This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CJ5VYbTjywY1mC8V93A4H4dpvMY.roa File: CJ5VYbTjywY1mC8V93A4H4dpvMY.roa (raw, json) Hash identifier: TEsYVPWW5NYLSaElPZzj304SkdAaBM9WJVL8J/p8aHk= Subject key identifier: 08:9E:55:61:B4:E3:CB:06:35:98:2F:15:F7:70:38:1F:87:69:BC:C6 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B1FDC0199D52C9ACA30B9A0F0DF2A5801 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CJ5VYbTjywY1mC8V93A4H4dpvMY.roa Signing time: Mon 15 Dec 2025 02:34:30 +0000 ROA not before: Mon 15 Dec 2025 02:34:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 83.219.99.0/24 maxlen: 24 87.120.68.0/23 maxlen: 24 87.121.60.0/23 maxlen: 23 87.121.61.0/24 maxlen: 24 93.123.74.0/23 maxlen: 24 185.252.160.0/23 maxlen: 24 212.87.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 11:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:dc:01:99:d5:2c:9a:ca:30:b9:a0:f0:df:2a:58:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Dec 15 02:34:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=089e5561b4e3cb0635982f15f770381f8769bcc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5a:3a:28:bb:64:10:a9:2e:42:26:ad:b7:12: b0:a5:6f:00:22:89:d7:8c:da:bf:31:13:ae:6f:df: 4f:4c:9d:09:5c:10:d9:a2:f9:36:77:7f:ae:ac:1b: 56:08:6e:00:49:2b:9e:94:d2:ef:21:02:84:48:05: 39:6c:ce:1e:03:b4:2a:eb:8c:87:f2:3b:f4:55:d4: 7b:23:7a:1b:22:d5:db:da:4f:0c:a8:38:7d:ad:e9: 92:a2:73:8e:63:88:ed:e7:a5:70:13:e5:54:6b:2d: d2:6d:81:e3:f3:11:ba:58:ea:2e:25:1e:d1:50:70: 93:0b:c4:f0:42:a3:71:33:06:cb:9d:f1:d9:c8:bc: e7:1b:ab:77:db:3b:e2:bc:03:f1:49:3f:e3:e1:bb: 2e:ed:cd:53:af:18:bc:4b:c2:66:66:a6:b2:02:3d: 94:da:b1:32:60:fd:b0:59:4b:78:f9:3f:34:1d:68: f0:65:37:a1:2e:d5:cf:9a:f5:5b:0c:90:92:a0:32: ef:2f:99:18:f6:ef:23:18:9d:2e:64:36:2c:a7:56: 63:9e:83:4e:f7:c2:49:21:80:ef:b5:91:0e:ce:8a: dd:dd:24:72:ab:4e:45:81:a9:05:61:20:08:85:c7: a8:a2:fd:33:00:90:e2:f9:71:a2:f8:5a:dc:f2:f3: 55:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9E:55:61:B4:E3:CB:06:35:98:2F:15:F7:70:38:1F:87:69:BC:C6 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CJ5VYbTjywY1mC8V93A4H4dpvMY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.219.99.0/24 87.120.68.0/23 87.121.60.0/23 93.123.74.0/23 185.252.160.0/23 212.87.204.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:b4:77:63:78:35:32:67:38:16:ac:35:01:44:a5:fa:b4:5a: 64:cf:f3:28:4b:6a:df:3d:47:d9:b1:8d:9b:11:a5:ee:7c:db: 83:33:86:11:5f:5f:40:d5:f4:a4:ce:d7:62:72:5d:34:e2:76: ba:7c:f6:bd:3f:07:3d:e7:98:21:0c:ed:0d:80:26:e2:34:b7: 09:1b:8a:ae:c7:84:e4:e1:2e:4a:ae:c7:69:64:eb:49:f9:61: f3:f3:69:e1:fd:05:1f:3b:10:9b:47:ae:f3:41:e5:6c:6b:c9: ee:fe:47:7a:04:be:e6:9a:75:cb:f6:98:8c:70:c4:2d:c4:f1: f8:aa:90:8b:f3:cd:a4:18:33:af:47:9f:eb:e5:4c:4e:63:aa: cd:02:f6:30:df:9c:29:4e:b6:34:1c:50:77:d7:27:67:a3:f9: f4:7e:7b:13:b0:88:16:bb:62:61:c8:d7:03:1a:be:5d:00:55: b6:40:e3:5f:c9:70:b4:26:b4:06:5e:3b:bf:da:46:dd:a6:3d: d5:ac:dd:6e:7e:2d:f7:d1:31:34:4e:4b:2f:11:5a:77:b1:a3: 58:0e:a6:3b:3d:cb:8e:25:0a:23:47:3a:b0:74:35:d4:ad:26: 20:e9:a1:94:b3:59:2c:70:e9:e1:51:17:b6:fc:e0:89:c6:4c: bb:02:02:ec -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZsf3AGZ1SyayjC5oPDfKlgBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMjE1MDIzNDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODllNTU2MWI0ZTNjYjA2MzU5ODJmMTVmNzcwMzgxZjg3NjliY2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlo6KLtkEKkuQiattxKwpW8AIonX jNq/MROub99PTJ0JXBDZovk2d3+urBtWCG4ASSuelNLvIQKESAU5bM4eA7Qq64yH 8jv0VdR7I3obItXb2k8MqDh9remSonOOY4jt56VwE+VUay3SbYHj8xG6WOouJR7R UHCTC8TwQqNxMwbLnfHZyLznG6t32zvivAPxST/j4bsu7c1Trxi8S8JmZqayAj2U 2rEyYP2wWUt4+T80HWjwZTehLtXPmvVbDJCSoDLvL5kY9u8jGJ0uZDYsp1ZjnoNO 98JJIYDvtZEOzord3SRyq05FgakFYSAIhceoov0zAJDi+XGi+Frc8vNVxQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFAieVWG048sGNZgvFfdwOB+HabzGMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvQ0o1VlliVGp5d1kxbUM4VjkzQTRINGRwdk1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAU9tjAwQB V3hEAwQBV3k8AwQBXXtKAwQBufygAwQA1FfMMA0GCSqGSIb3DQEBCwUAA4IBAQA9 tHdjeDUyZzgWrDUBRKX6tFpkz/MoS2rfPUfZsY2bEaXufNuDM4YRX19A1fSkztdi cl004na6fPa9Pwc955ghDO0NgCbiNLcJG4qux4Tk4S5KrsdpZOtJ+WHz82nh/QUf OxCbR67zQeVsa8nu/kd6BL7mmnXL9piMcMQtxPH4qpCL882kGDOvR5/r5UxOY6rN AvYw35wpTrY0HFB31ydno/n0fnsTsIgWu2JhyNcDGr5dAFW2QONfyXC0JrQGXju/ 2kbdpj3VrN1ufi330TE0TksvEVp3saNYDqY7PcuOJQojRzqwdDXUrSYg6aGUs1ks cOnhURe2/OCJxky7AgLs -----END CERTIFICATE-----Generated at Mon Dec 15 17:22:03 2025 by rpki-client