This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/dDEiYYNHFoAUjwjZLi3ifd8BIIY.roa File: dDEiYYNHFoAUjwjZLi3ifd8BIIY.roa (raw, json) Hash identifier: +SodypyVeE8cbbVn6AK4ugRpoqPSDjouAybLryZJEA8= Subject key identifier: 74:31:22:61:83:47:16:80:14:8F:08:D9:2E:2D:E2:7D:DF:01:20:86 Certificate issuer: /CN=8d3402eae027abcd926090cc0ddeff80aab92c35 Certificate serial: 019AEAE8B17FC1AB4FCF43C8B9FF13D184FE Authority key identifier: 8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/dDEiYYNHFoAUjwjZLi3ifd8BIIY.roa Signing time: Thu 04 Dec 2025 19:48:29 +0000 ROA not before: Thu 04 Dec 2025 19:48:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136258 IP address blocks: 86.54.82.0/24 maxlen: 24 86.54.83.0/24 maxlen: 24 168.222.245.0/24 maxlen: 24 185.186.76.0/24 maxlen: 24 185.186.77.0/24 maxlen: 24 185.186.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ea:e8:b1:7f:c1:ab:4f:cf:43:c8:b9:ff:13:d1:84:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3402eae027abcd926090cc0ddeff80aab92c35 Validity Not Before: Dec 4 19:48:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7431226183471680148f08d92e2de27ddf012086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:98:aa:7a:74:f6:58:47:82:57:5d:89:0e:1e: ec:7b:42:b2:b8:19:ce:4d:a3:1f:2a:ab:9d:b0:12: 62:4b:20:9c:c8:df:2d:e3:86:84:30:a5:44:da:f2: 39:e6:f0:56:c5:99:5b:50:65:e4:5d:fd:57:75:3a: d9:c5:61:29:21:74:46:af:05:0f:6e:ab:4c:1c:68: 52:64:ed:86:6f:9d:d8:b2:c7:ba:8a:b2:16:48:e0: 40:f7:53:e6:10:ec:ab:0b:8a:a7:91:d9:ac:ec:ff: 28:56:6b:b9:90:c4:34:fb:56:14:1e:2c:cf:0c:fa: d1:ac:68:50:5b:ff:44:7e:44:81:21:e0:12:b7:63: 64:2c:fb:d0:9d:ef:0f:d7:f0:11:52:03:03:7c:d8: 85:1b:80:2d:e1:59:33:4c:63:e7:41:30:22:0b:90: ea:3f:aa:32:f3:01:01:e1:96:e3:06:f9:0c:4c:8f: 3f:46:47:80:8e:ab:b8:97:ec:f5:f7:e6:f7:b5:91: a2:c5:9e:53:77:09:89:81:2a:7c:89:af:f0:3f:65: fb:bc:5a:bd:3b:04:d2:69:ad:e5:d0:ca:90:03:69: 0e:17:5d:2a:8b:63:a9:3e:03:0d:ef:c6:02:66:5b: 3c:e9:d6:5a:a1:bd:50:06:8c:5a:ca:f5:ae:d8:a3: 03:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:31:22:61:83:47:16:80:14:8F:08:D9:2E:2D:E2:7D:DF:01:20:86 X509v3 Authority Key Identifier: keyid:8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/dDEiYYNHFoAUjwjZLi3ifd8BIIY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.54.82.0/23 168.222.245.0/24 185.186.76.0-185.186.78.255 Signature Algorithm: sha256WithRSAEncryption 5d:c4:b0:6b:7f:b3:06:15:3c:1e:12:2d:dc:e5:5c:c0:e0:1c: 6a:52:a2:19:0e:28:bc:f3:6b:56:c2:18:1b:58:14:91:54:df: 37:f6:a9:b6:11:bc:32:dc:37:ab:d8:a5:47:d5:a5:ec:3e:4f: 69:59:b5:81:4e:7f:33:7e:68:b8:98:84:fc:71:92:82:19:86: ba:c8:7a:be:1a:3f:bf:9f:f4:d9:c8:2e:47:e1:46:c3:56:7e: a8:5c:85:d8:46:20:57:ca:96:2a:a2:35:fb:f0:d2:e1:49:da: 68:5a:66:53:bd:91:c0:e8:78:55:0e:39:34:8a:a9:bc:c1:01: 66:93:87:63:ec:d4:dd:23:bc:26:fc:4c:c7:04:f9:69:e9:f5: ad:a9:fc:fe:ab:c3:28:7c:98:d1:fa:6c:4d:42:39:3f:b5:1e: 69:f0:3d:b2:ef:8e:b5:58:71:ff:ee:c7:a7:16:4b:d5:9a:d9: 5a:20:0f:09:83:b5:a6:7e:86:f1:41:de:7b:8c:94:a3:8d:9f: 29:29:74:c8:e2:fe:eb:fc:e2:09:fc:83:9d:e9:1d:6d:2b:7d: 0e:cd:80:bc:9c:3d:ab:f4:34:fc:b1:0f:16:72:81:0f:8a:52: c4:3c:c0:76:55:79:9e:1a:94:f2:c4:aa:a5:a6:ed:3f:9f:ac: d1:35:d9:7e -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZrq6LF/watPz0PIuf8T0YT+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMzQwMmVhZTAyN2FiY2Q5MjYwOTBjYzBkZGVmZjgwYWFi OTJjMzUwHhcNMjUxMjA0MTk0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDMxMjI2MTgzNDcxNjgwMTQ4ZjA4ZDkyZTJkZTI3ZGRmMDEyMDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpiqenT2WEeCV12JDh7se0KyuBnO TaMfKqudsBJiSyCcyN8t44aEMKVE2vI55vBWxZlbUGXkXf1XdTrZxWEpIXRGrwUP bqtMHGhSZO2Gb53Ysse6irIWSOBA91PmEOyrC4qnkdms7P8oVmu5kMQ0+1YUHizP DPrRrGhQW/9EfkSBIeASt2NkLPvQne8P1/ARUgMDfNiFG4At4VkzTGPnQTAiC5Dq P6oy8wEB4ZbjBvkMTI8/RkeAjqu4l+z19+b3tZGixZ5TdwmJgSp8ia/wP2X7vFq9 OwTSaa3l0MqQA2kOF10qi2OpPgMN78YCZls86dZaob1QBoxayvWu2KMDHQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFHQxImGDRxaAFI8I2S4t4n3fASCGMB8GA1UdIwQY MBaAFI00AurgJ6vNkmCQzA3e/4CquSw1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalRRQzZ1QW5xODJTWUpETURkN19nS3E1TERVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81NTgzNDgtNDkxMi00YmMxLThlNTgt ZjkyZDdkYzM3ZDJlLzEvZERFaVlZTkhGb0FVandqWkxpM2lmZDhCSUlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81NTgzNDgtNDkxMi00YmMxLThlNTgtZjkyZDdkYzM3ZDJl LzEvalRRQzZ1QW5xODJTWUpETURkN19nS3E1TERVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBVjZSAwQA qN71MAwDBAK5ukwDBAC5uk4wDQYJKoZIhvcNAQELBQADggEBAF3EsGt/swYVPB4S LdzlXMDgHGpSohkOKLzza1bCGBtYFJFU3zf2qbYRvDLcN6vYpUfVpew+T2lZtYFO fzN+aLiYhPxxkoIZhrrIer4aP7+f9NnILkfhRsNWfqhchdhGIFfKliqiNfvw0uFJ 2mhaZlO9kcDoeFUOOTSKqbzBAWaTh2Ps1N0jvCb8TMcE+Wnp9a2p/P6rwyh8mNH6 bE1COT+1HmnwPbLvjrVYcf/ux6cWS9Wa2VogDwmDtaZ+hvFB3nuMlKONnykpdMji /uv84gn8g53pHW0rfQ7NgLycPav0NPyxDxZygQ+KUsQ8wHZVeZ4alPLEqqWm7T+f rNE12X4= -----END CERTIFICATE-----Generated at Fri Dec 5 07:07:35 2025 by rpki-client