This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dumUD6rZi_PNy0NmeXKb_tcphJs.roa File: dumUD6rZi_PNy0NmeXKb_tcphJs.roa (raw, json) Hash identifier: 3ueG5LkFqgm+8h/T6Dv+cmBOT9kUVlcdsRpI7Um39k0= Subject key identifier: 76:E9:94:0F:AA:D9:8B:F3:CD:CB:43:66:79:72:9B:FE:D7:29:84:9B Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A81C369B03EA489B0DF7620369452B8AF Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dumUD6rZi_PNy0NmeXKb_tcphJs.roa Signing time: Fri 14 Nov 2025 09:47:38 +0000 ROA not before: Fri 14 Nov 2025 09:47:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212306 IP address blocks: 37.202.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 13:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:c3:69:b0:3e:a4:89:b0:df:76:20:36:94:52:b8:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 14 09:47:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=76e9940faad98bf3cdcb436679729bfed729849b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b2:f5:50:0e:c1:d4:77:da:bc:92:f2:03:6b: 6a:a4:90:69:f7:b3:9b:18:5a:a3:50:a1:32:fc:8b: 11:22:52:49:01:04:86:25:1f:98:ad:38:98:a1:5d: 45:77:2b:93:97:12:f3:9b:1a:9c:8e:ce:94:00:7d: 23:90:52:00:a2:83:7e:6d:86:eb:6e:d8:ce:e2:a0: d2:5d:59:78:28:9a:20:1a:3f:a3:f9:d5:22:d1:6d: d4:d6:50:93:e9:b4:aa:15:53:b5:a9:3f:41:c7:d3: f0:37:1d:0f:d9:8d:79:6f:f2:65:e3:65:53:ad:6e: 4f:e2:bd:58:73:76:f5:7a:26:45:c2:66:63:b7:ba: 54:8d:bb:57:a0:00:15:0c:3f:ee:d0:5e:30:fd:58: 9f:dd:ff:e9:45:ad:78:5d:87:e4:f0:c9:f2:d9:0b: cf:4c:ab:c7:ef:11:80:cf:4b:1d:9f:18:02:c3:41: 26:c4:cd:81:86:cb:b2:b8:d7:e5:57:71:fb:55:25: 0b:1f:3c:b1:95:f8:a2:bf:6f:fa:35:64:2e:ae:73: 53:62:e6:c8:3f:ef:f1:c6:57:ef:38:c8:b6:30:f0: b9:71:1f:e7:ab:22:11:39:74:07:ed:2f:1c:e4:b5: 5d:a5:4c:e1:e5:83:dd:31:21:65:ce:88:9c:a5:f8: 29:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E9:94:0F:AA:D9:8B:F3:CD:CB:43:66:79:72:9B:FE:D7:29:84:9B X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dumUD6rZi_PNy0NmeXKb_tcphJs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.203.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:38:3c:2b:35:4e:14:05:d9:d3:9c:ce:ae:bb:6b:84:88:e8: c4:01:4e:bc:ec:98:c2:ed:9c:c7:8c:77:7e:47:fc:6d:9f:7a: 91:ac:12:a2:83:d3:dd:77:48:00:02:f6:c8:bb:69:a7:29:18: 27:2f:17:33:f0:2d:45:3c:c2:a5:43:fc:51:4d:40:ae:5d:2b: 5d:06:b4:c3:61:ad:a3:af:9e:00:94:63:71:92:3a:67:79:3d: 78:e5:1e:7b:c6:4c:dd:a4:2d:fd:2b:8e:37:a4:4c:56:e5:45: a0:74:50:4f:df:e2:2d:c5:38:7a:ca:5f:45:cb:60:c1:77:dd: e6:cd:93:d3:e2:04:9d:1d:04:51:4a:fc:96:39:38:0a:15:ea: 9c:04:3a:b7:bd:e2:9f:65:a6:5a:cd:4b:80:17:7e:66:5c:32: 0d:99:58:2f:a3:45:57:0a:89:66:9e:c0:ed:d0:cd:a5:dc:c1: 43:c5:7c:c8:d3:eb:e3:18:ea:74:40:a0:89:f8:b3:c6:6f:56: 08:f9:bd:c7:41:a0:9b:01:3b:21:16:a0:af:1b:ed:a9:cb:50: 74:1c:0d:1e:bd:8c:23:0c:39:d2:88:d7:a6:80:0f:34:6c:98: 2f:19:48:26:ca:4e:1f:cc:e5:e5:80:e5:c3:57:1c:d9:b4:06: 77:53:fc:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqBw2mwPqSJsN92IDaUUrivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTE0MDk0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmU5OTQwZmFhZDk4YmYzY2RjYjQzNjY3OTcyOWJmZWQ3Mjk4NDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLL1UA7B1HfavJLyA2tqpJBp97Ob GFqjUKEy/IsRIlJJAQSGJR+YrTiYoV1FdyuTlxLzmxqcjs6UAH0jkFIAooN+bYbr btjO4qDSXVl4KJogGj+j+dUi0W3U1lCT6bSqFVO1qT9Bx9PwNx0P2Y15b/Jl42VT rW5P4r1Yc3b1eiZFwmZjt7pUjbtXoAAVDD/u0F4w/Vif3f/pRa14XYfk8Mny2QvP TKvH7xGAz0sdnxgCw0EmxM2BhsuyuNflV3H7VSULHzyxlfiiv2/6NWQurnNTYubI P+/xxlfvOMi2MPC5cR/nqyIROXQH7S8c5LVdpUzh5YPdMSFlzoicpfgpzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHbplA+q2YvzzctDZnlym/7XKYSbMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvZHVtVUQ2clppX1BOeTBObWVYS2JfdGNwaEpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJcrLMA0G CSqGSIb3DQEBCwUAA4IBAQCbODwrNU4UBdnTnM6uu2uEiOjEAU687JjC7ZzHjHd+ R/xtn3qRrBKig9Pdd0gAAvbIu2mnKRgnLxcz8C1FPMKlQ/xRTUCuXStdBrTDYa2j r54AlGNxkjpneT145R57xkzdpC39K443pExW5UWgdFBP3+ItxTh6yl9Fy2DBd93m zZPT4gSdHQRRSvyWOTgKFeqcBDq3veKfZaZazUuAF35mXDINmVgvo0VXColmnsDt 0M2l3MFDxXzI0+vjGOp0QKCJ+LPGb1YI+b3HQaCbATshFqCvG+2py1B0HA0evYwj DDnSiNemgA80bJgvGUgmyk4fzOXlgOXDVxzZtAZ3U/y6 -----END CERTIFICATE-----Generated at Tue Nov 25 19:29:07 2025 by rpki-client