This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/CLZSuq7-Kr6wga7WAvLwlZmD9gM.roa File: CLZSuq7-Kr6wga7WAvLwlZmD9gM.roa (raw, json) Hash identifier: wwP1m9KKjW+hUGWMlbVxAtL3pzS1fP8uTHgrkC3OADs= Subject key identifier: 08:B6:52:BA:AE:FE:2A:BE:B0:81:AE:D6:02:F2:F0:95:99:83:F6:03 Certificate issuer: /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4 Certificate serial: 019B45A0E138321D6E6062AE72193CC3AC75 Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/CLZSuq7-Kr6wga7WAvLwlZmD9gM.roa Signing time: Mon 22 Dec 2025 10:35:29 +0000 ROA not before: Mon 22 Dec 2025 10:35:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204193 IP address blocks: 185.110.180.0/24 maxlen: 24 185.110.181.0/24 maxlen: 24 185.110.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 13:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:a0:e1:38:32:1d:6e:60:62:ae:72:19:3c:c3:ac:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4 Validity Not Before: Dec 22 10:35:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=08b652baaefe2abeb081aed602f2f0959983f603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:16:7c:aa:f7:a9:ea:d9:c3:f0:00:67:c4:f8: 92:bc:ca:73:3e:a3:46:b8:7d:0e:d9:03:f9:52:97: bf:59:93:6c:f4:17:01:e4:75:bc:fe:25:37:0a:f1: 68:ac:3d:f5:e8:90:c9:d1:b2:72:9a:74:84:39:fc: 91:20:1f:f3:04:80:aa:70:ce:1b:0c:68:93:95:e7: 85:47:2e:0d:c1:1d:93:85:30:a9:af:92:b1:24:6e: 47:af:8a:67:d4:3a:31:1c:c1:50:3f:1f:b6:16:51: e0:b5:cc:dd:8e:72:24:0e:4e:df:70:d1:41:03:46: 89:19:ee:25:aa:41:36:fd:10:c8:55:a9:43:d7:47: 56:c4:8d:66:0a:9c:66:e8:09:c9:b6:32:a4:67:69: 74:b5:d3:12:9c:9f:b5:af:64:c0:36:63:05:1a:33: be:5a:5d:58:c0:90:78:a8:57:a3:8c:93:5e:72:25: 4c:62:18:66:ea:49:a7:37:29:98:0e:27:9a:33:e7: c0:28:51:e1:b5:a5:5c:bd:4e:84:bb:25:b4:e9:8b: 3c:72:68:dc:cd:15:e5:96:cf:b3:c3:5b:18:4b:b9: 3f:2f:be:bf:e0:7e:eb:87:87:63:f2:0a:99:07:83: 20:c2:d0:c0:de:51:19:54:fd:9a:57:ad:8c:c8:45: 6d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B6:52:BA:AE:FE:2A:BE:B0:81:AE:D6:02:F2:F0:95:99:83:F6:03 X509v3 Authority Key Identifier: keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/CLZSuq7-Kr6wga7WAvLwlZmD9gM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.110.180.0-185.110.182.255 Signature Algorithm: sha256WithRSAEncryption 4b:1a:9c:ed:cd:ac:27:e0:25:f0:46:a5:c4:a4:8d:7a:61:a0: b6:38:a1:d8:47:94:5f:e2:93:27:d2:af:cd:46:ee:58:bd:0d: 91:33:8b:9b:e2:ec:ea:a7:fd:46:34:a6:8f:25:13:53:a8:53: 4d:db:e3:00:ac:4b:c8:10:8b:9b:9b:89:20:02:09:b3:62:4a: 16:65:8a:7a:87:ae:d5:04:3c:71:3c:cf:46:14:dc:2d:0b:90: d4:4c:dd:97:8b:5f:af:5b:d4:1c:f9:10:55:c0:bb:38:e1:82: f0:4f:c3:93:cf:0e:64:59:6c:09:f9:8b:94:53:2e:4d:ed:2a: 5a:54:19:af:77:19:97:b5:b4:a0:d0:e4:24:f8:90:f7:6f:05: c2:8a:ac:a8:d5:af:d8:dd:86:cd:67:d5:94:e7:d4:0a:31:bb: b5:dd:1b:19:d4:66:54:32:51:e3:74:bd:5f:de:9a:a0:d7:d1: aa:2b:d1:23:3d:df:f1:13:fe:09:e5:d8:67:4a:d8:71:ca:bd: e6:7a:38:b1:f6:e2:d3:38:f4:bb:11:9f:19:2f:49:ee:73:af: b5:a0:44:82:ce:fc:1e:dc:be:14:ed:cf:a7:f0:27:11:a7:4a: 56:5e:57:8f:fa:ba:4c:52:d0:39:35:f4:e9:d5:41:2b:07:2e: ea:1b:80:4f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZtFoOE4Mh1uYGKuchk8w6x1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZGZjZTNhNTM1NWY4NjFmZGM0OGMzMjAxMmM3OGM5ZGFm OWE1YTQwHhcNMjUxMjIyMTAzNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGI2NTJiYWFlZmUyYWJlYjA4MWFlZDYwMmYyZjA5NTk5ODNmNjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhZ8qvep6tnD8ABnxPiSvMpzPqNG uH0O2QP5Upe/WZNs9BcB5HW8/iU3CvForD316JDJ0bJymnSEOfyRIB/zBICqcM4b DGiTleeFRy4NwR2ThTCpr5KxJG5Hr4pn1DoxHMFQPx+2FlHgtczdjnIkDk7fcNFB A0aJGe4lqkE2/RDIValD10dWxI1mCpxm6AnJtjKkZ2l0tdMSnJ+1r2TANmMFGjO+ Wl1YwJB4qFejjJNeciVMYhhm6kmnNymYDieaM+fAKFHhtaVcvU6EuyW06Ys8cmjc zRXlls+zw1sYS7k/L76/4H7rh4dj8gqZB4MgwtDA3lEZVP2aV62MyEVt4wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFAi2Urqu/iq+sIGu1gLy8JWZg/YDMB8GA1UdIwQY MBaAFMvfzjpTVfhh/cSMMgEseMna+aWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi83NGExYjUtM2MyZS00OGUyLTkwZmQt YjQ5ZDg5ZTMwZGRkLzEvQ0xaU3VxNy1LcjZ3Z2E3V0F2THdsWm1EOWdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi83NGExYjUtM2MyZS00OGUyLTkwZmQtYjQ5ZDg5ZTMwZGRk LzEveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK5brQD BAC5brYwDQYJKoZIhvcNAQELBQADggEBAEsanO3NrCfgJfBGpcSkjXphoLY4odhH lF/ikyfSr81G7li9DZEzi5vi7Oqn/UY0po8lE1OoU03b4wCsS8gQi5ubiSACCbNi ShZlinqHrtUEPHE8z0YU3C0LkNRM3ZeLX69b1Bz5EFXAuzjhgvBPw5PPDmRZbAn5 i5RTLk3tKlpUGa93GZe1tKDQ5CT4kPdvBcKKrKjVr9jdhs1n1ZTn1Aoxu7XdGxnU ZlQyUeN0vV/emqDX0aor0SM93/ET/gnl2GdK2HHKveZ6OLH24tM49LsRnxkvSe5z r7WgRILO/B7cvhTtz6fwJxGnSlZeV4/6ukxS0Dk19OnVQSsHLuobgE8= -----END CERTIFICATE-----Generated at Fri Dec 26 22:42:50 2025 by rpki-client