This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/LSruAiQDo0YzCVhUXgqjhjUO-xE.roa File: LSruAiQDo0YzCVhUXgqjhjUO-xE.roa (raw, json) Hash identifier: kwNRN3xXd5C3IikenOrdSQUWZnh6jQej+1QyWNhFcWo= Subject key identifier: 2D:2A:EE:02:24:03:A3:46:33:09:58:54:5E:0A:A3:86:35:0E:FB:11 Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019B118603F6C1B7108B2D08312FB1D96BE6 Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/LSruAiQDo0YzCVhUXgqjhjUO-xE.roa Signing time: Fri 12 Dec 2025 07:45:54 +0000 ROA not before: Fri 12 Dec 2025 07:45:54 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401776 IP address blocks: 178.239.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:86:03:f6:c1:b7:10:8b:2d:08:31:2f:b1:d9:6b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Dec 12 07:45:54 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2d2aee022403a346330958545e0aa386350efb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:74:8c:bc:b7:ab:f0:df:b1:70:62:cf:ee:bc: 42:c3:d0:e5:63:02:96:fa:25:6e:1e:90:a4:21:06: ff:27:d5:f7:4c:b4:7d:06:2d:f0:11:96:62:df:04: c9:d1:43:fd:12:0f:2d:6c:59:bd:62:90:da:2b:75: 10:a3:f2:0a:ab:c7:7f:93:c0:78:b3:05:c8:34:98: cd:80:26:89:38:c9:cb:f6:22:24:14:3d:98:da:5f: dd:62:bd:9f:ad:63:19:f2:ba:4c:8f:86:06:3f:90: 35:43:24:ca:09:a2:ca:28:48:1e:50:85:8f:10:38: e3:e8:1f:c0:30:5d:b2:f1:f7:0a:fa:22:9d:fb:eb: 93:25:8f:11:30:34:31:7f:9f:ed:8d:ad:f3:f1:7c: f1:bf:69:0c:15:29:09:96:26:3d:9c:22:bf:0d:8b: 7a:26:97:7a:a4:85:d4:63:f4:8a:11:67:4a:0b:84: f0:47:0c:ee:16:a2:61:68:4b:e3:66:a6:a8:2e:0b: 18:25:1c:ab:2c:3f:ca:62:93:ef:5c:e5:7f:86:72: c4:57:97:d8:07:7e:30:f7:0b:ba:5c:93:14:16:bc: ac:75:e8:27:4d:3b:85:5d:6d:64:17:6c:d4:10:54: 32:d4:96:de:5e:4f:cb:69:24:ea:dd:19:47:ce:c8: e0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:2A:EE:02:24:03:A3:46:33:09:58:54:5E:0A:A3:86:35:0E:FB:11 X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/LSruAiQDo0YzCVhUXgqjhjUO-xE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.239.117.0/24 Signature Algorithm: sha256WithRSAEncryption 62:f7:29:2a:ca:68:40:b7:ea:19:c4:4e:fa:00:57:21:c5:4e: 4e:56:52:43:94:ba:8d:ab:2e:c0:a7:15:e3:df:39:b6:f5:fc: e4:b4:fa:c4:6a:24:e9:fe:86:a3:5a:0e:52:cd:48:98:e4:11: 23:65:11:13:7e:9b:f8:0b:83:7a:f4:6f:f6:e3:da:0c:74:04: e4:b2:ac:ac:9e:64:17:c6:a8:60:77:89:e9:13:4d:91:c0:6c: 50:50:c0:b5:5b:00:ed:8b:b2:46:30:1e:40:c0:56:44:85:7e: dc:60:e7:31:2c:9d:37:4e:8f:03:06:92:c8:ac:44:9c:ea:43: df:3d:60:3a:e7:f4:2e:5b:4b:69:47:ab:93:fc:4f:59:70:ee: 60:d9:a5:e6:d1:d6:f6:61:1d:aa:3c:89:e1:3c:86:60:60:13: 74:cc:a0:5d:70:e7:90:fa:57:b5:bc:4d:97:27:27:2e:c5:c8: d3:83:1e:94:de:2a:bf:e0:4a:0d:a3:4f:68:b5:63:d3:9d:c2: bf:5a:12:b4:38:ae:3f:97:27:f1:1a:e4:87:9b:87:42:6a:b6: f6:fb:18:17:33:7b:73:ae:84:88:a1:6f:1e:60:55:4f:c8:96: 7e:4a:5f:3a:8b:a7:12:a3:c7:f0:88:e9:14:6b:63:72:ae:a7: 0f:f5:38:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsRhgP2wbcQiy0IMS+x2WvmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjUxMjEyMDc0NTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDJhZWUwMjI0MDNhMzQ2MzMwOTU4NTQ1ZTBhYTM4NjM1MGVmYjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHSMvLer8N+xcGLP7rxCw9DlYwKW +iVuHpCkIQb/J9X3TLR9Bi3wEZZi3wTJ0UP9Eg8tbFm9YpDaK3UQo/IKq8d/k8B4 swXINJjNgCaJOMnL9iIkFD2Y2l/dYr2frWMZ8rpMj4YGP5A1QyTKCaLKKEgeUIWP EDjj6B/AMF2y8fcK+iKd++uTJY8RMDQxf5/tja3z8Xzxv2kMFSkJliY9nCK/DYt6 Jpd6pIXUY/SKEWdKC4TwRwzuFqJhaEvjZqaoLgsYJRyrLD/KYpPvXOV/hnLEV5fY B34w9wu6XJMUFrysdegnTTuFXW1kF2zUEFQy1JbeXk/LaSTq3RlHzsjgawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC0q7gIkA6NGMwlYVF4Ko4Y1DvsRMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvTFNydUFpUURvMFl6Q1ZoVVhncWpoalVPLXhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu91MA0G CSqGSIb3DQEBCwUAA4IBAQBi9ykqymhAt+oZxE76AFchxU5OVlJDlLqNqy7ApxXj 3zm29fzktPrEaiTp/oajWg5SzUiY5BEjZRETfpv4C4N69G/249oMdATksqysnmQX xqhgd4npE02RwGxQUMC1WwDti7JGMB5AwFZEhX7cYOcxLJ03To8DBpLIrESc6kPf PWA65/QuW0tpR6uT/E9ZcO5g2aXm0db2YR2qPInhPIZgYBN0zKBdcOeQ+le1vE2X JycuxcjTgx6U3iq/4EoNo09otWPTncK/WhK0OK4/lyfxGuSHm4dCarb2+xgXM3tz roSIoW8eYFVPyJZ+Sl86i6cSo8fwiOkUa2NyrqcP9Tj7 -----END CERTIFICATE-----Generated at Sat Dec 20 07:43:10 2025 by rpki-client