This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Jd02aMMG-mGSN3fIKanOl92pLCI.roa File: Jd02aMMG-mGSN3fIKanOl92pLCI.roa (raw, json) Hash identifier: s1cly8xYEQ7f46gszFci1rYd6bUPn/wuQbKy31w9Qao= Subject key identifier: 25:DD:36:68:C3:06:FA:61:92:37:77:C8:29:A9:CE:97:DD:A9:2C:22 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019ABFBFE4C54CCB957EBDA3F09337C6F947 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Jd02aMMG-mGSN3fIKanOl92pLCI.roa Signing time: Wed 26 Nov 2025 10:40:15 +0000 ROA not before: Wed 26 Nov 2025 10:40:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211261 IP address blocks: 78.136.101.0/24 maxlen: 24 178.156.112.0/24 maxlen: 24 178.156.113.0/24 maxlen: 24 185.25.196.0/24 maxlen: 24 185.25.197.0/24 maxlen: 24 185.25.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:bf:e4:c5:4c:cb:95:7e:bd:a3:f0:93:37:c6:f9:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Nov 26 10:40:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=25dd3668c306fa61923777c829a9ce97dda92c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:24:b1:96:37:59:55:90:db:d7:7f:35:56:3d: 9a:39:f3:d9:37:d9:f7:f8:1f:48:43:77:6e:ac:e5: 7d:b2:f4:df:7b:db:b6:b2:92:f7:1e:71:71:db:c1: f6:0d:72:61:38:42:b4:c1:6b:c0:92:78:8c:56:d1: 87:33:7e:ea:36:68:c5:e1:97:6b:6a:e0:c9:8b:91: dc:32:0a:01:b7:ec:02:30:04:49:0f:95:3a:64:78: 0d:21:88:04:f3:8f:80:ba:5d:b6:16:9a:7b:e4:2f: 00:15:26:25:b4:30:d1:af:ab:ec:1b:0d:36:e1:b6: 36:e9:c8:31:bc:6f:cf:12:69:7e:01:21:4e:b0:42: 15:4b:34:4f:04:f7:ec:08:fa:f0:17:27:19:08:3e: 84:70:58:e1:a1:62:fe:f4:95:ec:6c:ec:9d:ea:65: fb:13:90:1a:57:52:27:92:d5:2c:30:d0:b7:24:3c: 79:6a:67:a7:c6:2b:91:ee:51:7c:94:01:e8:2d:49: 29:fc:91:b7:0f:e3:0c:83:45:ef:79:ce:a2:a5:21: 0c:4c:54:3b:1b:49:41:46:e5:1c:5a:d8:3c:84:11: aa:fb:23:da:82:24:3a:35:45:70:f5:11:24:f4:f2: 91:a7:1b:6c:68:19:b2:92:05:af:ad:fd:51:8b:cd: a9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DD:36:68:C3:06:FA:61:92:37:77:C8:29:A9:CE:97:DD:A9:2C:22 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Jd02aMMG-mGSN3fIKanOl92pLCI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.136.101.0/24 178.156.112.0/23 185.25.196.0-185.25.198.255 Signature Algorithm: sha256WithRSAEncryption 6d:73:3d:4b:40:a4:2b:af:3c:a6:4e:e2:bc:4b:ea:6a:24:ec: cc:d4:72:bd:f4:7d:a9:6b:6d:d0:c0:e7:11:92:16:bf:51:56: 1f:cd:12:18:c4:94:9b:0c:bd:88:36:de:e4:a6:b9:ee:54:a3: d1:1d:10:dc:86:8b:f3:ea:19:d1:f9:89:fe:98:34:27:ff:41: 98:10:a8:d3:67:56:61:9f:be:b6:09:0e:98:1d:35:05:57:87: 11:8f:9c:03:71:fb:99:5f:97:80:ae:69:8e:31:fb:13:20:69: 04:4e:b0:9d:8d:1e:54:05:75:37:2b:88:4b:21:57:b3:47:db: 7a:2e:ce:fa:1c:5d:cd:68:11:5c:93:9f:41:bb:91:17:33:12: 46:f7:5b:6f:2c:99:29:bf:4a:cf:6c:70:2a:d0:10:92:92:34: e6:58:14:e5:3d:30:b0:62:63:08:db:4c:f3:72:80:1b:d2:a7: fa:64:8f:bd:27:fb:b2:c6:fa:34:a3:1d:d1:8a:ab:4c:0a:2b: 08:64:e2:b5:75:99:e0:14:5d:88:7e:1b:cd:31:cc:e1:1c:25: 5d:f4:67:4c:c7:7e:98:b3:f0:ee:ff:e4:00:4a:45:f2:18:57: 52:98:63:4b:3f:55:c4:ce:2a:24:df:14:5c:a2:9d:3e:d1:b2: c8:32:04:c7 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZq/v+TFTMuVfr2j8JM3xvlHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjUxMTI2MTA0MDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWRkMzY2OGMzMDZmYTYxOTIzNzc3YzgyOWE5Y2U5N2RkYTkyYzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiSxljdZVZDb1381Vj2aOfPZN9n3 +B9IQ3durOV9svTfe9u2spL3HnFx28H2DXJhOEK0wWvAkniMVtGHM37qNmjF4Zdr auDJi5HcMgoBt+wCMARJD5U6ZHgNIYgE84+Aul22Fpp75C8AFSYltDDRr6vsGw02 4bY26cgxvG/PEml+ASFOsEIVSzRPBPfsCPrwFycZCD6EcFjhoWL+9JXsbOyd6mX7 E5AaV1InktUsMNC3JDx5amenxiuR7lF8lAHoLUkp/JG3D+MMg0Xvec6ipSEMTFQ7 G0lBRuUcWtg8hBGq+yPagiQ6NUVw9REk9PKRpxtsaBmykgWvrf1Ri82puQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFCXdNmjDBvphkjd3yCmpzpfdqSwiMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvSmQwMmFNTUctbUdTTjNmSUthbk9sOTJwTENJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQATohlAwQB spxwMAwDBAK5GcQDBAC5GcYwDQYJKoZIhvcNAQELBQADggEBAG1zPUtApCuvPKZO 4rxL6mok7MzUcr30falrbdDA5xGSFr9RVh/NEhjElJsMvYg23uSmue5Uo9EdENyG i/PqGdH5if6YNCf/QZgQqNNnVmGfvrYJDpgdNQVXhxGPnANx+5lfl4CuaY4x+xMg aQROsJ2NHlQFdTcriEshV7NH23ouzvocXc1oEVyTn0G7kRczEkb3W28smSm/Ss9s cCrQEJKSNOZYFOU9MLBiYwjbTPNygBvSp/pkj70n+7LG+jSjHdGKq0wKKwhk4rV1 meAUXYh+G80xzOEcJV30Z0zHfpiz8O7/5ABKRfIYV1KYY0s/VcTOKiTfFFyinT7R ssgyBMc= -----END CERTIFICATE-----Generated at Sat Dec 6 21:52:10 2025 by rpki-client