This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/D_TUy2IP_Cuic1JMfPvZ96BzhU8.roa File: D_TUy2IP_Cuic1JMfPvZ96BzhU8.roa (raw, json) Hash identifier: VBZkVC60nBjIo+GCSPMEOFLZHiV81xUc5DmZ5amr/OE= Subject key identifier: 0F:F4:D4:CB:62:0F:FC:2B:A2:73:52:4C:7C:FB:D9:F7:A0:73:85:4F Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Certificate serial: 019A9B9A165953CF0291AD85B72C702F87A1 Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/D_TUy2IP_Cuic1JMfPvZ96BzhU8.roa Signing time: Wed 19 Nov 2025 10:12:37 +0000 ROA not before: Wed 19 Nov 2025 10:12:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 213.145.71.0/24 maxlen: 24 213.145.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:9a:16:59:53:cf:02:91:ad:85:b7:2c:70:2f:87:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Validity Not Before: Nov 19 10:12:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0ff4d4cb620ffc2ba273524c7cfbd9f7a073854f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5d:35:e7:92:8a:c2:f6:b6:a5:72:c4:c0:88: 12:d5:10:ac:be:01:5b:6a:57:5a:27:38:cf:43:38: 84:d1:06:e7:f9:a0:6b:66:16:07:df:a0:a4:97:a6: 5d:7e:51:3d:49:01:f8:b8:ee:66:54:36:0b:54:6c: 6a:76:fe:af:03:64:42:ad:f9:02:39:36:2f:9e:64: 70:64:a2:5b:7c:de:ee:c0:8a:77:9a:2e:fd:cf:92: 0d:cb:0e:9b:22:aa:d2:5f:64:32:cc:2e:af:14:6b: 2f:1b:d5:14:c0:32:ae:a9:75:4a:a5:43:18:e8:07: 4d:57:d4:da:6d:f7:9c:5e:14:b4:12:18:3a:96:39: 7e:ed:7d:77:4f:e4:68:68:2a:3a:6c:9a:12:70:60: 5f:c7:0a:2f:c2:91:11:a1:e8:58:76:fe:8b:61:a8: c3:9d:41:ff:69:91:49:b3:36:d2:8c:6c:2e:f9:e9: ca:29:25:4e:db:d0:38:9e:86:3d:04:46:c4:45:b2: 2d:60:78:b1:17:ae:75:3f:7d:83:f6:f8:12:dd:8a: 38:9c:4b:ae:9b:22:67:96:81:30:97:ce:cd:61:f2: 97:29:05:a2:2f:39:c8:45:09:fb:a1:51:22:6f:72: 19:52:58:2f:c1:a3:7f:66:ae:1b:dd:79:85:f3:9f: e8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F4:D4:CB:62:0F:FC:2B:A2:73:52:4C:7C:FB:D9:F7:A0:73:85:4F X509v3 Authority Key Identifier: keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/D_TUy2IP_Cuic1JMfPvZ96BzhU8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.145.71.0/24 213.145.74.0/24 Signature Algorithm: sha256WithRSAEncryption 22:d6:a7:bc:78:5d:9e:b4:19:b7:8c:8b:82:23:12:c3:f9:d6: c0:95:5f:b8:61:1a:dd:cd:4d:f1:30:fb:ee:a1:9b:02:67:19: 57:8e:3c:6a:c4:bb:6f:6c:30:25:c5:11:58:1d:05:87:7d:89: 60:7d:bd:d8:7f:42:68:b8:3b:97:6f:c3:d0:c4:bd:93:da:3e: 04:0e:b5:bc:79:ee:ab:c1:86:5d:38:3e:81:ee:97:85:7f:18: 14:24:37:26:fa:fe:6f:e8:d5:89:d6:3d:00:9d:f8:7a:6e:bc: 64:47:ff:3f:95:15:37:cf:f7:7d:b9:44:ea:9c:8b:25:93:d4: ce:08:0f:70:0a:14:ae:78:ad:51:35:ac:ed:be:7e:80:0a:00: a1:19:09:94:bb:1a:43:b4:a6:dd:e8:41:00:8c:96:3f:3d:52: 47:ad:eb:d9:1d:e9:a7:d1:73:bb:a8:a3:3f:4c:81:80:d8:96: 53:0d:cf:b2:43:d8:fa:22:70:2c:c4:96:db:e1:fa:8e:8e:43: ba:26:08:58:9c:04:86:ce:e5:a4:27:18:b5:20:36:64:a3:7b: 7b:26:95:c8:3b:ed:9c:6b:8c:7c:8c:5f:0a:ff:55:36:1d:11: 38:a4:39:a7:23:8d:ee:b1:2b:4f:fa:5a:83:12:27:9d:fc:72: 0f:a1:ae:be -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqbmhZZU88Cka2FtyxwL4ehMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx ZDA3MjIwHhcNMjUxMTE5MTAxMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmY0ZDRjYjYyMGZmYzJiYTI3MzUyNGM3Y2ZiZDlmN2EwNzM4NTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF0155KKwva2pXLEwIgS1RCsvgFb aldaJzjPQziE0Qbn+aBrZhYH36Ckl6ZdflE9SQH4uO5mVDYLVGxqdv6vA2RCrfkC OTYvnmRwZKJbfN7uwIp3mi79z5INyw6bIqrSX2QyzC6vFGsvG9UUwDKuqXVKpUMY 6AdNV9TabfecXhS0Ehg6ljl+7X13T+RoaCo6bJoScGBfxwovwpERoehYdv6LYajD nUH/aZFJszbSjGwu+enKKSVO29A4noY9BEbERbItYHixF651P32D9vgS3Yo4nEuu myJnloEwl87NYfKXKQWiLznIRQn7oVEib3IZUlgvwaN/Zq4b3XmF85/oIQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFA/01MtiD/wronNSTHz72fegc4VPMB8GA1UdIwQY MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt ZDI0MmI2ZjNhOGExLzEvRF9UVXkySVBfQ3VpYzFKTWZQdlo5NkJ6aFU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1ZFHAwQA 1ZFKMA0GCSqGSIb3DQEBCwUAA4IBAQAi1qe8eF2etBm3jIuCIxLD+dbAlV+4YRrd zU3xMPvuoZsCZxlXjjxqxLtvbDAlxRFYHQWHfYlgfb3Yf0JouDuXb8PQxL2T2j4E DrW8ee6rwYZdOD6B7peFfxgUJDcm+v5v6NWJ1j0Anfh6brxkR/8/lRU3z/d9uUTq nIslk9TOCA9wChSueK1RNaztvn6ACgChGQmUuxpDtKbd6EEAjJY/PVJHrevZHemn 0XO7qKM/TIGA2JZTDc+yQ9j6InAsxJbb4fqOjkO6JghYnASGzuWkJxi1IDZko3t7 JpXIO+2ca4x8jF8K/1U2HRE4pDmnI43usStP+lqDEied/HIPoa6+ -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:42 2025 by rpki-client