This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/k_7P3oJ2dqD60zdkI3oG38bUhrU.roa File: k_7P3oJ2dqD60zdkI3oG38bUhrU.roa (raw, json) Hash identifier: 7oXPt/gWZrNFzCjDHbkFGJyJ3EwCnAHRV6Kg4aKCj1Y= Subject key identifier: 93:FE:CF:DE:82:76:76:A0:FA:D3:37:64:23:7A:06:DF:C6:D4:86:B5 Certificate issuer: /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009 Certificate serial: 019ACABBF3E33D10E078201F4DC3BD22129A Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/k_7P3oJ2dqD60zdkI3oG38bUhrU.roa Signing time: Fri 28 Nov 2025 13:51:46 +0000 ROA not before: Fri 28 Nov 2025 13:51:46 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6698 IP address blocks: 45.11.57.0/24 maxlen: 24 45.12.0.0/24 maxlen: 24 45.12.1.0/24 maxlen: 24 45.12.3.0/24 maxlen: 24 91.208.115.0/24 maxlen: 24 91.218.48.0/22 maxlen: 24 128.0.104.0/24 maxlen: 24 176.97.112.0/23 maxlen: 24 176.97.114.0/24 maxlen: 24 176.97.115.0/24 maxlen: 24 176.97.122.0/23 maxlen: 23 176.97.124.0/24 maxlen: 24 176.119.31.0/24 maxlen: 24 185.254.199.0/24 maxlen: 24 194.42.204.0/24 maxlen: 24 195.66.210.0/24 maxlen: 24 195.128.248.0/23 maxlen: 24 212.86.116.0/24 maxlen: 24 2a09:2dc2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ca:bb:f3:e3:3d:10:e0:78:20:1f:4d:c3:bd:22:12:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009 Validity Not Before: Nov 28 13:51:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=93fecfde827676a0fad33764237a06dfc6d486b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:17:4c:a5:54:f6:3b:16:e3:53:7b:78:f1:b1: 59:05:2d:a3:45:be:5b:09:03:b2:04:c0:12:5b:15: 2d:69:19:bf:6a:75:12:71:0c:f8:8d:43:55:80:cb: bf:bf:fb:2a:0d:7a:d9:a8:31:40:12:f1:c9:c7:17: e2:9b:7b:98:c9:a1:05:2c:6c:d0:9e:f7:53:8d:3f: da:14:bb:a7:8e:7d:71:13:3d:02:7e:fd:7c:ce:3e: da:41:df:ef:0d:75:ac:7e:98:7d:a8:ac:03:72:81: ab:3c:8e:ef:a4:06:13:c7:95:0f:e2:cd:57:5f:b9: ba:f1:a5:78:4b:96:69:f7:0a:5e:d5:25:61:0d:ed: a3:15:6e:45:3b:ea:7c:13:77:55:18:ac:dd:15:e1: e5:f2:97:66:be:7f:89:17:7a:c5:f2:f1:23:b0:eb: 85:81:7f:c0:d8:09:83:a1:bf:20:89:7b:34:93:05: e0:68:75:40:80:1f:aa:16:10:29:09:e7:49:ab:1c: ab:6e:4f:c6:55:e3:f9:f6:38:e8:96:51:7d:d3:e8: 40:1e:20:8b:e0:b4:9e:9c:5b:7d:6f:7a:6a:a4:06: d4:fb:79:2a:9d:7b:db:08:97:34:f3:f7:76:11:7e: c9:41:f1:8c:63:8d:0f:78:3d:c3:33:f0:f5:51:ba: 02:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FE:CF:DE:82:76:76:A0:FA:D3:37:64:23:7A:06:DF:C6:D4:86:B5 X509v3 Authority Key Identifier: keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/k_7P3oJ2dqD60zdkI3oG38bUhrU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.57.0/24 45.12.0.0/23 45.12.3.0/24 91.208.115.0/24 91.218.48.0/22 128.0.104.0/24 176.97.112.0/22 176.97.122.0-176.97.124.255 176.119.31.0/24 185.254.199.0/24 194.42.204.0/24 195.66.210.0/24 195.128.248.0/23 212.86.116.0/24 IPv6: 2a09:2dc2::/32 Signature Algorithm: sha256WithRSAEncryption 74:ea:05:e7:1b:5b:5f:28:cc:4a:9d:af:96:06:59:09:07:d3: 51:89:9c:0a:9c:c4:88:59:fd:07:5a:4a:f9:46:e1:5c:b5:ab: f4:36:e5:9e:7c:ee:6c:1c:3f:f3:ad:9f:f3:ca:10:e5:fa:db: 7f:0d:4d:0b:63:3f:7a:0b:39:84:0d:76:7c:7c:98:c4:fc:a7: 01:29:99:ae:e8:f4:eb:17:4e:7b:bb:dd:17:30:4d:55:d6:2a: da:44:54:5b:2a:b7:df:57:0f:fd:96:7a:37:01:a4:ff:c9:e6: 0a:83:95:01:e8:35:39:4c:6b:64:eb:9a:af:61:1e:1c:44:13: 75:f5:65:7f:29:12:81:f4:34:e1:1f:03:1f:41:3b:05:ff:40: 30:b4:7d:8a:d5:05:92:d4:57:08:ae:9e:fa:dc:d5:31:7c:6f: bd:b5:ba:eb:b0:ff:33:64:8c:a2:d3:2c:25:c0:4b:2c:43:6f: 10:29:87:e4:6e:51:01:c0:89:ee:f1:ce:5d:48:20:7f:05:91: 09:d6:ca:bb:40:ca:36:aa:bf:46:80:78:5e:22:31:52:99:c7: 92:b8:5e:d8:81:dd:c0:8d:7c:3e:6e:04:7c:ca:d9:74:d3:0c: d2:3a:81:fc:0e:bb:b9:54:69:4d:59:1b:2e:06:e2:16:36:f7: b5:15:1b:4a -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgISAZrKu/PjPRDgeCAfTcO9IhKaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMmM5YzI2ZGY3Y2NkOGFkMzhkODliZDVkNDkzODBiOTNi MWUwMDkwHhcNMjUxMTI4MTM1MTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2ZlY2ZkZTgyNzY3NmEwZmFkMzM3NjQyMzdhMDZkZmM2ZDQ4NmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBdMpVT2OxbjU3t48bFZBS2jRb5b CQOyBMASWxUtaRm/anUScQz4jUNVgMu/v/sqDXrZqDFAEvHJxxfim3uYyaEFLGzQ nvdTjT/aFLunjn1xEz0Cfv18zj7aQd/vDXWsfph9qKwDcoGrPI7vpAYTx5UP4s1X X7m68aV4S5Zp9wpe1SVhDe2jFW5FO+p8E3dVGKzdFeHl8pdmvn+JF3rF8vEjsOuF gX/A2AmDob8giXs0kwXgaHVAgB+qFhApCedJqxyrbk/GVeP59jjollF90+hAHiCL 4LSenFt9b3pqpAbU+3kqnXvbCJc08/d2EX7JQfGMY40PeD3DM/D1UboCZQIDAQAB o4ICbzCCAmswHQYDVR0OBBYEFJP+z96Cdnag+tM3ZCN6Bt/G1Ia1MB8GA1UdIwQY MBaAFLMsnCbffM2K042JvV1JOAuTseAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3l5Y0p0OTh6WXJUalltOVhVazRDNU94NEFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kNWRhMGMtOWNmMy00ZjhiLWE1NjIt Y2IxMWJjNWIyZjFiLzEva183UDNvSjJkcUQ2MHpka0kzb0czOGJVaHJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9kNWRhMGMtOWNmMy00ZjhiLWE1NjItY2IxMWJjNWIyZjFi LzEvc3l5Y0p0OTh6WXJUalltOVhVazRDNU94NEFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwYgQCAAEwXAMEAC0LOQME AS0MAAMEAC0MAwMEAFvQcwMEAlvaMAMEAIAAaAMEArBhcDAMAwQBsGF6AwQAsGF8 AwQAsHcfAwQAuf7HAwQAwirMAwQAw0LSAwQBw4D4AwQA1FZ0MA0EAgACMAcDBQAq CS3CMA0GCSqGSIb3DQEBCwUAA4IBAQB06gXnG1tfKMxKna+WBlkJB9NRiZwKnMSI Wf0HWkr5RuFctav0NuWefO5sHD/zrZ/zyhDl+tt/DU0LYz96CzmEDXZ8fJjE/KcB KZmu6PTrF057u90XME1V1iraRFRbKrffVw/9lno3AaT/yeYKg5UB6DU5TGtk65qv YR4cRBN19WV/KRKB9DThHwMfQTsF/0AwtH2K1QWS1FcIrp763NUxfG+9tbrrsP8z ZIyi0ywlwEssQ28QKYfkblEBwInu8c5dSCB/BZEJ1sq7QMo2qr9GgHheIjFSmceS uF7Ygd3AjXw+bgR8ytl00wzSOoH8Dru5VGlNWRsuBuIWNve1FRtK -----END CERTIFICATE-----Generated at Wed Dec 10 08:49:47 2025 by rpki-client