This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/dik6TBEWU8HtYHzB_fQ2vmbTSbU.roa File: dik6TBEWU8HtYHzB_fQ2vmbTSbU.roa (raw, json) Hash identifier: u3ev14tb+qofcajSpom25kW2ZDlAAMEa9zOBozqolf4= Subject key identifier: 76:29:3A:4C:11:16:53:C1:ED:60:7C:C1:FD:F4:36:BE:66:D3:49:B5 Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Certificate serial: 019AD62F7F69D0E8502FE2AAB67D71F4FFC0 Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/dik6TBEWU8HtYHzB_fQ2vmbTSbU.roa Signing time: Sun 30 Nov 2025 19:13:48 +0000 ROA not before: Sun 30 Nov 2025 19:13:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 109.122.4.0/24 maxlen: 24 109.122.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d6:2f:7f:69:d0:e8:50:2f:e2:aa:b6:7d:71:f4:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Validity Not Before: Nov 30 19:13:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=76293a4c111653c1ed607cc1fdf436be66d349b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c8:a3:54:f9:18:4f:3a:54:bd:3f:60:9f:e3: c0:2d:3a:01:6a:b9:b3:f3:be:d4:90:8e:95:63:38: f0:b5:21:d0:fd:83:58:00:46:4a:98:8c:3e:a6:fc: 0a:e3:0d:f8:93:e0:06:a2:a0:8f:83:92:94:02:7d: ee:97:67:74:e2:14:33:ba:2a:e2:8e:f3:fe:ca:8a: 20:a6:ef:6e:8d:31:ee:93:72:63:25:72:c5:c4:44: 94:94:6e:47:e0:e1:aa:26:32:3a:e2:7a:cc:f3:00: ba:be:72:88:3b:c6:72:8e:a0:aa:c7:a2:84:9f:7b: 49:60:3e:2a:44:a3:94:da:9f:6b:1f:36:b8:f3:74: c7:f0:35:b2:4d:1b:9d:5b:e4:ad:39:d2:01:c9:76: 0a:0c:eb:be:6e:b4:9c:39:8e:12:66:ea:ef:a7:12: ab:10:08:8d:f8:b6:1f:9f:d0:44:d9:3d:ff:3e:60: e5:3e:73:30:f5:b7:b9:14:d8:07:6d:93:13:2b:b8: 8f:da:e2:1d:79:58:d8:59:10:0a:ba:fc:1d:bf:bd: f1:de:33:c7:fc:02:77:1e:b1:1d:40:20:5b:00:5b: bb:33:54:46:89:2f:c0:7c:44:30:4d:b3:6c:57:91: e7:5f:fa:b2:f5:a6:55:db:19:78:62:e4:b7:f7:4a: d1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:29:3A:4C:11:16:53:C1:ED:60:7C:C1:FD:F4:36:BE:66:D3:49:B5 X509v3 Authority Key Identifier: keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/dik6TBEWU8HtYHzB_fQ2vmbTSbU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.4.0/24 109.122.29.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:05:9e:d4:89:50:d7:20:21:99:f8:ca:20:ef:62:c9:ce:73: bf:ee:bb:24:56:eb:6d:83:6e:7e:84:52:a7:53:ed:61:4b:c4: 5e:d3:52:3f:33:b8:f2:b8:99:d8:61:d7:82:79:7b:53:b4:92: f6:a9:fd:a4:78:8c:6b:91:c9:77:65:80:6f:66:1c:b4:1c:bd: 8c:f1:76:04:8e:ae:50:04:7e:7f:5b:d5:a7:a4:50:b9:86:2a: 4a:af:44:d9:cb:de:46:78:cb:41:cc:63:c8:ba:69:60:d1:9e: a6:f5:4f:88:9a:30:de:8d:6b:b6:3b:af:38:73:e9:83:29:ae: dc:de:25:37:fe:f6:3e:43:73:f3:d8:b8:a5:5a:6b:bf:5c:53: c7:88:87:89:ae:4e:00:dc:fb:cc:a3:7d:8f:a3:9c:8b:c6:d9: d0:98:40:9f:a3:d2:f5:9c:d8:3d:77:23:f4:d8:f5:b3:cc:1d: ab:a1:14:11:f6:39:67:58:16:b8:24:f1:d1:c3:60:3a:91:a0: 88:4f:a0:4e:b6:1a:68:22:c0:30:08:c7:3a:04:5e:11:a5:8a: b1:d6:6e:b2:5e:69:e8:4f:8c:cd:9a:c3:6d:a6:d1:b7:c4:58: 63:0c:da:65:b7:2f:05:7f:48:7d:2e:e9:0a:e1:e7:76:cc:40: d9:75:e9:ea -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrWL39p0OhQL+Kqtn1x9P/AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3 OGE1NzkwHhcNMjUxMTMwMTkxMzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjI5M2E0YzExMTY1M2MxZWQ2MDdjYzFmZGY0MzZiZTY2ZDM0OWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMijVPkYTzpUvT9gn+PALToBarmz 877UkI6VYzjwtSHQ/YNYAEZKmIw+pvwK4w34k+AGoqCPg5KUAn3ul2d04hQzuiri jvP+yoogpu9ujTHuk3JjJXLFxESUlG5H4OGqJjI64nrM8wC6vnKIO8ZyjqCqx6KE n3tJYD4qRKOU2p9rHza483TH8DWyTRudW+StOdIByXYKDOu+brScOY4SZurvpxKr EAiN+LYfn9BE2T3/PmDlPnMw9be5FNgHbZMTK7iP2uIdeVjYWRAKuvwdv73x3jPH /AJ3HrEdQCBbAFu7M1RGiS/AfEQwTbNsV5HnX/qy9aZV2xl4YuS390rRyQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHYpOkwRFlPB7WB8wf30Nr5m00m1MB8GA1UdIwQY MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt YTM5YWMyNTM5ZmM1LzEvZGlrNlRCRVdVOEh0WUh6Ql9mUTJ2bWJUU2JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1 LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbXoEAwQA bXodMA0GCSqGSIb3DQEBCwUAA4IBAQAMBZ7UiVDXICGZ+Mog72LJznO/7rskVutt g25+hFKnU+1hS8Re01I/M7jyuJnYYdeCeXtTtJL2qf2keIxrkcl3ZYBvZhy0HL2M 8XYEjq5QBH5/W9WnpFC5hipKr0TZy95GeMtBzGPIumlg0Z6m9U+ImjDejWu2O684 c+mDKa7c3iU3/vY+Q3Pz2LilWmu/XFPHiIeJrk4A3PvMo32Po5yLxtnQmECfo9L1 nNg9dyP02PWzzB2roRQR9jlnWBa4JPHRw2A6kaCIT6BOthpoIsAwCMc6BF4RpYqx 1m6yXmnoT4zNmsNtptG3xFhjDNplty8Ff0h9LukK4ed2zEDZdenq -----END CERTIFICATE-----Generated at Sat Dec 6 18:07:27 2025 by rpki-client