This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ddKmefiYtv9C_XBK3Fc9uUY6sfY.roa File: ddKmefiYtv9C_XBK3Fc9uUY6sfY.roa (raw, json) Hash identifier: OSdMIPJKxiNz++w/k0JG1INsu1qC7wDvj5oGUiN/J/M= Subject key identifier: 75:D2:A6:79:F8:98:B6:FF:42:FD:70:4A:DC:57:3D:B9:46:3A:B1:F6 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019AC05C75E9A849BB86E0A0084A75268875 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ddKmefiYtv9C_XBK3Fc9uUY6sfY.roa Signing time: Wed 26 Nov 2025 13:31:16 +0000 ROA not before: Wed 26 Nov 2025 13:31:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47277 IP address blocks: 89.106.78.0/24 maxlen: 24 2a02:2fc0:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c0:5c:75:e9:a8:49:bb:86:e0:a0:08:4a:75:26:88:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 26 13:31:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=75d2a679f898b6ff42fd704adc573db9463ab1f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0d:62:c1:e5:14:2b:87:3c:cf:ad:08:89:7e: e0:15:a4:27:4c:08:2c:26:d7:a0:9d:62:a9:21:53: 3e:f6:46:8e:83:97:6a:ed:34:8d:93:c1:a5:5c:43: 81:0b:81:c8:50:96:df:a2:c4:9f:6e:09:47:4c:f6: 34:d8:a6:f8:89:7b:92:71:ae:ef:4b:c5:64:97:50: 54:56:5a:b9:a2:24:bf:a0:b1:b7:32:94:55:0e:c1: 84:bb:3f:9e:56:75:14:60:ad:55:8d:17:43:0f:bb: 20:91:3f:d1:c4:b7:60:4c:8e:47:fb:5c:26:73:cc: 19:75:08:02:f6:c3:30:55:96:41:7d:30:d5:0b:5f: e9:98:f1:5e:34:10:ab:c1:7c:55:c4:9c:f9:73:a9: bd:23:0d:da:86:4a:fc:ea:99:9b:c4:3a:a0:4d:6a: 0b:8d:99:50:71:c6:92:1e:99:35:7a:59:62:66:12: 16:5f:53:3f:65:46:bf:eb:c8:2a:5d:68:0a:14:50: 9a:7d:11:1f:92:f0:99:20:6b:2c:cd:5a:19:ca:73: 8f:a5:2f:3e:0d:3f:ca:3d:f1:a6:e7:da:51:cb:36: 7b:60:e3:8e:42:28:94:ce:20:0a:53:54:0d:d0:38: 41:3e:fe:fc:30:86:ec:cb:51:78:ac:0f:ab:52:11: e1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D2:A6:79:F8:98:B6:FF:42:FD:70:4A:DC:57:3D:B9:46:3A:B1:F6 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ddKmefiYtv9C_XBK3Fc9uUY6sfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.78.0/24 IPv6: 2a02:2fc0:18::/48 Signature Algorithm: sha256WithRSAEncryption a8:76:6e:af:83:de:31:cd:f5:90:2d:77:43:c4:a4:8a:41:ab: c0:fc:7f:49:ce:25:58:f5:58:90:d4:3c:4c:d2:da:b7:0c:f6: d5:a1:01:b1:84:0f:2f:9a:7f:5b:0d:80:58:4c:d2:a6:09:fb: a9:20:a1:a5:9e:8d:16:3a:36:a2:c6:6d:2f:b3:50:f0:2c:28: 7f:3e:58:62:6b:da:38:af:1d:aa:62:9c:f8:50:9c:84:75:8e: 03:eb:d4:56:0c:b2:05:12:15:47:ca:7b:d4:91:dc:31:6f:2f: 49:ad:9e:cd:ef:04:39:73:0c:6f:0a:58:5e:62:ae:bd:e5:fd: 5d:bd:06:43:8c:41:1a:19:af:ff:88:2e:96:46:60:3d:54:36: fb:02:71:48:1a:0b:85:cc:ba:ec:b8:d7:45:d8:05:ad:da:75: dc:5b:ad:75:df:20:8f:d5:30:ba:79:cc:e7:4c:ae:d2:44:be: 0a:b9:fd:fc:a8:00:8d:0b:c2:6e:38:9e:44:65:13:b4:e7:c4: 96:f5:e9:f4:d7:dd:f4:a8:dc:7f:94:11:52:e6:9b:da:2e:6e: 82:fc:ee:40:54:4f:6a:68:43:b7:a7:13:cb:68:6d:f7:15:72: 39:01:c0:93:63:fd:43:85:8f:fd:9d:0b:48:15:fa:6d:c5:5a: 61:44:33:78 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZrAXHXpqEm7huCgCEp1Joh1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTI2MTMzMTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWQyYTY3OWY4OThiNmZmNDJmZDcwNGFkYzU3M2RiOTQ2M2FiMWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw1iweUUK4c8z60IiX7gFaQnTAgs JtegnWKpIVM+9kaOg5dq7TSNk8GlXEOBC4HIUJbfosSfbglHTPY02Kb4iXuSca7v S8Vkl1BUVlq5oiS/oLG3MpRVDsGEuz+eVnUUYK1VjRdDD7sgkT/RxLdgTI5H+1wm c8wZdQgC9sMwVZZBfTDVC1/pmPFeNBCrwXxVxJz5c6m9Iw3ahkr86pmbxDqgTWoL jZlQccaSHpk1elliZhIWX1M/ZUa/68gqXWgKFFCafREfkvCZIGsszVoZynOPpS8+ DT/KPfGm59pRyzZ7YOOOQiiUziAKU1QN0DhBPv78MIbsy1F4rA+rUhHh9QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHXSpnn4mLb/Qv1wStxXPblGOrH2MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvZGRLbWVmaVl0djlDX1hCSzNGYzl1VVk2c2ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAWWpOMA8E AgACMAkDBwAqAi/AABgwDQYJKoZIhvcNAQELBQADggEBAKh2bq+D3jHN9ZAtd0PE pIpBq8D8f0nOJVj1WJDUPEzS2rcM9tWhAbGEDy+af1sNgFhM0qYJ+6kgoaWejRY6 NqLGbS+zUPAsKH8+WGJr2jivHapinPhQnIR1jgPr1FYMsgUSFUfKe9SR3DFvL0mt ns3vBDlzDG8KWF5irr3l/V29BkOMQRoZr/+ILpZGYD1UNvsCcUgaC4XMuuy410XY Ba3addxbrXXfII/VMLp5zOdMrtJEvgq5/fyoAI0Lwm44nkRlE7TnxJb16fTX3fSo 3H+UEVLmm9ouboL87kBUT2poQ7enE8tobfcVcjkBwJNj/UOFj/2dC0gV+m3FWmFE M3g= -----END CERTIFICATE-----Generated at Fri Dec 5 17:07:20 2025 by rpki-client