This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DN3X6T2PMs_0oWug0bJBrvfXwVo.roa File: DN3X6T2PMs_0oWug0bJBrvfXwVo.roa (raw, json) Hash identifier: Y1mlODelup6iS2JnxGuKw2Ofg2SfOYwlr5URsOMCiuE= Subject key identifier: 0C:DD:D7:E9:3D:8F:32:CF:F4:A1:6B:A0:D1:B2:41:AE:F7:D7:C1:5A Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019AD9CA59FF7308C9C56B099AF79357850A Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DN3X6T2PMs_0oWug0bJBrvfXwVo.roa Signing time: Mon 01 Dec 2025 12:01:48 +0000 ROA not before: Mon 01 Dec 2025 12:01:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29066 IP address blocks: 2.56.102.0/24 maxlen: 24 2.59.23.0/24 maxlen: 24 45.86.14.0/24 maxlen: 24 45.133.220.0/24 maxlen: 24 45.133.221.0/24 maxlen: 24 45.133.222.0/24 maxlen: 24 45.133.223.0/24 maxlen: 24 45.152.203.0/24 maxlen: 24 193.5.250.0/24 maxlen: 24 193.39.244.0/24 maxlen: 24 2a07:f300::/29 maxlen: 29 2a0f:4a00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:ca:59:ff:73:08:c9:c5:6b:09:9a:f7:93:57:85:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 1 12:01:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0cddd7e93d8f32cff4a16ba0d1b241aef7d7c15a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:38:6e:f2:38:8d:8a:1e:6c:8c:38:b8:64:b8: e2:84:86:90:d1:ea:71:1a:81:68:ce:ee:e4:2a:d7: 72:c7:0a:9b:03:12:d0:df:cd:f1:28:c3:c3:b8:6d: 92:76:22:a7:6e:17:e9:9f:bd:ff:8d:ba:c3:04:9e: 56:d9:3d:88:28:19:b8:5a:82:9a:f2:30:97:4e:1d: 9a:1b:0f:5b:e8:7d:6d:8b:d8:c7:72:7b:98:b4:ec: 1d:f4:3e:8c:8a:39:a1:01:61:c0:43:35:a1:8c:7c: 58:c4:90:a8:fa:85:ab:8d:45:c8:a9:dc:b5:d2:da: 85:aa:7f:7c:98:bc:56:7f:01:16:7d:3c:51:27:3d: 19:66:95:a0:a9:6f:23:b2:bf:8b:d0:26:e9:c5:d3: 74:00:be:69:c1:8b:1c:82:05:f7:92:d9:ec:1c:ca: c8:a0:8f:a7:c0:29:87:06:0f:ca:ba:96:03:1b:ea: 2b:1c:78:53:74:a0:07:73:bc:85:71:89:26:48:3a: 22:a7:f1:bd:ab:8d:24:c1:d3:3f:25:5b:64:2b:04: 16:4e:d8:a7:b6:6d:42:ea:26:90:75:3a:49:cf:80: a3:08:91:94:9d:26:23:cf:50:9b:b4:1a:6e:25:95: 4d:22:5d:35:0d:99:1f:48:c2:cf:fc:f1:8e:c6:a7: 60:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DD:D7:E9:3D:8F:32:CF:F4:A1:6B:A0:D1:B2:41:AE:F7:D7:C1:5A X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DN3X6T2PMs_0oWug0bJBrvfXwVo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.102.0/24 2.59.23.0/24 45.86.14.0/24 45.133.220.0/22 45.152.203.0/24 193.5.250.0/24 193.39.244.0/24 IPv6: 2a07:f300::/29 2a0f:4a00::/29 Signature Algorithm: sha256WithRSAEncryption ba:93:b2:06:5b:8c:41:3a:f1:7b:42:a0:63:e7:a3:57:17:ec: 14:28:df:15:8d:d2:31:ae:e6:92:6b:83:cb:ba:29:92:2a:54: ab:eb:ea:b9:2d:42:58:d4:db:17:a0:74:27:18:31:92:f0:5d: 57:fe:de:b2:fd:21:b3:47:00:df:0f:20:d1:6f:1f:67:ba:2e: 08:0c:60:b2:77:b9:09:84:30:6f:84:be:89:da:7a:7c:00:f8: 8a:b5:18:39:43:13:15:7f:6f:ee:6b:1a:81:71:0a:b2:4a:a6: e2:84:ec:5a:e9:41:e0:eb:b0:d1:3c:6a:ca:81:78:6f:d6:cf: 77:33:c9:a1:62:31:b6:4b:ff:e2:4b:f7:60:27:ca:f8:73:88: 37:38:88:ff:76:92:7d:59:26:a8:3f:70:8e:f9:6c:28:82:d0: 97:b6:cc:19:fa:73:5e:12:54:35:0c:50:4c:34:1c:1d:a1:b9: d0:0f:9b:95:92:c7:32:e8:82:26:df:fb:8d:f9:a9:6c:70:b2: 0b:4d:b1:8d:4c:64:67:85:88:f1:c9:cc:3c:17:0f:71:a1:91: 41:43:9d:bd:c7:c4:f7:34:72:f5:25:f8:7a:5d:ce:93:fc:fe: 73:59:17:bd:b6:05:d0:08:94:cf:c1:30:6d:43:7f:a2:6e:6d: 3b:58:36:51 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZrZyln/cwjJxWsJmveTV4UKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjAxMTIwMTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2RkZDdlOTNkOGYzMmNmZjRhMTZiYTBkMWIyNDFhZWY3ZDdjMTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjhu8jiNih5sjDi4ZLjihIaQ0epx GoFozu7kKtdyxwqbAxLQ383xKMPDuG2SdiKnbhfpn73/jbrDBJ5W2T2IKBm4WoKa 8jCXTh2aGw9b6H1ti9jHcnuYtOwd9D6MijmhAWHAQzWhjHxYxJCo+oWrjUXIqdy1 0tqFqn98mLxWfwEWfTxRJz0ZZpWgqW8jsr+L0CbpxdN0AL5pwYscggX3ktnsHMrI oI+nwCmHBg/KupYDG+orHHhTdKAHc7yFcYkmSDoip/G9q40kwdM/JVtkKwQWTtin tm1C6iaQdTpJz4CjCJGUnSYjz1CbtBpuJZVNIl01DZkfSMLP/PGOxqdg5wIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFAzd1+k9jzLP9KFroNGyQa7318FaMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvRE4zWDZUMlBNc18wb1d1ZzBiSkJydmZYd1ZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAwBAIAATAqAwQAAjhmAwQA AjsXAwQALVYOAwQCLYXcAwQALZjLAwQAwQX6AwQAwSf0MBQEAgACMA4DBQMqB/MA AwUDKg9KADANBgkqhkiG9w0BAQsFAAOCAQEAupOyBluMQTrxe0KgY+ejVxfsFCjf FY3SMa7mkmuDy7opkipUq+vquS1CWNTbF6B0JxgxkvBdV/7esv0hs0cA3w8g0W8f Z7ouCAxgsne5CYQwb4S+idp6fAD4irUYOUMTFX9v7msagXEKskqm4oTsWulB4Ouw 0TxqyoF4b9bPdzPJoWIxtkv/4kv3YCfK+HOINziI/3aSfVkmqD9wjvlsKILQl7bM GfpzXhJUNQxQTDQcHaG50A+blZLHMuiCJt/7jfmpbHCyC02xjUxkZ4WI8cnMPBcP caGRQUOdvcfE9zRy9SX4el3Ok/z+c1kXvbYF0AiUz8EwbUN/om5tO1g2UQ== -----END CERTIFICATE-----Generated at Fri Dec 5 07:04:03 2025 by rpki-client