This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/0vdRQP6oDKbrt2AMFylSvIwqIyg.roa File: 0vdRQP6oDKbrt2AMFylSvIwqIyg.roa (raw, json) Hash identifier: pxwOPSpkw+fKuyNlbzf40gyqoMu+x6ekO7hHtNoYIH4= Subject key identifier: D2:F7:51:40:FE:A8:0C:A6:EB:B7:60:0C:17:29:52:BC:8C:2A:23:28 Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae Certificate serial: 019AC59A9D9B27BF93CB3738937E2FA869FF Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/0vdRQP6oDKbrt2AMFylSvIwqIyg.roa Signing time: Thu 27 Nov 2025 13:57:15 +0000 ROA not before: Thu 27 Nov 2025 13:57:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 31662 IP address blocks: 64.239.60.0/24 maxlen: 24 64.239.61.0/24 maxlen: 24 193.186.252.0/24 maxlen: 24 2001:678:1150::/48 maxlen: 48 2001:67c:934::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c5:9a:9d:9b:27:bf:93:cb:37:38:93:7e:2f:a8:69:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae Validity Not Before: Nov 27 13:57:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d2f75140fea80ca6ebb7600c172952bc8c2a2328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:24:31:64:77:bd:b8:c2:6e:65:a9:0f:00:2f: b2:ff:f2:c9:77:50:00:5b:6f:2c:7c:42:ec:ed:05: 6f:3d:77:fc:ae:0a:d5:e9:e1:fe:bd:57:e1:15:e8: f1:96:6c:68:d5:c3:ae:3a:28:42:da:bd:72:38:96: 74:ec:91:11:9a:91:85:96:31:97:16:3d:23:fb:59: ef:04:64:72:ea:a4:9f:b0:89:ff:1d:19:a2:78:77: 8e:29:f4:ad:27:7d:57:17:9b:dd:ea:a1:cf:73:04: 8b:cf:44:96:c5:31:a2:fc:9a:95:43:84:d3:30:19: 81:04:13:fd:fc:07:22:89:a5:17:8b:3d:f1:58:0e: 1e:75:5a:68:ea:93:36:60:15:0c:98:af:c6:6e:62: bc:db:ad:3d:4d:ba:6c:9c:4b:63:16:83:4a:7b:ee: da:51:ec:81:fc:51:05:50:36:76:13:c2:67:91:0c: a5:26:e3:74:60:9d:46:1e:2d:71:ab:45:6a:11:e5: e4:da:90:bc:d3:d8:ca:69:63:0b:22:f3:b5:c4:c7: a3:90:b2:93:e5:92:22:a7:9f:93:b4:aa:55:4c:db: 36:5d:07:9e:ca:c4:27:63:59:22:3e:b7:de:ed:08: d3:ff:de:8c:ff:a3:66:cd:35:41:7b:b7:04:b5:a3: e4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F7:51:40:FE:A8:0C:A6:EB:B7:60:0C:17:29:52:BC:8C:2A:23:28 X509v3 Authority Key Identifier: keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/0vdRQP6oDKbrt2AMFylSvIwqIyg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.239.60.0/23 193.186.252.0/24 IPv6: 2001:678:1150::/48 2001:67c:934::/48 Signature Algorithm: sha256WithRSAEncryption 1d:53:26:dc:c2:34:9e:99:19:21:7d:70:51:6a:6d:47:98:7c: ff:e6:39:25:f7:c6:45:79:ca:49:81:64:bc:ca:ff:04:8f:62: 3f:da:ba:a6:1c:b9:74:1f:4d:ef:98:71:54:1f:41:52:b2:fb: a5:67:5b:be:88:94:2e:83:9e:3e:ae:1c:a9:9c:c6:49:6a:d3: fb:9f:fb:b5:14:0c:9d:fc:80:8a:be:0a:91:f8:b2:07:08:80: 7d:8d:28:82:ba:f5:9c:4a:64:68:23:dc:f3:58:96:61:7f:c0: 03:54:59:14:e4:92:69:10:44:96:4c:02:62:b8:72:7a:e6:2b: 86:a2:6f:91:6b:a1:de:73:a3:93:db:6a:48:d2:f1:21:48:c2: 6c:5a:ef:8f:1b:4f:d1:b7:57:75:be:1f:8a:17:be:29:ae:14: ee:47:bd:96:ad:8e:c0:44:f0:0c:82:c6:f8:4a:cd:b4:ce:38: 0c:10:f8:b0:5e:fd:98:94:3f:e4:62:66:b1:66:70:50:b4:d7: d1:f2:ab:ca:d5:58:56:f4:a0:bc:62:59:9c:29:5f:d2:6c:f7: 81:68:91:cf:54:fd:a2:fa:99:07:70:22:87:a4:6c:37:4f:a1: b5:1b:b0:e9:09:d2:07:9d:fd:55:dc:44:29:ad:7e:37:93:fd: f7:02:e0:f4 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZrFmp2bJ7+Tyzc4k34vqGn/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NTRiZDhhODYzYTMxODk1Y2M2Y2I5MjJmMzAwOGIzZjA4 YWFkYWUwHhcNMjUxMTI3MTM1NzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmY3NTE0MGZlYTgwY2E2ZWJiNzYwMGMxNzI5NTJiYzhjMmEyMzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9iQxZHe9uMJuZakPAC+y//LJd1AA W28sfELs7QVvPXf8rgrV6eH+vVfhFejxlmxo1cOuOihC2r1yOJZ07JERmpGFljGX Fj0j+1nvBGRy6qSfsIn/HRmieHeOKfStJ31XF5vd6qHPcwSLz0SWxTGi/JqVQ4TT MBmBBBP9/AciiaUXiz3xWA4edVpo6pM2YBUMmK/GbmK82609TbpsnEtjFoNKe+7a UeyB/FEFUDZ2E8JnkQylJuN0YJ1GHi1xq0VqEeXk2pC809jKaWMLIvO1xMejkLKT 5ZIip5+TtKpVTNs2XQeeysQnY1kiPrfe7QjT/96M/6NmzTVBe7cEtaPkHwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFNL3UUD+qAym67dgDBcpUryMKiMoMB8GA1UdIwQY MBaAFJhUvYqGOjGJXMbLki8wCLPwiq2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yZWQxMGMtMDRiMC00ODY2LTliODIt YzUyMmI3NGRkY2ZkLzEvMHZkUlFQNm9ES2JydDJBTUZ5bFN2SXdxSXlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8yZWQxMGMtMDRiMC00ODY2LTliODItYzUyMmI3NGRkY2Zk LzEvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQBQO88AwQA wbr8MBgEAgACMBIDBwAgAQZ4EVADBwAgAQZ8CTQwDQYJKoZIhvcNAQELBQADggEB AB1TJtzCNJ6ZGSF9cFFqbUeYfP/mOSX3xkV5ykmBZLzK/wSPYj/auqYcuXQfTe+Y cVQfQVKy+6VnW76IlC6Dnj6uHKmcxklq0/uf+7UUDJ38gIq+CpH4sgcIgH2NKIK6 9ZxKZGgj3PNYlmF/wANUWRTkkmkQRJZMAmK4cnrmK4aib5Frod5zo5PbakjS8SFI wmxa748bT9G3V3W+H4oXvimuFO5HvZatjsBE8AyCxvhKzbTOOAwQ+LBe/ZiUP+Ri ZrFmcFC019Hyq8rVWFb0oLxiWZwpX9Js94Fokc9U/aL6mQdwIoekbDdPobUbsOkJ 0ged/VXcRCmtfjeT/fcC4PQ= -----END CERTIFICATE-----Generated at Sat Dec 6 15:35:25 2025 by rpki-client