This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/ve8cB2fVV6i2ZCITFsZ-GmFfQUc.roa File: ve8cB2fVV6i2ZCITFsZ-GmFfQUc.roa (raw, json) Hash identifier: O6M0g7BdXXN/L6Zy8e00GJUveyJhgL60FbkjEIeJDe4= Subject key identifier: BD:EF:1C:07:67:D5:57:A8:B6:64:22:13:16:C6:7E:1A:61:5F:41:47 Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a Certificate serial: 019B0B931FEC4E7E18C6756BB0B9286FA84D Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/ve8cB2fVV6i2ZCITFsZ-GmFfQUc.roa Signing time: Thu 11 Dec 2025 04:02:29 +0000 ROA not before: Thu 11 Dec 2025 04:02:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213541 IP address blocks: 85.28.32.0/20 maxlen: 24 85.28.32.0/24 maxlen: 24 85.28.33.0/24 maxlen: 24 85.28.34.0/24 maxlen: 24 85.28.43.0/24 maxlen: 24 85.28.44.0/23 maxlen: 23 85.28.46.0/24 maxlen: 24 85.28.48.0/20 maxlen: 24 85.28.57.0/24 maxlen: 24 85.28.59.0/24 maxlen: 24 85.28.60.0/24 maxlen: 24 85.28.62.0/24 maxlen: 24 109.238.192.0/20 maxlen: 24 109.238.192.0/22 maxlen: 24 109.238.200.0/24 maxlen: 24 109.238.201.0/24 maxlen: 24 109.238.203.0/24 maxlen: 24 109.238.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 19:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0b:93:1f:ec:4e:7e:18:c6:75:6b:b0:b9:28:6f:a8:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a Validity Not Before: Dec 11 04:02:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bdef1c0767d557a8b664221316c67e1a615f4147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4a:72:5c:98:2f:40:a3:e4:49:e9:db:87:0e: 56:3c:86:b1:6c:04:2c:ed:2f:60:14:73:22:f1:a3: 67:9b:1c:3b:c3:4c:25:a7:33:ca:b9:41:33:2b:83: 9b:b8:0d:03:0b:13:fe:b2:b2:4f:71:c2:9b:10:ae: 83:c1:6c:70:f0:ed:24:5f:79:00:cc:8f:e4:3f:9c: 7f:d9:98:18:35:15:e0:86:47:84:18:39:c5:12:99: 37:99:6f:ce:f3:11:10:a8:86:d7:09:59:9f:d9:f4: 00:57:e7:83:7a:06:30:2d:08:93:8e:e8:6f:d2:49: a1:01:83:5d:12:66:ef:83:1f:1e:c9:0a:29:73:ae: 8f:99:ee:ac:cb:20:a9:cb:8c:36:d1:b3:7c:31:e3: 1e:05:0f:40:93:85:a5:62:91:c9:8a:e1:7a:61:79: 88:9a:61:a5:cf:5d:ae:46:8f:8b:7f:d6:19:61:74: 37:9a:13:77:be:f6:a8:b9:c9:af:7e:77:cf:01:de: b3:f6:85:96:f4:5d:ef:0f:f0:37:fe:8a:42:d5:1c: 6b:12:bc:fb:d5:8c:a2:cc:d3:6c:21:71:f5:a4:c2: 07:fa:3d:2b:28:26:98:ef:12:ba:fa:e4:c8:95:64: d2:e9:53:f9:d3:8a:38:1f:5c:29:c8:e4:e8:64:25: 8c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:EF:1C:07:67:D5:57:A8:B6:64:22:13:16:C6:7E:1A:61:5F:41:47 X509v3 Authority Key Identifier: keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/ve8cB2fVV6i2ZCITFsZ-GmFfQUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.28.32.0/19 109.238.192.0/20 Signature Algorithm: sha256WithRSAEncryption 85:1a:ee:4e:77:57:7e:ba:eb:b1:e6:d0:6a:75:3b:57:3f:e1: 8a:67:25:d9:87:96:d6:09:04:ba:ef:76:b5:ec:61:42:3d:f3: 1c:66:c0:ce:fd:87:66:0a:25:56:2f:46:25:c9:44:27:62:6c: ad:9b:23:a2:57:15:eb:3c:f3:57:f4:c3:29:96:4c:a5:6f:e6: b8:7b:76:40:77:4a:b9:8f:9f:6b:6d:9e:6e:9e:15:7c:4d:a0: 60:ff:2e:a5:11:78:b7:5e:63:19:6f:d1:e3:cd:32:88:bc:0b: 94:2f:ce:4c:e5:aa:64:8f:c1:97:01:ca:2b:11:b4:02:cd:c4: a7:6b:e2:c8:ec:90:6e:31:26:c1:d3:e4:11:07:04:bd:02:a4: e3:a7:df:ea:5f:eb:15:47:bc:c8:b8:22:e5:7b:0b:4c:dd:71: b5:d0:4e:8c:1c:f3:66:f0:41:a6:fb:9f:42:c8:02:30:d0:23: a9:51:32:9e:49:c4:b9:be:d8:97:d2:5b:e5:84:c4:60:4c:bb: 75:a1:e7:05:74:18:92:20:c8:a4:91:2d:2a:dd:06:bf:13:c6: 74:fd:1d:10:4f:2d:af:52:d9:ca:48:eb:2e:45:f8:f9:b4:20: d6:b7:d3:38:a3:72:08:52:24:ba:89:bb:7c:30:a0:a1:4f:dd: 8a:ba:1d:40 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsLkx/sTn4YxnVrsLkob6hNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2 NTg4MWEwHhcNMjUxMjExMDQwMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGVmMWMwNzY3ZDU1N2E4YjY2NDIyMTMxNmM2N2UxYTYxNWY0MTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UpyXJgvQKPkSenbhw5WPIaxbAQs 7S9gFHMi8aNnmxw7w0wlpzPKuUEzK4ObuA0DCxP+srJPccKbEK6DwWxw8O0kX3kA zI/kP5x/2ZgYNRXghkeEGDnFEpk3mW/O8xEQqIbXCVmf2fQAV+eDegYwLQiTjuhv 0kmhAYNdEmbvgx8eyQopc66Pme6syyCpy4w20bN8MeMeBQ9Ak4WlYpHJiuF6YXmI mmGlz12uRo+Lf9YZYXQ3mhN3vvaoucmvfnfPAd6z9oWW9F3vD/A3/opC1RxrErz7 1YyizNNsIXH1pMIH+j0rKCaY7xK6+uTIlWTS6VP504o4H1wpyOToZCWM/QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL3vHAdn1VeotmQiExbGfhphX0FHMB8GA1UdIwQY MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct ZmViYjY0YjVlMTY0LzEvdmU4Y0IyZlZWNmkyWkNJVEZzWi1HbUZmUVVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0 LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFVRwgAwQE be7AMA0GCSqGSIb3DQEBCwUAA4IBAQCFGu5Od1d+uuux5tBqdTtXP+GKZyXZh5bW CQS673a17GFCPfMcZsDO/YdmCiVWL0YlyUQnYmytmyOiVxXrPPNX9MMplkylb+a4 e3ZAd0q5j59rbZ5unhV8TaBg/y6lEXi3XmMZb9HjzTKIvAuUL85M5apkj8GXAcor EbQCzcSna+LI7JBuMSbB0+QRBwS9AqTjp9/qX+sVR7zIuCLlewtM3XG10E6MHPNm 8EGm+59CyAIw0COpUTKeScS5vtiX0lvlhMRgTLt1oecFdBiSIMikkS0q3Qa/E8Z0 /R0QTy2vUtnKSOsuRfj5tCDWt9M4o3IIUiS6ibt8MKChT92Kuh1A -----END CERTIFICATE-----Generated at Sat Dec 20 05:09:28 2025 by rpki-client