This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_DooODXLk50Gf12evu1vAtMQ4r4.roa File: _DooODXLk50Gf12evu1vAtMQ4r4.roa (raw, json) Hash identifier: 0+2ttmVLfUFju2Gf9WwNl9XAw4wo55CY8ee0z0ht54E= Subject key identifier: FC:3A:28:38:35:CB:93:9D:06:7F:5D:9E:BE:ED:6F:02:D3:10:E2:BE Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019ADFDA2D9AF5518C45B78B599C4955AB75 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_DooODXLk50Gf12evu1vAtMQ4r4.roa Signing time: Tue 02 Dec 2025 16:16:48 +0000 ROA not before: Tue 02 Dec 2025 16:16:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216416 IP address blocks: 94.249.174.0/24 maxlen: 24 95.215.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:da:2d:9a:f5:51:8c:45:b7:8b:59:9c:49:55:ab:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 2 16:16:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fc3a283835cb939d067f5d9ebeed6f02d310e2be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:78:e2:a4:19:7a:95:8e:34:1e:80:ac:7b:fa: 31:6b:20:ac:81:c2:5f:ba:ab:0c:e0:ea:36:4c:85: 33:4e:70:b6:78:ad:3f:85:9a:9c:ef:96:15:aa:01: 01:68:23:97:76:49:0f:bf:ef:8a:6e:70:44:0f:6c: cf:23:ca:40:99:c5:35:a0:05:3c:7e:01:f7:29:67: 52:be:02:23:86:ed:60:e4:b0:8f:9b:43:60:69:45: fa:83:04:eb:42:64:66:fa:cc:20:07:a1:fc:34:c9: fd:ea:5d:ee:9b:71:ad:a3:d1:72:18:96:cb:dc:7b: 9c:96:ed:46:ea:6f:d0:a0:2e:b3:68:dd:31:ff:08: 03:c1:8d:52:3c:62:36:16:96:14:a6:08:81:87:ed: a0:29:c0:e9:e7:eb:00:13:35:08:b1:5b:db:6c:80: 2e:9b:7d:15:41:59:84:a7:c3:44:4f:47:83:1c:bc: 19:ba:31:d0:11:4a:64:d2:d4:10:9a:4f:c1:8d:30: 79:e5:0a:f3:b7:6f:cd:75:49:0a:61:c8:82:37:5f: 46:16:cd:a0:46:38:dd:1f:3b:0b:5e:ca:82:fc:5c: cc:c4:5b:48:cf:d6:0b:97:1f:46:02:83:b4:62:82: 88:44:38:33:a1:6b:66:59:21:4c:17:8f:5f:77:97: 77:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:3A:28:38:35:CB:93:9D:06:7F:5D:9E:BE:ED:6F:02:D3:10:E2:BE X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_DooODXLk50Gf12evu1vAtMQ4r4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.249.174.0/24 95.215.34.0/24 Signature Algorithm: sha256WithRSAEncryption 47:38:85:46:4f:ff:33:45:e3:ab:fc:87:0e:0a:39:cf:59:16: aa:45:1e:9d:1f:e8:33:e2:1d:b9:9d:66:c9:1b:8c:73:38:14: a8:9b:ce:98:cf:1b:91:f9:61:a6:c8:31:ae:c9:22:f9:4c:f9: 27:d4:c7:77:e0:d8:d3:e7:c9:2e:a9:06:25:ba:51:4a:62:4b: 13:45:99:ca:28:52:20:11:43:e8:c4:e5:91:13:18:e2:54:e5: da:99:89:8f:51:50:ee:6d:d6:a6:a3:2a:7e:fa:83:d2:12:6b: db:8b:85:95:16:5d:fb:0c:6d:af:7e:7b:e4:f7:4a:90:26:91: 40:5d:61:61:3d:a6:ff:a2:8e:f7:96:af:b2:9b:56:04:19:90: 8c:c9:da:41:80:7f:b2:62:eb:eb:c0:fa:2f:b4:ad:6c:f5:d9: 5c:27:59:31:8f:39:07:af:a7:01:07:ad:4c:c2:8d:1b:89:21: ad:c8:80:2e:da:ad:ea:6d:7b:b1:1d:f0:a2:58:02:13:26:b4: 05:00:04:f2:5c:02:49:d6:17:f9:eb:07:a9:3f:cd:c2:8a:f4: 97:38:5a:a4:2d:21:8b:32:bd:8a:8b:d5:e2:0c:94:a6:13:f8: aa:fe:8d:31:29:2b:39:7a:8e:b1:7f:df:85:09:64:ed:a7:da: 6d:a1:06:bd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrf2i2a9VGMRbeLWZxJVat1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjAyMTYxNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzNhMjgzODM1Y2I5MzlkMDY3ZjVkOWViZWVkNmYwMmQzMTBlMmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnjipBl6lY40HoCse/oxayCsgcJf uqsM4Oo2TIUzTnC2eK0/hZqc75YVqgEBaCOXdkkPv++KbnBED2zPI8pAmcU1oAU8 fgH3KWdSvgIjhu1g5LCPm0NgaUX6gwTrQmRm+swgB6H8NMn96l3um3Gto9FyGJbL 3Huclu1G6m/QoC6zaN0x/wgDwY1SPGI2FpYUpgiBh+2gKcDp5+sAEzUIsVvbbIAu m30VQVmEp8NET0eDHLwZujHQEUpk0tQQmk/BjTB55Qrzt2/NdUkKYciCN19GFs2g RjjdHzsLXsqC/FzMxFtIz9YLlx9GAoO0YoKIRDgzoWtmWSFMF49fd5d3VQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPw6KDg1y5OdBn9dnr7tbwLTEOK+MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvX0Rvb09EWExrNTBHZjEyZXZ1MXZBdE1RNHI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXvmuAwQA X9ciMA0GCSqGSIb3DQEBCwUAA4IBAQBHOIVGT/8zReOr/IcOCjnPWRaqRR6dH+gz 4h25nWbJG4xzOBSom86YzxuR+WGmyDGuySL5TPkn1Md34NjT58kuqQYlulFKYksT RZnKKFIgEUPoxOWRExjiVOXamYmPUVDubdamoyp++oPSEmvbi4WVFl37DG2vfnvk 90qQJpFAXWFhPab/oo73lq+ym1YEGZCMydpBgH+yYuvrwPovtK1s9dlcJ1kxjzkH r6cBB61Mwo0biSGtyIAu2q3qbXuxHfCiWAITJrQFAATyXAJJ1hf56wepP83CivSX OFqkLSGLMr2Ki9XiDJSmE/iq/o0xKSs5eo6xf9+FCWTtp9ptoQa9 -----END CERTIFICATE-----Generated at Fri Dec 5 17:07:21 2025 by rpki-client