This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/29jzkL-Jj9fhMyXNbEiZUeBt610.roa File: 29jzkL-Jj9fhMyXNbEiZUeBt610.roa (raw, json) Hash identifier: Fg1900ujJMvemJRIc0WA5yvUfQNe0bPi7usiyHRJC1I= Subject key identifier: DB:D8:F3:90:BF:89:8F:D7:E1:33:25:CD:6C:48:99:51:E0:6D:EB:5D Certificate issuer: /CN=34cde5a61145d3992eccdec7b7f0b87d566bddca Certificate serial: 019B0DE80BCADF6E8AA59C1BCBC112A00283 Authority key identifier: 34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/29jzkL-Jj9fhMyXNbEiZUeBt610.roa Signing time: Thu 11 Dec 2025 14:54:29 +0000 ROA not before: Thu 11 Dec 2025 14:54:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204672 IP address blocks: 91.137.80.0/22 maxlen: 22 91.137.84.0/23 maxlen: 23 91.137.86.0/23 maxlen: 23 91.137.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:e8:0b:ca:df:6e:8a:a5:9c:1b:cb:c1:12:a0:02:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34cde5a61145d3992eccdec7b7f0b87d566bddca Validity Not Before: Dec 11 14:54:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dbd8f390bf898fd7e13325cd6c489951e06deb5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b6:96:12:77:84:af:07:9c:be:17:e7:e5:a0: b6:6c:65:cc:a9:fa:05:77:8c:12:b2:ee:2a:9a:4e: 92:52:df:cd:74:b2:fe:76:09:6f:4a:f5:7b:d9:f6: 96:cf:08:f6:aa:48:b4:f6:94:3d:90:e1:e4:b4:06: 12:f0:c7:96:c6:df:4e:df:ec:25:a5:fb:c9:cb:86: b0:82:93:24:24:58:b3:b3:fe:c1:65:e0:61:91:f3: a5:b0:9f:7f:b3:35:05:94:70:da:29:18:9c:99:92: 43:92:0f:00:ff:6d:77:97:b5:8c:a7:2b:75:81:56: 20:0c:b8:13:2f:7a:c0:89:bd:c1:42:0d:aa:a4:69: 65:b5:85:8e:fb:ec:9a:01:36:60:da:9a:db:2e:67: 78:de:03:95:86:2d:36:04:e0:3f:3c:03:55:7a:d7: af:6e:54:fa:6a:dd:a1:ec:20:36:cc:e9:38:c1:19: 91:2f:35:6a:f8:d0:b2:f8:84:6d:89:1f:6f:f0:ea: 0c:3b:ba:3b:8e:3d:65:1a:03:a1:95:90:d2:b8:ff: 95:9c:21:5c:1a:c2:6c:49:e9:fa:db:11:ed:fe:71: bb:b0:72:41:4e:37:af:45:96:bd:fe:c7:b4:12:25: 0c:8d:b7:07:3e:5a:c4:7c:a5:6b:c5:d9:cb:4b:30: 97:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D8:F3:90:BF:89:8F:D7:E1:33:25:CD:6C:48:99:51:E0:6D:EB:5D X509v3 Authority Key Identifier: keyid:34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/29jzkL-Jj9fhMyXNbEiZUeBt610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.137.80.0/21 91.137.118.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:c7:91:ba:04:3c:80:ac:3f:36:5a:bc:73:cf:5f:49:44:da: 9d:0e:7e:85:65:0c:25:40:50:0c:71:b3:25:65:c5:de:4a:b8: 49:11:30:10:77:c2:b0:de:6b:f1:d4:c4:46:24:c8:18:a1:f3: 74:e9:fc:23:bf:17:d7:c6:7c:45:93:fe:64:77:95:ba:be:38: 67:f0:4e:70:d2:85:5e:2e:57:a3:50:ce:61:ab:62:18:20:47: b4:65:12:72:b9:16:61:8c:b1:7d:50:f4:c4:a2:06:24:8f:46: 62:d1:e6:78:89:e1:39:3c:85:31:eb:0e:c4:2f:73:8e:3a:c9: 91:30:0a:e8:ea:d8:bf:19:0f:5d:d0:b4:d9:d6:1a:ac:b3:59: a3:af:38:10:06:03:bf:fc:15:25:67:f9:f2:eb:7a:f6:1a:84: 52:51:fc:33:33:56:13:82:64:d8:b4:07:15:70:90:ba:78:ef: bd:7b:78:0e:46:99:74:b7:78:94:16:85:22:8d:fb:88:8e:c9: 8f:8d:93:06:71:56:53:79:95:1b:0d:ef:dc:44:e5:6f:cc:48: 14:2f:12:32:50:6e:26:4d:28:4e:9b:51:61:47:83:7c:32:26: ee:b2:6d:99:a7:0a:74:a1:06:94:69:47:81:12:73:6b:7b:8b: 5b:17:fd:e0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsN6AvK326KpZwby8ESoAKDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0Y2RlNWE2MTE0NWQzOTkyZWNjZGVjN2I3ZjBiODdkNTY2 YmRkY2EwHhcNMjUxMjExMTQ1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmQ4ZjM5MGJmODk4ZmQ3ZTEzMzI1Y2Q2YzQ4OTk1MWUwNmRlYjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbaWEneErwecvhfn5aC2bGXMqfoF d4wSsu4qmk6SUt/NdLL+dglvSvV72faWzwj2qki09pQ9kOHktAYS8MeWxt9O3+wl pfvJy4awgpMkJFizs/7BZeBhkfOlsJ9/szUFlHDaKRicmZJDkg8A/213l7WMpyt1 gVYgDLgTL3rAib3BQg2qpGlltYWO++yaATZg2prbLmd43gOVhi02BOA/PANVetev blT6at2h7CA2zOk4wRmRLzVq+NCy+IRtiR9v8OoMO7o7jj1lGgOhlZDSuP+VnCFc GsJsSen62xHt/nG7sHJBTjevRZa9/se0EiUMjbcHPlrEfKVrxdnLSzCX7QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNvY85C/iY/X4TMlzWxImVHgbetdMB8GA1UdIwQY MBaAFDTN5aYRRdOZLszex7fwuH1Wa93KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk0zbHBoRkYwNWt1ek43SHRfQzRmVlpyM2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iNDJjNTMtZTA1YS00ZDc3LTgyZWUt NWVmMzYyMjZhNzY3LzEvMjlqemtMLUpqOWZoTXlYTmJFaVpVZUJ0NjEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iNDJjNTMtZTA1YS00ZDc3LTgyZWUtNWVmMzYyMjZhNzY3 LzEvTk0zbHBoRkYwNWt1ek43SHRfQzRmVlpyM2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDW4lQAwQB W4l2MA0GCSqGSIb3DQEBCwUAA4IBAQBvx5G6BDyArD82Wrxzz19JRNqdDn6FZQwl QFAMcbMlZcXeSrhJETAQd8Kw3mvx1MRGJMgYofN06fwjvxfXxnxFk/5kd5W6vjhn 8E5w0oVeLlejUM5hq2IYIEe0ZRJyuRZhjLF9UPTEogYkj0Zi0eZ4ieE5PIUx6w7E L3OOOsmRMAro6ti/GQ9d0LTZ1hqss1mjrzgQBgO//BUlZ/ny63r2GoRSUfwzM1YT gmTYtAcVcJC6eO+9e3gORpl0t3iUFoUijfuIjsmPjZMGcVZTeZUbDe/cROVvzEgU LxIyUG4mTShOm1FhR4N8Mibusm2Zpwp0oQaUaUeBEnNre4tbF/3g -----END CERTIFICATE-----Generated at Fri Dec 26 17:18:20 2025 by rpki-client