This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/DMU_aIcyb1Vc75XYJcX4vi2cDvU.roa File: DMU_aIcyb1Vc75XYJcX4vi2cDvU.roa (raw, json) Hash identifier: pjI6X+pQOe2R09LsK8L6Rawer2dh9ao4xbJxBTO+JTo= Subject key identifier: 0C:C5:3F:68:87:32:6F:55:5C:EF:95:D8:25:C5:F8:BE:2D:9C:0E:F5 Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe Certificate serial: 019AE35FF6064FE1188514EEBCDDFD25A392 Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/DMU_aIcyb1Vc75XYJcX4vi2cDvU.roa Signing time: Wed 03 Dec 2025 08:41:48 +0000 ROA not before: Wed 03 Dec 2025 08:41:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198154 IP address blocks: 89.44.242.0/24 maxlen: 24 89.46.217.0/24 maxlen: 24 109.122.247.0/24 maxlen: 24 109.122.249.0/24 maxlen: 24 109.122.254.0/23 maxlen: 24 188.212.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:5f:f6:06:4f:e1:18:85:14:ee:bc:dd:fd:25:a3:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe Validity Not Before: Dec 3 08:41:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0cc53f6887326f555cef95d825c5f8be2d9c0ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:52:26:f6:ea:a8:5a:24:d4:b2:b6:25:e5:79: 41:71:b2:c3:be:4d:fc:8a:93:6d:19:17:c4:cb:10: 1c:bc:c7:96:87:cb:ff:15:2d:fb:01:c7:df:9a:04: ad:b2:db:58:11:aa:af:d2:ec:a6:a8:dd:16:f4:7a: ae:75:c9:57:e9:ad:ab:74:c4:0e:6c:de:66:6a:e8: 57:52:da:47:39:08:af:60:10:e2:a0:9f:98:6c:c1: c4:a4:b8:d0:58:8d:e4:01:86:53:c8:11:2a:00:a0: ca:73:8e:e5:b3:03:ba:b1:dd:24:60:e5:8b:17:47: 72:11:3e:64:1f:4e:37:f5:7f:45:a9:49:20:9d:d4: f7:1c:96:6b:aa:85:33:ac:81:ed:72:75:6d:a2:1d: 46:e4:61:ec:36:3e:56:a4:2c:4c:b4:14:32:a5:e4: 88:b4:49:11:2f:79:dc:8f:6c:61:f1:c6:f5:a6:e3: ad:cf:80:2c:a6:55:1b:3e:8b:b1:8f:44:02:7e:d9: 69:fa:c6:88:cd:c9:b7:61:eb:87:84:26:a2:1c:c4: 16:d3:01:f6:36:a6:57:97:6d:41:86:c6:22:5f:94: 47:33:50:99:3c:9b:b1:89:e5:56:a1:94:d3:42:88: 03:ef:bd:15:6d:ca:cd:60:33:81:a8:98:cf:c7:e5: da:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C5:3F:68:87:32:6F:55:5C:EF:95:D8:25:C5:F8:BE:2D:9C:0E:F5 X509v3 Authority Key Identifier: keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/DMU_aIcyb1Vc75XYJcX4vi2cDvU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.44.242.0/24 89.46.217.0/24 109.122.247.0/24 109.122.249.0/24 109.122.254.0/23 188.212.99.0/24 Signature Algorithm: sha256WithRSAEncryption 87:4d:a0:d0:4a:e4:8c:ac:3a:10:74:26:97:c3:d1:9e:f7:6d: 85:bb:03:8f:bc:ab:df:e7:db:95:09:a9:c0:b7:11:29:6b:13: 11:b3:a3:53:34:f8:3c:9d:46:4f:93:eb:f3:e2:b4:71:d7:d9: 1c:7d:69:65:05:c6:ab:e8:d9:9c:1c:01:ce:c0:df:f4:cb:86: 10:aa:0b:63:69:5f:cd:7d:34:d6:a0:fc:d1:37:ef:52:a3:b6: 25:6e:0d:e9:5f:e9:a2:e8:85:5f:64:9c:13:f1:71:ed:c6:03: c6:9d:fb:08:27:e2:82:b5:06:87:60:4b:2a:9d:68:b7:69:f1: d6:c9:38:ba:d9:fc:c6:8f:3b:fb:70:ab:98:93:ff:5f:ac:97: fe:36:f2:2d:c3:2c:53:09:ee:97:04:e2:c5:6a:25:5f:7b:0a: 4a:8e:89:d4:dc:21:c6:c0:06:b9:e9:e8:8e:7e:5a:05:9f:a9: 69:5b:f7:04:82:09:bc:ca:df:aa:14:3f:52:9d:2e:c4:fd:f4: 4f:d3:92:81:e1:7c:36:aa:ed:e2:5e:09:21:ae:82:67:fa:c9: 11:9f:4c:c4:66:99:0a:96:23:2c:a5:2c:65:69:0e:b9:59:09: eb:69:71:ae:db:71:30:60:61:17:46:83:80:35:b6:1d:54:9c: 68:e4:d1:9f -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZrjX/YGT+EYhRTuvN39JaOSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz MjdlYmUwHhcNMjUxMjAzMDg0MTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2M1M2Y2ODg3MzI2ZjU1NWNlZjk1ZDgyNWM1ZjhiZTJkOWMwZWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlIm9uqoWiTUsrYl5XlBcbLDvk38 ipNtGRfEyxAcvMeWh8v/FS37AcffmgStsttYEaqv0uymqN0W9HqudclX6a2rdMQO bN5mauhXUtpHOQivYBDioJ+YbMHEpLjQWI3kAYZTyBEqAKDKc47lswO6sd0kYOWL F0dyET5kH0439X9FqUkgndT3HJZrqoUzrIHtcnVtoh1G5GHsNj5WpCxMtBQypeSI tEkRL3ncj2xh8cb1puOtz4AsplUbPouxj0QCftlp+saIzcm3YeuHhCaiHMQW0wH2 NqZXl21BhsYiX5RHM1CZPJuxieVWoZTTQogD770VbcrNYDOBqJjPx+XaYwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFAzFP2iHMm9VXO+V2CXF+L4tnA71MB8GA1UdIwQY MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt M2RmYTUxMGQ2YjE2LzEvRE1VX2FJY3liMVZjNzVYWUpjWDR2aTJjRHZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2 LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAWSzyAwQA WS7ZAwQAbXr3AwQAbXr5AwQBbXr+AwQAvNRjMA0GCSqGSIb3DQEBCwUAA4IBAQCH TaDQSuSMrDoQdCaXw9Ge922FuwOPvKvf59uVCanAtxEpaxMRs6NTNPg8nUZPk+vz 4rRx19kcfWllBcar6NmcHAHOwN/0y4YQqgtjaV/NfTTWoPzRN+9So7Ylbg3pX+mi 6IVfZJwT8XHtxgPGnfsIJ+KCtQaHYEsqnWi3afHWyTi62fzGjzv7cKuYk/9frJf+ NvItwyxTCe6XBOLFaiVfewpKjonU3CHGwAa56eiOfloFn6lpW/cEggm8yt+qFD9S nS7E/fRP05KB4Xw2qu3iXgkhroJn+skRn0zEZpkKliMspSxlaQ65WQnraXGu23Ew YGEXRoOANbYdVJxo5NGf -----END CERTIFICATE-----Generated at Sat Dec 6 22:31:04 2025 by rpki-client