This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/RoOd2HW-hclsaajPqLH0ri7W8zo.roa File: RoOd2HW-hclsaajPqLH0ri7W8zo.roa (raw, json) Hash identifier: AkuyZ5XIC7eywYVom8E+pvjHdZCKK00C97/hKtRD6Tw= Subject key identifier: 46:83:9D:D8:75:BE:85:C9:6C:69:A8:CF:A8:B1:F4:AE:2E:D6:F3:3A Certificate issuer: /CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4 Certificate serial: 019B032DA3AAC6AF34A83659F3C0E027AEE3 Authority key identifier: DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/RoOd2HW-hclsaajPqLH0ri7W8zo.roa Signing time: Tue 09 Dec 2025 12:54:41 +0000 ROA not before: Tue 09 Dec 2025 12:54:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12902 IP address blocks: 176.124.253.0/24 maxlen: 24 185.64.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:2d:a3:aa:c6:af:34:a8:36:59:f3:c0:e0:27:ae:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4 Validity Not Before: Dec 9 12:54:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=46839dd875be85c96c69a8cfa8b1f4ae2ed6f33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c9:77:bf:a6:be:a2:7d:b6:b1:ba:c9:39:a7: 3a:04:d8:4d:60:8f:6e:68:b6:18:78:44:af:7f:58: 47:3d:12:06:58:1f:58:f1:e8:79:c0:9e:28:48:de: 85:a5:4a:42:27:00:b4:17:07:bc:3a:4f:36:e9:8e: ba:20:72:4e:47:62:94:92:f6:a3:c7:8b:06:5b:13: df:13:d9:d0:49:cf:85:a5:a5:de:9d:9c:77:5d:a5: ae:a9:c8:85:15:d2:25:1a:72:12:02:4d:d1:50:6f: 90:31:04:fc:ef:8e:6f:09:14:31:c0:ca:b1:5c:50: ef:aa:98:06:d3:56:9c:50:e5:fe:5a:67:44:b4:67: 72:21:83:fd:44:c8:dd:da:46:e5:87:8c:e7:e9:d9: a1:ab:06:a8:8d:8a:45:99:b3:51:b8:5f:1f:75:2a: e8:32:48:d8:41:56:51:72:0f:fd:31:18:43:b2:8f: 8f:c0:c6:c9:03:98:e9:da:bd:69:f5:a3:ee:b4:80: 91:2e:03:64:d9:36:ff:eb:5f:48:1f:ee:dc:42:5d: 1d:aa:e8:05:67:cf:53:65:cf:18:6b:aa:03:24:9f: 4d:bb:ac:51:ac:56:f6:e5:fc:f7:1e:e7:11:17:0c: 1b:7a:10:80:9e:da:9a:e0:34:50:2f:22:dd:cc:31: be:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:83:9D:D8:75:BE:85:C9:6C:69:A8:CF:A8:B1:F4:AE:2E:D6:F3:3A X509v3 Authority Key Identifier: keyid:DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/RoOd2HW-hclsaajPqLH0ri7W8zo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.124.253.0/24 185.64.32.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:c7:f2:8c:cb:38:5e:7d:da:12:09:b7:44:9f:41:a7:b8:02: 2b:95:91:53:6e:64:03:c2:13:e0:fd:9a:a0:2c:5e:b1:7f:3b: f7:5a:d5:9a:9d:6c:6e:73:1b:06:9e:62:fe:e5:e8:7c:e9:80: 11:b3:cf:11:2f:63:ee:1b:11:08:e1:c2:7a:d3:c7:96:f0:ab: fe:3c:1d:15:f0:7f:f2:da:b5:04:2f:68:22:5c:68:80:0d:15: 1f:5c:99:ea:0a:e9:39:bd:42:a0:63:53:4a:bd:6e:51:0a:4c: f4:6c:03:7d:c2:17:e1:b3:cf:5d:8f:ac:81:fc:18:d2:51:1c: 9b:14:75:07:05:e7:ae:1e:7d:b5:ae:ac:23:96:ba:71:7f:67: 61:77:77:a7:d4:5f:24:03:84:eb:8a:b7:d1:91:04:b9:31:7d: e8:d2:8c:6c:5d:40:cd:66:35:ba:7c:09:3d:6c:7f:0c:b9:aa: 8d:66:35:a8:c6:4d:62:74:b1:28:92:06:75:5c:de:55:30:84: ed:df:3f:8e:4b:a7:45:32:97:78:dd:f3:01:a0:06:89:8f:23: 8a:78:75:c4:43:33:82:5d:3b:25:4f:a4:45:17:88:15:a8:12: 01:a9:30:69:c1:13:3f:e1:63:79:42:6d:73:78:15:9b:15:63: 12:c3:83:1b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsDLaOqxq80qDZZ88DgJ67jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZDdjOTUxMzQ4YmQyZTA5Y2NhZjc2ZjU3YjgzODVmMTVk ZjQ0ZTQwHhcNMjUxMjA5MTI1NDQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjgzOWRkODc1YmU4NWM5NmM2OWE4Y2ZhOGIxZjRhZTJlZDZmMzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcl3v6a+on22sbrJOac6BNhNYI9u aLYYeESvf1hHPRIGWB9Y8eh5wJ4oSN6FpUpCJwC0Fwe8Ok826Y66IHJOR2KUkvaj x4sGWxPfE9nQSc+FpaXenZx3XaWuqciFFdIlGnISAk3RUG+QMQT8745vCRQxwMqx XFDvqpgG01acUOX+WmdEtGdyIYP9RMjd2kblh4zn6dmhqwaojYpFmbNRuF8fdSro MkjYQVZRcg/9MRhDso+PwMbJA5jp2r1p9aPutICRLgNk2Tb/619IH+7cQl0dqugF Z89TZc8Ya6oDJJ9Nu6xRrFb25fz3HucRFwwbehCAntqa4DRQLyLdzDG+wQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEaDndh1voXJbGmoz6ix9K4u1vM6MB8GA1UdIwQY MBaAFNvXyVE0i9LgnMr3b1e4OF8V30TkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjlmSlVUU0wwdUNjeXZkdlY3ZzRYeFhmUk9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84NTNjNzYtYTM5OC00MzVhLWJlNDEt N2QwYWM1MjgxNWE2LzEvUm9PZDJIVy1oY2xzYWFqUHFMSDByaTdXOHpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84NTNjNzYtYTM5OC00MzVhLWJlNDEtN2QwYWM1MjgxNWE2 LzEvMjlmSlVUU0wwdUNjeXZkdlY3ZzRYeFhmUk9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsHz9AwQC uUAgMA0GCSqGSIb3DQEBCwUAA4IBAQBMx/KMyzhefdoSCbdEn0GnuAIrlZFTbmQD whPg/ZqgLF6xfzv3WtWanWxucxsGnmL+5eh86YARs88RL2PuGxEI4cJ608eW8Kv+ PB0V8H/y2rUEL2giXGiADRUfXJnqCuk5vUKgY1NKvW5RCkz0bAN9whfhs89dj6yB /BjSURybFHUHBeeuHn21rqwjlrpxf2dhd3en1F8kA4TrirfRkQS5MX3o0oxsXUDN ZjW6fAk9bH8MuaqNZjWoxk1idLEokgZ1XN5VMITt3z+OS6dFMpd43fMBoAaJjyOK eHXEQzOCXTslT6RFF4gVqBIBqTBpwRM/4WN5Qm1zeBWbFWMSw4Mb -----END CERTIFICATE-----Generated at Fri Dec 12 05:15:22 2025 by rpki-client