This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/d06v_z5AzGawWdpAyBM32uqoY8s.roa File: d06v_z5AzGawWdpAyBM32uqoY8s.roa (raw, json) Hash identifier: pSQvaS1eopRaEZbRC3t4/wI1inV/dQioI0GQiFJQkg8= Subject key identifier: 77:4E:AF:FF:3E:40:CC:66:B0:59:DA:40:C8:13:37:DA:EA:A8:63:CB Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019B0482F400A2142D319A60B2012C062D56 Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/d06v_z5AzGawWdpAyBM32uqoY8s.roa Signing time: Tue 09 Dec 2025 19:07:29 +0000 ROA not before: Tue 09 Dec 2025 19:07:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48955 IP address blocks: 89.45.66.0/24 maxlen: 24 93.113.205.0/24 maxlen: 24 188.212.5.0/24 maxlen: 24 188.213.1.0/24 maxlen: 24 188.214.150.0/24 maxlen: 24 188.214.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:82:f4:00:a2:14:2d:31:9a:60:b2:01:2c:06:2d:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Dec 9 19:07:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=774eafff3e40cc66b059da40c81337daeaa863cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:73:42:a5:93:93:e2:1f:df:1f:4e:58:c8:70: c4:2b:0d:f9:36:08:e4:c1:28:44:ce:e3:b9:96:e0: a0:bd:00:38:93:a2:e3:17:30:d8:79:d7:ac:f2:98: a8:c8:e1:7c:79:4d:c3:19:3f:df:96:2c:35:98:5d: 2c:f5:33:f7:58:ec:5c:36:11:b4:f1:b1:25:d6:d5: d8:89:ed:24:47:b4:0a:e6:36:b3:b4:84:c3:5c:ff: 1a:9a:55:09:9a:dc:75:67:2f:0a:2d:5b:25:26:33: a5:34:de:3b:85:de:bd:79:1c:b3:4f:46:9f:85:f8: ab:a3:4c:c2:df:61:c4:76:a1:90:e0:fa:1f:f8:e6: 46:bd:43:c1:1c:5f:f7:40:cf:c4:d4:8b:7c:50:8a: be:e3:74:4b:ae:e2:e1:f0:6f:f9:c2:87:b2:3a:a2: c6:77:79:49:c1:76:da:b6:61:e6:72:7c:3f:2c:db: 9f:b6:af:c4:b5:55:b0:f6:0e:7b:a3:87:4f:90:50: b1:57:6d:15:e2:c0:fb:ae:da:02:e7:ad:11:3f:83: 42:c7:d8:67:da:25:66:98:b1:73:c6:41:c1:d5:d1: f4:cd:8a:7b:89:56:84:f6:e6:11:cd:20:9f:1d:29: 5b:32:ac:76:94:70:14:9d:e4:08:73:10:9d:89:1c: 35:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4E:AF:FF:3E:40:CC:66:B0:59:DA:40:C8:13:37:DA:EA:A8:63:CB X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/d06v_z5AzGawWdpAyBM32uqoY8s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.45.66.0/24 93.113.205.0/24 188.212.5.0/24 188.213.1.0/24 188.214.150.0/24 188.214.227.0/24 Signature Algorithm: sha256WithRSAEncryption 08:84:e7:c2:cf:c2:d9:7b:68:98:1d:d8:0f:93:21:8d:52:a4: 77:e8:3d:26:d7:a6:77:19:b8:cb:41:aa:87:56:f3:ed:92:2e: 5d:be:d9:e2:2b:f6:80:4d:07:36:3b:df:07:48:62:1a:17:d8: e6:10:8c:9c:f9:5c:ec:69:7b:e0:53:12:7e:ad:11:e7:ca:52: 2e:1a:26:63:83:a3:0f:18:e8:d9:d1:67:af:fe:a0:e9:fe:49: e7:ee:89:03:6d:f5:39:0f:d3:af:18:1d:28:49:ef:be:de:b4: 6a:37:bd:7c:e4:c0:ea:00:7e:05:39:1c:b5:88:02:b9:88:f4: dd:9a:81:94:26:08:0e:4f:54:25:00:d1:10:73:88:7f:d8:ce: cc:68:60:47:19:d8:bd:64:30:47:32:98:13:af:d2:91:ca:c5: 80:aa:83:b9:19:21:88:30:ee:55:b2:e0:7b:90:8d:c1:e9:7f: e4:22:6c:6d:2d:0b:5c:e4:f0:c7:b1:9d:80:5d:83:06:f7:9b: 65:6d:2d:28:1b:69:30:32:15:9f:66:81:39:95:87:29:55:37: b1:63:a0:27:de:a6:d2:f6:2a:29:66:2d:95:db:ad:d5:ae:cc: cf:75:3f:d9:9b:2d:0a:64:68:73:15:ae:88:e0:6c:16:c7:e8: 8b:6b:f0:ee -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZsEgvQAohQtMZpgsgEsBi1WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjUxMjA5MTkwNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzRlYWZmZjNlNDBjYzY2YjA1OWRhNDBjODEzMzdkYWVhYTg2M2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXNCpZOT4h/fH05YyHDEKw35Ngjk wShEzuO5luCgvQA4k6LjFzDYedes8pioyOF8eU3DGT/fliw1mF0s9TP3WOxcNhG0 8bEl1tXYie0kR7QK5jaztITDXP8amlUJmtx1Zy8KLVslJjOlNN47hd69eRyzT0af hfiro0zC32HEdqGQ4Pof+OZGvUPBHF/3QM/E1It8UIq+43RLruLh8G/5woeyOqLG d3lJwXbatmHmcnw/LNuftq/EtVWw9g57o4dPkFCxV20V4sD7rtoC560RP4NCx9hn 2iVmmLFzxkHB1dH0zYp7iVaE9uYRzSCfHSlbMqx2lHAUneQIcxCdiRw1fQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFHdOr/8+QMxmsFnaQMgTN9rqqGPLMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvZDA2dl96NUF6R2F3V2RwQXlCTTMydXFvWThzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAWS1CAwQA XXHNAwQAvNQFAwQAvNUBAwQAvNaWAwQAvNbjMA0GCSqGSIb3DQEBCwUAA4IBAQAI hOfCz8LZe2iYHdgPkyGNUqR36D0m16Z3GbjLQaqHVvPtki5dvtniK/aATQc2O98H SGIaF9jmEIyc+VzsaXvgUxJ+rRHnylIuGiZjg6MPGOjZ0Wev/qDp/knn7okDbfU5 D9OvGB0oSe++3rRqN7185MDqAH4FORy1iAK5iPTdmoGUJggOT1QlANEQc4h/2M7M aGBHGdi9ZDBHMpgTr9KRysWAqoO5GSGIMO5VsuB7kI3B6X/kImxtLQtc5PDHsZ2A XYMG95tlbS0oG2kwMhWfZoE5lYcpVTexY6An3qbS9iopZi2V263VrszPdT/Zmy0K ZGhzFa6I4GwWx+iLa/Du -----END CERTIFICATE-----Generated at Thu Dec 11 23:20:11 2025 by rpki-client