This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/dS98P-H1aTThzlbYwhALr632e44.roa File: dS98P-H1aTThzlbYwhALr632e44.roa (raw, json) Hash identifier: 0lPNmVl7jYfTbtzn44tMNmc6IVjHIpmWqfKWk5JT4l8= Subject key identifier: 75:2F:7C:3F:E1:F5:69:34:E1:CE:56:D8:C2:10:0B:AF:AD:F6:7B:8E Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Certificate serial: 019A86E35AC2E79879702E8572865C8298EF Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/dS98P-H1aTThzlbYwhALr632e44.roa Signing time: Sat 15 Nov 2025 09:40:38 +0000 ROA not before: Sat 15 Nov 2025 09:40:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205886 IP address blocks: 213.145.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:86:e3:5a:c2:e7:98:79:70:2e:85:72:86:5c:82:98:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Validity Not Before: Nov 15 09:40:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=752f7c3fe1f56934e1ce56d8c2100bafadf67b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:eb:64:b1:af:81:6d:da:72:a0:e9:5a:03:55: 98:99:cb:28:46:7f:e4:1f:9d:2c:37:87:a6:6d:3b: 47:66:b6:2c:45:96:b0:21:06:8e:4f:97:8d:98:d8: 24:46:e2:5d:00:b4:22:67:fb:9c:eb:b5:81:ef:47: 24:5c:32:fb:e2:17:d8:4f:c3:e8:66:6d:b5:fc:98: 71:67:67:e6:e9:6d:64:e4:81:28:a3:e5:76:c9:30: 18:1d:c3:0a:5b:21:7b:5f:43:14:87:dd:61:89:5b: 68:05:d0:18:e1:71:1a:f7:62:50:88:6f:4f:c5:37: df:8e:70:d9:46:d7:f5:37:6f:c8:0f:fa:92:77:64: db:06:2c:52:f9:f9:7d:10:94:ca:4b:fc:a8:48:67: 46:f5:fc:a8:21:0c:28:f2:f3:73:cd:65:ae:d1:ed: b6:b2:8a:43:72:0c:9f:6a:48:dc:63:9a:da:bc:fa: 85:ad:d1:f4:c3:09:03:69:a9:a6:1b:a0:a4:8b:a7: a3:92:9a:f4:cf:3a:c7:38:63:4d:88:a5:0f:3e:31: fe:3f:ca:0b:8c:f6:46:d6:25:9f:e9:eb:7a:ca:43: 0f:eb:9a:58:5f:bb:a3:2e:f6:e1:f6:a9:a5:41:9e: 45:8c:0f:28:2e:91:64:3d:da:80:c9:1a:88:cc:9c: 08:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2F:7C:3F:E1:F5:69:34:E1:CE:56:D8:C2:10:0B:AF:AD:F6:7B:8E X509v3 Authority Key Identifier: keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/dS98P-H1aTThzlbYwhALr632e44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.145.66.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:88:cc:2c:aa:00:4e:27:5f:51:ac:e4:a7:7f:13:4c:b9:f2: 21:2a:d6:b2:e6:b0:0e:22:9a:f7:d2:29:2d:84:00:cb:d4:0e: d6:51:e5:cb:2e:4f:19:13:97:27:f3:2d:2b:20:68:c2:ad:21: 17:b7:e4:91:9f:ea:f2:4a:2f:fc:d7:4e:00:a1:2a:aa:2c:3b: 72:4e:83:7c:a4:d3:4a:98:08:8f:35:78:94:5b:2b:f0:8c:19: 18:cc:0b:fc:81:ca:64:93:bb:70:54:b0:0d:67:19:0f:47:47: 9b:df:10:74:35:83:8d:4c:a1:14:39:90:fd:33:76:3d:41:c8: 96:f5:7e:02:8d:7a:90:c1:77:4e:75:fe:2c:bb:7c:6d:66:13: 47:c5:17:93:79:49:d2:ca:93:bb:8e:79:0c:11:8c:6a:fc:55: ff:8d:e6:24:d8:d2:e8:dc:e1:19:ff:0f:72:02:58:4d:ee:d9: 1b:7c:f5:a3:9d:e2:eb:52:df:5a:f8:67:ee:69:1b:41:db:c4: f7:bc:d0:7c:a4:9b:7a:6b:2e:a6:bd:59:8c:17:3c:1c:ce:f6: d9:d3:d1:76:91:59:ca:9b:ff:05:ab:7b:7b:53:fa:41:84:4b: b9:dd:5f:e5:d2:17:fa:2f:33:3c:ef:e9:bc:3e:26:19:c3:52: 62:13:97:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqG41rC55h5cC6FcoZcgpjvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx ZDA3MjIwHhcNMjUxMTE1MDk0MDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTJmN2MzZmUxZjU2OTM0ZTFjZTU2ZDhjMjEwMGJhZmFkZjY3YjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOtksa+BbdpyoOlaA1WYmcsoRn/k H50sN4embTtHZrYsRZawIQaOT5eNmNgkRuJdALQiZ/uc67WB70ckXDL74hfYT8Po Zm21/JhxZ2fm6W1k5IEoo+V2yTAYHcMKWyF7X0MUh91hiVtoBdAY4XEa92JQiG9P xTffjnDZRtf1N2/ID/qSd2TbBixS+fl9EJTKS/yoSGdG9fyoIQwo8vNzzWWu0e22 sopDcgyfakjcY5ravPqFrdH0wwkDaammG6Cki6ejkpr0zzrHOGNNiKUPPjH+P8oL jPZG1iWf6et6ykMP65pYX7ujLvbh9qmlQZ5FjA8oLpFkPdqAyRqIzJwI8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHUvfD/h9Wk04c5W2MIQC6+t9nuOMB8GA1UdIwQY MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt ZDI0MmI2ZjNhOGExLzEvZFM5OFAtSDFhVFRoemxiWXdoQUxyNjMyZTQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ZFCMA0G CSqGSIb3DQEBCwUAA4IBAQAqiMwsqgBOJ19RrOSnfxNMufIhKtay5rAOIpr30ikt hADL1A7WUeXLLk8ZE5cn8y0rIGjCrSEXt+SRn+rySi/8104AoSqqLDtyToN8pNNK mAiPNXiUWyvwjBkYzAv8gcpkk7twVLANZxkPR0eb3xB0NYONTKEUOZD9M3Y9QciW 9X4CjXqQwXdOdf4su3xtZhNHxReTeUnSypO7jnkMEYxq/FX/jeYk2NLo3OEZ/w9y AlhN7tkbfPWjneLrUt9a+GfuaRtB28T3vNB8pJt6ay6mvVmMFzwczvbZ09F2kVnK m/8Fq3t7U/pBhEu53V/l0hf6LzM87+m8PiYZw1JiE5cc -----END CERTIFICATE-----Generated at Fri Dec 5 17:19:33 2025 by rpki-client