This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/bEDYpi7W798FQ3Nfcg8VmaW6UpA.roa File: bEDYpi7W798FQ3Nfcg8VmaW6UpA.roa (raw, json) Hash identifier: pvtyw/1jhPX3JFPdCKF8nHt5mcdz8Rq8nvPLBOpUbAA= Subject key identifier: 6C:40:D8:A6:2E:D6:EF:DF:05:43:73:5F:72:0F:15:99:A5:BA:52:90 Certificate issuer: /CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2 Certificate serial: 019B02A5F67D8B16A33024E02A0DEE554BE3 Authority key identifier: CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/bEDYpi7W798FQ3Nfcg8VmaW6UpA.roa Signing time: Tue 09 Dec 2025 10:26:29 +0000 ROA not before: Tue 09 Dec 2025 10:26:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 185.112.132.0/24 maxlen: 24 185.112.133.0/24 maxlen: 24 185.112.134.0/24 maxlen: 24 185.112.135.0/24 maxlen: 24 213.156.245.0/24 maxlen: 24 213.156.250.0/24 maxlen: 24 213.156.251.0/24 maxlen: 24 213.156.252.0/24 maxlen: 24 213.156.253.0/24 maxlen: 24 213.156.254.0/24 maxlen: 24 213.156.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:a5:f6:7d:8b:16:a3:30:24:e0:2a:0d:ee:55:4b:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2 Validity Not Before: Dec 9 10:26:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6c40d8a62ed6efdf0543735f720f1599a5ba5290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:95:18:85:97:c3:bc:c3:80:ad:a7:16:af:11: 3f:46:8a:c4:70:93:c0:b8:45:ce:41:cb:73:f1:fe: e4:60:dd:b7:0c:aa:d3:98:ae:a9:43:d2:fa:10:6b: 0b:ca:46:0c:3f:e1:d6:cc:fc:08:f8:2d:ba:b8:37: dc:e1:93:35:04:29:fd:26:4a:83:be:96:c8:9c:00: 78:ac:28:93:ca:65:00:c2:39:56:b9:f2:d6:3b:e0: 88:8f:ba:73:36:7b:9c:68:09:60:12:11:93:8f:f3: 0f:3f:e2:62:fb:2c:c4:5c:7d:da:ed:36:01:2a:44: 56:5a:85:30:5e:73:05:70:c7:60:88:11:2b:b4:ed: 65:bc:9d:a5:bf:66:0b:66:be:bb:86:9d:2a:cb:e6: f7:6c:54:73:7a:e0:a6:3f:e3:a4:f9:78:3b:f9:92: 17:06:22:3e:ed:88:fc:29:9e:74:7f:64:7b:26:a8: eb:53:62:7e:94:f4:26:1e:73:36:01:93:7f:51:e1: fd:6e:a5:c8:c1:2f:8e:54:71:07:78:00:a0:8b:33: b4:97:2b:0a:a5:19:da:5e:33:42:71:80:e9:d4:51: 18:7b:b6:ce:76:b0:87:42:40:14:88:64:53:c9:a5: 2b:38:81:ac:fc:5e:ef:5e:50:e5:1c:02:c2:95:e8: 05:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:40:D8:A6:2E:D6:EF:DF:05:43:73:5F:72:0F:15:99:A5:BA:52:90 X509v3 Authority Key Identifier: keyid:CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/bEDYpi7W798FQ3Nfcg8VmaW6UpA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.112.132.0/22 213.156.245.0/24 213.156.250.0-213.156.255.255 Signature Algorithm: sha256WithRSAEncryption 8e:64:7a:d1:ac:60:f0:46:54:7e:b4:8f:2c:35:e7:69:ab:13: 93:94:db:1f:6f:17:de:3e:31:ca:93:e2:e8:41:29:eb:be:c9: 71:ab:2c:bb:7f:2f:e7:fa:f5:f2:39:f9:ff:91:82:5a:12:0a: ea:7f:b9:91:dc:41:4d:2c:20:38:bd:6f:fe:2f:d2:49:1a:50: 96:2b:85:6f:cd:2c:89:90:79:75:63:e6:bb:22:1d:31:b0:ec: 35:16:da:5e:35:dc:02:8f:93:2d:aa:6f:3c:b5:be:e8:4d:29: ed:34:21:2e:c8:1b:76:36:94:d5:59:f5:76:86:df:67:13:30: 7a:a0:fd:41:4a:c0:eb:f9:7e:0e:6b:1e:21:09:b6:f8:97:a0: 6e:20:7b:3d:35:49:55:c5:2d:9c:e5:f3:9e:64:4b:6c:ba:9a: 82:00:6b:a5:6d:44:d5:99:41:30:eb:58:37:7e:1a:dc:11:c2: d9:1c:b3:9e:34:cb:49:31:84:33:0f:12:54:eb:81:b9:6e:bd: c4:b4:4d:e1:66:59:aa:c6:28:3a:bd:d1:11:ba:8a:a4:a2:79: e5:bd:7d:80:65:77:24:03:26:43:34:3f:86:8b:c7:87:1b:a6: 2f:e6:be:83:8d:56:e4:f8:57:b0:c7:4c:9b:dd:08:b8:cc:77: 17:c8:ff:2f -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZsCpfZ9ixajMCTgKg3uVUvjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzRiMTMzODdmYWIxZGNmOGI2N2YxNmEwYTQzNzYwODYw MGM0YzIwHhcNMjUxMjA5MTAyNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzQwZDhhNjJlZDZlZmRmMDU0MzczNWY3MjBmMTU5OWE1YmE1MjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5UYhZfDvMOAracWrxE/RorEcJPA uEXOQctz8f7kYN23DKrTmK6pQ9L6EGsLykYMP+HWzPwI+C26uDfc4ZM1BCn9JkqD vpbInAB4rCiTymUAwjlWufLWO+CIj7pzNnucaAlgEhGTj/MPP+Ji+yzEXH3a7TYB KkRWWoUwXnMFcMdgiBErtO1lvJ2lv2YLZr67hp0qy+b3bFRzeuCmP+Ok+Xg7+ZIX BiI+7Yj8KZ50f2R7JqjrU2J+lPQmHnM2AZN/UeH9bqXIwS+OVHEHeACgizO0lysK pRnaXjNCcYDp1FEYe7bOdrCHQkAUiGRTyaUrOIGs/F7vXlDlHALClegFuQIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFGxA2KYu1u/fBUNzX3IPFZmlulKQMB8GA1UdIwQY MBaAFMo0sTOH+rHc+LZ/FqCkN2CGAMTCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpTeE00ZjZzZHo0dG44V29LUTNZSVlBeE1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xMTdjYTMtYjYwMy00ZGI4LTk2MjYt MDQwNTIzNGFiM2YxLzEvYkVEWXBpN1c3OThGUTNOZmNnOFZtYVc2VXBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8xMTdjYTMtYjYwMy00ZGI4LTk2MjYtMDQwNTIzNGFiM2Yx LzEveWpTeE00ZjZzZHo0dG44V29LUTNZSVlBeE1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAfBAIAATAZAwQCuXCEAwQA 1Zz1MAsDBAHVnPoDAwDVnDANBgkqhkiG9w0BAQsFAAOCAQEAjmR60axg8EZUfrSP LDXnaasTk5TbH28X3j4xypPi6EEp677Jcassu38v5/r18jn5/5GCWhIK6n+5kdxB TSwgOL1v/i/SSRpQliuFb80siZB5dWPmuyIdMbDsNRbaXjXcAo+TLapvPLW+6E0p 7TQhLsgbdjaU1Vn1dobfZxMweqD9QUrA6/l+DmseIQm2+JegbiB7PTVJVcUtnOXz nmRLbLqaggBrpW1E1ZlBMOtYN34a3BHC2RyznjTLSTGEMw8SVOuBuW69xLRN4WZZ qsYoOr3REbqKpKJ55b19gGV3JAMmQzQ/hovHhxumL+a+g41W5PhXsMdMm90IuMx3 F8j/Lw== -----END CERTIFICATE-----Generated at Fri Dec 19 23:21:16 2025 by rpki-client