This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/DBpy8GqM15mwZnJSLrFuy79x-ls.roa File: DBpy8GqM15mwZnJSLrFuy79x-ls.roa (raw, json) Hash identifier: CRpLC9eGaIL3iQD9GXAwS04kra6vLT84+/umQLGWKqg= Subject key identifier: 0C:1A:72:F0:6A:8C:D7:99:B0:66:72:52:2E:B1:6E:CB:BF:71:FA:5B Certificate issuer: /CN=d4f92129df7aaa7157e15973c24753e118c9057d Certificate serial: 019A554C1EF9FF1F048D7494EA985CAB0D1B Authority key identifier: D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/DBpy8GqM15mwZnJSLrFuy79x-ls.roa Signing time: Wed 05 Nov 2025 18:34:03 +0000 ROA not before: Wed 05 Nov 2025 18:34:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204631 IP address blocks: 185.136.120.0/22 maxlen: 22 193.27.218.0/23 maxlen: 23 2001:67c:2c08::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:55:4c:1e:f9:ff:1f:04:8d:74:94:ea:98:5c:ab:0d:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4f92129df7aaa7157e15973c24753e118c9057d Validity Not Before: Nov 5 18:34:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0c1a72f06a8cd799b06672522eb16ecbbf71fa5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9e:89:d9:da:0c:05:a7:a3:94:f6:02:9b:c0: 15:77:2e:35:ef:b3:5d:fa:34:3e:fc:3c:e7:29:5f: 7b:c2:b2:1d:ef:fe:89:c9:6d:14:bd:6b:3a:57:54: 15:a3:ae:60:b2:a9:9b:90:60:49:b0:a8:c5:e7:16: 07:52:59:43:9f:a5:1f:67:12:e0:36:3f:8d:0f:71: ed:bc:0c:c0:b4:af:1b:ae:a5:82:fc:65:a7:e6:12: 2c:2a:e2:72:8f:1e:a6:bf:08:1b:8a:8a:bc:b8:0c: eb:a5:d3:cb:ed:96:a8:69:4f:37:fe:62:5b:32:43: aa:a2:6d:aa:83:73:4a:b4:23:9e:a2:3b:5e:fb:67: c1:14:0c:78:cf:8a:f5:1a:1d:bb:f6:19:9b:04:3e: bd:95:59:e5:35:1d:7b:01:91:ab:c3:71:a8:11:bc: 66:cb:4e:a6:9f:05:73:c1:16:97:cd:bd:13:f1:2e: 35:0b:ac:46:f5:e7:7f:dc:c4:73:a5:69:ce:4f:e3: aa:3d:0e:08:86:48:d4:38:8f:49:82:41:39:da:db: 46:45:5c:6c:35:59:de:f5:5b:fb:8f:c2:5e:59:07: 40:44:4a:71:4c:c0:ad:a5:c2:74:e2:47:25:48:9f: 5a:f4:7f:16:51:d5:54:e2:e5:48:d0:25:ce:38:36: 09:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1A:72:F0:6A:8C:D7:99:B0:66:72:52:2E:B1:6E:CB:BF:71:FA:5B X509v3 Authority Key Identifier: keyid:D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/DBpy8GqM15mwZnJSLrFuy79x-ls.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.136.120.0/22 193.27.218.0/23 IPv6: 2001:67c:2c08::/48 Signature Algorithm: sha256WithRSAEncryption 0b:b1:ad:17:59:5c:05:3f:94:16:ef:aa:f7:29:ee:f4:cd:f4: bb:a3:ea:7a:ed:1a:13:9d:e9:9f:37:d4:d5:f5:cd:d9:0f:b8: 44:a0:7b:cc:d4:22:11:9a:7f:a1:c7:21:cb:2e:70:37:4c:8d: d7:4b:a6:3d:56:37:af:bc:1a:98:6d:10:ed:b1:1b:07:b8:60: 7d:bb:91:d9:43:66:6b:04:87:2e:d0:ca:b0:df:29:b2:4d:87: e0:94:ed:5d:ef:80:f2:23:58:92:15:e8:3a:08:23:5d:ad:9b: cb:d1:1b:11:f2:22:45:10:0f:2d:62:ea:ee:59:7f:e6:2f:b4: 41:6b:c0:ba:0e:e3:56:08:ff:e4:60:1e:ec:61:74:00:9d:47: b1:25:67:54:4a:08:2a:bd:b0:9a:c1:55:4b:c6:4d:06:1e:0e: d6:5c:9d:d9:74:d4:0b:6a:b8:5d:3d:91:96:a1:73:89:f2:25: 72:50:de:8c:cd:f5:c6:a7:f7:5d:a0:2c:34:23:ba:84:41:4f: 69:4a:4e:ed:10:4f:f2:44:2d:50:fa:a4:08:d8:2a:5b:f0:af: 37:a3:3f:44:2a:d6:07:bb:c6:9a:a0:af:21:e6:26:3a:19:0a: 47:56:b4:ae:08:1a:46:75:10:cf:43:28:a6:65:5c:41:27:21: 60:fe:8b:a6 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZpVTB75/x8EjXSU6phcqw0bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZjkyMTI5ZGY3YWFhNzE1N2UxNTk3M2MyNDc1M2UxMThj OTA1N2QwHhcNMjUxMTA1MTgzNDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzFhNzJmMDZhOGNkNzk5YjA2NjcyNTIyZWIxNmVjYmJmNzFmYTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ6J2doMBaejlPYCm8AVdy4177Nd +jQ+/DznKV97wrId7/6JyW0UvWs6V1QVo65gsqmbkGBJsKjF5xYHUllDn6UfZxLg Nj+ND3HtvAzAtK8brqWC/GWn5hIsKuJyjx6mvwgbioq8uAzrpdPL7ZaoaU83/mJb MkOqom2qg3NKtCOeojte+2fBFAx4z4r1Gh279hmbBD69lVnlNR17AZGrw3GoEbxm y06mnwVzwRaXzb0T8S41C6xG9ed/3MRzpWnOT+OqPQ4IhkjUOI9JgkE52ttGRVxs NVne9Vv7j8JeWQdAREpxTMCtpcJ04kclSJ9a9H8WUdVU4uVI0CXOODYJywIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFAwacvBqjNeZsGZyUi6xbsu/cfpbMB8GA1UdIwQY MBaAFNT5ISnfeqpxV+FZc8JHU+EYyQV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVBraEtkOTZxbkZYNFZsendrZFQ0UmpKQlgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC85Y2ZlNWQtNTc3MC00YjVkLTg5MzUt OWYzOGM4YjhhOTI4LzEvREJweThHcU0xNW13Wm5KU0xyRnV5Nzl4LWxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC85Y2ZlNWQtNTc3MC00YjVkLTg5MzUtOWYzOGM4YjhhOTI4 LzEvMVBraEtkOTZxbkZYNFZsendrZFQ0UmpKQlgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCuYh4AwQB wRvaMA8EAgACMAkDBwAgAQZ8LAgwDQYJKoZIhvcNAQELBQADggEBAAuxrRdZXAU/ lBbvqvcp7vTN9Luj6nrtGhOd6Z831NX1zdkPuESge8zUIhGaf6HHIcsucDdMjddL pj1WN6+8GphtEO2xGwe4YH27kdlDZmsEhy7QyrDfKbJNh+CU7V3vgPIjWJIV6DoI I12tm8vRGxHyIkUQDy1i6u5Zf+YvtEFrwLoO41YI/+RgHuxhdACdR7ElZ1RKCCq9 sJrBVUvGTQYeDtZcndl01AtquF09kZahc4nyJXJQ3ozN9can912gLDQjuoRBT2lK Tu0QT/JELVD6pAjYKlvwrzejP0Qq1ge7xpqgryHmJjoZCkdWtK4IGkZ1EM9DKKZl XEEnIWD+i6Y= -----END CERTIFICATE-----Generated at Sat Dec 6 23:18:19 2025 by rpki-client