This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2-mLIbkGNNcvsiMFZKpz8r1QQCw.roa File: 2-mLIbkGNNcvsiMFZKpz8r1QQCw.roa (raw, json) Hash identifier: cuASOWRWgnYBOoQgT1JZCkQl1DEPaFY/EBHn7WPJc1M= Subject key identifier: DB:E9:8B:21:B9:06:34:D7:2F:B2:23:05:64:AA:73:F2:BD:50:40:2C Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B2D7A55BF5EDEF686EB34D0D7468404F4 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2-mLIbkGNNcvsiMFZKpz8r1QQCw.roa Signing time: Wed 17 Dec 2025 18:02:30 +0000 ROA not before: Wed 17 Dec 2025 18:02:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49581 IP address blocks: 5.83.128.0/24 maxlen: 24 5.83.131.0/24 maxlen: 24 5.83.132.0/24 maxlen: 24 5.175.213.0/24 maxlen: 24 5.175.216.0/24 maxlen: 24 5.175.218.0/24 maxlen: 24 5.175.219.0/24 maxlen: 24 5.231.26.0/24 maxlen: 24 5.231.105.0/24 maxlen: 24 5.231.242.0/24 maxlen: 24 83.243.86.0/24 maxlen: 24 89.106.69.0/24 maxlen: 24 89.106.71.0/24 maxlen: 24 94.249.175.0/24 maxlen: 24 217.69.167.0/24 maxlen: 24 2a02:2fc0:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:7a:55:bf:5e:de:f6:86:eb:34:d0:d7:46:84:04:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 17 18:02:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dbe98b21b90634d72fb2230564aa73f2bd50402c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3e:50:c9:43:cf:dd:ce:a8:e6:1c:9e:34:23: 8f:5a:a0:63:29:96:77:9e:91:e0:b2:91:23:9e:43: 52:a6:24:41:95:7f:1d:4c:f1:3f:a2:a4:3f:59:68: 01:03:ad:14:8a:0e:62:39:de:cb:c4:3d:5b:e7:05: 79:c8:4a:e9:28:9d:0e:f3:6f:2f:eb:af:f3:db:28: 08:fa:e4:2a:f8:33:67:b8:40:4f:28:39:08:f7:57: 7b:d1:01:51:a7:57:9d:53:ad:b6:e0:d5:4c:2f:1a: aa:8a:30:25:97:34:dd:7d:94:05:8e:26:f0:7d:f5: 14:32:df:3c:20:6f:27:2d:59:4a:0b:97:84:ad:10: 4b:0f:1e:51:6c:d5:ea:48:f4:09:b6:41:df:62:92: 24:6d:c7:31:05:5d:c2:e2:49:45:12:4d:99:dc:d4: 82:8c:dd:c2:b6:30:ef:ac:cc:c2:0f:05:18:dc:f7: d5:c7:f4:42:4d:4a:70:35:83:4a:a5:51:e9:df:86: fb:55:ea:85:b5:55:c4:cc:ca:a9:1e:c9:6a:21:73: 7d:b5:66:ac:88:01:88:83:83:ec:b3:57:60:87:62: 06:74:92:67:df:0e:71:24:df:e5:9a:b9:63:26:f4: a5:c3:55:33:cf:d8:26:99:d4:6b:45:ca:77:14:ea: f1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E9:8B:21:B9:06:34:D7:2F:B2:23:05:64:AA:73:F2:BD:50:40:2C X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2-mLIbkGNNcvsiMFZKpz8r1QQCw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.128.0/24 5.83.131.0-5.83.132.255 5.175.213.0/24 5.175.216.0/24 5.175.218.0/23 5.231.26.0/24 5.231.105.0/24 5.231.242.0/24 83.243.86.0/24 89.106.69.0/24 89.106.71.0/24 94.249.175.0/24 217.69.167.0/24 IPv6: 2a02:2fc0:11::/48 Signature Algorithm: sha256WithRSAEncryption d3:48:fa:1b:aa:95:db:c4:cc:b6:71:77:68:d6:19:bd:4e:33: fb:14:8c:06:ba:d5:b8:7b:19:7a:ce:d0:4f:2f:2e:c9:11:0a: 2d:fb:8a:c0:ac:4f:16:b6:0c:f1:de:b2:73:91:8b:bf:19:da: 9f:f4:d9:c4:df:a2:29:31:1a:eb:49:1f:a5:75:56:73:5e:75: 36:d8:7a:17:70:4c:fc:fd:9b:b9:47:1e:87:c8:51:2a:63:1f: 26:ed:5d:f9:45:c5:99:82:22:b5:8d:85:cf:c3:ab:62:d1:ee: a8:d3:09:f1:d0:25:52:e7:b0:6a:af:27:26:ba:94:13:a6:cf: 89:53:54:b0:5b:0a:9a:26:b1:da:f0:5d:2c:b3:6e:72:47:68: ac:40:bc:f2:00:e3:0d:1d:40:cf:19:6e:7f:e2:c3:cc:d3:4e: 82:45:87:37:46:1f:5f:40:54:b9:ab:21:11:16:0a:8a:b9:2c: e9:04:97:de:a7:1f:63:7f:78:43:96:a3:da:8d:ad:2f:50:c9: d0:2b:95:59:46:ec:33:d9:9f:18:cf:b3:a7:fb:4e:97:79:23: 7c:9f:60:cf:e3:2d:5f:ad:1b:dd:fc:56:53:48:2e:a7:ae:6b: ad:d5:6f:04:ff:7e:02:83:9f:fe:b6:60:51:ee:7d:1f:84:5e: 15:76:d8:d3 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgISAZstelW/Xt72hus00NdGhAT0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjE3MTgwMjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmU5OGIyMWI5MDYzNGQ3MmZiMjIzMDU2NGFhNzNmMmJkNTA0MDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD5QyUPP3c6o5hyeNCOPWqBjKZZ3 npHgspEjnkNSpiRBlX8dTPE/oqQ/WWgBA60Uig5iOd7LxD1b5wV5yErpKJ0O828v 66/z2ygI+uQq+DNnuEBPKDkI91d70QFRp1edU6224NVMLxqqijAllzTdfZQFjibw ffUUMt88IG8nLVlKC5eErRBLDx5RbNXqSPQJtkHfYpIkbccxBV3C4klFEk2Z3NSC jN3CtjDvrMzCDwUY3PfVx/RCTUpwNYNKpVHp34b7VeqFtVXEzMqpHslqIXN9tWas iAGIg4Pss1dgh2IGdJJn3w5xJN/lmrljJvSlw1Uzz9gmmdRrRcp3FOrxbQIDAQAB o4ICazCCAmcwHQYDVR0OBBYEFNvpiyG5BjTXL7IjBWSqc/K9UEAsMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvMi1tTElia0dOTmN2c2lNRlpLcHo4cjFRUUN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGABggrBgEFBQcBBwEB/wRxMG8wXAQCAAEwVgMEAAVTgDAM AwQABVODAwQABVOEAwQABa/VAwQABa/YAwQBBa/aAwQABecaAwQABedpAwQABefy AwQAU/NWAwQAWWpFAwQAWWpHAwQAXvmvAwQA2UWnMA8EAgACMAkDBwAqAi/AABEw DQYJKoZIhvcNAQELBQADggEBANNI+huqldvEzLZxd2jWGb1OM/sUjAa61bh7GXrO 0E8vLskRCi37isCsTxa2DPHesnORi78Z2p/02cTfoikxGutJH6V1VnNedTbYehdw TPz9m7lHHofIUSpjHybtXflFxZmCIrWNhc/Dq2LR7qjTCfHQJVLnsGqvJya6lBOm z4lTVLBbCpomsdrwXSyzbnJHaKxAvPIA4w0dQM8Zbn/iw8zTToJFhzdGH19AVLmr IREWCoq5LOkEl96nH2N/eEOWo9qNrS9QydArlVlG7DPZnxjPs6f7Tpd5I3yfYM/j LV+tG938VlNILqeua63VbwT/fgKDn/62YFHufR+EXhV22NM= -----END CERTIFICATE-----Generated at Fri Dec 19 20:55:22 2025 by rpki-client