This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/M0DY0-cxOITylOA1AQbMHjzuLns.roa File: M0DY0-cxOITylOA1AQbMHjzuLns.roa (raw, json) Hash identifier: TCLFDYQDGEHGNtY7ssTerark8mKFfbDCNGa95chOu74= Subject key identifier: 33:40:D8:D3:E7:31:38:84:F2:94:E0:35:01:06:CC:1E:3C:EE:2E:7B Certificate issuer: /CN=5dd6c1384b4a4ca501dd33c5f0d8580d4416eb3a Certificate serial: 019B5AE8C9A06E6F8A2ED6E21FC6F1AA9919 Authority key identifier: 5D:D6:C1:38:4B:4A:4C:A5:01:DD:33:C5:F0:D8:58:0D:44:16:EB:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdbBOEtKTKUB3TPF8NhYDUQW6zo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/M0DY0-cxOITylOA1AQbMHjzuLns.roa Signing time: Fri 26 Dec 2025 13:46:03 +0000 ROA not before: Fri 26 Dec 2025 13:46:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216054 IP address blocks: 185.60.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/XdbBOEtKTKUB3TPF8NhYDUQW6zo.crl rsync://rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/XdbBOEtKTKUB3TPF8NhYDUQW6zo.mft rsync://rpki.ripe.net/repository/DEFAULT/XdbBOEtKTKUB3TPF8NhYDUQW6zo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:e8:c9:a0:6e:6f:8a:2e:d6:e2:1f:c6:f1:aa:99:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6c1384b4a4ca501dd33c5f0d8580d4416eb3a Validity Not Before: Dec 26 13:46:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3340d8d3e7313884f294e0350106cc1e3cee2e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0a:3e:e6:48:6b:1b:12:40:31:f3:5f:d2:56: af:9e:45:c6:1e:80:17:94:75:26:c3:f1:10:33:52: db:3c:e2:1e:aa:a8:cd:b2:8e:82:85:35:fe:c4:f4: d6:d1:ca:8c:36:2c:26:bc:16:19:f2:ec:c3:d3:09: 5e:7f:26:d6:1b:2b:25:e2:a5:e6:e2:1d:bd:c4:9c: 3e:27:6c:0c:ad:b0:62:fd:40:14:5f:d6:5d:99:bf: 22:18:78:d2:10:5a:f4:0b:33:85:99:2e:c0:96:a4: e3:45:29:07:e5:cf:bb:18:ec:88:54:7c:9a:19:89: 00:e4:bc:a7:38:84:bc:7b:27:6d:c4:29:20:7d:a9: a4:de:c6:65:d4:b7:08:da:a1:3b:2e:ba:34:09:82: 30:c9:ef:3e:70:d5:91:1b:8b:58:20:47:e6:06:9f: 2d:7f:55:0e:8d:28:a5:70:a3:a2:99:8a:c2:8b:7f: af:ad:7c:0f:6d:97:28:e8:fa:81:67:8d:9a:99:5f: 4c:ee:23:01:f4:46:67:9c:2d:61:ce:9c:ac:25:ce: 7a:ae:e8:c6:4f:58:56:eb:36:20:fb:fc:30:6f:fe: 92:9c:33:71:eb:bd:d1:a7:be:a1:02:62:64:05:f1: 4d:9b:9f:6c:1d:76:04:32:a1:97:08:6c:cf:78:16: 7a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:40:D8:D3:E7:31:38:84:F2:94:E0:35:01:06:CC:1E:3C:EE:2E:7B X509v3 Authority Key Identifier: keyid:5D:D6:C1:38:4B:4A:4C:A5:01:DD:33:C5:F0:D8:58:0D:44:16:EB:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdbBOEtKTKUB3TPF8NhYDUQW6zo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/M0DY0-cxOITylOA1AQbMHjzuLns.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/XdbBOEtKTKUB3TPF8NhYDUQW6zo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.59.0/24 Signature Algorithm: sha256WithRSAEncryption 76:f1:80:24:36:6c:dd:90:f0:e6:33:74:6b:3b:da:22:51:e8: f6:ac:ef:d8:0f:a0:9a:c2:07:2f:4e:f3:bb:38:bf:b2:65:89: 0f:00:7f:a9:3a:d9:5a:5e:a1:47:74:68:a3:21:38:42:10:7c: fd:72:8e:10:1a:f8:dd:e9:d9:15:4f:9a:b0:bc:2a:88:8a:be: 11:0d:3e:4e:d1:32:8c:48:25:7d:e5:60:5d:e4:c0:5d:1e:13: 55:cd:d7:84:9a:ba:0f:b7:3b:49:d4:a0:62:fc:c4:0f:4f:a4: f5:cc:7e:7d:5f:3a:24:62:eb:f6:17:44:48:0a:c3:5d:f5:cb: 6d:f0:aa:f6:79:4b:ce:a3:81:a1:a2:65:3b:a6:be:7f:37:2f: a4:58:0d:9d:58:78:03:7b:60:22:5d:e0:a3:7c:b4:16:bc:48: 9b:e0:ef:9a:04:29:cf:34:d9:17:e7:91:08:a4:2a:bb:df:c9: cf:98:03:8d:8c:19:db:c6:2f:91:b9:3f:9f:1c:b7:9e:06:d4: cc:49:2c:52:96:a0:ed:e8:06:44:88:d4:3f:57:56:02:fd:77: 14:93:e4:58:8a:04:ac:4a:00:9d:0f:2a:9a:50:5e:6c:3f:c2: a2:b4:51:7a:f3:9c:bb:b0:03:c6:e8:5d:c0:6c:b1:3d:27:c3: e0:4f:86:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZta6Mmgbm+KLtbiH8bxqpkZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZjMTM4NGI0YTRjYTUwMWRkMzNjNWYwZDg1ODBkNDQx NmViM2EwHhcNMjUxMjI2MTM0NjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzQwZDhkM2U3MzEzODg0ZjI5NGUwMzUwMTA2Y2MxZTNjZWUyZTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQo+5khrGxJAMfNf0lavnkXGHoAX lHUmw/EQM1LbPOIeqqjNso6ChTX+xPTW0cqMNiwmvBYZ8uzD0wlefybWGysl4qXm 4h29xJw+J2wMrbBi/UAUX9Zdmb8iGHjSEFr0CzOFmS7AlqTjRSkH5c+7GOyIVHya GYkA5LynOIS8eydtxCkgfamk3sZl1LcI2qE7Lro0CYIwye8+cNWRG4tYIEfmBp8t f1UOjSilcKOimYrCi3+vrXwPbZco6PqBZ42amV9M7iMB9EZnnC1hzpysJc56rujG T1hW6zYg+/wwb/6SnDNx673Rp76hAmJkBfFNm59sHXYEMqGXCGzPeBZ64QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDNA2NPnMTiE8pTgNQEGzB487i57MB8GA1UdIwQY MBaAFF3WwThLSkylAd0zxfDYWA1EFus6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiQk9FdEtUS1VCM1RQRjhOaFlEVVFXNnpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85MTU3YTktMDRiMC00MWJlLTljMjQt ZDgyZDA2YTg3YmZlLzEvTTBEWTAtY3hPSVR5bE9BMUFRYk1Ianp1TG5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi85MTU3YTktMDRiMC00MWJlLTljMjQtZDgyZDA2YTg3YmZl LzEvWGRiQk9FdEtUS1VCM1RQRjhOaFlEVVFXNnpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTw7MA0G CSqGSIb3DQEBCwUAA4IBAQB28YAkNmzdkPDmM3RrO9oiUej2rO/YD6CawgcvTvO7 OL+yZYkPAH+pOtlaXqFHdGijIThCEHz9co4QGvjd6dkVT5qwvCqIir4RDT5O0TKM SCV95WBd5MBdHhNVzdeEmroPtztJ1KBi/MQPT6T1zH59XzokYuv2F0RICsNd9ctt 8Kr2eUvOo4GhomU7pr5/Ny+kWA2dWHgDe2AiXeCjfLQWvEib4O+aBCnPNNkX55EI pCq738nPmAONjBnbxi+RuT+fHLeeBtTMSSxSlqDt6AZEiNQ/V1YC/XcUk+RYigSs SgCdDyqaUF5sP8KitFF685y7sAPG6F3AbLE9J8PgT4at -----END CERTIFICATE-----Generated at Fri Dec 26 17:36:53 2025 by rpki-client