This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/abIRkvXA16AAHlSO5p3TE1C1LfI.roa File: abIRkvXA16AAHlSO5p3TE1C1LfI.roa (raw, json) Hash identifier: 9T0j6cRj8ZHW0aV1qQZZ4DGrOKKfeVBHbA9jG/FKtAY= Subject key identifier: 69:B2:11:92:F5:C0:D7:A0:00:1E:54:8E:E6:9D:D3:13:50:B5:2D:F2 Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019B5E9F807613F510A8ACA196F162F88AFB Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/abIRkvXA16AAHlSO5p3TE1C1LfI.roa Signing time: Sat 27 Dec 2025 07:04:29 +0000 ROA not before: Sat 27 Dec 2025 07:04:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212921 IP address blocks: 2.59.152.0/22 maxlen: 22 2.59.152.0/24 maxlen: 24 2.59.155.0/24 maxlen: 24 45.91.224.0/22 maxlen: 22 45.91.227.0/24 maxlen: 24 45.142.152.0/22 maxlen: 22 45.142.152.0/24 maxlen: 24 45.142.155.0/24 maxlen: 24 91.204.224.0/22 maxlen: 22 91.204.225.0/24 maxlen: 24 185.202.100.0/22 maxlen: 22 193.239.150.0/23 maxlen: 23 193.239.150.0/24 maxlen: 24 193.239.154.0/23 maxlen: 23 193.239.154.0/24 maxlen: 24 194.126.202.0/24 maxlen: 24 194.126.215.0/24 maxlen: 24 194.126.219.0/24 maxlen: 24 194.126.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 07:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:9f:80:76:13:f5:10:a8:ac:a1:96:f1:62:f8:8a:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Dec 27 07:04:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69b21192f5c0d7a0001e548ee69dd31350b52df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1f:59:ac:32:5f:0a:18:a8:9b:d5:2f:98:e9: da:ea:5d:9b:4b:24:e0:55:13:de:06:c9:6b:70:cd: 40:b3:03:2d:47:c7:dd:c7:2e:9b:63:42:3b:89:53: 9c:0c:84:63:8d:f4:e8:86:42:dc:ec:8c:87:2b:ec: 24:99:ff:2a:34:40:67:c5:61:ae:37:b6:3d:85:30: b3:f1:3c:7e:7b:10:28:e1:f1:a3:ac:08:fe:c3:09: 02:c7:74:be:39:1b:11:cd:8b:be:3e:b4:03:d7:f5: f3:9b:f0:b4:d8:e8:d7:18:2a:ad:78:6e:76:12:c5: ae:1c:7b:5b:f2:29:ef:64:3c:a5:f2:7f:a5:06:c6: eb:71:cd:3b:9b:3c:44:83:9f:be:8a:9f:23:4e:19: f9:89:30:2e:c6:82:7c:ea:98:c7:5f:fb:38:9a:a6: af:81:ea:08:ca:54:90:72:a3:c0:a8:63:eb:b8:7a: 24:1c:50:06:74:20:26:51:6d:99:23:0c:d4:04:64: 98:ba:0f:76:0a:99:17:ba:d8:2f:86:a8:f1:8b:4b: 8f:78:6f:f0:77:39:8d:6b:60:d7:a2:13:5d:bd:a6: d7:70:a5:8c:37:58:79:07:b8:73:ac:45:d3:ca:14: 86:07:3f:da:b5:89:4e:8d:c4:13:f8:c5:03:1f:eb: 38:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B2:11:92:F5:C0:D7:A0:00:1E:54:8E:E6:9D:D3:13:50:B5:2D:F2 X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/abIRkvXA16AAHlSO5p3TE1C1LfI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.152.0/22 45.91.224.0/22 45.142.152.0/22 91.204.224.0/22 185.202.100.0/22 193.239.150.0/23 193.239.154.0/23 194.126.202.0/24 194.126.215.0/24 194.126.219.0/24 194.126.227.0/24 Signature Algorithm: sha256WithRSAEncryption 29:79:9a:b1:8f:80:b3:69:05:dc:7a:26:9b:e5:2c:90:5d:e8: a8:60:d1:dc:b6:58:b0:09:45:45:93:fc:b3:17:ad:18:7d:b2: 29:20:30:74:96:27:ae:dd:26:7a:4c:9a:9c:ea:43:7c:28:de: 51:c3:32:96:9e:96:29:56:63:bb:87:24:0d:44:19:47:9e:d7: a4:a8:9f:9e:53:02:d5:1a:74:93:76:47:69:07:4c:5d:75:c5: d5:c6:cd:50:7b:07:d7:0c:0e:cc:bc:3d:bd:21:3f:ec:18:8e: 01:91:8c:a4:12:95:c0:25:ee:bd:25:12:23:d9:61:de:fd:31: d4:f5:73:c7:2b:62:8a:2e:65:b9:1b:31:6d:5e:14:91:bb:0a: 3c:4a:ea:45:48:81:04:39:9d:9a:6b:a2:85:e3:e1:b3:16:af: 85:8e:65:a4:ad:a6:72:b4:cd:98:26:56:05:bb:71:d4:8a:a9: 85:84:56:23:79:cd:b6:c5:33:f8:7f:df:20:c1:69:06:9a:aa: dc:94:0c:d5:50:33:29:b4:10:4a:d0:74:9f:16:75:4e:01:4c: c6:c7:b5:0f:a8:26:dc:54:63:4d:71:e0:cc:2c:0e:58:81:9f: 99:04:b3:f5:7a:17:70:40:73:6b:7c:0f:3f:ee:48:52:41:81: 9d:39:5f:ee -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZten4B2E/UQqKyhlvFi+Ir7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjUxMjI3MDcwNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWIyMTE5MmY1YzBkN2EwMDAxZTU0OGVlNjlkZDMxMzUwYjUyZGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzh9ZrDJfChiom9UvmOna6l2bSyTg VRPeBslrcM1AswMtR8fdxy6bY0I7iVOcDIRjjfTohkLc7IyHK+wkmf8qNEBnxWGu N7Y9hTCz8Tx+exAo4fGjrAj+wwkCx3S+ORsRzYu+PrQD1/Xzm/C02OjXGCqteG52 EsWuHHtb8invZDyl8n+lBsbrcc07mzxEg5++ip8jThn5iTAuxoJ86pjHX/s4mqav geoIylSQcqPAqGPruHokHFAGdCAmUW2ZIwzUBGSYug92CpkXutgvhqjxi0uPeG/w dzmNa2DXohNdvabXcKWMN1h5B7hzrEXTyhSGBz/atYlOjcQT+MUDH+s4+QIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFGmyEZL1wNegAB5Ujuad0xNQtS3yMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvYWJJUmt2WEExNkFBSGxTTzVwM1RFMUMxTGZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQCAjuYAwQC LVvgAwQCLY6YAwQCW8zgAwQCucpkAwQBwe+WAwQBwe+aAwQAwn7KAwQAwn7XAwQA wn7bAwQAwn7jMA0GCSqGSIb3DQEBCwUAA4IBAQApeZqxj4CzaQXceiab5SyQXeio YNHctliwCUVFk/yzF60YfbIpIDB0lieu3SZ6TJqc6kN8KN5RwzKWnpYpVmO7hyQN RBlHntekqJ+eUwLVGnSTdkdpB0xddcXVxs1QewfXDA7MvD29IT/sGI4BkYykEpXA Je69JRIj2WHe/THU9XPHK2KKLmW5GzFtXhSRuwo8SupFSIEEOZ2aa6KF4+GzFq+F jmWkraZytM2YJlYFu3HUiqmFhFYjec22xTP4f98gwWkGmqrclAzVUDMptBBK0HSf FnVOAUzGx7UPqCbcVGNNceDMLA5YgZ+ZBLP1ehdwQHNrfA8/7khSQYGdOV/u -----END CERTIFICATE-----Generated at Tue Dec 30 16:31:02 2025 by rpki-client