This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/da2k4kkg5lEUqU-HrsfQSd4jDyY.roa File: da2k4kkg5lEUqU-HrsfQSd4jDyY.roa (raw, json) Hash identifier: 0QYieGsvyj25fl9hPrJSkWKf4K69KfEWFeHhni5jPsc= Subject key identifier: 75:AD:A4:E2:49:20:E6:51:14:A9:4F:87:AE:C7:D0:49:DE:23:0F:26 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019B259C290B2668EEA2BFFED551BB69B9E6 Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/da2k4kkg5lEUqU-HrsfQSd4jDyY.roa Signing time: Tue 16 Dec 2025 05:22:29 +0000 ROA not before: Tue 16 Dec 2025 05:22:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 89.249.192.0/21 maxlen: 24 89.249.199.0/24 maxlen: 24 89.249.203.0/24 maxlen: 24 89.249.205.0/24 maxlen: 24 89.249.206.0/23 maxlen: 24 212.42.192.0/20 maxlen: 24 212.42.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 11:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:9c:29:0b:26:68:ee:a2:bf:fe:d5:51:bb:69:b9:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Dec 16 05:22:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=75ada4e24920e65114a94f87aec7d049de230f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c2:57:c8:af:3a:e0:7a:28:db:f1:55:b2:27: 0a:1c:6d:31:19:4d:c7:84:86:2d:63:d7:46:1c:6b: 19:f1:e3:6b:d9:e9:f7:e7:71:d6:1c:c9:f6:a3:8b: 53:7f:15:97:e0:8e:f1:60:3e:f6:c0:9a:b4:c5:db: 65:4d:b8:f9:ee:60:19:0e:15:0d:c5:53:db:4f:f6: 6c:3b:0a:b2:96:d1:0d:1f:7e:4e:d1:74:2d:85:8f: ff:2d:6f:97:bb:43:f0:43:75:04:41:dd:3d:fc:c3: 12:44:a2:43:2f:cb:f4:d5:8c:13:b1:5c:c9:82:27: d3:ce:ed:bc:a0:eb:a6:45:ab:79:8a:0a:10:a8:33: 28:5e:62:9c:19:ae:ca:e2:56:a1:83:1e:3f:6f:9e: a2:7b:9d:0e:c1:c3:2b:9a:e1:71:5a:ff:dd:01:2b: 04:98:b4:72:70:5d:8c:3f:b3:7d:35:0f:e6:b5:eb: f7:1d:88:eb:57:5c:de:ee:88:0a:7b:8f:4f:ac:60: d6:bb:15:c5:d8:3c:4b:17:52:00:98:8f:e0:a5:01: 52:f7:a2:05:bb:c9:e2:d3:e1:74:5f:df:bc:e0:13: 68:01:be:b9:b4:56:53:69:ea:88:34:25:14:02:04: 87:f7:cc:c6:0a:70:ac:ab:b8:87:a8:bd:8b:f3:8b: 06:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AD:A4:E2:49:20:E6:51:14:A9:4F:87:AE:C7:D0:49:DE:23:0F:26 X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/da2k4kkg5lEUqU-HrsfQSd4jDyY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.249.192.0/21 89.249.203.0/24 89.249.205.0-89.249.207.255 212.42.192.0/19 Signature Algorithm: sha256WithRSAEncryption 8c:9b:e9:2e:0a:37:40:3d:39:dc:8e:1b:88:1d:a1:f7:e1:3a: ff:a4:84:09:e6:22:f9:30:d4:2c:bb:0e:24:1e:79:28:64:3a: 9b:55:ae:7a:47:7d:20:83:b3:f9:7c:20:ed:93:c9:db:00:54: 45:98:2d:38:98:23:35:eb:3c:4b:af:c9:16:a8:74:15:a5:a6: 63:07:dd:34:2e:08:7e:cf:4d:a6:01:28:f0:18:a9:22:ce:5e: 7d:a4:86:0f:0f:ea:e4:8c:f7:24:69:8b:2d:a6:03:d1:84:9a: 29:ab:86:6c:f4:d0:64:ab:55:a8:90:a2:17:6d:cb:c5:26:5b: ee:7a:56:ef:64:52:74:a6:b9:23:54:85:64:aa:16:86:da:e9: 49:7e:6b:ba:6e:bc:be:5f:b7:d2:14:fa:18:10:91:72:2b:8f: 5c:aa:a2:4a:06:21:66:7f:59:14:5e:3f:08:ab:bc:eb:bf:61: d9:e8:e7:05:4f:7d:f5:45:3a:32:45:ad:df:b9:3b:b5:da:3c: 14:14:4a:d4:91:da:eb:c8:3d:de:3f:64:70:ab:7d:80:ef:72: 4f:c4:6b:fd:04:c6:b8:7b:a4:7c:aa:78:84:11:4b:d9:8b:99: c9:65:00:90:56:4c:6f:79:47:ef:52:07:73:88:46:e3:5d:40: 0c:15:60:aa -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZslnCkLJmjuor/+1VG7abnmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjUxMjE2MDUyMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWFkYTRlMjQ5MjBlNjUxMTRhOTRmODdhZWM3ZDA0OWRlMjMwZjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMJXyK864Hoo2/FVsicKHG0xGU3H hIYtY9dGHGsZ8eNr2en353HWHMn2o4tTfxWX4I7xYD72wJq0xdtlTbj57mAZDhUN xVPbT/ZsOwqyltENH35O0XQthY//LW+Xu0PwQ3UEQd09/MMSRKJDL8v01YwTsVzJ gifTzu28oOumRat5igoQqDMoXmKcGa7K4lahgx4/b56ie50OwcMrmuFxWv/dASsE mLRycF2MP7N9NQ/mtev3HYjrV1ze7ogKe49PrGDWuxXF2DxLF1IAmI/gpQFS96IF u8ni0+F0X9+84BNoAb65tFZTaeqINCUUAgSH98zGCnCsq7iHqL2L84sGoQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFHWtpOJJIOZRFKlPh67H0EneIw8mMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvZGEyazRra2c1bEVVcVUtSHJzZlFTZDRqRHlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQDWfnAAwQA WfnLMAwDBABZ+c0DBARZ+cADBAXUKsAwDQYJKoZIhvcNAQELBQADggEBAIyb6S4K N0A9OdyOG4gdoffhOv+khAnmIvkw1Cy7DiQeeShkOptVrnpHfSCDs/l8IO2TydsA VEWYLTiYIzXrPEuvyRaodBWlpmMH3TQuCH7PTaYBKPAYqSLOXn2khg8P6uSM9yRp iy2mA9GEmimrhmz00GSrVaiQohdty8UmW+56Vu9kUnSmuSNUhWSqFoba6Ul+a7pu vL5ft9IU+hgQkXIrj1yqokoGIWZ/WRRePwirvOu/Ydno5wVPffVFOjJFrd+5O7Xa PBQUStSR2uvIPd4/ZHCrfYDvck/Ea/0Exrh7pHyqeIQRS9mLmcllAJBWTG95R+9S B3OIRuNdQAwVYKo= -----END CERTIFICATE-----Generated at Thu Dec 18 18:50:07 2025 by rpki-client