This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/DcJ268LU2VJICcrVBeSxEyhpIGI.roa File: DcJ268LU2VJICcrVBeSxEyhpIGI.roa (raw, json) Hash identifier: C07nw4BoUQ252WMOYkgN7Yq2s+JPAwDe8JwbSZn4IEo= Subject key identifier: 0D:C2:76:EB:C2:D4:D9:52:48:09:CA:D5:05:E4:B1:13:28:69:20:62 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019A442E67B75D99C7491380B01FC3AC814C Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/DcJ268LU2VJICcrVBeSxEyhpIGI.roa Signing time: Sun 02 Nov 2025 10:48:03 +0000 ROA not before: Sun 02 Nov 2025 10:48:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8075 IP address blocks: 188.255.174.0/24 maxlen: 24 188.255.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 07:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:44:2e:67:b7:5d:99:c7:49:13:80:b0:1f:c3:ac:81:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Nov 2 10:48:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0dc276ebc2d4d9524809cad505e4b11328692062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e6:9f:f6:79:87:d2:e8:5c:54:cf:3d:bf:0b: e4:8b:79:4d:62:20:7f:88:d8:62:f0:51:13:81:4d: 80:4f:4b:3e:08:e6:07:9f:5e:74:49:ff:5f:8e:a7: 33:c7:d5:07:63:79:2e:9f:b3:bf:03:d7:8d:b3:73: 81:a4:c8:a6:42:68:8b:cb:51:b8:97:c0:e7:31:96: e2:81:b4:0a:a1:21:d4:8d:37:c1:72:ba:b5:30:65: e7:2a:a0:06:cb:28:bb:3d:1d:f6:9d:b5:22:4c:04: d1:f4:04:17:65:67:37:49:4a:33:85:1a:34:3b:0e: 75:bf:32:27:84:52:6e:34:18:9e:c8:62:d2:8e:b8: b7:4a:98:64:3f:aa:fb:1b:07:62:c2:40:67:b4:b3: 78:b8:18:94:b5:f6:36:1a:0a:f4:6d:69:26:56:48: 2b:df:66:19:2e:a9:ec:d9:cc:a8:f8:bc:42:ae:4e: fb:94:75:22:15:64:cc:e1:a1:e2:d2:2f:79:14:3b: ff:7d:0b:a0:64:87:ed:d1:29:98:33:fa:bf:68:88: 2b:da:68:f0:5f:b3:0d:8a:6a:e9:98:15:2c:fb:54: 78:f7:5b:e2:fc:8a:b0:48:44:38:3e:00:75:63:90: 47:84:6a:70:9b:96:ce:61:fa:83:e2:90:7e:ee:1e: f9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C2:76:EB:C2:D4:D9:52:48:09:CA:D5:05:E4:B1:13:28:69:20:62 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/DcJ268LU2VJICcrVBeSxEyhpIGI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.255.174.0/23 Signature Algorithm: sha256WithRSAEncryption 73:58:b7:92:7d:d7:34:32:cd:9b:a2:fb:2c:54:f1:2e:d8:26: e7:ce:86:e3:0c:5b:4d:b5:f5:a2:e7:6f:a1:bf:a4:5d:24:03: d1:cd:34:89:7d:48:e0:bf:0c:0d:94:6f:48:da:ed:d2:c4:21: 65:f2:dc:3d:a4:ee:a4:1b:7d:b6:38:21:c9:65:bc:98:20:b8: cc:36:d6:cb:46:ef:da:09:39:19:92:76:8e:b4:b8:d3:35:ad: ff:10:39:38:64:bc:a3:f4:f5:ac:c9:db:e5:05:8e:90:c1:8a: ab:cb:2a:3d:3a:73:6b:f0:f2:1c:62:df:0b:95:36:8f:f9:11: 46:80:0d:c4:90:96:d4:06:15:8a:a3:21:0a:69:27:7c:de:d2: f3:19:38:2c:2c:a2:5e:76:9b:fe:d9:65:6b:dd:f2:da:df:ef: 38:4b:bb:b4:09:df:90:8a:a0:35:5f:c4:d9:82:69:85:34:47: e6:74:13:41:2d:ad:2c:f9:4a:f8:ae:90:9a:92:31:9d:d0:a7: d7:b8:1e:4b:33:99:2c:29:3c:74:78:ac:31:24:e6:a9:dc:4a: fb:d8:8c:45:98:87:c3:01:09:98:37:6f:b1:ec:c6:19:de:50: a5:90:b4:de:01:f0:f7:68:65:88:3a:8c:51:a7:0f:27:3d:66: 49:ec:3e:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpELme3XZnHSROAsB/DrIFMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMTAyMTA0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGMyNzZlYmMyZDRkOTUyNDgwOWNhZDUwNWU0YjExMzI4NjkyMDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+af9nmH0uhcVM89vwvki3lNYiB/ iNhi8FETgU2AT0s+COYHn150Sf9fjqczx9UHY3kun7O/A9eNs3OBpMimQmiLy1G4 l8DnMZbigbQKoSHUjTfBcrq1MGXnKqAGyyi7PR32nbUiTATR9AQXZWc3SUozhRo0 Ow51vzInhFJuNBieyGLSjri3SphkP6r7GwdiwkBntLN4uBiUtfY2Ggr0bWkmVkgr 32YZLqns2cyo+LxCrk77lHUiFWTM4aHi0i95FDv/fQugZIft0SmYM/q/aIgr2mjw X7MNimrpmBUs+1R491vi/IqwSEQ4PgB1Y5BHhGpwm5bOYfqD4pB+7h758QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA3CduvC1NlSSAnK1QXksRMoaSBiMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvRGNKMjY4TFUyVkpJQ2NyVkJlU3hFeWhwSUdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvP+uMA0G CSqGSIb3DQEBCwUAA4IBAQBzWLeSfdc0Ms2bovssVPEu2CbnzobjDFtNtfWi52+h v6RdJAPRzTSJfUjgvwwNlG9I2u3SxCFl8tw9pO6kG322OCHJZbyYILjMNtbLRu/a CTkZknaOtLjTNa3/EDk4ZLyj9PWsydvlBY6QwYqryyo9OnNr8PIcYt8LlTaP+RFG gA3EkJbUBhWKoyEKaSd83tLzGTgsLKJedpv+2WVr3fLa3+84S7u0Cd+QiqA1X8TZ gmmFNEfmdBNBLa0s+Ur4rpCakjGd0KfXuB5LM5ksKTx0eKwxJOap3Er72IxFmIfD AQmYN2+x7MYZ3lClkLTeAfD3aGWIOoxRpw8nPWZJ7D5y -----END CERTIFICATE-----Generated at Thu Dec 4 10:28:28 2025 by rpki-client