This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/121VSiMM9D2NxT77KZHx2y3X-kE.roa File: 121VSiMM9D2NxT77KZHx2y3X-kE.roa (raw, json) Hash identifier: Nm3b/XRwda4hMSgwlSy0xdR/u6v66FeaHdrTy2sonO8= Subject key identifier: D7:6D:55:4A:23:0C:F4:3D:8D:C5:3E:FB:29:91:F1:DB:2D:D7:FA:41 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019AEA68865EA1E2AD4C56F3476594D45234 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/121VSiMM9D2NxT77KZHx2y3X-kE.roa Signing time: Thu 04 Dec 2025 17:28:29 +0000 ROA not before: Thu 04 Dec 2025 17:28:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 272330 IP address blocks: 2.59.194.0/24 maxlen: 24 45.142.40.0/24 maxlen: 24 178.19.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ea:68:86:5e:a1:e2:ad:4c:56:f3:47:65:94:d4:52:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Dec 4 17:28:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d76d554a230cf43d8dc53efb2991f1db2dd7fa41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:46:82:53:c4:27:87:31:73:6f:c6:7a:1c:81: 0a:a6:5d:3f:ec:88:e0:71:da:c0:f2:10:23:fc:ed: 0e:ca:65:1e:02:9e:a4:be:f5:dd:a4:c5:0d:ce:4c: 66:6a:36:22:4c:13:6c:8d:e4:80:54:94:71:a0:3a: e9:8b:5f:90:76:ea:0f:ff:8d:08:ef:60:09:59:cb: 49:99:77:2e:0e:ee:74:f4:65:3a:56:4e:f3:ba:b6: 50:d6:76:2d:ea:e8:4a:e7:b1:4d:bb:64:b0:01:fd: 0f:9a:7b:57:e4:45:c3:75:78:32:96:62:9c:df:0b: 06:0f:5b:cb:27:72:5a:81:52:a0:5f:52:d0:a4:8b: 29:60:9f:09:19:a9:71:57:1d:23:87:90:86:cd:d9: ac:20:b5:bc:22:8e:60:d2:f1:6f:2a:3e:b3:95:d9: ea:49:2b:88:9d:39:79:9d:a4:48:01:c1:68:ba:83: 56:49:7e:bc:39:ff:58:22:38:48:99:d2:41:dc:56: 34:f7:ab:78:21:cb:bf:99:07:ff:6c:62:6d:5a:54: 3f:ed:97:0b:5a:47:2c:39:0a:69:e3:d3:0a:8a:9a: ca:77:f8:c5:6b:cf:36:6a:23:e9:d8:af:cb:18:02: 81:06:15:fa:98:90:d2:00:28:9d:b1:98:e9:f0:2e: 8e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:6D:55:4A:23:0C:F4:3D:8D:C5:3E:FB:29:91:F1:DB:2D:D7:FA:41 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/121VSiMM9D2NxT77KZHx2y3X-kE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.194.0/24 45.142.40.0/24 178.19.33.0/24 Signature Algorithm: sha256WithRSAEncryption 09:46:cb:43:94:22:f8:f8:5d:81:36:5c:97:b2:cf:5f:23:aa: 0e:27:af:95:c8:35:27:b9:c2:2d:00:5a:43:dd:94:81:82:89: 76:64:19:bb:72:66:40:73:91:bb:81:78:80:e0:36:c5:cd:e8: 02:84:a0:6c:73:90:c0:1f:cd:76:59:6e:af:ee:db:1a:52:f4: ad:d7:c3:44:b1:72:a8:12:06:91:3a:f2:f5:42:c4:6c:c7:2b: e6:65:6b:79:df:c1:9e:78:c6:75:f1:c7:a3:16:ba:bd:a5:77: 22:24:4c:16:26:1a:06:d1:a4:04:ca:89:dd:21:e7:b4:e1:6b: 43:ee:28:57:24:3e:2a:30:f3:20:76:bf:4e:2e:2f:b0:a5:5f: 91:1c:1c:94:35:dd:52:d1:8f:1f:b4:35:2a:0e:1d:b0:04:e0: 04:f0:21:2c:53:3b:d7:ce:23:ba:35:92:d7:6d:b2:08:d8:fd: 99:c5:ec:51:78:91:c3:de:85:ad:a5:88:45:ee:d0:bb:99:37: f1:b8:59:68:bf:da:4d:f7:7b:af:3a:89:87:f2:47:01:3f:9b: 5f:57:4e:1c:04:97:06:0d:24:3c:20:e3:e0:2a:45:ae:c1:7a: c2:e0:f0:25:3d:cf:89:5e:44:a7:dc:fb:af:d4:9e:c1:c7:8e: f0:fa:24:c3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrqaIZeoeKtTFbzR2WU1FI0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjUxMjA0MTcyODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzZkNTU0YTIzMGNmNDNkOGRjNTNlZmIyOTkxZjFkYjJkZDdmYTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkaCU8QnhzFzb8Z6HIEKpl0/7Ijg cdrA8hAj/O0OymUeAp6kvvXdpMUNzkxmajYiTBNsjeSAVJRxoDrpi1+QduoP/40I 72AJWctJmXcuDu509GU6Vk7zurZQ1nYt6uhK57FNu2SwAf0PmntX5EXDdXgylmKc 3wsGD1vLJ3JagVKgX1LQpIspYJ8JGalxVx0jh5CGzdmsILW8Io5g0vFvKj6zldnq SSuInTl5naRIAcFouoNWSX68Of9YIjhImdJB3FY096t4Icu/mQf/bGJtWlQ/7ZcL WkcsOQpp49MKiprKd/jFa882aiPp2K/LGAKBBhX6mJDSACidsZjp8C6OQQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNdtVUojDPQ9jcU++ymR8dst1/pBMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvMTIxVlNpTU05RDJOeFQ3N0taSHgyeTNYLWtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAAjvCAwQA LY4oAwQAshMhMA0GCSqGSIb3DQEBCwUAA4IBAQAJRstDlCL4+F2BNlyXss9fI6oO J6+VyDUnucItAFpD3ZSBgol2ZBm7cmZAc5G7gXiA4DbFzegChKBsc5DAH812WW6v 7tsaUvSt18NEsXKoEgaROvL1QsRsxyvmZWt538GeeMZ18cejFrq9pXciJEwWJhoG 0aQEyondIee04WtD7ihXJD4qMPMgdr9OLi+wpV+RHByUNd1S0Y8ftDUqDh2wBOAE 8CEsUzvXziO6NZLXbbII2P2ZxexReJHD3oWtpYhF7tC7mTfxuFlov9pN93uvOomH 8kcBP5tfV04cBJcGDSQ8IOPgKkWuwXrC4PAlPc+JXkSn3Puv1J7Bx47w+iTD -----END CERTIFICATE-----Generated at Sun Dec 7 02:15:53 2025 by rpki-client