This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/29CwtGRC06e--CmAyy8KOuiUHAM.roa File: 29CwtGRC06e--CmAyy8KOuiUHAM.roa (raw, json) Hash identifier: zR5RLcYSkihJ6JtnaU1t+9weCiK1A6KL+5cTWo4Xkmo= Subject key identifier: DB:D0:B0:B4:64:42:D3:A7:BE:F8:29:80:CB:2F:0A:3A:E8:94:1C:03 Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019AC5DA4885E2142CD580B0F90CBF88777C Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/29CwtGRC06e--CmAyy8KOuiUHAM.roa Signing time: Thu 27 Nov 2025 15:06:48 +0000 ROA not before: Thu 27 Nov 2025 15:06:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133150 IP address blocks: 213.109.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c5:da:48:85:e2:14:2c:d5:80:b0:f9:0c:bf:88:77:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Nov 27 15:06:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dbd0b0b46442d3a7bef82980cb2f0a3ae8941c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:72:1f:ce:de:20:93:06:2f:65:0a:89:9e:7d: 9b:92:a1:e7:ec:eb:d8:7b:1f:35:72:fb:c9:bf:d2: 34:10:29:90:60:ef:c1:00:bc:83:1e:e4:2f:23:ac: 4a:92:d3:76:f1:a5:a8:07:93:75:91:5e:1d:74:b4: f1:b7:b0:f7:18:e6:c0:b4:61:ae:7c:3f:bd:7b:03: 89:f5:0c:9a:50:8d:3d:4b:75:63:a5:07:ee:e1:0d: b7:22:51:ad:8d:44:07:c8:74:af:77:c3:5f:67:e2: 5a:e4:50:1c:8d:f3:91:63:b4:bd:9f:14:72:16:33: 75:5f:e4:f6:88:c6:c9:49:47:d7:3f:89:c8:bd:2c: c1:35:7d:41:29:8a:a5:d0:39:7e:d8:8e:7f:71:77: 1e:81:a2:4f:c7:5f:01:e8:5f:44:01:62:a7:43:35: 91:87:1f:60:a6:f9:d8:ce:5f:9e:d2:56:9f:93:9b: d9:7a:a5:b4:fc:26:d2:bf:43:67:b8:8f:90:ef:2e: c5:3d:b2:d5:08:67:56:1a:02:f3:cb:66:0d:f2:bb: 12:93:aa:1f:f6:2e:75:be:83:a9:f2:31:e5:a4:84: fc:56:ff:82:28:e9:ef:85:32:71:7d:56:2c:f1:3e: 71:02:78:97:50:4d:62:08:09:1a:ae:c8:cd:dc:a0: 51:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D0:B0:B4:64:42:D3:A7:BE:F8:29:80:CB:2F:0A:3A:E8:94:1C:03 X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/29CwtGRC06e--CmAyy8KOuiUHAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.109.154.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:6c:72:25:b2:94:8f:71:52:02:4e:4f:5c:fb:d0:1f:0b:6e: 9b:cb:50:3c:48:18:54:6d:44:37:33:83:f2:3a:0a:69:e7:61: c7:97:bd:8d:74:64:38:00:79:d8:a9:b4:3f:78:b3:39:5e:90: 92:df:6f:59:f2:ae:4d:d2:54:bf:62:46:56:4f:58:35:f1:d9: 78:26:d9:b1:f9:b6:5f:52:99:ec:27:64:95:80:d7:0f:65:50: 03:92:58:ee:31:4b:d5:f6:8c:2a:a4:32:b2:f2:85:c2:9f:57: 0e:1e:15:a1:7b:de:a6:e2:80:9c:4f:15:b8:0a:b8:47:19:43: 7e:61:5d:45:9f:ad:ea:0b:96:4f:29:66:93:b9:97:02:3f:dc: ba:58:e4:02:c3:98:6c:18:5a:2d:ab:52:5f:7e:3f:93:b4:3c: 2c:fe:ad:a8:01:1c:b5:54:fb:b3:84:10:8e:16:5e:dd:28:b1: 08:02:2c:42:f6:71:f7:be:91:55:f3:0b:29:0e:ab:1f:18:d6: 9c:ba:88:39:80:f5:d7:f6:81:f6:8d:49:b3:8f:32:22:20:3c: d6:43:fa:72:30:10:19:ef:f4:0a:72:d7:f8:fb:80:90:9e:e9: 7c:25:eb:36:7f:f9:0f:02:5f:dc:be:0d:e5:5c:64:2c:d5:95: 26:39:53:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrF2kiF4hQs1YCw+Qy/iHd8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjUxMTI3MTUwNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmQwYjBiNDY0NDJkM2E3YmVmODI5ODBjYjJmMGEzYWU4OTQxYzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnIfzt4gkwYvZQqJnn2bkqHn7OvY ex81cvvJv9I0ECmQYO/BALyDHuQvI6xKktN28aWoB5N1kV4ddLTxt7D3GObAtGGu fD+9ewOJ9QyaUI09S3VjpQfu4Q23IlGtjUQHyHSvd8NfZ+Ja5FAcjfORY7S9nxRy FjN1X+T2iMbJSUfXP4nIvSzBNX1BKYql0Dl+2I5/cXcegaJPx18B6F9EAWKnQzWR hx9gpvnYzl+e0lafk5vZeqW0/CbSv0NnuI+Q7y7FPbLVCGdWGgLzy2YN8rsSk6of 9i51voOp8jHlpIT8Vv+CKOnvhTJxfVYs8T5xAniXUE1iCAkarsjN3KBR4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNvQsLRkQtOnvvgpgMsvCjrolBwDMB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvMjlDd3RHUkMwNmUtLUNtQXl5OEtPdWlVSEFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1W2aMA0G CSqGSIb3DQEBCwUAA4IBAQAfbHIlspSPcVICTk9c+9AfC26by1A8SBhUbUQ3M4Py Ogpp52HHl72NdGQ4AHnYqbQ/eLM5XpCS329Z8q5N0lS/YkZWT1g18dl4Jtmx+bZf UpnsJ2SVgNcPZVADkljuMUvV9owqpDKy8oXCn1cOHhWhe96m4oCcTxW4CrhHGUN+ YV1Fn63qC5ZPKWaTuZcCP9y6WOQCw5hsGFotq1Jffj+TtDws/q2oARy1VPuzhBCO Fl7dKLEIAixC9nH3vpFV8wspDqsfGNacuog5gPXX9oH2jUmzjzIiIDzWQ/pyMBAZ 7/QKctf4+4CQnul8Jes2f/kPAl/cvg3lXGQs1ZUmOVNA -----END CERTIFICATE-----Generated at Fri Dec 5 07:01:35 2025 by rpki-client