This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/rry7NPfioJsPdj6k9-AtWruj7tI.roa File: rry7NPfioJsPdj6k9-AtWruj7tI.roa (raw, json) Hash identifier: kxGiiD8zaKmH1xzvbgC81D4v5vKq601HLVue6ESW7gg= Subject key identifier: AE:BC:BB:34:F7:E2:A0:9B:0F:76:3E:A4:F7:E0:2D:5A:BB:A3:EE:D2 Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02 Certificate serial: 019B6AB7A01819359FD7CCD91B4CCD38F174 Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/rry7NPfioJsPdj6k9-AtWruj7tI.roa Signing time: Mon 29 Dec 2025 15:26:17 +0000 ROA not before: Mon 29 Dec 2025 15:26:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 5.102.38.0/24 maxlen: 24 5.102.39.0/24 maxlen: 24 195.222.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:b7:a0:18:19:35:9f:d7:cc:d9:1b:4c:cd:38:f1:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02 Validity Not Before: Dec 29 15:26:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=aebcbb34f7e2a09b0f763ea4f7e02d5abba3eed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:01:4f:e6:ad:4c:ae:8c:7a:63:71:56:5c:a5: 3a:0f:c1:bd:cc:c2:13:bc:ec:03:7d:fd:77:64:4a: 6a:cf:62:51:98:12:30:88:21:67:cf:f2:36:68:12: 37:5c:04:54:0d:1a:e1:b2:3c:24:bb:25:bb:9c:6f: 5e:bc:d8:bf:d2:dd:3e:52:6c:8a:79:e3:b8:e8:e4: 85:bc:9d:c0:2c:04:9d:69:8f:ba:6b:a4:68:d0:c8: 77:89:62:b2:cc:63:1b:cd:73:d4:c1:4c:ab:60:bb: 21:60:2c:5d:b5:93:f3:41:6c:79:ee:7c:6e:b6:c4: 13:94:77:c9:d6:68:d5:0a:bf:cf:c2:54:12:dc:7d: ce:5e:04:a2:63:ec:19:65:c9:26:82:41:93:3e:69: 96:8b:05:fd:d8:58:1f:ac:3e:6d:a7:b5:39:43:15: 46:4a:c9:38:bd:ce:d8:a3:69:9c:46:09:de:72:10: d6:c2:51:a5:5a:31:7c:72:bc:69:ee:97:d5:f4:e3: 88:c0:af:38:51:fc:09:57:3b:fb:84:63:64:65:96: bc:4d:13:4b:6e:3d:24:d0:56:3a:bd:9f:01:28:07: 37:12:92:2f:65:d6:42:fe:23:58:0e:4d:a5:f5:c3: b7:9f:25:8e:78:30:7a:7f:34:2b:3d:c3:75:1c:96: 1c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BC:BB:34:F7:E2:A0:9B:0F:76:3E:A4:F7:E0:2D:5A:BB:A3:EE:D2 X509v3 Authority Key Identifier: keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/rry7NPfioJsPdj6k9-AtWruj7tI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.102.38.0/23 195.222.127.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:ff:36:00:3c:dc:1c:53:92:1f:ee:6c:5e:5e:99:05:e2:19: 9c:41:77:e2:51:bf:10:26:f1:d4:77:b7:d7:69:48:3f:c9:73: 8f:3c:fa:d7:a5:c3:9e:a8:fe:dc:17:df:33:bd:50:16:f8:f2: ee:d9:5b:b7:b7:cb:04:8a:12:7a:ba:30:91:8f:58:ae:fd:e6: e0:fd:4a:30:dc:44:35:73:44:e3:23:20:0b:13:9d:fe:53:50: 32:7e:97:3b:20:1c:97:93:e3:f8:db:3d:48:54:3b:7f:af:bc: 65:04:8e:74:dc:ca:6b:16:96:a8:8f:69:81:40:39:0f:e7:a1: f8:f3:6e:f4:a3:f7:10:59:8e:c5:79:ab:9e:bb:b8:c2:5c:f5: 4e:0c:de:dd:3e:7d:46:22:f7:ab:8d:ac:94:e7:93:6d:ca:61: 9a:44:cb:2c:d1:25:64:de:d3:13:bf:77:51:68:e7:6a:9b:bc: 47:94:12:ec:18:dd:d2:7f:0a:bc:1e:9e:6a:74:d9:e8:68:65: b4:60:39:a8:97:56:3f:b2:0b:e2:25:23:49:96:4a:f9:9d:2e: 41:ee:71:db:96:e4:e8:b6:e5:9b:f1:c4:ca:78:4f:89:68:68: 57:5a:44:8c:28:2a:fd:5e:24:1e:50:c2:d2:49:c7:9b:e4:a0: ff:36:0d:96 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZtqt6AYGTWf18zZG0zNOPF0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZGY3NmM1NGI5ZTY5MzVjMzBhOWI0YzliYTkzMDlhYzQ3 MGVjMDIwHhcNMjUxMjI5MTUyNjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWJjYmIzNGY3ZTJhMDliMGY3NjNlYTRmN2UwMmQ1YWJiYTNlZWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAFP5q1Mrox6Y3FWXKU6D8G9zMIT vOwDff13ZEpqz2JRmBIwiCFnz/I2aBI3XARUDRrhsjwkuyW7nG9evNi/0t0+UmyK eeO46OSFvJ3ALASdaY+6a6Ro0Mh3iWKyzGMbzXPUwUyrYLshYCxdtZPzQWx57nxu tsQTlHfJ1mjVCr/PwlQS3H3OXgSiY+wZZckmgkGTPmmWiwX92FgfrD5tp7U5QxVG Ssk4vc7Yo2mcRgnechDWwlGlWjF8crxp7pfV9OOIwK84UfwJVzv7hGNkZZa8TRNL bj0k0FY6vZ8BKAc3EpIvZdZC/iNYDk2l9cO3nyWOeDB6fzQrPcN1HJYcFQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK68uzT34qCbD3Y+pPfgLVq7o+7SMB8GA1UdIwQY MBaAFIvfdsVLnmk1wwqbTJupMJrEcOwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgt OGQyMTg2NjUwMjdkLzEvcnJ5N05QZmlvSnNQZGo2azktQXRXcnVqN3RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgtOGQyMTg2NjUwMjdk LzEvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBBWYmAwQA w95/MA0GCSqGSIb3DQEBCwUAA4IBAQBc/zYAPNwcU5If7mxeXpkF4hmcQXfiUb8Q JvHUd7fXaUg/yXOPPPrXpcOeqP7cF98zvVAW+PLu2Vu3t8sEihJ6ujCRj1iu/ebg /Uow3EQ1c0TjIyALE53+U1Ayfpc7IByXk+P42z1IVDt/r7xlBI503MprFpaoj2mB QDkP56H48270o/cQWY7Feaueu7jCXPVODN7dPn1GIverjayU55NtymGaRMss0SVk 3tMTv3dRaOdqm7xHlBLsGN3Sfwq8Hp5qdNnoaGW0YDmol1Y/sgviJSNJlkr5nS5B 7nHbluTotuWb8cTKeE+JaGhXWkSMKCr9XiQeUMLSSceb5KD/Ng2W -----END CERTIFICATE-----Generated at Tue Dec 30 21:06:00 2025 by rpki-client