This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Ndm8pR5x90rNCQegdN9yAtbY1wo.roa File: Ndm8pR5x90rNCQegdN9yAtbY1wo.roa (raw, json) Hash identifier: nGrFDE0ZjbVMfLaOKSQh6TiGiXjWCYvj4Ife2VMy4mw= Subject key identifier: 35:D9:BC:A5:1E:71:F7:4A:CD:09:07:A0:74:DF:72:02:D6:D8:D7:0A Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019AB69A24D329589855E86E5C322B34AC4E Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Ndm8pR5x90rNCQegdN9yAtbY1wo.roa Signing time: Mon 24 Nov 2025 16:02:26 +0000 ROA not before: Mon 24 Nov 2025 16:02:26 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 128.0.118.0/24 maxlen: 32 185.115.206.0/24 maxlen: 32 185.137.181.0/24 maxlen: 32 185.146.195.0/24 maxlen: 32 185.205.68.0/24 maxlen: 32 185.207.212.0/24 maxlen: 32 194.113.164.0/24 maxlen: 32 194.113.169.0/24 maxlen: 32 194.113.170.0/24 maxlen: 32 194.113.172.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:9a:24:d3:29:58:98:55:e8:6e:5c:32:2b:34:ac:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Nov 24 16:02:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=35d9bca51e71f74acd0907a074df7202d6d8d70a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:97:6c:63:86:ef:51:f3:ee:ea:45:df:3c:0b: f3:fb:5e:cf:55:17:fb:d0:3b:a2:ce:d1:e4:dd:14: 1c:de:08:81:a7:aa:e1:72:03:7f:c0:20:dc:93:66: d0:d8:f8:ea:2a:fc:09:af:f8:0a:49:07:b8:61:17: 52:05:c9:b9:96:43:a7:75:c4:a7:e3:2c:a7:50:ca: 7f:68:2d:11:e2:d8:21:10:65:37:be:3a:19:76:68: de:9d:68:7f:2e:ef:bb:d9:6e:66:f2:52:34:6b:c0: 7a:b3:d5:db:00:38:fc:67:8a:57:fa:82:ed:f7:6a: b1:40:73:7b:9e:c2:95:b4:2a:a1:a0:f1:9f:a2:39: c7:4c:e7:e1:f7:c3:83:b2:78:75:e5:72:77:87:9e: e7:e1:cd:77:50:2c:93:ec:f8:fc:87:92:a9:cb:a3: 5b:04:d5:d4:79:44:d5:91:ff:7e:a9:ee:e9:d1:2f: 16:26:b5:e2:7d:bb:6f:be:73:d5:8d:1e:7b:72:86: d5:41:e7:cf:80:1f:ab:21:d0:16:74:45:a5:84:5d: 28:8a:e5:27:16:40:7d:37:3c:89:d0:be:94:eb:5d: d7:44:a6:19:d3:3f:d3:79:53:a5:79:fc:9a:6a:cd: ed:e5:18:c2:d6:18:03:94:27:72:e2:be:d3:3b:d1: 9c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D9:BC:A5:1E:71:F7:4A:CD:09:07:A0:74:DF:72:02:D6:D8:D7:0A X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Ndm8pR5x90rNCQegdN9yAtbY1wo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.0.118.0/24 185.115.206.0/24 185.137.181.0/24 185.146.195.0/24 185.205.68.0/24 185.207.212.0/24 194.113.164.0/24 194.113.169.0-194.113.170.255 194.113.172.0/24 Signature Algorithm: sha256WithRSAEncryption bf:ff:9e:87:a9:ec:c8:1e:91:f2:83:71:06:4b:04:bb:a7:cf: 2e:6a:be:e6:2e:25:a6:e1:b1:b2:40:06:30:ba:3f:21:0b:af: 74:cb:10:9b:40:ec:51:2b:f9:d9:cf:53:6e:50:84:a2:c2:63: 59:84:59:da:3b:87:13:71:b7:f9:ba:57:81:21:36:8d:15:82: ee:71:23:fe:b0:ec:2b:79:ad:70:b2:7f:e6:03:f2:9f:74:f0: 5e:66:7c:ea:3b:fd:0d:b8:ae:90:cc:47:65:f5:d6:be:94:c3: e2:23:82:e3:06:42:95:0a:a6:67:bb:31:e8:97:27:45:cb:a9: 08:9e:14:bb:75:b0:b4:ea:1e:17:db:a8:08:89:91:10:5e:c5: 03:7c:94:2a:7e:6a:2c:4c:ee:a6:85:56:92:cc:af:96:df:24: 94:9f:5b:11:e9:24:81:50:33:d3:c1:08:c4:89:2f:1d:31:f4: 0d:dd:44:25:b5:c5:44:fd:e7:53:12:58:8c:00:59:30:e6:07: eb:8b:bd:cb:cd:36:ca:e7:35:a2:59:df:a8:73:1f:fc:ee:f8: de:73:62:c8:09:a1:73:d4:d4:0a:7d:3b:36:fc:c8:c4:e5:50: 43:b6:af:ee:1f:d5:ab:e2:1f:05:e0:62:12:2d:12:51:a2:5f: 08:ce:5f:dc -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZq2miTTKViYVehuXDIrNKxOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjUxMTI0MTYwMjI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWQ5YmNhNTFlNzFmNzRhY2QwOTA3YTA3NGRmNzIwMmQ2ZDhkNzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5dsY4bvUfPu6kXfPAvz+17PVRf7 0DuiztHk3RQc3giBp6rhcgN/wCDck2bQ2PjqKvwJr/gKSQe4YRdSBcm5lkOndcSn 4yynUMp/aC0R4tghEGU3vjoZdmjenWh/Lu+72W5m8lI0a8B6s9XbADj8Z4pX+oLt 92qxQHN7nsKVtCqhoPGfojnHTOfh98ODsnh15XJ3h57n4c13UCyT7Pj8h5Kpy6Nb BNXUeUTVkf9+qe7p0S8WJrXifbtvvnPVjR57cobVQefPgB+rIdAWdEWlhF0oiuUn FkB9NzyJ0L6U613XRKYZ0z/TeVOlefyaas3t5RjC1hgDlCdy4r7TO9GcqQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFDXZvKUecfdKzQkHoHTfcgLW2NcKMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvTmRtOHBSNXg5MHJOQ1FlZ2ROOXlBdGJZMXdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAgAB2AwQA uXPOAwQAuYm1AwQAuZLDAwQAuc1EAwQAuc/UAwQAwnGkMAwDBADCcakDBADCcaoD BADCcawwDQYJKoZIhvcNAQELBQADggEBAL//noep7MgekfKDcQZLBLunzy5qvuYu JabhsbJABjC6PyELr3TLEJtA7FEr+dnPU25QhKLCY1mEWdo7hxNxt/m6V4EhNo0V gu5xI/6w7Ct5rXCyf+YD8p908F5mfOo7/Q24rpDMR2X11r6Uw+IjguMGQpUKpme7 MeiXJ0XLqQieFLt1sLTqHhfbqAiJkRBexQN8lCp+aixM7qaFVpLMr5bfJJSfWxHp JIFQM9PBCMSJLx0x9A3dRCW1xUT951MSWIwAWTDmB+uLvcvNNsrnNaJZ36hzH/zu +N5zYsgJoXPU1Ap9Ozb8yMTlUEO2r+4f1aviHwXgYhItElGiXwjOX9w= -----END CERTIFICATE-----Generated at Fri Dec 5 04:28:45 2025 by rpki-client