This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pdkqkS1juj99e_Rn4XHg8Ro19Vw.roa File: pdkqkS1juj99e_Rn4XHg8Ro19Vw.roa (raw, json) Hash identifier: 6dIPvtKI/mS29mtJKU9pojIp5TePwJrSyiqffpJGgrY= Subject key identifier: A5:D9:2A:91:2D:63:BA:3F:7D:7B:F4:67:E1:71:E0:F1:1A:35:F5:5C Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Certificate serial: 019ACFA6D3DA346927D6FF1A6F4DE4572D38 Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pdkqkS1juj99e_Rn4XHg8Ro19Vw.roa Signing time: Sat 29 Nov 2025 12:46:48 +0000 ROA not before: Sat 29 Nov 2025 12:46:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35372 IP address blocks: 87.248.142.0/24 maxlen: 24 194.60.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cf:a6:d3:da:34:69:27:d6:ff:1a:6f:4d:e4:57:2d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Validity Not Before: Nov 29 12:46:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a5d92a912d63ba3f7d7bf467e171e0f11a35f55c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b9:f0:f4:a3:89:b4:13:e2:cf:ef:cb:28:db: 8d:27:44:91:f6:2a:5b:8c:68:5e:88:ff:07:72:49: 31:b0:11:32:05:2a:4e:d8:76:df:75:0b:ea:35:5e: 3e:69:54:f0:6f:1a:8c:49:a6:b6:a4:0b:ca:47:b9: 1b:ed:e9:78:f2:bf:60:6f:7b:b8:e3:4e:39:83:37: 57:c0:62:b6:a7:b5:78:d7:50:36:58:f1:b1:70:1f: 61:2c:72:5e:98:f8:82:12:84:27:57:2f:06:2f:c5: 1d:ed:1d:19:0e:cd:d8:39:d9:22:75:ed:94:55:dc: c8:ab:50:9e:8c:98:29:63:30:61:e1:86:ba:a0:af: 22:d8:97:40:95:1b:f6:de:a7:73:d6:f2:2d:aa:7a: b0:38:27:a7:81:49:9e:18:9f:3a:72:ca:74:05:73: 26:76:12:b3:c6:f3:31:fb:35:9e:0d:b5:3b:23:54: 19:23:fa:a6:d5:12:bf:d8:cb:2b:db:d0:17:0a:7b: ee:77:93:e0:d6:5d:5d:d6:75:9d:6c:95:ea:56:3f: 86:e8:a5:9b:01:58:7c:ee:93:64:25:6f:8e:e8:a8: 44:a1:b6:a1:e4:b5:b6:81:54:c2:c6:d7:c4:07:94: 3a:70:b1:c3:b2:4a:87:af:f0:70:f6:3a:0f:e1:47: fc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D9:2A:91:2D:63:BA:3F:7D:7B:F4:67:E1:71:E0:F1:1A:35:F5:5C X509v3 Authority Key Identifier: keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pdkqkS1juj99e_Rn4XHg8Ro19Vw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.248.142.0/24 194.60.229.0/24 Signature Algorithm: sha256WithRSAEncryption 55:86:93:02:d8:22:cc:bd:fe:5f:17:cf:1a:96:ed:60:ac:44: fe:4f:80:87:24:d7:e2:1e:22:f4:ad:cc:f8:c0:ae:a5:32:4c: 38:2d:55:f1:d0:b7:d9:ee:7b:4a:c7:51:e1:0d:70:be:78:24: 50:bb:e0:c6:c5:72:21:01:ad:ed:2a:8d:34:e7:66:07:80:b7: 26:de:a6:6d:1d:7c:b0:36:cd:5f:84:5f:69:a8:61:8b:1e:2c: 93:2f:82:3d:ca:92:df:bf:22:3e:2c:8b:13:83:f5:5f:b9:d5: 45:7b:62:29:6a:b4:18:e8:7f:d1:ca:3e:2f:d9:9a:d6:1e:f5: ed:27:2f:0d:cb:f9:42:4f:1f:c1:e7:84:6a:48:d3:06:7a:5a: 62:95:11:31:ef:c7:75:3c:1c:f4:de:bb:5c:df:16:ad:0f:46: c2:ed:a9:6c:77:70:73:5c:53:d4:c6:cb:33:da:a9:ff:09:f0: 35:d9:69:0b:14:13:9a:e9:c7:de:8b:5f:0b:6b:b2:1c:e7:92: 29:ca:8a:89:d9:ae:21:eb:37:69:ea:1b:8c:6a:8f:2b:16:1d: 3c:d1:d8:f3:e1:e3:82:0f:4e:64:34:93:be:c5:23:fc:4c:d2: 92:00:30:c5:da:f1:0d:5c:2f:87:2b:24:9b:ed:f5:4e:3a:ed: e1:46:e9:4a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrPptPaNGkn1v8ab03kVy04MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy ZmM4YjQwHhcNMjUxMTI5MTI0NjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWQ5MmE5MTJkNjNiYTNmN2Q3YmY0NjdlMTcxZTBmMTFhMzVmNTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrnw9KOJtBPiz+/LKNuNJ0SR9ipb jGheiP8HckkxsBEyBSpO2HbfdQvqNV4+aVTwbxqMSaa2pAvKR7kb7el48r9gb3u4 4045gzdXwGK2p7V411A2WPGxcB9hLHJemPiCEoQnVy8GL8Ud7R0ZDs3YOdkide2U VdzIq1CejJgpYzBh4Ya6oK8i2JdAlRv23qdz1vItqnqwOCengUmeGJ86csp0BXMm dhKzxvMx+zWeDbU7I1QZI/qm1RK/2Msr29AXCnvud5Pg1l1d1nWdbJXqVj+G6KWb AVh87pNkJW+O6KhEobah5LW2gVTCxtfEB5Q6cLHDskqHr/Bw9joP4Uf8LQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKXZKpEtY7o/fXv0Z+Fx4PEaNfVcMB8GA1UdIwQY MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct ZDNiMzhjZTlkYzM0LzEvcGRrcWtTMWp1ajk5ZV9SbjRYSGc4Um8xOVZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0 LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV/iOAwQA wjzlMA0GCSqGSIb3DQEBCwUAA4IBAQBVhpMC2CLMvf5fF88alu1grET+T4CHJNfi HiL0rcz4wK6lMkw4LVXx0LfZ7ntKx1HhDXC+eCRQu+DGxXIhAa3tKo0052YHgLcm 3qZtHXywNs1fhF9pqGGLHiyTL4I9ypLfvyI+LIsTg/VfudVFe2IparQY6H/Ryj4v 2ZrWHvXtJy8Ny/lCTx/B54RqSNMGelpilREx78d1PBz03rtc3xatD0bC7alsd3Bz XFPUxssz2qn/CfA12WkLFBOa6cfei18La7Ic55IpyoqJ2a4h6zdp6huMao8rFh08 0djz4eOCD05kNJO+xSP8TNKSADDF2vENXC+HKySb7fVOOu3hRulK -----END CERTIFICATE-----Generated at Fri Dec 5 19:36:15 2025 by rpki-client