This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/xDssmt_8N_6Ov8vNo-exlYNHDEM.roa File: xDssmt_8N_6Ov8vNo-exlYNHDEM.roa (raw, json) Hash identifier: KOhgjdrwurD/4N/0iXm53/44yrVC7LzVbsEB0Un3QCs= Subject key identifier: C4:3B:2C:9A:DF:FC:37:FE:8E:BF:CB:CD:A3:E7:B1:95:83:47:0C:43 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019AA59A79E79650B0FC3522114FE9C5A941 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/xDssmt_8N_6Ov8vNo-exlYNHDEM.roa Signing time: Fri 21 Nov 2025 08:49:15 +0000 ROA not before: Fri 21 Nov 2025 08:49:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5511 IP address blocks: 5.181.114.0/24 maxlen: 24 5.183.226.0/24 maxlen: 24 45.9.92.0/24 maxlen: 24 45.9.184.0/24 maxlen: 24 45.10.186.0/24 maxlen: 24 45.83.29.0/24 maxlen: 24 45.88.20.0/24 maxlen: 24 45.88.22.0/24 maxlen: 24 45.89.36.0/24 maxlen: 24 45.89.38.0/24 maxlen: 24 45.92.2.0/24 maxlen: 24 45.134.138.0/24 maxlen: 24 45.143.54.0/24 maxlen: 24 45.145.46.0/24 maxlen: 24 45.146.187.0/24 maxlen: 24 45.156.157.0/24 maxlen: 24 87.247.148.0/22 maxlen: 24 89.40.160.0/24 maxlen: 24 91.190.96.0/24 maxlen: 24 91.190.99.0/24 maxlen: 24 91.190.104.0/24 maxlen: 24 91.217.250.0/24 maxlen: 24 93.114.246.0/24 maxlen: 24 178.239.205.0/24 maxlen: 24 185.184.135.0/24 maxlen: 24 185.205.189.0/24 maxlen: 24 188.214.27.0/24 maxlen: 24 188.240.75.0/24 maxlen: 24 217.74.16.0/24 maxlen: 24 2a0b:64c1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:9a:79:e7:96:50:b0:fc:35:22:11:4f:e9:c5:a9:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Nov 21 08:49:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c43b2c9adffc37fe8ebfcbcda3e7b19583470c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5a:01:dc:86:0e:47:d0:04:68:d9:4c:37:07: 78:0d:19:aa:ec:bf:2a:0d:96:bc:73:a4:3f:37:7b: 57:57:8b:82:47:9b:25:61:df:b9:87:a2:50:dd:9e: 86:58:62:80:04:be:0e:db:1b:6a:c3:c8:36:fb:51: 5d:20:01:a9:a8:ac:df:6e:bc:b0:66:46:15:e7:58: a7:8e:60:6a:7c:79:8e:1a:1b:24:93:cb:1a:22:ff: 76:96:dd:2e:c8:46:32:be:a0:88:71:f2:94:6c:56: f5:d0:c5:ad:69:3d:43:ca:42:21:aa:25:ce:90:3e: b8:ae:af:83:9a:dc:91:f6:bc:9d:c1:1e:3f:69:22: 42:b9:8d:72:82:74:48:15:13:c3:3f:fd:21:c5:6b: 81:12:b8:c0:bd:d8:96:f4:a8:82:06:7d:45:ec:c3: 0b:61:8b:6c:d7:88:13:71:33:34:a1:95:e7:5f:f2: d9:c6:13:e8:fd:1b:05:f6:c9:3c:8a:38:d9:0c:42: 7c:d4:27:1f:c8:54:8a:98:ad:d7:f7:8c:3f:77:11: a4:a6:27:a3:5f:45:0b:7e:e7:ce:7b:8a:66:23:4b: e4:3c:78:d7:e6:5b:b9:8a:4d:13:18:9c:c0:2f:55: e7:96:d7:a9:09:5b:a8:a6:a7:7b:03:71:11:bf:5b: 03:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:3B:2C:9A:DF:FC:37:FE:8E:BF:CB:CD:A3:E7:B1:95:83:47:0C:43 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/xDssmt_8N_6Ov8vNo-exlYNHDEM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.114.0/24 5.183.226.0/24 45.9.92.0/24 45.9.184.0/24 45.10.186.0/24 45.83.29.0/24 45.88.20.0/24 45.88.22.0/24 45.89.36.0/24 45.89.38.0/24 45.92.2.0/24 45.134.138.0/24 45.143.54.0/24 45.145.46.0/24 45.146.187.0/24 45.156.157.0/24 87.247.148.0/22 89.40.160.0/24 91.190.96.0/24 91.190.99.0/24 91.190.104.0/24 91.217.250.0/24 93.114.246.0/24 178.239.205.0/24 185.184.135.0/24 185.205.189.0/24 188.214.27.0/24 188.240.75.0/24 217.74.16.0/24 IPv6: 2a0b:64c1::/32 Signature Algorithm: sha256WithRSAEncryption 56:4a:3d:38:bd:7a:91:fc:cc:0c:aa:df:d9:1d:9f:95:d9:84: 58:1e:17:eb:b0:6a:d4:24:e2:1e:45:ae:67:56:04:fc:c0:14: 70:1f:3f:d0:c5:1e:53:ad:a1:e3:11:16:62:44:74:2c:7f:61: df:a7:0a:20:8f:d5:8c:41:7d:29:05:c6:84:8f:52:8e:6e:77: c6:ea:8c:e9:13:0b:32:2c:21:96:d7:6e:e9:21:90:aa:73:51: 27:9e:fa:d7:4e:78:50:1b:25:94:e5:0d:ee:75:ff:e0:32:94: 86:c9:62:56:25:64:0f:ba:d1:fb:cc:37:e0:e6:5a:de:9c:93: cf:5a:dc:e8:2c:d9:7d:00:c1:b0:1f:5d:ea:8c:3d:b9:6b:e3: e4:57:5d:9b:9c:78:87:eb:94:b7:7b:7d:80:a2:2c:0f:bc:6c: c3:33:ae:e5:40:ee:f8:b6:c6:65:0d:79:63:f8:e2:b6:ec:02: bc:d2:d2:c6:c3:5e:47:84:09:9c:ca:25:92:c5:3d:4d:c5:f0: 99:c2:d8:07:33:17:65:86:92:02:3b:f1:59:04:9c:8e:91:14: 4c:7e:e2:bd:22:32:70:fd:32:34:51:4b:15:92:64:eb:a3:83: 84:4e:09:4c:50:3a:30:de:36:2b:39:39:0f:50:1a:de:3e:a9: 06:1b:5b:d2 -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgISAZqlmnnnllCw/DUiEU/pxalBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjUxMTIxMDg0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDNiMmM5YWRmZmMzN2ZlOGViZmNiY2RhM2U3YjE5NTgzNDcwYzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgloB3IYOR9AEaNlMNwd4DRmq7L8q DZa8c6Q/N3tXV4uCR5slYd+5h6JQ3Z6GWGKABL4O2xtqw8g2+1FdIAGpqKzfbryw ZkYV51injmBqfHmOGhskk8saIv92lt0uyEYyvqCIcfKUbFb10MWtaT1DykIhqiXO kD64rq+DmtyR9rydwR4/aSJCuY1ygnRIFRPDP/0hxWuBErjAvdiW9KiCBn1F7MML YYts14gTcTM0oZXnX/LZxhPo/RsF9sk8ijjZDEJ81CcfyFSKmK3X94w/dxGkpiej X0ULfufOe4pmI0vkPHjX5lu5ik0TGJzAL1XnltepCVuopqd7A3ERv1sDDwIDAQAB o4ICxTCCAsEwHQYDVR0OBBYEFMQ7LJrf/Df+jr/LzaPnsZWDRwxDMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEveERzc210XzhOXzZPdjh2Tm8tZXhsWU5IREVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHaBggrBgEFBQcBBwEB/wSByjCBxzCBtQQCAAEwga4DBAAF tXIDBAAFt+IDBAAtCVwDBAAtCbgDBAAtCroDBAAtUx0DBAAtWBQDBAAtWBYDBAAt WSQDBAAtWSYDBAAtXAIDBAAthooDBAAtjzYDBAAtkS4DBAAtkrsDBAAtnJ0DBAJX 95QDBABZKKADBABbvmADBABbvmMDBABbvmgDBABb2foDBABdcvYDBACy780DBAC5 uIcDBAC5zb0DBAC81hsDBAC88EsDBADZShAwDQQCAAIwBwMFACoLZMEwDQYJKoZI hvcNAQELBQADggEBAFZKPTi9epH8zAyq39kdn5XZhFgeF+uwatQk4h5FrmdWBPzA FHAfP9DFHlOtoeMRFmJEdCx/Yd+nCiCP1YxBfSkFxoSPUo5ud8bqjOkTCzIsIZbX bukhkKpzUSee+tdOeFAbJZTlDe51/+AylIbJYlYlZA+60fvMN+DmWt6ck89a3Ogs 2X0AwbAfXeqMPblr4+RXXZuceIfrlLd7fYCiLA+8bMMzruVA7vi2xmUNeWP44rbs ArzS0sbDXkeECZzKJZLFPU3F8JnC2AczF2WGkgI78VkEnI6RFEx+4r0iMnD9MjRR SxWSZOujg4ROCUxQOjDeNis5OQ9QGt4+qQYbW9I= -----END CERTIFICATE-----Generated at Thu Dec 4 07:45:28 2025 by rpki-client