This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/rDaXGUyGwUkO9XfIiSqMwkYNrOk.roa File: rDaXGUyGwUkO9XfIiSqMwkYNrOk.roa (raw, json) Hash identifier: M2xlEmHMl0fzyVUI+KlQhxYNVrKFAswg7JKkafU0EsI= Subject key identifier: AC:36:97:19:4C:86:C1:49:0E:F5:77:C8:89:2A:8C:C2:46:0D:AC:E9 Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692 Certificate serial: 019A7E6FF41776408979323E202B70041032 Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/rDaXGUyGwUkO9XfIiSqMwkYNrOk.roa Signing time: Thu 13 Nov 2025 18:17:37 +0000 ROA not before: Thu 13 Nov 2025 18:17:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15457 IP address blocks: 62.169.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7e:6f:f4:17:76:40:89:79:32:3e:20:2b:70:04:10:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692 Validity Not Before: Nov 13 18:17:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ac3697194c86c1490ef577c8892a8cc2460dace9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3c:db:10:5b:b5:91:a1:23:57:70:4a:5d:ae: f1:99:8c:f4:9d:37:0c:60:8a:89:6f:7a:a0:c6:a2: 7b:d2:8b:84:d6:02:c4:4a:8d:75:18:d5:50:6f:09: 18:20:79:b5:e0:28:14:aa:d8:30:f9:80:e9:97:41: 05:11:6d:91:f0:c8:55:e7:9f:49:3d:b9:d2:21:20: ca:66:9d:03:0f:e0:6b:6b:17:16:71:43:32:0c:16: f5:2a:72:a9:6b:5f:0e:7e:5b:e2:19:ff:db:1c:9c: 3e:8b:12:30:83:b3:c0:98:82:a2:5a:c6:c3:6d:eb: e6:b5:5f:15:77:96:54:75:b4:08:3f:cd:9a:9f:00: 70:79:44:92:72:f6:fb:a0:f7:28:f7:19:be:6c:b9: 8b:40:9f:51:ee:32:1b:d8:9b:f4:2e:6a:2a:b9:f6: 0a:15:bf:d2:cb:48:48:fc:92:4a:ba:6a:f9:c8:a6: 9d:46:f8:c7:1d:b5:62:bf:10:2f:d2:67:c3:95:8b: 14:c7:56:6b:0c:a7:a9:83:33:61:b3:94:49:a5:e8: 4c:68:1d:87:2a:ed:48:a6:f5:3b:86:4f:33:58:9e: ac:70:b7:de:9c:b4:e6:2b:aa:93:78:fb:89:16:56: 35:2c:f2:ee:31:b2:5a:c1:ac:45:c6:7b:5d:0f:ac: f7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:36:97:19:4C:86:C1:49:0E:F5:77:C8:89:2A:8C:C2:46:0D:AC:E9 X509v3 Authority Key Identifier: keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/rDaXGUyGwUkO9XfIiSqMwkYNrOk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.169.80.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:29:a1:21:36:10:cc:e9:04:81:df:d3:2d:2f:3a:b4:10:f0: 65:67:ed:92:d5:1a:47:11:05:0b:df:4a:4e:4b:59:91:c5:eb: 34:f6:3c:b0:d4:61:9f:94:1b:9c:7f:fb:d7:ac:45:4d:54:53: c3:60:3f:80:fd:95:cc:af:89:6e:90:4a:77:a6:0f:59:37:89: 44:56:a7:cc:8f:81:cb:eb:48:f1:0f:6e:cf:b8:24:3d:ae:c6: 70:c1:6b:5c:fa:2b:45:e1:59:6f:6b:4c:a9:15:9e:bc:fb:7c: 8e:31:78:14:2c:b6:51:86:13:74:e1:4b:b7:f8:a2:42:9d:a7: 1d:e3:1b:2a:d1:e4:ee:b4:b9:71:94:64:e6:89:c6:4e:3e:11: 52:a4:a6:a9:09:2f:7f:a8:4d:4d:0a:47:e0:97:73:e6:3b:5a: 60:16:df:54:c9:47:c3:41:9b:92:80:1f:33:e0:fe:d0:29:79: 3d:f0:39:55:27:12:6f:ba:32:ec:ce:4c:1e:51:6d:c5:ba:ce: f8:70:bf:73:fd:ec:da:cb:42:8f:3d:c4:e5:1c:db:92:cd:0b: 74:ef:72:1b:f9:16:9b:0b:c5:49:fe:67:91:e3:37:7f:25:19: 77:33:81:ed:90:fd:d3:c5:e7:ec:1a:db:0c:28:92:9a:79:4a: d6:50:f7:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp+b/QXdkCJeTI+ICtwBBAyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTlmMDUyYmM5ZTcyODQ4ODgwNzQzOTBjOWQwYmMxMjc2 MDY2OTIwHhcNMjUxMTEzMTgxNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzM2OTcxOTRjODZjMTQ5MGVmNTc3Yzg4OTJhOGNjMjQ2MGRhY2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTzbEFu1kaEjV3BKXa7xmYz0nTcM YIqJb3qgxqJ70ouE1gLESo11GNVQbwkYIHm14CgUqtgw+YDpl0EFEW2R8MhV559J PbnSISDKZp0DD+BraxcWcUMyDBb1KnKpa18OflviGf/bHJw+ixIwg7PAmIKiWsbD bevmtV8Vd5ZUdbQIP82anwBweUSScvb7oPco9xm+bLmLQJ9R7jIb2Jv0LmoqufYK Fb/Sy0hI/JJKumr5yKadRvjHHbVivxAv0mfDlYsUx1ZrDKepgzNhs5RJpehMaB2H Ku1IpvU7hk8zWJ6scLfenLTmK6qTePuJFlY1LPLuMbJawaxFxntdD6z33QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKw2lxlMhsFJDvV3yIkqjMJGDazpMB8GA1UdIwQY MBaAFBMZ8FK8nnKEiIB0OQydC8EnYGaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kNWJiY2UtNDIyMC00ZWM0LThhZjUt MmMxYTc3MzBiZDI1LzEvckRhWEdVeUd3VWtPOVhmSWlTcU13a1lOck9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kNWJiY2UtNDIyMC00ZWM0LThhZjUtMmMxYTc3MzBiZDI1 LzEvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPqlQMA0G CSqGSIb3DQEBCwUAA4IBAQAvKaEhNhDM6QSB39MtLzq0EPBlZ+2S1RpHEQUL30pO S1mRxes09jyw1GGflBucf/vXrEVNVFPDYD+A/ZXMr4lukEp3pg9ZN4lEVqfMj4HL 60jxD27PuCQ9rsZwwWtc+itF4Vlva0ypFZ68+3yOMXgULLZRhhN04Uu3+KJCnacd 4xsq0eTutLlxlGTmicZOPhFSpKapCS9/qE1NCkfgl3PmO1pgFt9UyUfDQZuSgB8z 4P7QKXk98DlVJxJvujLszkweUW3Fus74cL9z/ezay0KPPcTlHNuSzQt073Ib+Rab C8VJ/meR4zd/JRl3M4HtkP3TxefsGtsMKJKaeUrWUPec -----END CERTIFICATE-----Generated at Sat Dec 6 20:14:26 2025 by rpki-client