This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/mD10yUYKpzkwAV1D32HjidjNVAI.roa File: mD10yUYKpzkwAV1D32HjidjNVAI.roa (raw, json) Hash identifier: NeQR5UUM2VI+F08jYFSsuXXKhnrpABuFMAximujgzdI= Subject key identifier: 98:3D:74:C9:46:0A:A7:39:30:01:5D:43:DF:61:E3:89:D8:CD:54:02 Certificate issuer: /CN=e74c290b5bccdb7de5383ee45ba615d2f306761f Certificate serial: 019B034459543B84C3E35C0A5949E66B8FE6 Authority key identifier: E7:4C:29:0B:5B:CC:DB:7D:E5:38:3E:E4:5B:A6:15:D2:F3:06:76:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50wpC1vM233lOD7kW6YV0vMGdh8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/mD10yUYKpzkwAV1D32HjidjNVAI.roa Signing time: Tue 09 Dec 2025 13:19:29 +0000 ROA not before: Tue 09 Dec 2025 13:19:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 398273 IP address blocks: 185.34.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/50wpC1vM233lOD7kW6YV0vMGdh8.crl rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/50wpC1vM233lOD7kW6YV0vMGdh8.mft rsync://rpki.ripe.net/repository/DEFAULT/50wpC1vM233lOD7kW6YV0vMGdh8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:44:59:54:3b:84:c3:e3:5c:0a:59:49:e6:6b:8f:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e74c290b5bccdb7de5383ee45ba615d2f306761f Validity Not Before: Dec 9 13:19:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=983d74c9460aa73930015d43df61e389d8cd5402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cd:67:30:ed:6d:be:3b:b1:15:9e:50:e6:6a: c9:18:fb:2b:6e:b0:76:88:60:74:a6:90:bb:b8:d3: 5c:2f:0c:6b:70:14:2f:d6:88:b6:b6:9c:1d:fb:d2: d6:b9:9c:29:48:e8:b0:f9:81:c9:86:03:a8:f4:04: 3a:38:a5:78:c6:2b:3c:a4:b2:3c:8b:4b:a3:8a:bd: 1e:1d:c4:45:b5:72:24:0e:61:b7:d5:07:4d:02:30: a9:ab:0c:b0:f6:ca:96:69:01:9f:e9:5e:8a:44:59: 2e:d6:17:78:28:4e:20:90:46:35:85:51:84:ea:e5: fe:db:99:bb:76:3f:23:5a:aa:66:49:72:2d:88:a4: 0f:27:ee:b6:1a:55:e0:45:1b:1e:f6:8f:b4:03:4f: 57:ee:31:9d:d7:aa:6d:56:38:ca:c0:90:00:ee:6b: a1:4d:b7:9d:3f:bf:52:0d:3f:f0:26:bc:45:19:72: 5d:1d:ab:82:68:9d:6f:e1:51:c3:9a:d9:f9:97:ea: 8b:07:98:1d:b4:07:72:5b:e0:7f:47:e5:ad:0d:1f: 44:43:15:03:64:45:6a:e6:fb:d5:54:0e:d2:f9:2c: fd:9e:cf:bc:6f:a6:0f:a4:9d:09:70:b6:41:ec:79: 5e:6e:d5:de:aa:8d:50:19:a7:e9:5d:c5:40:f5:56: ab:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3D:74:C9:46:0A:A7:39:30:01:5D:43:DF:61:E3:89:D8:CD:54:02 X509v3 Authority Key Identifier: keyid:E7:4C:29:0B:5B:CC:DB:7D:E5:38:3E:E4:5B:A6:15:D2:F3:06:76:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50wpC1vM233lOD7kW6YV0vMGdh8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/mD10yUYKpzkwAV1D32HjidjNVAI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/50wpC1vM233lOD7kW6YV0vMGdh8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.34.200.0/23 Signature Algorithm: sha256WithRSAEncryption 39:ac:9e:d0:b0:19:1b:35:dc:ac:bc:3c:7f:b1:75:8e:bf:74: ff:92:f6:db:7d:b8:08:8d:d8:9b:28:b8:0e:61:07:a4:08:5e: 62:72:8b:0a:1c:70:6a:53:5c:8f:85:aa:03:b4:58:aa:b4:91: 49:d4:f8:70:eb:7e:b6:bb:87:68:06:8c:0d:3f:e1:d2:29:6c: 41:f4:fd:10:01:5b:e4:9d:13:d0:3e:a5:ac:46:92:00:12:9e: 81:51:ad:49:7c:79:e9:f4:58:80:7d:5e:f4:83:aa:65:08:70: fa:74:ff:77:78:59:89:8a:50:6d:18:db:ab:fb:f1:ff:88:aa: b6:0e:c3:15:c6:73:0e:e2:7e:e5:1a:38:32:b0:ca:01:57:23: 7e:6b:7d:88:fe:3d:a8:72:ac:4a:4e:a6:8f:1f:fc:c6:dc:87: 5a:92:ed:8a:cd:24:05:39:58:38:ac:a0:b5:e6:15:46:55:57: b4:33:85:ab:75:9a:59:a2:18:ff:5d:e3:83:58:34:76:41:fe: 3c:c3:65:70:3f:8c:9c:de:2c:d2:4f:89:32:46:a9:35:be:02: 13:9d:ac:4c:dc:c0:61:63:39:cc:b0:51:74:57:bc:82:6e:4d: 54:9e:6d:1f:06:7f:63:0f:f7:6b:ed:03:30:cd:81:fe:3c:4a: e5:a6:7f:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsDRFlUO4TD41wKWUnma4/mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NGMyOTBiNWJjY2RiN2RlNTM4M2VlNDViYTYxNWQyZjMw Njc2MWYwHhcNMjUxMjA5MTMxOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODNkNzRjOTQ2MGFhNzM5MzAwMTVkNDNkZjYxZTM4OWQ4Y2Q1NDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0M1nMO1tvjuxFZ5Q5mrJGPsrbrB2 iGB0ppC7uNNcLwxrcBQv1oi2tpwd+9LWuZwpSOiw+YHJhgOo9AQ6OKV4xis8pLI8 i0ujir0eHcRFtXIkDmG31QdNAjCpqwyw9sqWaQGf6V6KRFku1hd4KE4gkEY1hVGE 6uX+25m7dj8jWqpmSXItiKQPJ+62GlXgRRse9o+0A09X7jGd16ptVjjKwJAA7muh TbedP79SDT/wJrxFGXJdHauCaJ1v4VHDmtn5l+qLB5gdtAdyW+B/R+WtDR9EQxUD ZEVq5vvVVA7S+Sz9ns+8b6YPpJ0JcLZB7HlebtXeqo1QGafpXcVA9VarCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJg9dMlGCqc5MAFdQ99h44nYzVQCMB8GA1UdIwQY MBaAFOdMKQtbzNt95Tg+5FumFdLzBnYfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTB3cEMxdk0yMzNsT0Q3a1c2WVYwdk1HZGg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yMjIzNzYtNWNmNi00OTc4LWE4YTMt ZDc0MWZiMjczMTE2LzEvbUQxMHlVWUtwemt3QVYxRDMySGppZGpOVkFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8yMjIzNzYtNWNmNi00OTc4LWE4YTMtZDc0MWZiMjczMTE2 LzEvNTB3cEMxdk0yMzNsT0Q3a1c2WVYwdk1HZGg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuSLIMA0G CSqGSIb3DQEBCwUAA4IBAQA5rJ7QsBkbNdysvDx/sXWOv3T/kvbbfbgIjdibKLgO YQekCF5icosKHHBqU1yPhaoDtFiqtJFJ1Phw6362u4doBowNP+HSKWxB9P0QAVvk nRPQPqWsRpIAEp6BUa1JfHnp9FiAfV70g6plCHD6dP93eFmJilBtGNur+/H/iKq2 DsMVxnMO4n7lGjgysMoBVyN+a32I/j2ocqxKTqaPH/zG3Idaku2KzSQFOVg4rKC1 5hVGVVe0M4WrdZpZohj/XeODWDR2Qf48w2VwP4yc3izST4kyRqk1vgITnaxM3MBh YznMsFF0V7yCbk1Unm0fBn9jD/dr7QMwzYH+PErlpn/j -----END CERTIFICATE-----Generated at Sat Dec 20 00:12:34 2025 by rpki-client