keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/1vFOcaV-RCbQJU5U1jfBjA6Lh3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.125.0/24 91.229.112.0/23 185.202.0.0-185.202.2.255 213.108.133.0/24 Signature Algorithm: sha256WithRSAEncryption 39:e7:d7:8e:1f:1d:8e:fd:59:d4:c9:75:2e:2d:ba:23:8c:2f: 77:e0:50:0e:95:4a:a3:58:19:59:94:8f:ed:88:00:7f:de:18: b3:c6:51:be:24:a5:1d:0a:2c:b7:aa:83:75:b2:31:2b:db:07: 24:38:be:dc:1e:57:81:88:c4:e0:38:5d:f9:ae:04:d1:7a:91: 69:95:d3:1c:13:75:c4:f5:eb:b2:95:5a:a2:41:03:19:36:c6: d7:b4:02:03:66:06:86:71:99:1d:88:eb:0d:41:2b:38:7a:44: 47:7c:1b:63:41:36:df:1f:bd:43:65:cd:96:aa:42:65:83:56: ef:b3:f1:c1:b9:2a:de:9b:27:10:d8:ed:6b:7c:40:fe:57:46: df:69:a8:e1:1c:50:44:45:99:c0:de:58:a0:50:3a:1e:7e:83: 51:28:49:73:44:aa:bb:12:50:b8:9f:24:63:97:ec:39:07:73: fd:77:b6:65:c3:f7:be:25:00:c0:24:b1:6e:da:69:06:af:c3: a0:82:84:9d:a7:bd:f0:28:0b:37:bd:e8:14:ea:5e:32:00:32: da:d3:cb:a0:31:0e:2e:94:df:f7:75:53:78:e2:69:e2:eb:f9: 2f:68:bd:ef:3b:b7:b3:3f:53:9b:d9:de:9b:4f:9d:60:a4:56: 18:60:df:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsCggXjwbmEVY2bo/ew/ApMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2 Njk0NmYwHhcNMjUxMjA5MDk0NzE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmYxNGU3MWE1N2U0NDI2ZDAyNTRlNTRkNjM3YzE4YzBlOGI4Nzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlstI64qKnYx5gMvhn7Tvn2SBk3La WrLRGZULguPi6mJrUXsrlXrTIOquDVrRS89i03khgRd9ADLWhFZzGwibm3t7v8HL 7iSVJSPhokZgI8G2Kc2UL2DALVEOYsZvOd3ZqwROuk9J7D1aBLLFssLDwFiwBi8+ ZAERACHWtBlNgbwf0oWbTqeHJWQBw4HTvr4k3/tjmxFTDz0oxnLP7xcaysTQhjV1 SqB7hp9WIVRyTdrdWAQ3JsKqBZzjbarRZF3vWviz18sTf99bz5K5C/3ydDs7L5LL 00iZ2h6CurZuROF8O+XLinhKl/d8v2yn/TmwAaHH5KH+63n49Jk0dPK6iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbxTnGlfkQm0CVOVNY3wYwOi4d3MB8GA1UdIwQY MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct MDhhZDk0MTAxZDdlLzEvMXZGT2NhVi1SQ2JRSlU1VTFqZkJqQTZMaDNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAlBAIAATAfAwQAW8N9AwQB W+VwMAsDAwG5ygMEALnKAgMEANVshTANBgkqhkiG9w0BAQsFAAOCAQEAOefXjh8d jv1Z1Ml1Li26I4wvd+BQDpVKo1gZWZSP7YgAf94Ys8ZRviSlHQost6qDdbIxK9sH JDi+3B5XgYjE4Dhd+a4E0XqRaZXTHBN1xPXrspVaokEDGTbG17QCA2YGhnGZHYjr DUErOHpER3wbY0E23x+9Q2XNlqpCZYNW77Pxwbkq3psnENjta3xA/ldG32mo4RxQ REWZwN5YoFA6Hn6DUShJc0SquxJQuJ8kY5fsOQdz/Xe2ZcP3viUAwCSxbtppBq/D oIKEnae98CgLN73oFOpeMgAy2tPLoDEOLpTf93VTeOJp4uv5L2i97zu3sz9Tm9ne m0+dYKRWGGDfzQ== -----END CERTIFICATE-----Generated at Fri Dec 12 17:14:28 2025 by rpki-client