This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/64sSNXk_C-4uunlXMJj6fpY4CQI.roa File: 64sSNXk_C-4uunlXMJj6fpY4CQI.roa (raw, json) Hash identifier: ZLvXhsXHDXuI7q/6VX9yEZlysMPbD/8sIkoIAedYVM0= Subject key identifier: EB:8B:12:35:79:3F:0B:EE:2E:BA:79:57:30:98:FA:7E:96:38:09:02 Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019B169C701242195CC186999CC30CB49320 Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/64sSNXk_C-4uunlXMJj6fpY4CQI.roa Signing time: Sat 13 Dec 2025 07:28:29 +0000 ROA not before: Sat 13 Dec 2025 07:28:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59432 IP address blocks: 85.239.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:9c:70:12:42:19:5c:c1:86:99:9c:c3:0c:b4:93:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Dec 13 07:28:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=eb8b1235793f0bee2eba79573098fa7e96380902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d4:87:14:38:b9:72:e2:38:3a:87:b2:48:70: c3:a0:74:17:ff:59:b0:0a:d1:c3:db:1d:55:cc:ad: 1a:8c:c2:3a:96:64:06:f0:f4:51:80:ba:63:6e:9c: 1b:64:94:a6:9e:f3:2e:9c:4b:97:6f:0a:3c:38:2a: c2:60:50:bd:1a:42:71:88:5a:92:6e:f8:dd:fe:61: 24:2c:c0:c6:ac:a3:52:03:fe:34:67:83:71:e2:0f: 10:c0:25:0f:38:dc:49:eb:22:2c:56:1e:63:29:46: 11:92:e4:b7:57:22:b4:18:ea:dd:ac:b9:21:88:42: 66:32:4d:8d:6d:4d:83:8f:b5:08:a9:e9:a9:4b:09: 09:00:10:ce:fd:ed:65:7b:ba:88:9a:e3:49:70:7f: 2a:83:e2:9a:31:14:c4:aa:9a:c7:2a:3c:b0:2b:aa: 02:f5:86:7a:77:30:c9:7d:1a:8c:e1:1c:28:c0:64: 76:33:58:6a:8e:a7:36:24:70:6e:58:d5:98:c4:5a: 19:f4:bc:80:c7:73:e8:c2:9c:1f:b9:68:08:90:19: aa:81:d8:97:2a:fe:53:05:d5:ed:5f:48:06:ca:33: 09:a7:4d:4c:b9:c2:2b:ff:5c:f5:a0:1e:dd:ee:f0: c9:a9:0a:a7:eb:e1:fe:b2:65:9d:91:09:ed:86:77: bc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:8B:12:35:79:3F:0B:EE:2E:BA:79:57:30:98:FA:7E:96:38:09:02 X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/64sSNXk_C-4uunlXMJj6fpY4CQI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.239.152.0/24 Signature Algorithm: sha256WithRSAEncryption ae:a5:1c:16:8f:6f:4a:45:89:8e:a2:38:f6:5b:ba:27:35:0a: 88:90:73:89:b2:6a:95:a8:46:43:ca:b6:57:32:40:50:0a:3f: e4:7d:fd:1e:ba:93:00:a5:c5:b0:50:7a:71:12:ee:c5:e9:cf: 9b:62:dd:7a:94:c7:77:8c:3e:b9:7b:9c:15:8f:17:16:a9:7a: 8d:31:19:83:b5:a8:f2:23:5d:bf:26:d8:6a:4c:a9:78:27:1e: 39:3a:3f:c2:11:22:42:56:05:c4:f7:7e:de:97:02:5f:a5:ac: 65:3d:ba:44:90:4b:ea:3c:cd:cb:ba:0d:aa:3e:3a:39:da:64: d2:20:a5:3a:d1:d0:9b:aa:7a:96:1b:94:0c:34:b7:5a:1b:96: 75:d2:93:d8:49:3c:1e:e8:49:a2:e1:04:aa:ae:5b:73:56:50: 06:0a:76:51:a6:4c:5e:b9:a0:cc:fb:16:05:7f:f0:39:14:a1: 61:9d:ad:4b:00:6a:06:69:af:87:b9:7b:f3:54:f3:97:f3:f6: 0c:09:3d:de:eb:20:5f:d2:f1:4a:f5:18:9c:3d:d2:65:22:0c: 12:7b:9a:db:78:b8:bb:da:e2:e0:0c:3e:5a:90:53:74:09:b1: ad:9e:7e:cb:47:c9:ea:c6:e8:e6:93:fb:29:48:20:d4:7d:9c: 0a:14:4c:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsWnHASQhlcwYaZnMMMtJMgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjUxMjEzMDcyODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjhiMTIzNTc5M2YwYmVlMmViYTc5NTczMDk4ZmE3ZTk2MzgwOTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNSHFDi5cuI4OoeySHDDoHQX/1mw CtHD2x1VzK0ajMI6lmQG8PRRgLpjbpwbZJSmnvMunEuXbwo8OCrCYFC9GkJxiFqS bvjd/mEkLMDGrKNSA/40Z4Nx4g8QwCUPONxJ6yIsVh5jKUYRkuS3VyK0GOrdrLkh iEJmMk2NbU2Dj7UIqempSwkJABDO/e1le7qImuNJcH8qg+KaMRTEqprHKjywK6oC 9YZ6dzDJfRqM4RwowGR2M1hqjqc2JHBuWNWYxFoZ9LyAx3PowpwfuWgIkBmqgdiX Kv5TBdXtX0gGyjMJp01MucIr/1z1oB7d7vDJqQqn6+H+smWdkQnthne82QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOuLEjV5PwvuLrp5VzCY+n6WOAkCMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvNjRzU05Ya19DLTR1dW5sWE1KajZmcFk0Q1FJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVe+YMA0G CSqGSIb3DQEBCwUAA4IBAQCupRwWj29KRYmOojj2W7onNQqIkHOJsmqVqEZDyrZX MkBQCj/kff0eupMApcWwUHpxEu7F6c+bYt16lMd3jD65e5wVjxcWqXqNMRmDtajy I12/JthqTKl4Jx45Oj/CESJCVgXE937elwJfpaxlPbpEkEvqPM3Lug2qPjo52mTS IKU60dCbqnqWG5QMNLdaG5Z10pPYSTwe6Emi4QSqrltzVlAGCnZRpkxeuaDM+xYF f/A5FKFhna1LAGoGaa+HuXvzVPOX8/YMCT3e6yBf0vFK9RicPdJlIgwSe5rbeLi7 2uLgDD5akFN0CbGtnn7LR8nqxujmk/spSCDUfZwKFExW -----END CERTIFICATE-----Generated at Fri Dec 19 23:19:50 2025 by rpki-client