This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/0dxtzDDIBpJLWdXevO6x5B1OKA4.roa File: 0dxtzDDIBpJLWdXevO6x5B1OKA4.roa (raw, json) Hash identifier: UqHGU8Z6HQuyuziKd8Tlbq7+vFF+SPN6uUTmW4pD29w= Subject key identifier: D1:DC:6D:CC:30:C8:06:92:4B:59:D5:DE:BC:EE:B1:E4:1D:4E:28:0E Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Certificate serial: 019ADEB35E37682A86416EA6F9346E41F45B Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/0dxtzDDIBpJLWdXevO6x5B1OKA4.roa Signing time: Tue 02 Dec 2025 10:54:48 +0000 ROA not before: Tue 02 Dec 2025 10:54:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8903 IP address blocks: 77.72.104.0/21 maxlen: 24 84.18.0.0/19 maxlen: 24 92.60.160.0/20 maxlen: 24 92.60.173.0/24 maxlen: 24 176.98.220.0/22 maxlen: 24 185.66.60.0/22 maxlen: 24 185.145.224.0/22 maxlen: 24 185.155.64.0/22 maxlen: 24 185.173.44.0/22 maxlen: 24 185.187.180.0/22 maxlen: 24 185.224.76.0/22 maxlen: 24 193.34.240.0/22 maxlen: 24 195.5.64.0/19 maxlen: 24 212.49.128.0/18 maxlen: 24 212.49.189.0/24 maxlen: 24 212.66.161.0/24 maxlen: 24 212.66.162.0/23 maxlen: 23 212.66.163.0/24 maxlen: 24 212.66.164.0/22 maxlen: 22 212.66.168.0/21 maxlen: 21 212.66.176.0/20 maxlen: 24 212.163.0.0/16 maxlen: 24 213.9.128.0/17 maxlen: 24 213.9.142.0/23 maxlen: 23 213.192.192.0/18 maxlen: 24 213.192.193.0/24 maxlen: 24 213.192.195.0/24 maxlen: 24 213.192.200.0/22 maxlen: 22 213.192.203.0/24 maxlen: 24 213.192.206.0/23 maxlen: 23 213.192.212.0/22 maxlen: 22 213.192.213.0/24 maxlen: 24 213.192.216.0/21 maxlen: 21 213.192.224.0/22 maxlen: 22 213.192.228.0/23 maxlen: 23 213.192.232.0/22 maxlen: 22 213.192.238.0/24 maxlen: 24 213.192.239.0/24 maxlen: 24 213.192.240.0/24 maxlen: 24 213.192.241.0/24 maxlen: 24 213.192.242.0/23 maxlen: 23 213.192.244.0/23 maxlen: 23 213.192.246.0/24 maxlen: 24 213.192.247.0/24 maxlen: 24 213.192.248.0/21 maxlen: 21 213.192.249.0/24 maxlen: 24 213.192.251.0/24 maxlen: 24 213.192.252.0/23 maxlen: 23 213.192.253.0/24 maxlen: 24 213.192.254.0/24 maxlen: 24 213.192.255.0/24 maxlen: 24 2001:ac0::/29 maxlen: 29 2001:ac0::/32 maxlen: 48 2001:ac0:c0c0::/44 maxlen: 44 2001:ac0:c880::/44 maxlen: 44 2a0d:59c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:b3:5e:37:68:2a:86:41:6e:a6:f9:34:6e:41:f4:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Validity Not Before: Dec 2 10:54:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d1dc6dcc30c806924b59d5debceeb1e41d4e280e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:71:ed:2d:a5:04:fe:11:70:22:c4:da:b9:23: 04:b5:3b:5e:f1:2a:6a:a7:6a:58:81:45:6b:b7:dc: b9:ea:35:6d:b1:8e:68:1b:28:34:d3:43:f5:47:c3: fb:53:fd:17:e2:80:25:a3:57:10:42:e3:af:4c:cd: db:b9:6e:23:57:3a:17:c7:2b:0b:a1:5c:81:65:c3: 69:57:12:0a:6d:cb:6e:30:5f:49:2a:7d:4a:69:62: 0b:fd:6e:7b:d7:e0:68:83:8b:3b:03:a7:ac:c0:10: 02:d2:de:f4:27:c3:f0:05:e2:b1:89:d1:6c:36:db: 05:f5:c5:66:93:f7:5b:c8:37:52:4c:84:e7:7a:22: bd:b3:b1:a7:bf:bc:dd:46:ee:1f:1d:b6:27:05:29: fe:f5:da:4e:e7:d9:a1:e5:98:26:aa:44:24:41:91: 41:a8:05:e4:91:57:94:9b:dd:be:25:4f:89:cf:10: 39:5b:7d:1f:a4:09:d9:6f:98:b4:25:9a:b6:3c:39: 62:c9:86:2c:6b:0e:70:20:d7:5c:5a:46:8d:e2:a6: 42:ad:f8:53:74:11:17:ca:0c:af:79:71:d4:3c:9e: ce:ac:5f:f3:d9:08:b4:e3:44:e3:d6:e7:3a:ad:81: f0:fd:5a:6d:49:69:46:02:f1:de:74:a0:3e:62:6e: 58:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DC:6D:CC:30:C8:06:92:4B:59:D5:DE:BC:EE:B1:E4:1D:4E:28:0E X509v3 Authority Key Identifier: keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/0dxtzDDIBpJLWdXevO6x5B1OKA4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.72.104.0/21 84.18.0.0/19 92.60.160.0/20 176.98.220.0/22 185.66.60.0/22 185.145.224.0/22 185.155.64.0/22 185.173.44.0/22 185.187.180.0/22 185.224.76.0/22 193.34.240.0/22 195.5.64.0/19 212.49.128.0/18 212.66.161.0-212.66.191.255 212.163.0.0/16 213.9.128.0/17 213.192.192.0/18 IPv6: 2001:ac0::/29 2a0d:59c0::/29 Signature Algorithm: sha256WithRSAEncryption 1c:00:97:b9:a9:ce:16:ec:64:42:99:5c:01:53:de:4d:cb:8c: 2d:19:29:77:56:b6:b4:19:0c:6d:7f:50:a7:5d:6c:2f:18:c2: 94:b4:20:8a:e9:dc:59:b4:69:a1:f1:28:48:f4:6f:3f:3a:92: 0d:93:43:b1:22:23:8d:b8:7c:94:a6:4f:2d:7f:c0:ce:07:19: f5:d8:cf:03:12:9a:08:ac:6a:56:ec:c1:0d:2f:62:39:2b:9f: f5:15:5b:57:08:09:45:54:89:fa:22:b7:55:7d:7b:59:eb:da: 88:d0:72:dc:d2:a5:e4:60:9f:08:9c:b1:83:9e:02:f4:c1:7e: 3d:a3:1e:bc:71:97:55:17:e9:b8:a2:45:d5:bb:d5:06:e8:5b: 8d:fb:b4:b1:92:ed:88:94:28:d8:fd:c1:f4:1c:b6:cb:d7:11: 25:6e:ea:2a:e2:85:a0:c5:78:37:ec:2a:10:02:b1:03:fe:c1: e5:7c:36:0b:68:bb:df:92:b1:81:52:4d:5d:0c:94:5d:c8:88: 83:25:04:02:0b:a5:50:38:79:52:ec:a0:91:f5:38:b8:cb:c4: b8:a3:79:d0:97:92:1b:f7:fd:af:c0:70:c7:28:05:95:7a:fd: 7b:09:20:d6:8a:05:60:28:22:f7:12:97:1d:a8:f5:1e:4d:88: 89:59:13:b8 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgISAZres143aCqGQW6m+TRuQfRbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx ZDA5OWIwHhcNMjUxMjAyMTA1NDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWRjNmRjYzMwYzgwNjkyNGI1OWQ1ZGViY2VlYjFlNDFkNGUyODBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHHtLaUE/hFwIsTauSMEtTte8Spq p2pYgUVrt9y56jVtsY5oGyg000P1R8P7U/0X4oAlo1cQQuOvTM3buW4jVzoXxysL oVyBZcNpVxIKbctuMF9JKn1KaWIL/W571+Bog4s7A6eswBAC0t70J8PwBeKxidFs NtsF9cVmk/dbyDdSTITneiK9s7Gnv7zdRu4fHbYnBSn+9dpO59mh5ZgmqkQkQZFB qAXkkVeUm92+JU+JzxA5W30fpAnZb5i0JZq2PDliyYYsaw5wINdcWkaN4qZCrfhT dBEXygyveXHUPJ7OrF/z2Qi040Tj1uc6rYHw/VptSWlGAvHedKA+Ym5Y1QIDAQAB o4ICiTCCAoUwHQYDVR0OBBYEFNHcbcwwyAaSS1nV3rzuseQdTigOMB8GA1UdIwQY MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt Mjc0NzNjYTYxMmRlLzEvMGR4dHpERElCcEpMV2RYZXZPNng1QjFPS0E0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGeBggrBgEFBQcBBwEB/wSBjjCBizBzBAIAATBtAwQDTUho AwQFVBIAAwQEXDygAwQCsGLcAwQCuUI8AwQCuZHgAwQCuZtAAwQCua0sAwQCubu0 AwQCueBMAwQCwSLwAwQFwwVAAwQG1DGAMAwDBADUQqEDBAbUQoADAwDUowMEB9UJ gAMEBtXAwDAUBAIAAjAOAwUDIAEKwAMFAyoNWcAwDQYJKoZIhvcNAQELBQADggEB ABwAl7mpzhbsZEKZXAFT3k3LjC0ZKXdWtrQZDG1/UKddbC8YwpS0IIrp3Fm0aaHx KEj0bz86kg2TQ7EiI424fJSmTy1/wM4HGfXYzwMSmgisalbswQ0vYjkrn/UVW1cI CUVUifoit1V9e1nr2ojQctzSpeRgnwicsYOeAvTBfj2jHrxxl1UX6biiRdW71Qbo W437tLGS7YiUKNj9wfQctsvXESVu6irihaDFeDfsKhACsQP+weV8Ngtou9+SsYFS TV0MlF3IiIMlBAILpVA4eVLsoJH1OLjLxLijedCXkhv3/a/AcMcoBZV6/XsJINaK BWAoIvcSlx2o9R5NiIlZE7g= -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:17 2025 by rpki-client