This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/DsNJxpMOAlmBJVhl-DIzdksGOOA.roa File: DsNJxpMOAlmBJVhl-DIzdksGOOA.roa (raw, json) Hash identifier: yffxTbl8qcCLsEvpckrsxgpCsaHMaKpkssPKbesHCsA= Subject key identifier: 0E:C3:49:C6:93:0E:02:59:81:25:58:65:F8:32:33:76:4B:06:38:E0 Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Certificate serial: 019B3645270A84F38702BA760D849AAFD796 Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/DsNJxpMOAlmBJVhl-DIzdksGOOA.roa Signing time: Fri 19 Dec 2025 11:01:00 +0000 ROA not before: Fri 19 Dec 2025 11:01:00 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 10282 IP address blocks: 57.66.0.0/15 maxlen: 32 57.90.0.0/16 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:27:0a:84:f3:87:02:ba:76:0d:84:9a:af:d7:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Validity Not Before: Dec 19 11:01:00 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0ec349c6930e025981255865f83233764b0638e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e9:79:7b:f8:94:1b:96:f2:3a:b8:e7:6c:21: 87:c0:43:7c:1f:35:af:e9:e0:b1:24:dd:d1:61:f1: b4:df:8e:5d:a8:01:33:a9:07:7e:5c:4d:6d:62:bf: eb:2b:ff:d1:ff:72:90:dc:f1:4e:dd:86:64:2f:37: d1:26:9b:9f:d3:ee:64:3a:19:c3:6a:24:64:5d:78: 55:61:e7:12:85:0f:01:e2:8d:f1:d6:83:6f:f6:b1: 67:81:7c:e7:5b:78:e6:2e:f1:57:7f:11:51:3a:4a: 26:d5:8b:fd:02:ed:83:e5:7b:44:2c:5b:73:0a:48: 8a:35:f4:6d:76:46:44:d7:b3:22:19:58:32:40:33: 3f:d8:4e:e7:db:ba:38:f9:ea:62:bf:35:88:0d:a8: 3f:6c:44:f1:82:71:bc:21:d2:4e:79:99:36:ab:28: 71:03:f0:af:a6:3c:41:58:55:dd:f0:60:6e:9a:f3: 2b:19:06:6e:1f:1d:3d:57:3e:2f:1d:25:34:e5:b0: 80:69:de:fd:a9:b5:04:7b:c4:5a:d0:c5:4c:05:a3: 0c:75:5b:eb:a7:b2:55:55:3f:2f:d0:7c:dd:1d:a6: 3c:1c:73:65:d3:00:1b:3c:fd:b5:6f:81:c3:68:de: 49:61:2d:5a:b4:5e:0d:13:d1:64:f5:f7:f7:73:71: 3e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C3:49:C6:93:0E:02:59:81:25:58:65:F8:32:33:76:4B:06:38:E0 X509v3 Authority Key Identifier: keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/DsNJxpMOAlmBJVhl-DIzdksGOOA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.66.0.0/15 57.90.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4b:ad:09:5e:f4:5b:d6:cc:bb:55:88:c3:8c:5c:a5:1f:a3:bc: 33:cc:43:50:7e:ee:6e:45:91:fd:3e:a9:f9:e9:70:cf:52:b6: fa:63:4b:54:41:bf:65:df:2d:1b:cc:8b:85:95:bf:3c:9a:79: 45:b8:0b:61:27:83:29:99:1c:44:7d:a2:24:bd:0d:14:29:ac: 29:b0:fc:dc:13:f3:c1:5d:06:e7:e4:2f:8c:31:92:33:98:9d: a4:8e:3d:43:cb:a5:a4:2b:10:2a:a8:48:9c:02:c2:45:72:c8: a6:8d:f5:8c:4f:50:ad:0b:0b:9c:1a:88:34:e4:4e:ed:3a:f5: 84:ed:66:57:65:ae:83:f0:35:be:ce:45:e3:ce:9d:07:84:62: 3d:e0:6d:dd:87:37:0e:5c:ad:8b:2d:5b:0b:ab:3f:4e:08:1a: f5:37:4b:6c:f8:75:0b:9d:42:96:16:2a:b5:27:cb:4f:1d:ce: 51:50:18:c1:4d:8a:5d:e9:45:aa:0d:cf:85:11:52:bc:1b:df: bc:e9:d7:4c:69:01:ff:f0:18:d3:a9:39:b5:6f:3c:9e:cd:d8: 1a:5f:83:31:af:e7:c2:d2:81:20:24:77:58:4d:ef:a0:2f:bb: 58:f6:a1:ac:62:b3:36:07:eb:e4:00:e2:fd:d5:3e:7c:e4:e7: de:66:f1:f4 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZs2RScKhPOHArp2DYSar9eWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYjgzY2ZlNTQ4OTgzNWYyOTRkMGFmNGRkNGRiNmUzZGMy NWYxZjMwHhcNMjUxMjE5MTEwMTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWMzNDljNjkzMGUwMjU5ODEyNTU4NjVmODMyMzM3NjRiMDYzOGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApul5e/iUG5byOrjnbCGHwEN8HzWv 6eCxJN3RYfG0345dqAEzqQd+XE1tYr/rK//R/3KQ3PFO3YZkLzfRJpuf0+5kOhnD aiRkXXhVYecShQ8B4o3x1oNv9rFngXznW3jmLvFXfxFROkom1Yv9Au2D5XtELFtz CkiKNfRtdkZE17MiGVgyQDM/2E7n27o4+epivzWIDag/bETxgnG8IdJOeZk2qyhx A/CvpjxBWFXd8GBumvMrGQZuHx09Vz4vHSU05bCAad79qbUEe8Ra0MVMBaMMdVvr p7JVVT8v0HzdHaY8HHNl0wAbPP21b4HDaN5JYS1atF4NE9Fk9ff3c3E+/wIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFA7DScaTDgJZgSVYZfgyM3ZLBjjgMB8GA1UdIwQY MBaAFM24PP5UiYNfKU0K9N1NtuPcJfHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEt YTNiNzRmOTY0MWFjLzEvRHNOSnhwTU9BbG1CSlZobC1ESXpka3NHT09BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEtYTNiNzRmOTY0MWFj LzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMBOUIDAwA5 WjANBgkqhkiG9w0BAQsFAAOCAQEAS60JXvRb1sy7VYjDjFylH6O8M8xDUH7ubkWR /T6p+elwz1K2+mNLVEG/Zd8tG8yLhZW/PJp5RbgLYSeDKZkcRH2iJL0NFCmsKbD8 3BPzwV0G5+QvjDGSM5idpI49Q8ulpCsQKqhInALCRXLIpo31jE9QrQsLnBqINORO 7Tr1hO1mV2Wug/A1vs5F486dB4RiPeBt3Yc3Dlytiy1bC6s/Tgga9TdLbPh1C51C lhYqtSfLTx3OUVAYwU2KXelFqg3PhRFSvBvfvOnXTGkB//AY06k5tW88ns3YGl+D Ma/nwtKBICR3WE3voC+7WPahrGKzNgfr5ADi/dU+fOTn3mbx9A== -----END CERTIFICATE-----Generated at Fri Dec 19 22:02:54 2025 by rpki-client