This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/rdyjilu40aDA8JWXXpkIm61tzQY.roa File: rdyjilu40aDA8JWXXpkIm61tzQY.roa (raw, json) Hash identifier: kUzYkjZ0Pr+4AdaDz/BIzjHecTU3TFmXSfUR1EA6v2E= Subject key identifier: AD:DC:A3:8A:5B:B8:D1:A0:C0:F0:95:97:5E:99:08:9B:AD:6D:CD:06 Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019A7324B8035A54C2F5AEE0C00ABA1EA252 Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/rdyjilu40aDA8JWXXpkIm61tzQY.roa Signing time: Tue 11 Nov 2025 13:39:37 +0000 ROA not before: Tue 11 Nov 2025 13:39:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 398465 IP address blocks: 81.22.138.0/24 maxlen: 24 89.185.0.0/24 maxlen: 24 109.72.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 21:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:24:b8:03:5a:54:c2:f5:ae:e0:c0:0a:ba:1e:a2:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Nov 11 13:39:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=addca38a5bb8d1a0c0f095975e99089bad6dcd06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8f:8b:30:e9:3a:db:d0:a5:ac:c9:ff:1b:b3: f0:83:90:8a:89:ce:d8:64:ed:b6:9c:bd:84:df:2b: 68:4c:11:71:bc:fd:af:16:7f:f9:15:bb:1f:13:0d: 2a:da:0f:ea:c6:29:2e:2b:5e:ec:93:c8:06:8d:0f: 23:d7:f8:bd:16:cf:00:dc:1a:bb:ad:85:62:7b:de: 2f:f4:81:a2:59:da:8e:65:51:08:2a:c6:83:27:9e: 45:93:2e:18:eb:84:4f:07:bf:06:0d:78:c2:1b:81: 8b:76:7b:f0:73:60:53:36:d1:5a:61:72:e4:44:8a: 8a:df:48:da:3b:ab:53:c3:84:6c:5e:fa:ba:12:7d: 07:91:d0:56:fe:25:9a:ad:ac:93:80:cd:ea:47:88: 78:8b:66:94:fa:a3:ff:0d:36:3f:b0:cc:90:b6:d5: c5:7d:3f:01:d8:13:a4:df:14:07:3d:81:66:4d:16: c8:9a:13:00:8c:ac:7c:22:95:b0:52:2c:45:64:d7: ca:6d:0d:08:0f:f3:0a:c5:94:fa:a3:e7:a0:25:de: 6d:ca:aa:21:8a:d3:dd:3f:98:9f:1c:f0:14:04:a8: 89:b9:17:20:f5:9f:a3:7e:a9:ca:31:d2:ed:d3:27: 5b:2e:12:c7:cb:2c:04:be:23:d8:ff:5c:88:ed:6a: de:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:DC:A3:8A:5B:B8:D1:A0:C0:F0:95:97:5E:99:08:9B:AD:6D:CD:06 X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/rdyjilu40aDA8JWXXpkIm61tzQY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.138.0/24 89.185.0.0/24 109.72.123.0/24 Signature Algorithm: sha256WithRSAEncryption 63:2a:8f:30:f2:11:c5:14:96:95:10:cd:9b:b9:6c:00:b3:16: 7f:6f:80:72:45:9f:77:fd:81:0e:0a:28:9e:fe:80:0b:4a:a0: ea:ac:a7:38:c9:6b:42:c8:72:de:17:81:a0:82:03:b4:05:6b: 93:3c:10:ec:e0:5d:ac:68:13:48:38:3e:8f:9b:b1:6d:ba:37: 56:93:34:9e:57:1b:33:32:88:ae:0f:47:fa:44:74:6a:8d:ca: 80:c5:ba:91:30:2c:67:3c:8f:e8:6e:43:b6:fa:e9:62:d8:92: 71:dd:ed:76:e0:d9:17:68:5a:30:16:ea:bd:00:dc:4f:62:c8: 95:41:76:58:64:7c:6c:fe:40:ca:0e:24:1b:f4:01:47:e0:61: 8d:2e:14:18:37:1d:3b:9e:2f:83:19:e3:bb:8f:34:5e:3b:69: e8:eb:d2:af:b2:18:0a:43:f9:b6:37:eb:7f:d1:4d:34:d0:31: 0e:ec:0d:d8:8f:39:29:84:63:17:30:57:4e:31:f7:5d:fb:fa: bb:43:21:05:80:09:f9:53:a8:07:4e:5b:73:3b:62:c7:af:79: a8:4f:b6:ea:45:07:d2:95:79:38:32:2e:f8:2a:a8:e2:0c:19: 6e:b4:51:77:17:a5:91:1e:93:b7:03:bb:90:a9:4e:b5:4c:de: 6c:a9:bf:9b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZpzJLgDWlTC9a7gwAq6HqJSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjUxMTExMTMzOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGRjYTM4YTViYjhkMWEwYzBmMDk1OTc1ZTk5MDg5YmFkNmRjZDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno+LMOk629ClrMn/G7Pwg5CKic7Y ZO22nL2E3ytoTBFxvP2vFn/5FbsfEw0q2g/qxikuK17sk8gGjQ8j1/i9Fs8A3Bq7 rYVie94v9IGiWdqOZVEIKsaDJ55Fky4Y64RPB78GDXjCG4GLdnvwc2BTNtFaYXLk RIqK30jaO6tTw4RsXvq6En0HkdBW/iWarayTgM3qR4h4i2aU+qP/DTY/sMyQttXF fT8B2BOk3xQHPYFmTRbImhMAjKx8IpWwUixFZNfKbQ0ID/MKxZT6o+egJd5tyqoh itPdP5ifHPAUBKiJuRcg9Z+jfqnKMdLt0ydbLhLHyywEviPY/1yI7WreywIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFK3co4pbuNGgwPCVl16ZCJutbc0GMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvcmR5amlsdTQwYURBOEpXWFhwa0ltNjF0elFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAURaKAwQA WbkAAwQAbUh7MA0GCSqGSIb3DQEBCwUAA4IBAQBjKo8w8hHFFJaVEM2buWwAsxZ/ b4ByRZ93/YEOCiie/oALSqDqrKc4yWtCyHLeF4GgggO0BWuTPBDs4F2saBNIOD6P m7FtujdWkzSeVxszMoiuD0f6RHRqjcqAxbqRMCxnPI/obkO2+uli2JJx3e124NkX aFowFuq9ANxPYsiVQXZYZHxs/kDKDiQb9AFH4GGNLhQYNx07ni+DGeO7jzReO2no 69KvshgKQ/m2N+t/0U000DEO7A3YjzkphGMXMFdOMfdd+/q7QyEFgAn5U6gHTltz O2LHr3moT7bqRQfSlXk4Mi74KqjiDBlutFF3F6WRHpO3A7uQqU61TN5sqb+b -----END CERTIFICATE-----Generated at Sun Nov 23 05:21:53 2025 by rpki-client