This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/2qjdBNCALiMZWh2vWFd8LoAESbM.roa File: 2qjdBNCALiMZWh2vWFd8LoAESbM.roa (raw, json) Hash identifier: FUiOoGc5bJB/TCA1Cm3osP0S3oX0slM6IsNTNevrDXg= Subject key identifier: DA:A8:DD:04:D0:80:2E:23:19:5A:1D:AF:58:57:7C:2E:80:04:49:B3 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B03EA1003A7459C2936A56BDB9068E105 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/2qjdBNCALiMZWh2vWFd8LoAESbM.roa Signing time: Tue 09 Dec 2025 16:20:29 +0000 ROA not before: Tue 09 Dec 2025 16:20:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202673 IP address blocks: 178.253.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:ea:10:03:a7:45:9c:29:36:a5:6b:db:90:68:e1:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Dec 9 16:20:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=daa8dd04d0802e23195a1daf58577c2e800449b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f4:66:65:9d:44:6b:39:43:8f:09:4e:20:72: 34:60:33:c3:3e:73:fb:42:7d:a0:59:db:ae:16:f9: 16:17:7c:c4:de:2b:e0:a7:8e:04:0f:ec:da:22:5a: 1f:ef:66:94:95:db:c9:33:e3:f4:ff:15:e2:14:89: dd:2a:3b:82:88:20:b7:3b:79:b8:fa:1d:64:8e:17: 21:b3:12:45:6d:b8:75:5f:ee:3d:a6:fe:f9:b8:be: 68:ed:c1:5a:4c:40:87:ce:84:29:25:01:2f:fd:cb: 6f:f2:76:7b:10:c8:e9:6b:d1:07:f3:a4:56:45:a6: eb:31:4a:54:a3:5c:7e:88:a5:84:e4:2d:b4:1d:0a: 2f:c2:67:d5:47:3d:90:e3:a3:e1:a6:59:3b:24:e4: 42:1b:97:28:1f:82:63:09:83:e4:93:f9:b9:2c:d5: c6:1b:ce:30:0a:49:ae:43:b0:91:f2:8c:74:aa:d3: db:fb:f9:6e:9f:7f:e3:5e:dc:57:33:1c:62:d8:40: e5:7c:56:3e:f9:13:46:97:ae:ac:76:bc:85:20:82: 3e:f5:a4:93:82:c0:55:52:1f:1b:76:af:47:af:1a: ef:d9:22:2c:34:7c:2c:6d:20:17:7d:d3:f7:7d:59: e5:85:8f:79:7c:f6:07:f4:66:76:ec:d6:8b:ad:7a: a9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A8:DD:04:D0:80:2E:23:19:5A:1D:AF:58:57:7C:2E:80:04:49:B3 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/2qjdBNCALiMZWh2vWFd8LoAESbM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.253.224.0/24 Signature Algorithm: sha256WithRSAEncryption 91:79:37:49:dc:98:9e:37:7c:d0:6d:f7:3d:2e:86:84:ce:68: 1c:1e:7f:27:65:13:43:e8:77:d8:3b:ec:77:0f:c8:05:2f:d5: 34:fe:41:b6:1d:82:6d:56:b1:8c:55:0e:12:e3:18:d0:48:40: 8e:62:1b:f4:57:0d:48:a6:64:9e:ae:0e:f2:06:b0:d7:cb:64: b0:2a:85:b9:4c:80:55:27:05:7d:6f:7f:b5:4c:40:f9:a0:89: 48:92:1e:70:b4:f3:3b:d7:b6:d9:f6:44:1a:f3:a1:f1:5f:d6: dc:de:45:1e:4d:46:2e:47:f6:8d:e4:9c:24:d4:8f:9f:10:92: e7:88:ef:f9:ac:53:a2:96:7b:f7:70:f2:fa:58:fb:1c:24:0d: f8:13:2a:d7:64:e2:b3:52:cf:a1:57:7f:3e:06:80:4e:31:37: 74:c4:ff:5b:43:4c:c9:66:ad:64:99:3c:ee:07:06:c8:33:bb: 94:7e:81:7c:05:f8:cc:0d:a2:a3:42:93:b8:ba:b4:c4:9c:00: 6d:f9:86:a3:40:3f:84:f0:41:56:b4:6a:bf:33:82:df:3c:8f: 97:29:70:5c:4b:32:81:81:5d:d4:ac:73:65:92:f9:67:49:e6: e9:1a:e6:cb:54:26:ca:aa:da:76:8e:31:af:d3:82:7c:51:5c: 02:9e:c0:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsD6hADp0WcKTala9uQaOEFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMjA5MTYyMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWE4ZGQwNGQwODAyZTIzMTk1YTFkYWY1ODU3N2MyZTgwMDQ0OWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPRmZZ1EazlDjwlOIHI0YDPDPnP7 Qn2gWduuFvkWF3zE3ivgp44ED+zaIlof72aUldvJM+P0/xXiFIndKjuCiCC3O3m4 +h1kjhchsxJFbbh1X+49pv75uL5o7cFaTECHzoQpJQEv/ctv8nZ7EMjpa9EH86RW RabrMUpUo1x+iKWE5C20HQovwmfVRz2Q46Phplk7JORCG5coH4JjCYPkk/m5LNXG G84wCkmuQ7CR8ox0qtPb+/lun3/jXtxXMxxi2EDlfFY++RNGl66sdryFIII+9aST gsBVUh8bdq9Hrxrv2SIsNHwsbSAXfdP3fVnlhY95fPYH9GZ27NaLrXqpuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNqo3QTQgC4jGVodr1hXfC6ABEmzMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvMnFqZEJOQ0FMaU1aV2gydldGZDhMb0FFU2JNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv3gMA0G CSqGSIb3DQEBCwUAA4IBAQCReTdJ3JieN3zQbfc9LoaEzmgcHn8nZRND6HfYO+x3 D8gFL9U0/kG2HYJtVrGMVQ4S4xjQSECOYhv0Vw1IpmSerg7yBrDXy2SwKoW5TIBV JwV9b3+1TED5oIlIkh5wtPM717bZ9kQa86HxX9bc3kUeTUYuR/aN5Jwk1I+fEJLn iO/5rFOilnv3cPL6WPscJA34EyrXZOKzUs+hV38+BoBOMTd0xP9bQ0zJZq1kmTzu BwbIM7uUfoF8BfjMDaKjQpO4urTEnABt+YajQD+E8EFWtGq/M4LfPI+XKXBcSzKB gV3UrHNlkvlnSebpGubLVCbKqtp2jjGv04J8UVwCnsCc -----END CERTIFICATE-----Generated at Wed Dec 10 11:08:53 2025 by rpki-client