This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/PRV_2BtpZs6vt-9wKbOv0OUJX1E.roa File: PRV_2BtpZs6vt-9wKbOv0OUJX1E.roa (raw, json) Hash identifier: DJR9ZSacN9E6YKfi7eL7PsXYoECeoWdVuSHdoUqepOk= Subject key identifier: 3D:15:7F:D8:1B:69:66:CE:AF:B7:EF:70:29:B3:AF:D0:E5:09:5F:51 Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Certificate serial: 019B3656FF573726F34A05AF4D6488E4F599 Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/PRV_2BtpZs6vt-9wKbOv0OUJX1E.roa Signing time: Fri 19 Dec 2025 11:20:29 +0000 ROA not before: Fri 19 Dec 2025 11:20:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212165 IP address blocks: 109.120.147.0/24 maxlen: 24 109.120.159.0/24 maxlen: 24 176.98.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:56:ff:57:37:26:f3:4a:05:af:4d:64:88:e4:f5:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Validity Not Before: Dec 19 11:20:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3d157fd81b6966ceafb7ef7029b3afd0e5095f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2b:52:ae:90:28:ef:34:3a:29:8c:15:0d:0c: 4a:2a:2b:a8:61:b6:a1:c4:d2:77:5c:90:2b:13:92: 3d:00:b6:bb:9e:de:5f:76:44:48:8a:15:7b:9d:dd: ae:d4:ce:c3:dc:44:24:61:2f:29:ba:66:b2:86:64: e5:04:1d:1b:ee:6c:0c:5a:ed:ea:4c:1a:7f:cf:6e: f3:db:d3:0e:8d:97:e9:c3:2c:ed:9f:a4:0a:c0:02: a7:48:73:36:65:e1:83:aa:52:69:b3:3e:2d:1a:df: a7:83:22:d0:43:cb:d9:3f:ce:a9:b0:e4:88:a8:f6: 43:1a:b9:88:ee:47:fb:de:30:5b:0c:b8:a3:ff:2a: dc:eb:3a:de:d4:32:2a:38:f1:82:2b:1c:77:51:d1: 15:1f:fd:c3:c4:40:d4:63:93:47:9c:5c:36:a1:0c: aa:2e:11:5b:e6:1e:b8:10:1c:44:7c:67:2f:3a:65: e6:26:e8:22:08:17:65:5e:97:02:ba:11:d5:50:21: 9a:a8:7f:ca:b6:6b:79:a0:55:02:e5:84:78:b6:91: 73:a1:ef:9f:cf:39:c7:ce:fc:af:34:e0:9c:dc:37: 55:7a:8b:63:a9:6e:a0:59:ab:12:c8:50:fb:77:bc: 4f:e6:f9:84:55:64:8d:8d:6b:57:9c:88:2f:56:0e: cb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:15:7F:D8:1B:69:66:CE:AF:B7:EF:70:29:B3:AF:D0:E5:09:5F:51 X509v3 Authority Key Identifier: keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/PRV_2BtpZs6vt-9wKbOv0OUJX1E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.120.147.0/24 109.120.159.0/24 176.98.188.0/24 Signature Algorithm: sha256WithRSAEncryption 20:68:71:91:ef:6b:3c:8c:8b:6c:0a:ca:97:bc:d7:2f:78:c4: d8:5f:42:24:f7:34:a2:f9:7b:d0:1f:99:d9:95:dc:45:6d:88: 67:1d:e9:af:f4:63:24:65:e4:07:bb:33:fb:b4:4d:26:e3:66: 26:21:42:d3:e2:b2:31:70:48:91:d8:bb:6c:a3:93:42:88:2a: 9e:cd:19:39:f2:cb:93:3a:be:88:2f:5c:3b:22:be:13:59:19: df:92:18:85:15:b8:8a:22:de:5e:c9:4d:dd:ed:1c:80:0e:15: 8b:ed:e5:53:58:9e:b6:e4:d4:ef:5f:a1:34:a5:7a:23:b0:59: f3:9b:c1:bb:d1:02:75:99:cf:8d:f5:f6:53:4d:97:ea:f6:ac: f6:2f:0c:47:f4:14:e3:a5:c7:2c:d8:94:8c:28:46:32:4b:71: 61:98:b6:5d:3d:93:aa:4d:e9:bd:a9:fd:6e:b0:e4:f3:ef:0d: 4a:ec:52:8c:5e:68:98:5b:8e:3d:e0:be:95:14:fc:98:e9:a2: 20:9a:aa:38:fe:9c:4f:e1:bc:78:80:1a:2c:c0:b4:60:d1:ce: 5a:9f:99:ff:05:d8:99:7d:7c:dd:ad:b0:0f:25:5e:6b:45:06: 0d:c8:d6:25:e4:a2:b0:d4:c4:20:11:0a:5e:0f:ae:99:19:b2: 33:f6:ab:75 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZs2Vv9XNybzSgWvTWSI5PWZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl NmRlNWUwHhcNMjUxMjE5MTEyMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDE1N2ZkODFiNjk2NmNlYWZiN2VmNzAyOWIzYWZkMGU1MDk1ZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsytSrpAo7zQ6KYwVDQxKKiuoYbah xNJ3XJArE5I9ALa7nt5fdkRIihV7nd2u1M7D3EQkYS8pumayhmTlBB0b7mwMWu3q TBp/z27z29MOjZfpwyztn6QKwAKnSHM2ZeGDqlJpsz4tGt+ngyLQQ8vZP86psOSI qPZDGrmI7kf73jBbDLij/yrc6zre1DIqOPGCKxx3UdEVH/3DxEDUY5NHnFw2oQyq LhFb5h64EBxEfGcvOmXmJugiCBdlXpcCuhHVUCGaqH/Ktmt5oFUC5YR4tpFzoe+f zznHzvyvNOCc3DdVeotjqW6gWasSyFD7d7xP5vmEVWSNjWtXnIgvVg7LBwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFD0Vf9gbaWbOr7fvcCmzr9DlCV9RMB8GA1UdIwQY MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt OTJjODFmMjJlNzEyLzEvUFJWXzJCdHBaczZ2dC05d0tiT3YwT1VKWDFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbXiTAwQA bXifAwQAsGK8MA0GCSqGSIb3DQEBCwUAA4IBAQAgaHGR72s8jItsCsqXvNcveMTY X0Ik9zSi+XvQH5nZldxFbYhnHemv9GMkZeQHuzP7tE0m42YmIULT4rIxcEiR2Lts o5NCiCqezRk58suTOr6IL1w7Ir4TWRnfkhiFFbiKIt5eyU3d7RyADhWL7eVTWJ62 5NTvX6E0pXojsFnzm8G70QJ1mc+N9fZTTZfq9qz2LwxH9BTjpccs2JSMKEYyS3Fh mLZdPZOqTem9qf1usOTz7w1K7FKMXmiYW4494L6VFPyY6aIgmqo4/pxP4bx4gBos wLRg0c5an5n/BdiZfXzdrbAPJV5rRQYNyNYl5KKw1MQgEQpeD66ZGbIz9qt1 -----END CERTIFICATE-----Generated at Sat Dec 20 14:06:28 2025 by rpki-client