This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/D2jjihkvsvAW3KXhQX4RqHF1PIY.roa File: D2jjihkvsvAW3KXhQX4RqHF1PIY.roa (raw, json) Hash identifier: jd41heTtGPeXEwfOYABDxjZh/Jf5+n750XYzwHtQjXU= Subject key identifier: 0F:68:E3:8A:19:2F:B2:F0:16:DC:A5:E1:41:7E:11:A8:71:75:3C:86 Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21 Certificate serial: 019B03219036E38CDEA5518E6EE8BED6E2BE Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/D2jjihkvsvAW3KXhQX4RqHF1PIY.roa Signing time: Tue 09 Dec 2025 12:41:29 +0000 ROA not before: Tue 09 Dec 2025 12:41:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51235 IP address blocks: 87.107.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 06:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:21:90:36:e3:8c:de:a5:51:8e:6e:e8:be:d6:e2:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Validity Not Before: Dec 9 12:41:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0f68e38a192fb2f016dca5e1417e11a871753c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a3:94:14:55:79:84:c5:be:fb:d5:89:54:29: d8:83:bf:60:7f:62:8c:4d:85:3b:0e:0b:4a:02:ca: 7c:42:0a:2d:bc:88:a4:5d:44:d1:df:e1:a8:cc:9b: 9d:a7:c6:0d:64:a5:76:24:e7:3b:b4:77:35:82:66: 07:39:67:29:d2:f2:75:c5:fe:73:52:ec:d2:17:62: b2:33:1b:fa:81:6a:75:98:13:ba:44:47:b7:3b:1d: 4c:ab:3c:c1:14:60:63:e5:1c:9d:9b:c4:81:46:c7: a4:e8:db:9a:bc:6c:91:cf:55:31:00:9a:00:10:e4: 53:4d:71:dc:cd:59:84:0e:58:0b:3d:3c:2d:4c:06: bd:f8:b4:59:1a:1b:ea:b5:5c:d8:5a:3b:8d:6e:84: e9:2a:42:12:bd:79:13:86:fb:43:0a:ab:16:69:bf: a9:84:c3:f3:dd:54:65:bb:1d:df:eb:e2:c8:27:fc: 5f:93:f3:4a:01:36:0b:d5:a7:a3:6b:ab:90:79:25: 8e:b8:fd:97:ca:1d:ad:80:d1:18:12:d6:4d:12:fa: 85:84:57:e9:91:59:0c:37:da:19:da:8f:2e:a0:25: c4:f0:4a:7d:51:97:04:5a:3d:c9:68:2e:11:88:1c: fa:ea:45:e7:ed:a2:f3:d0:1a:27:80:ad:16:06:88: 09:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:68:E3:8A:19:2F:B2:F0:16:DC:A5:E1:41:7E:11:A8:71:75:3C:86 X509v3 Authority Key Identifier: keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/D2jjihkvsvAW3KXhQX4RqHF1PIY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.107.139.0/24 Signature Algorithm: sha256WithRSAEncryption 29:2e:71:86:36:58:5c:be:be:87:6d:ab:0c:8a:a0:ea:41:83: 53:14:b0:10:58:5e:2d:d2:77:21:d9:b4:df:7f:d9:27:e4:d7: ed:ef:c7:90:5d:9d:87:55:ea:69:ce:a8:16:db:58:6a:7c:85: be:63:3e:e6:8a:18:52:bc:a2:71:0b:fa:53:37:4b:79:79:d9: d7:89:94:d3:09:64:74:58:ce:36:e1:f0:a4:e3:01:35:51:29: 0e:5e:c4:23:9a:37:29:2f:42:2b:39:2b:e3:63:f8:a1:9b:c9: 2a:d1:d9:f6:3a:24:bd:14:b0:e8:fb:a1:3b:0b:25:3a:e6:eb: 08:12:19:3e:2e:a8:04:8a:c7:cd:d2:af:0d:5e:cd:47:60:e0: 0d:a4:9f:27:78:0b:8b:4b:6e:03:b0:06:d3:b4:56:ee:2b:34: 92:e2:64:76:c6:06:b7:35:a0:ee:a4:d0:ea:3c:43:09:6d:19: f9:b3:87:a4:4a:8c:b8:50:1e:ec:e7:ea:ec:da:af:7f:ba:b7: 22:82:fb:d4:df:56:02:71:74:1e:86:c1:91:85:ed:15:3b:77: f3:e7:29:37:ac:67:16:a2:20:83:aa:67:3d:39:65:bc:93:d0: 0a:e7:e4:f8:89:bf:eb:77:d6:3d:3b:c3:d2:95:63:2e:e8:2f: 20:52:a0:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsDIZA244zepVGObui+1uK+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk ZDVjMjEwHhcNMjUxMjA5MTI0MTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjY4ZTM4YTE5MmZiMmYwMTZkY2E1ZTE0MTdlMTFhODcxNzUzYzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6OUFFV5hMW++9WJVCnYg79gf2KM TYU7DgtKAsp8QgotvIikXUTR3+GozJudp8YNZKV2JOc7tHc1gmYHOWcp0vJ1xf5z UuzSF2KyMxv6gWp1mBO6REe3Ox1MqzzBFGBj5Rydm8SBRsek6NuavGyRz1UxAJoA EORTTXHczVmEDlgLPTwtTAa9+LRZGhvqtVzYWjuNboTpKkISvXkThvtDCqsWab+p hMPz3VRlux3f6+LIJ/xfk/NKATYL1aeja6uQeSWOuP2Xyh2tgNEYEtZNEvqFhFfp kVkMN9oZ2o8uoCXE8Ep9UZcEWj3JaC4RiBz66kXn7aLz0BongK0WBogJOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA9o44oZL7LwFtyl4UF+EahxdTyGMB8GA1UdIwQY MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt NzZiMzNlNGNlODIxLzEvRDJqamloa3ZzdkFXM0tYaFFYNFJxSEYxUElZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV2uLMA0G CSqGSIb3DQEBCwUAA4IBAQApLnGGNlhcvr6HbasMiqDqQYNTFLAQWF4t0nch2bTf f9kn5Nft78eQXZ2HVeppzqgW21hqfIW+Yz7mihhSvKJxC/pTN0t5ednXiZTTCWR0 WM424fCk4wE1USkOXsQjmjcpL0IrOSvjY/ihm8kq0dn2OiS9FLDo+6E7CyU65usI Ehk+LqgEisfN0q8NXs1HYOANpJ8neAuLS24DsAbTtFbuKzSS4mR2xga3NaDupNDq PEMJbRn5s4ekSoy4UB7s5+rs2q9/urcigvvU31YCcXQehsGRhe0VO3fz5yk3rGcW oiCDqmc9OWW8k9AK5+T4ib/rd9Y9O8PSlWMu6C8gUqDj -----END CERTIFICATE-----Generated at Wed Dec 10 12:24:20 2025 by rpki-client