This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/DG2SCKpdUpMkoQ3tjs2bpfVZ30Q.roa File: DG2SCKpdUpMkoQ3tjs2bpfVZ30Q.roa (raw, json) Hash identifier: 6lwVesY6WzosNmFu1r/DaFbXJ20jkENpfhoqMhcLv2g= Subject key identifier: 0C:6D:92:08:AA:5D:52:93:24:A1:0D:ED:8E:CD:9B:A5:F5:59:DF:44 Certificate issuer: /CN=07afdcd5e97ac1c102479c954d5f922b126cbc14 Certificate serial: 019B0231B0D963E00DE9D894B2FC5E95686C Authority key identifier: 07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/DG2SCKpdUpMkoQ3tjs2bpfVZ30Q.roa Signing time: Tue 09 Dec 2025 08:19:29 +0000 ROA not before: Tue 09 Dec 2025 08:19:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206929 IP address blocks: 77.237.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:31:b0:d9:63:e0:0d:e9:d8:94:b2:fc:5e:95:68:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07afdcd5e97ac1c102479c954d5f922b126cbc14 Validity Not Before: Dec 9 08:19:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0c6d9208aa5d529324a10ded8ecd9ba5f559df44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ca:86:4b:31:94:06:f5:e1:10:ae:6e:1c:cc: 50:99:da:6e:94:4f:90:6c:2d:9f:c6:ed:d0:d8:0c: a3:52:84:a7:52:24:dd:98:f2:a2:c0:81:56:c5:d2: 39:92:23:b9:23:bf:f4:11:29:67:c3:8d:99:73:b0: 2a:3b:b4:aa:13:47:9d:58:46:eb:32:cc:2e:f9:8e: af:ed:56:8c:19:b2:6c:b5:6d:53:70:74:45:6d:87: 3d:36:5f:07:dd:0f:a6:62:ed:d2:12:07:50:cd:72: e8:31:a6:9d:6c:e7:a7:f7:b8:df:af:b5:60:1c:b6: 4f:80:51:80:6e:19:1c:f3:19:d1:8b:f3:67:1f:a3: 2a:ac:a6:40:dd:04:84:40:d7:fd:41:8e:0d:3b:35: dc:2c:ec:c7:0b:28:97:24:8a:1e:91:50:d1:6d:b0: e0:a2:1e:c8:4c:5e:8b:0a:f0:27:b3:95:be:94:af: 57:bb:6c:f5:e1:c4:32:b7:7e:ec:ab:42:35:41:61: 0d:62:64:d8:43:ee:bd:19:51:8b:d5:b6:4e:24:9b: c1:ef:bc:f8:a9:35:8a:30:d7:1e:8e:d9:46:b3:3b: b6:81:3a:c6:c8:aa:2c:2e:da:23:90:3e:2d:60:74: 90:e2:81:af:6b:cf:74:d6:4d:71:b2:11:f1:9a:09: d4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:6D:92:08:AA:5D:52:93:24:A1:0D:ED:8E:CD:9B:A5:F5:59:DF:44 X509v3 Authority Key Identifier: keyid:07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/DG2SCKpdUpMkoQ3tjs2bpfVZ30Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.237.80.0/24 Signature Algorithm: sha256WithRSAEncryption 12:62:4e:b9:4f:32:59:3e:61:6a:5e:47:48:b5:16:51:7b:69: ce:e0:07:a7:bf:6c:be:71:12:7b:b9:53:93:47:b7:eb:4a:fe: 29:17:3e:02:e1:7b:a8:08:03:b6:36:70:fa:0f:82:03:f0:61: fb:50:e5:e6:ba:95:66:8c:b2:31:b3:a3:d2:8d:84:bc:38:cd: 36:e0:2a:1c:1a:8d:76:b4:16:c3:33:ac:d7:39:26:27:ab:e3: 51:c6:41:73:35:8d:7d:4b:a5:3d:21:b8:97:f0:c5:15:1e:84: df:ba:c1:18:80:e2:08:55:ce:e4:47:75:26:a8:06:94:f9:12: 59:ee:0c:c8:c4:50:78:42:57:09:76:94:e2:cc:40:35:21:bc: c5:8b:41:54:7c:2c:fe:de:9f:48:21:8e:23:d9:11:15:f0:71: 45:d1:e2:fa:76:d9:cc:70:b2:b4:25:bd:cf:92:15:8e:8f:2e: 1b:d0:dc:58:c4:8f:32:03:73:42:99:e2:55:9b:07:76:ba:6b: 21:19:2b:b6:db:d4:da:00:d6:d2:b8:d9:7b:2c:4f:54:96:6b: df:d2:75:54:ef:8b:96:f9:02:37:ec:e7:e1:36:80:fa:c0:43: a7:32:cd:b0:eb:f5:6d:df:69:22:5c:0a:7f:6e:be:27:0e:db: 05:cb:ca:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsCMbDZY+AN6diUsvxelWhsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YWZkY2Q1ZTk3YWMxYzEwMjQ3OWM5NTRkNWY5MjJiMTI2 Y2JjMTQwHhcNMjUxMjA5MDgxOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzZkOTIwOGFhNWQ1MjkzMjRhMTBkZWQ4ZWNkOWJhNWY1NTlkZjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucqGSzGUBvXhEK5uHMxQmdpulE+Q bC2fxu3Q2AyjUoSnUiTdmPKiwIFWxdI5kiO5I7/0ESlnw42Zc7AqO7SqE0edWEbr Mswu+Y6v7VaMGbJstW1TcHRFbYc9Nl8H3Q+mYu3SEgdQzXLoMaadbOen97jfr7Vg HLZPgFGAbhkc8xnRi/NnH6MqrKZA3QSEQNf9QY4NOzXcLOzHCyiXJIoekVDRbbDg oh7ITF6LCvAns5W+lK9Xu2z14cQyt37sq0I1QWENYmTYQ+69GVGL1bZOJJvB77z4 qTWKMNcejtlGszu2gTrGyKosLtojkD4tYHSQ4oGva8901k1xshHxmgnU4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAxtkgiqXVKTJKEN7Y7Nm6X1Wd9EMB8GA1UdIwQY MBaAFAev3NXpesHBAkeclU1fkisSbLwUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjZfYzFlbDZ3Y0VDUjV5VlRWLVNLeEpzdkJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wZTI3NDQtZjY0Ni00NDI5LWEyNWEt ZmY2ODUxNzc3MGU0LzEvREcyU0NLcGRVcE1rb1EzdGpzMmJwZlZaMzBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8wZTI3NDQtZjY0Ni00NDI5LWEyNWEtZmY2ODUxNzc3MGU0 LzEvQjZfYzFlbDZ3Y0VDUjV5VlRWLVNLeEpzdkJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATe1QMA0G CSqGSIb3DQEBCwUAA4IBAQASYk65TzJZPmFqXkdItRZRe2nO4Aenv2y+cRJ7uVOT R7frSv4pFz4C4XuoCAO2NnD6D4ID8GH7UOXmupVmjLIxs6PSjYS8OM024CocGo12 tBbDM6zXOSYnq+NRxkFzNY19S6U9IbiX8MUVHoTfusEYgOIIVc7kR3UmqAaU+RJZ 7gzIxFB4QlcJdpTizEA1IbzFi0FUfCz+3p9IIY4j2REV8HFF0eL6dtnMcLK0Jb3P khWOjy4b0NxYxI8yA3NCmeJVmwd2umshGSu229TaANbSuNl7LE9Ulmvf0nVU74uW +QI37OfhNoD6wEOnMs2w6/Vt32kiXAp/br4nDtsFy8p5 -----END CERTIFICATE-----Generated at Mon Dec 15 22:05:32 2025 by rpki-client