This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/9cidng2JNpciqXWnAOhVR-xci3k.roa File: 9cidng2JNpciqXWnAOhVR-xci3k.roa (raw, json) Hash identifier: KdGn77knG5L66v7NxGPd44OS8+DeTlDe5QBcInKG3Yk= Subject key identifier: F5:C8:9D:9E:0D:89:36:97:22:A9:75:A7:00:E8:55:47:EC:5C:8B:79 Certificate issuer: /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e Certificate serial: 019AB055F752C8BBF2C4165F3A7C4398511E Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/9cidng2JNpciqXWnAOhVR-xci3k.roa Signing time: Sun 23 Nov 2025 10:50:15 +0000 ROA not before: Sun 23 Nov 2025 10:50:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6205 IP address blocks: 185.122.12.0/22 maxlen: 24 185.122.13.0/24 maxlen: 24 185.122.14.0/24 maxlen: 24 185.122.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b0:55:f7:52:c8:bb:f2:c4:16:5f:3a:7c:43:98:51:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e Validity Not Before: Nov 23 10:50:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f5c89d9e0d89369722a975a700e85547ec5c8b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a3:2a:cb:a0:e3:1b:25:d7:83:fb:5b:f0:e5: 1d:a4:de:ea:ed:30:9c:5e:34:57:e4:a2:11:58:80: 99:3b:44:91:4a:44:f1:d4:77:83:07:43:9e:a7:9d: 36:30:99:da:b8:96:4c:2d:ef:61:96:75:e7:6c:1f: c3:e5:23:d2:e2:9b:bf:6c:2d:1b:00:44:21:4e:2f: b4:c9:9c:15:23:d5:27:f4:a5:07:26:b4:8f:0b:63: ce:d1:90:fc:89:a9:32:ca:e9:95:e0:b6:86:f9:dd: 3c:d1:14:e3:ab:4a:96:bf:72:e8:2f:2c:2f:e0:bd: 3e:3a:29:b2:f7:7c:d7:0d:55:d6:77:32:bc:55:79: 0a:f4:af:a5:c9:e4:96:e1:68:75:7c:e4:01:24:b5: b9:fa:51:68:4d:b1:26:95:6e:8b:9f:c7:12:76:f4: 9d:48:48:48:a4:10:b7:82:1a:0e:4b:81:89:c1:f5: 21:2d:8d:24:a7:83:9e:8e:b5:8b:06:19:e4:63:e8: 85:d3:3c:e1:27:d9:1f:2f:71:d4:b0:87:db:7b:41: 01:0e:62:5f:1e:c8:56:54:03:f4:18:b3:7c:13:c2: 19:78:2a:6b:40:c9:93:7d:22:82:d2:ac:88:7c:d5: 18:16:88:dc:9d:83:e1:3a:fd:75:51:12:b9:54:21: 36:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C8:9D:9E:0D:89:36:97:22:A9:75:A7:00:E8:55:47:EC:5C:8B:79 X509v3 Authority Key Identifier: keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/9cidng2JNpciqXWnAOhVR-xci3k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.122.12.0/22 Signature Algorithm: sha256WithRSAEncryption c6:cd:8b:92:ca:d1:53:f6:b6:5c:7c:a0:27:d8:ac:04:b1:f3: 47:b2:bf:3f:ef:b2:bb:57:7f:a3:33:a2:a2:b6:4b:b9:5e:0d: 46:13:e1:06:f5:a2:53:5e:0b:03:f2:7f:53:6a:d1:d3:c5:82: fc:80:b3:22:80:87:28:0d:a6:27:d8:e8:55:51:dc:c4:33:f9: 5f:2a:a2:65:e6:7e:d9:9b:6b:73:fe:da:a4:28:cb:a7:81:79: 92:7f:fa:14:49:7a:59:dc:e7:f7:9d:cc:61:06:89:7a:67:9d: 4f:0f:91:4f:08:6b:c9:17:90:f2:af:b5:9e:6b:cf:49:74:8a: f2:52:77:c3:9c:cb:27:a7:b7:16:7c:cd:e7:79:81:2d:7b:39: 57:a9:81:62:f3:f5:e1:06:e1:79:25:f6:1e:e4:04:0a:f0:4d: 0d:9a:0d:57:9b:66:f5:bd:d2:3a:a1:25:a8:54:cf:91:23:22: bf:79:8e:31:db:94:d3:17:3e:ff:8b:8d:d4:57:e9:eb:98:42: 5c:b0:e1:ef:ac:f9:82:43:b4:16:c5:a2:91:6b:a8:f1:4a:e4: ee:63:3e:0f:01:33:7b:4b:d9:fb:e0:f3:32:7c:74:1a:19:78: 8c:ca:62:e5:b6:7a:9f:c5:5f:a0:3a:ef:62:57:f3:ab:2e:3d: 53:f1:3b:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqwVfdSyLvyxBZfOnxDmFEeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0Y2NkNzM1MDhhOWI1OTk4NWQ1NTk3ODY4ZTNhNWQ1ZWM3 NDVmNWUwHhcNMjUxMTIzMTA1MDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWM4OWQ5ZTBkODkzNjk3MjJhOTc1YTcwMGU4NTU0N2VjNWM4Yjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKMqy6DjGyXXg/tb8OUdpN7q7TCc XjRX5KIRWICZO0SRSkTx1HeDB0Oep502MJnauJZMLe9hlnXnbB/D5SPS4pu/bC0b AEQhTi+0yZwVI9Un9KUHJrSPC2PO0ZD8iakyyumV4LaG+d080RTjq0qWv3LoLywv 4L0+Oimy93zXDVXWdzK8VXkK9K+lyeSW4Wh1fOQBJLW5+lFoTbEmlW6Ln8cSdvSd SEhIpBC3ghoOS4GJwfUhLY0kp4OejrWLBhnkY+iF0zzhJ9kfL3HUsIfbe0EBDmJf HshWVAP0GLN8E8IZeCprQMmTfSKC0qyIfNUYFojcnYPhOv11URK5VCE2eQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPXInZ4NiTaXIql1pwDoVUfsXIt5MB8GA1UdIwQY MBaAFOTM1zUIqbWZhdVZeGjjpdXsdF9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU16WE5RaXB0Wm1GMVZsNGFPT2wxZXgwWDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80NTNhZWQtNzY0NS00NTlkLTg1ZDgt ODVkODBhNTQ0YmViLzEvOWNpZG5nMkpOcGNpcVhXbkFPaFZSLXhjaTNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC80NTNhZWQtNzY0NS00NTlkLTg1ZDgtODVkODBhNTQ0YmVi LzEvNU16WE5RaXB0Wm1GMVZsNGFPT2wxZXgwWDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXoMMA0G CSqGSIb3DQEBCwUAA4IBAQDGzYuSytFT9rZcfKAn2KwEsfNHsr8/77K7V3+jM6Ki tku5Xg1GE+EG9aJTXgsD8n9TatHTxYL8gLMigIcoDaYn2OhVUdzEM/lfKqJl5n7Z m2tz/tqkKMungXmSf/oUSXpZ3Of3ncxhBol6Z51PD5FPCGvJF5Dyr7Wea89JdIry UnfDnMsnp7cWfM3neYEtezlXqYFi8/XhBuF5JfYe5AQK8E0Nmg1Xm2b1vdI6oSWo VM+RIyK/eY4x25TTFz7/i43UV+nrmEJcsOHvrPmCQ7QWxaKRa6jxSuTuYz4PATN7 S9n74PMyfHQaGXiMymLltnqfxV+gOu9iV/OrLj1T8Tue -----END CERTIFICATE-----Generated at Sat Dec 6 12:54:50 2025 by rpki-client