This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/DwoEeOBfOR1SSGusspKAwmFsVzQ.roa File: DwoEeOBfOR1SSGusspKAwmFsVzQ.roa (raw, json) Hash identifier: H0pqbDAXRPRfJy9ww7VBJEAMgv3v6lJt4id1Wh1pb3c= Subject key identifier: 0F:0A:04:78:E0:5F:39:1D:52:48:6B:AC:B2:92:80:C2:61:6C:57:34 Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019AA2E2AB9CE512DD96EEC82F32458D90B8 Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/DwoEeOBfOR1SSGusspKAwmFsVzQ.roa Signing time: Thu 20 Nov 2025 20:09:15 +0000 ROA not before: Thu 20 Nov 2025 20:09:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41745 IP address blocks: 45.89.63.0/24 maxlen: 32 45.144.232.0/24 maxlen: 32 45.144.233.0/24 maxlen: 32 45.144.234.0/24 maxlen: 32 45.144.235.0/24 maxlen: 32 91.211.114.0/24 maxlen: 24 138.124.182.0/24 maxlen: 24 194.39.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a2:e2:ab:9c:e5:12:dd:96:ee:c8:2f:32:45:8d:90:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Nov 20 20:09:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0f0a0478e05f391d52486bacb29280c2616c5734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:06:59:43:56:63:c6:6f:1c:cd:ac:e5:ea:66: c2:25:33:e6:17:4c:ad:f3:82:36:e6:87:e2:be:a9: 6f:45:50:ba:ce:02:b7:7d:8c:40:59:cf:4a:37:ba: 2f:50:2f:46:8e:84:19:81:65:d8:80:2f:ec:ea:37: 42:33:e3:9f:d5:9a:fe:b2:c0:46:98:4e:a7:ee:a7: f2:7e:2c:d9:ec:7d:5e:f1:28:b0:66:11:07:6a:a4: 8b:c0:a6:9b:b7:d0:54:de:80:11:fc:4c:17:83:f0: d3:9d:15:e5:22:19:de:20:74:70:37:0f:5b:95:67: 8c:6a:8b:4c:52:28:a7:7e:21:03:f7:2a:e2:0a:50: 02:6c:59:05:6f:62:e7:64:44:31:ea:80:ce:1d:65: b4:a2:03:21:0d:8d:38:37:f1:14:39:73:e3:9a:96: ad:d2:f1:bf:e4:29:9f:ab:ab:f6:85:18:7d:50:40: 3f:4d:df:8c:72:aa:11:e0:f3:21:1c:a4:ec:e5:ab: 71:4c:02:c5:28:5c:ec:8d:b6:f6:34:c4:3b:a2:d1: 8a:95:df:f8:18:f1:d6:cb:14:a5:91:8a:7b:b9:5f: ef:56:b1:01:b9:c6:5a:14:85:1a:91:14:39:21:f7: 6d:ea:6d:53:dc:92:14:8b:78:5f:c8:18:a7:eb:78: 24:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:0A:04:78:E0:5F:39:1D:52:48:6B:AC:B2:92:80:C2:61:6C:57:34 X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/DwoEeOBfOR1SSGusspKAwmFsVzQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.63.0/24 45.144.232.0/22 91.211.114.0/24 138.124.182.0/24 194.39.110.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:dc:d0:df:02:5e:d1:a4:29:56:a9:ae:90:dc:4c:5c:6d:16: 90:69:80:45:b6:be:0f:50:67:83:dd:28:ef:a3:23:b2:f9:9c: 8f:98:0d:67:67:9f:e3:32:c8:ff:a6:a7:12:e0:20:b5:af:93: 20:6e:02:94:67:3a:c3:72:b6:be:40:0a:2a:ff:9a:b9:b3:84: f2:14:7c:3e:2d:50:6c:a9:74:12:de:f6:92:e8:0a:de:44:4b: d9:8d:6e:9e:3d:c1:35:cb:c1:dd:d0:70:ca:32:91:b2:b2:8c: c0:99:81:e9:c5:37:c3:f6:55:bf:1d:e5:a1:18:3b:3f:39:80: 5d:0f:50:f0:42:7b:d8:e1:a1:f6:67:4a:71:1f:b7:67:79:1f: 97:2e:7a:08:ad:c7:c8:a3:68:c5:ab:c7:5b:41:62:d8:0c:66: 8c:c8:08:55:1c:e6:4d:ae:d5:47:81:e7:15:eb:ff:cb:03:3f: ee:2a:4b:90:2a:7c:38:3d:4a:a4:20:15:26:b2:c7:e0:d0:87: 95:3c:35:ce:23:d0:8e:b2:67:a1:c3:d5:f8:4b:04:d1:2f:c3: f1:6a:8d:1f:e5:6c:7d:26:51:07:46:ab:c7:e8:9f:d2:ab:77: 78:44:c6:d6:f9:25:67:16:ff:7b:64:e6:f4:36:13:38:56:d3: 03:49:33:57 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZqi4quc5RLdlu7ILzJFjZC4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjUxMTIwMjAwOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjBhMDQ3OGUwNWYzOTFkNTI0ODZiYWNiMjkyODBjMjYxNmM1NzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gZZQ1Zjxm8czazl6mbCJTPmF0yt 84I25ofivqlvRVC6zgK3fYxAWc9KN7ovUC9GjoQZgWXYgC/s6jdCM+Of1Zr+ssBG mE6n7qfyfizZ7H1e8SiwZhEHaqSLwKabt9BU3oAR/EwXg/DTnRXlIhneIHRwNw9b lWeMaotMUiinfiED9yriClACbFkFb2LnZEQx6oDOHWW0ogMhDY04N/EUOXPjmpat 0vG/5Cmfq6v2hRh9UEA/Td+McqoR4PMhHKTs5atxTALFKFzsjbb2NMQ7otGKld/4 GPHWyxSlkYp7uV/vVrEBucZaFIUakRQ5Ifdt6m1T3JIUi3hfyBin63gkhQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFA8KBHjgXzkdUkhrrLKSgMJhbFc0MB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvRHdvRWVPQmZPUjFTU0d1c3NwS0F3bUZzVnpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALVk/AwQC LZDoAwQAW9NyAwQAiny2AwQAwiduMA0GCSqGSIb3DQEBCwUAA4IBAQAa3NDfAl7R pClWqa6Q3ExcbRaQaYBFtr4PUGeD3SjvoyOy+ZyPmA1nZ5/jMsj/pqcS4CC1r5Mg bgKUZzrDcra+QAoq/5q5s4TyFHw+LVBsqXQS3vaS6AreREvZjW6ePcE1y8Hd0HDK MpGysozAmYHpxTfD9lW/HeWhGDs/OYBdD1DwQnvY4aH2Z0pxH7dneR+XLnoIrcfI o2jFq8dbQWLYDGaMyAhVHOZNrtVHgecV6//LAz/uKkuQKnw4PUqkIBUmssfg0IeV PDXOI9COsmehw9X4SwTRL8Pxao0f5Wx9JlEHRqvH6J/Sq3d4RMbW+SVnFv97ZOb0 NhM4VtMDSTNX -----END CERTIFICATE-----Generated at Sat Dec 6 12:43:02 2025 by rpki-client