This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/30KL19Ub13Dq1oLnMGb--SdTDFw.roa File: 30KL19Ub13Dq1oLnMGb--SdTDFw.roa (raw, json) Hash identifier: tpSHM0zHgXFiutSvVZTKKrK279w3hubdpJSBNW1R7RY= Subject key identifier: DF:42:8B:D7:D5:1B:D7:70:EA:D6:82:E7:30:66:FE:F9:27:53:0C:5C Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Certificate serial: 019B31F579CA1788B14E3C096994372FE0B2 Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/30KL19Ub13Dq1oLnMGb--SdTDFw.roa Signing time: Thu 18 Dec 2025 14:55:29 +0000 ROA not before: Thu 18 Dec 2025 14:55:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62007 IP address blocks: 37.221.96.0/22 maxlen: 24 84.246.144.0/21 maxlen: 24 84.246.148.0/22 maxlen: 24 185.36.52.0/22 maxlen: 24 185.67.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:f5:79:ca:17:88:b1:4e:3c:09:69:94:37:2f:e0:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Validity Not Before: Dec 18 14:55:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=df428bd7d51bd770ead682e73066fef927530c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e1:d2:33:96:1b:b6:64:25:ef:7a:f6:18:ab: 9e:46:6a:1d:c6:1a:34:1b:63:f6:99:4d:5e:8e:74: 92:78:65:45:b4:aa:00:a5:da:06:01:f8:d1:6d:0f: 82:d8:66:5c:3d:76:a9:dc:0c:8c:4d:ea:89:0f:79: 1a:bb:90:ae:06:0f:44:5f:a3:af:77:c1:42:f8:06: 86:89:9a:f3:3a:98:7a:00:f4:13:79:3c:97:1a:1f: 78:43:e4:63:19:dc:82:b4:83:64:0a:d7:39:3c:a6: 70:8c:3a:c6:6f:3b:ee:d8:38:a3:75:8e:72:30:ef: 76:48:02:02:89:89:58:cd:4a:c0:d4:55:1c:21:69: 9c:8a:b3:ab:c1:e1:fd:47:f9:45:3f:94:4a:ce:13: 85:2f:42:11:fc:6a:96:16:82:af:da:95:69:18:62: d0:16:33:f7:6e:4a:89:af:ac:13:a5:a3:1c:7d:0a: 78:55:d5:fb:db:a3:b9:db:81:6b:64:7c:86:68:31: b9:c8:cf:83:cf:46:7a:4e:df:7d:ab:d4:28:04:53: b9:f9:6a:fb:fc:c8:32:89:f9:e3:89:7e:4d:97:47: 4f:d7:fd:ad:df:99:a8:ec:d6:db:31:3c:93:be:94: cf:94:e4:31:62:78:d4:27:1a:9f:ff:c1:66:84:9c: 44:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:42:8B:D7:D5:1B:D7:70:EA:D6:82:E7:30:66:FE:F9:27:53:0C:5C X509v3 Authority Key Identifier: keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/30KL19Ub13Dq1oLnMGb--SdTDFw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.221.96.0/22 84.246.144.0/21 185.36.52.0/22 185.67.236.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:ba:8b:d9:8d:eb:3a:2b:31:d5:28:29:64:bb:50:d5:2c:7b: 16:58:9d:ae:32:02:39:dd:5e:61:b0:e7:1a:43:ef:0d:1a:64: d5:b9:b9:01:f5:18:36:0f:31:8c:eb:10:03:1f:72:69:f7:7e: 4a:f6:26:c7:79:50:88:49:fe:77:dd:dc:be:3c:0e:d7:8d:7b: d2:7d:f2:6f:33:54:61:49:03:15:67:0a:2d:09:ca:ce:1c:23: 71:c2:1c:f2:97:f8:aa:54:f8:0d:9d:97:d5:94:e1:b3:09:ba: ae:d0:b7:53:45:16:80:e0:5d:d9:45:07:1d:11:17:c8:2c:fc: 4d:70:05:63:cc:63:16:22:9d:1f:59:60:70:28:db:f1:ba:bb: f9:27:16:53:a9:2b:3c:d0:9d:b2:89:89:b5:8f:18:4f:f1:21: db:31:c0:5b:e2:91:32:41:a2:84:e7:6b:c8:b9:e2:db:74:94: 18:b7:83:fe:94:94:dd:56:a0:19:a1:7d:8d:4e:2e:84:1b:db: b6:8b:1c:de:43:90:b7:03:8b:79:e3:a4:d3:fe:70:a1:6e:a0: ca:d1:e5:14:2e:d5:5c:4a:cb:8c:f2:57:4f:f5:53:f0:fb:2f: ac:41:d9:52:f0:73:5e:22:eb:9a:f8:d6:24:4c:a9:41:6c:00: da:84:8c:9e -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZsx9XnKF4ixTjwJaZQ3L+CyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjN2NjMzM0ZjUxZDJiNmViNGUyN2Q2ZDU2YjliY2UzZTg1 NTYwY2MwHhcNMjUxMjE4MTQ1NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjQyOGJkN2Q1MWJkNzcwZWFkNjgyZTczMDY2ZmVmOTI3NTMwYzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+HSM5YbtmQl73r2GKueRmodxho0 G2P2mU1ejnSSeGVFtKoApdoGAfjRbQ+C2GZcPXap3AyMTeqJD3kau5CuBg9EX6Ov d8FC+AaGiZrzOph6APQTeTyXGh94Q+RjGdyCtINkCtc5PKZwjDrGbzvu2DijdY5y MO92SAICiYlYzUrA1FUcIWmcirOrweH9R/lFP5RKzhOFL0IR/GqWFoKv2pVpGGLQ FjP3bkqJr6wTpaMcfQp4VdX726O524FrZHyGaDG5yM+Dz0Z6Tt99q9QoBFO5+Wr7 /MgyifnjiX5Nl0dP1/2t35mo7NbbMTyTvpTPlOQxYnjUJxqf/8FmhJxEHQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFN9Ci9fVG9dw6taC5zBm/vknUwxcMB8GA1UdIwQY MBaAFKx8wzT1HStutOJ9bVa5vOPoVWDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTct MWNmMTViMmJhN2JlLzEvMzBLTDE5VWIxM0RxMW9Mbk1HYi0tU2RUREZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTctMWNmMTViMmJhN2Jl LzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCJd1gAwQD VPaQAwQCuSQ0AwQCuUPsMA0GCSqGSIb3DQEBCwUAA4IBAQBeuovZjes6KzHVKClk u1DVLHsWWJ2uMgI53V5hsOcaQ+8NGmTVubkB9Rg2DzGM6xADH3Jp935K9ibHeVCI Sf533dy+PA7XjXvSffJvM1RhSQMVZwotCcrOHCNxwhzyl/iqVPgNnZfVlOGzCbqu 0LdTRRaA4F3ZRQcdERfILPxNcAVjzGMWIp0fWWBwKNvxurv5JxZTqSs80J2yiYm1 jxhP8SHbMcBb4pEyQaKE52vIueLbdJQYt4P+lJTdVqAZoX2NTi6EG9u2ixzeQ5C3 A4t546TT/nChbqDK0eUULtVcSsuM8ldP9VPw+y+sQdlS8HNeIuua+NYkTKlBbADa hIye -----END CERTIFICATE-----Generated at Fri Dec 19 07:14:10 2025 by rpki-client