This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/DeUytZfI95MWDsuLJPAteUD07Uc.roa File: DeUytZfI95MWDsuLJPAteUD07Uc.roa (raw, json) Hash identifier: wyHnlO7zWJ+apYnZ3m2Zd+YBK+GTVFGojfzCgOcEpWA= Subject key identifier: 0D:E5:32:B5:97:C8:F7:93:16:0E:CB:8B:24:F0:2D:79:40:F4:ED:47 Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53 Certificate serial: 019A72FE4599800A069A1D58DB38847F9E00 Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/DeUytZfI95MWDsuLJPAteUD07Uc.roa Signing time: Tue 11 Nov 2025 12:57:37 +0000 ROA not before: Tue 11 Nov 2025 12:57:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205154 IP address blocks: 91.224.165.0/24 maxlen: 24 2a12:efc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:72:fe:45:99:80:0a:06:9a:1d:58:db:38:84:7f:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53 Validity Not Before: Nov 11 12:57:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0de532b597c8f793160ecb8b24f02d7940f4ed47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3c:2b:a1:cd:49:7a:f8:95:08:57:9e:18:7f: b3:82:f2:ea:26:07:41:8c:c8:48:24:cb:a9:41:9d: b4:67:77:3a:b8:fc:30:c4:96:9c:1c:5c:e6:65:00: a4:73:5c:63:95:c7:0f:79:95:55:1a:fe:c2:87:d2: 46:bd:a8:fb:31:af:b8:5c:e3:05:08:6f:b0:26:c1: 02:b4:f2:90:60:5a:cc:c6:4a:72:fb:c1:df:f1:db: 59:aa:74:35:24:e7:e6:35:66:2f:6d:1e:29:e8:37: 29:ed:5e:e4:d3:32:84:7d:b9:43:da:4a:37:82:41: ec:0f:82:46:25:22:93:be:6c:52:68:ac:68:3d:1f: d8:bc:8d:54:7d:4f:02:50:0c:b5:dd:63:b8:ab:8c: 79:f0:e3:dc:5b:40:f1:a5:c7:0f:1b:f4:46:8c:7b: 41:11:df:e6:1b:55:eb:74:5b:5a:4f:63:eb:cf:4a: 41:17:f4:33:08:c8:6d:ac:4b:86:42:2b:fe:cd:6e: 2f:ef:ca:d8:ed:d0:d7:65:78:74:00:17:8b:f9:3f: 5a:c6:18:c1:9e:7c:b4:71:ac:ae:a8:f2:21:07:1d: 83:25:a9:50:0f:d9:5d:7d:c2:24:ee:48:c8:9a:8d: d3:42:1c:bc:e9:0d:55:0c:c9:ac:45:aa:03:b9:87: a7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E5:32:B5:97:C8:F7:93:16:0E:CB:8B:24:F0:2D:79:40:F4:ED:47 X509v3 Authority Key Identifier: keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/DeUytZfI95MWDsuLJPAteUD07Uc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.165.0/24 IPv6: 2a12:efc0::/29 Signature Algorithm: sha256WithRSAEncryption 48:2d:2a:87:b5:fa:0c:79:d9:a4:ca:cd:52:ff:33:fc:d5:2e: 6a:b8:44:f0:b0:e3:5c:47:b2:72:f9:fd:e3:0b:6d:f2:a8:8d: c7:92:be:b0:12:fe:0e:0d:7e:99:8a:2f:b5:53:f9:ff:63:76: fc:39:8c:46:0c:83:0b:96:b9:01:7d:28:eb:cd:0e:45:7d:3f: d8:65:1b:9f:21:7a:d0:4e:2e:99:c6:50:bc:24:62:20:e9:d2: cd:68:c5:81:a5:29:70:dc:53:b0:f9:ee:57:54:8a:ba:17:63: 7c:c0:d8:fa:2d:ff:2a:95:ef:2a:b8:51:84:73:e7:57:48:67: 46:11:a6:fc:79:1e:ee:bb:28:c7:cc:93:e0:21:65:aa:e3:72: 1b:3e:15:78:7c:13:0a:20:fa:10:c6:62:9d:fa:06:58:9c:97: fc:4f:37:0d:74:92:c7:00:0a:00:5d:12:3d:fb:7c:6d:68:6e: 2c:5a:eb:67:44:6c:8e:e5:78:e3:03:ac:17:2d:f4:3e:e2:22: 41:e7:63:75:3e:f6:7f:8e:26:18:e4:87:09:f1:3e:d8:ed:21: 22:40:22:73:13:c9:60:35:1c:a7:8c:d4:b7:05:8c:6a:9b:4b: e2:0c:50:d0:68:23:d4:23:73:82:3a:88:be:94:c0:f6:96:21: 57:44:b0:40 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZpy/kWZgAoGmh1Y2ziEf54AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YzA3ZGI5ODgwMTMzYzVjZGNlMDA1YmNhMTExYjU1MmNk MTRjNTMwHhcNMjUxMTExMTI1NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGU1MzJiNTk3YzhmNzkzMTYwZWNiOGIyNGYwMmQ3OTQwZjRlZDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzwroc1JeviVCFeeGH+zgvLqJgdB jMhIJMupQZ20Z3c6uPwwxJacHFzmZQCkc1xjlccPeZVVGv7Ch9JGvaj7Ma+4XOMF CG+wJsECtPKQYFrMxkpy+8Hf8dtZqnQ1JOfmNWYvbR4p6Dcp7V7k0zKEfblD2ko3 gkHsD4JGJSKTvmxSaKxoPR/YvI1UfU8CUAy13WO4q4x58OPcW0DxpccPG/RGjHtB Ed/mG1XrdFtaT2Prz0pBF/QzCMhtrEuGQiv+zW4v78rY7dDXZXh0ABeL+T9axhjB nny0cayuqPIhBx2DJalQD9ldfcIk7kjImo3TQhy86Q1VDMmsRaoDuYenTwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFA3lMrWXyPeTFg7LiyTwLXlA9O1HMB8GA1UdIwQY MBaAFOfAfbmIATPFzc4AW8oRG1Us0UxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMt MGFhNDYzY2RmY2EwLzEvRGVVeXRaZkk5NU1XRHN1TEpQQXRlVUQwN1VjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMtMGFhNDYzY2RmY2Ew LzEvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW+ClMA0E AgACMAcDBQMqEu/AMA0GCSqGSIb3DQEBCwUAA4IBAQBILSqHtfoMedmkys1S/zP8 1S5quETwsONcR7Jy+f3jC23yqI3Hkr6wEv4ODX6Zii+1U/n/Y3b8OYxGDIMLlrkB fSjrzQ5FfT/YZRufIXrQTi6ZxlC8JGIg6dLNaMWBpSlw3FOw+e5XVIq6F2N8wNj6 Lf8qle8quFGEc+dXSGdGEab8eR7uuyjHzJPgIWWq43IbPhV4fBMKIPoQxmKd+gZY nJf8TzcNdJLHAAoAXRI9+3xtaG4sWutnRGyO5XjjA6wXLfQ+4iJB52N1PvZ/jiYY 5IcJ8T7Y7SEiQCJzE8lgNRynjNS3BYxqm0viDFDQaCPUI3OCOoi+lMD2liFXRLBA -----END CERTIFICATE-----Generated at Tue Dec 16 07:17:44 2025 by rpki-client