This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/ddlEpIhToBBmUqKyBNsnU2oYOtY.roa File: ddlEpIhToBBmUqKyBNsnU2oYOtY.roa (raw, json) Hash identifier: id5h4OEOXQV86K+jo42aa+Zw+KrBlkfB4exB025ocOM= Subject key identifier: 75:D9:44:A4:88:53:A0:10:66:52:A2:B2:04:DB:27:53:6A:18:3A:D6 Certificate issuer: /CN=8794d564360a521db598aee6e6a2f8d66921b6c5 Certificate serial: 019B453D14C982F2EE1E7608BED4383ED8D5 Authority key identifier: 87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/ddlEpIhToBBmUqKyBNsnU2oYOtY.roa Signing time: Mon 22 Dec 2025 08:46:29 +0000 ROA not before: Mon 22 Dec 2025 08:46:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208137 IP address blocks: 213.177.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:3d:14:c9:82:f2:ee:1e:76:08:be:d4:38:3e:d8:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8794d564360a521db598aee6e6a2f8d66921b6c5 Validity Not Before: Dec 22 08:46:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=75d944a48853a0106652a2b204db27536a183ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:9c:88:b3:1c:cd:1a:c4:13:3b:7f:32:ca:a9: 20:2f:aa:cd:32:90:7c:52:d4:8c:e0:cb:6e:4b:70: eb:bd:3a:3f:1e:36:42:66:c5:df:b9:5b:20:d8:3b: 46:5d:87:ca:a9:38:1b:1f:c8:a1:b3:70:4b:fa:7e: 6b:e4:5e:dc:a3:8b:de:81:d2:5a:f1:d2:5a:bc:1d: da:71:42:32:d6:1a:cf:aa:05:ea:76:79:d7:21:91: 55:ca:1b:5b:a1:c1:62:0e:7a:47:9e:3d:2c:23:9e: 38:23:10:d8:eb:5e:95:54:f5:a1:87:c8:18:07:04: 2d:43:9c:61:e7:79:6e:89:9a:bf:db:ac:9a:e6:76: ce:5f:dc:d9:93:a3:6f:2c:38:ab:fc:51:dd:8f:ad: d7:07:20:d8:91:8a:d0:bb:7f:a4:48:d5:2d:b8:cf: 06:fe:bd:8f:87:a9:3e:56:9c:45:46:1e:ff:b3:68: 67:cd:7c:ea:af:f3:1a:83:1f:fb:72:55:04:00:0d: 51:24:c9:14:42:49:d5:96:4e:34:2a:40:b7:e3:df: 1f:19:30:f6:0c:c3:4f:42:a5:71:18:82:74:13:99: c2:d1:0a:bd:46:8a:41:36:c4:c3:71:7e:61:9b:2a: b5:ca:c9:33:d9:f3:9c:0c:d1:bf:38:b7:fe:c7:b6: 1c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D9:44:A4:88:53:A0:10:66:52:A2:B2:04:DB:27:53:6A:18:3A:D6 X509v3 Authority Key Identifier: keyid:87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/ddlEpIhToBBmUqKyBNsnU2oYOtY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.177.179.0/24 Signature Algorithm: sha256WithRSAEncryption 49:cf:e0:91:2d:1c:02:85:73:7c:44:7d:e2:f3:f3:37:c6:42: b0:6c:ce:eb:0e:95:b7:f0:21:95:80:cd:a9:2c:13:67:2e:d4: 45:9d:10:de:5c:9e:c1:7a:6e:38:74:36:b4:72:df:72:fc:94: 88:d0:fa:48:3a:42:fa:25:b6:e7:16:d6:a7:f4:e3:97:71:e3: d3:f7:5b:fd:87:98:d5:0a:b7:74:78:22:6f:f0:21:b9:35:0c: 11:b2:4d:52:74:0c:65:07:5c:9f:35:a7:e3:57:93:6d:46:35: 5a:99:62:73:34:43:8c:90:6c:55:bb:3f:8d:c6:0d:3a:cc:b9: 89:aa:25:e0:f6:5b:c2:d0:8e:43:f4:58:b0:32:6b:06:d9:7a: 21:20:61:11:c1:24:0e:6a:01:63:b7:26:9c:d0:43:ad:00:89: 3c:90:95:14:2b:4d:73:fc:e2:e4:54:3a:b1:ee:d7:7d:0a:7c: d9:b4:76:56:ac:d3:3a:18:95:42:e6:5c:bf:38:73:0e:8f:fa: 4b:df:a3:9f:48:c4:51:3c:77:c3:2b:1c:ac:b1:6d:52:36:fb: c2:c0:06:c9:a6:77:bc:62:0c:ff:3c:5b:e0:e3:45:dd:f0:d3: d2:eb:d6:ba:e1:7d:ba:f4:ff:07:a5:e4:0f:46:f4:85:76:a1: b6:30:82:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtFPRTJgvLuHnYIvtQ4PtjVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OTRkNTY0MzYwYTUyMWRiNTk4YWVlNmU2YTJmOGQ2Njky MWI2YzUwHhcNMjUxMjIyMDg0NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWQ5NDRhNDg4NTNhMDEwNjY1MmEyYjIwNGRiMjc1MzZhMTgzYWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75yIsxzNGsQTO38yyqkgL6rNMpB8 UtSM4MtuS3DrvTo/HjZCZsXfuVsg2DtGXYfKqTgbH8ihs3BL+n5r5F7co4vegdJa 8dJavB3acUIy1hrPqgXqdnnXIZFVyhtbocFiDnpHnj0sI544IxDY616VVPWhh8gY BwQtQ5xh53luiZq/26ya5nbOX9zZk6NvLDir/FHdj63XByDYkYrQu3+kSNUtuM8G /r2Ph6k+VpxFRh7/s2hnzXzqr/Magx/7clUEAA1RJMkUQknVlk40KkC3498fGTD2 DMNPQqVxGIJ0E5nC0Qq9RopBNsTDcX5hmyq1yskz2fOcDNG/OLf+x7Yc5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHXZRKSIU6AQZlKisgTbJ1NqGDrWMB8GA1UdIwQY MBaAFIeU1WQ2ClIdtZiu5uai+NZpIbbFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDVUVlpEWUtVaDIxbUs3bTVxTDQxbWtodHNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jYTE2NjctZGU4Zi00NWRjLTkwMDct NWFmZTBjNDJjZjc3LzEvZGRsRXBJaFRvQkJtVXFLeUJOc25VMm9ZT3RZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9jYTE2NjctZGU4Zi00NWRjLTkwMDctNWFmZTBjNDJjZjc3 LzEvaDVUVlpEWUtVaDIxbUs3bTVxTDQxbWtodHNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1bGzMA0G CSqGSIb3DQEBCwUAA4IBAQBJz+CRLRwChXN8RH3i8/M3xkKwbM7rDpW38CGVgM2p LBNnLtRFnRDeXJ7Bem44dDa0ct9y/JSI0PpIOkL6JbbnFtan9OOXcePT91v9h5jV Crd0eCJv8CG5NQwRsk1SdAxlB1yfNafjV5NtRjVamWJzNEOMkGxVuz+Nxg06zLmJ qiXg9lvC0I5D9FiwMmsG2XohIGERwSQOagFjtyac0EOtAIk8kJUUK01z/OLkVDqx 7td9CnzZtHZWrNM6GJVC5ly/OHMOj/pL36OfSMRRPHfDKxyssW1SNvvCwAbJpne8 Ygz/PFvg40Xd8NPS69a64X269P8HpeQPRvSFdqG2MIIz -----END CERTIFICATE-----Generated at Fri Dec 26 17:23:45 2025 by rpki-client