This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/DGpzhm41nM7fLedk99hFCmz8Km8.roa File: DGpzhm41nM7fLedk99hFCmz8Km8.roa (raw, json) Hash identifier: IqO6EDf3hUOlulBxBKdVUYUqdL/BY4mZlELQZfdSRIE= Subject key identifier: 0C:6A:73:86:6E:35:9C:CE:DF:2D:E7:64:F7:D8:45:0A:6C:FC:2A:6F Certificate issuer: /CN=8569f2100c2fc454ad07adec796b9e6f6366f071 Certificate serial: 019A9BF3CD53F559E124007CB5B681E0A1C3 Authority key identifier: 85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/DGpzhm41nM7fLedk99hFCmz8Km8.roa Signing time: Wed 19 Nov 2025 11:50:37 +0000 ROA not before: Wed 19 Nov 2025 11:50:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35197 IP address blocks: 89.187.216.0/21 maxlen: 21 89.187.220.0/24 maxlen: 24 185.176.144.0/22 maxlen: 22 185.176.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:f3:cd:53:f5:59:e1:24:00:7c:b5:b6:81:e0:a1:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8569f2100c2fc454ad07adec796b9e6f6366f071 Validity Not Before: Nov 19 11:50:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0c6a73866e359ccedf2de764f7d8450a6cfc2a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3d:5f:96:75:5c:8a:e8:8f:9d:65:2a:b2:c5: b9:9c:1f:d6:19:14:e6:b5:fd:2c:76:86:e3:d4:04: 88:2f:9f:43:cc:bf:d2:8e:dc:5b:4f:a8:f1:9a:2a: fd:3b:b7:1f:91:c7:4f:a8:c8:cd:96:56:52:06:16: 1c:7d:fa:a5:91:16:91:6e:28:b2:4b:62:e3:d8:08: 0c:b0:eb:8a:b3:37:f6:94:0d:c6:94:4c:d5:57:71: c5:a2:43:40:eb:c7:ad:0d:43:b2:25:24:19:73:73: 47:6c:4a:9e:4d:2a:bb:ac:32:98:06:54:b3:9b:a2: a5:21:02:f1:bc:2d:6e:6d:f4:51:4d:af:54:49:d9: 93:7c:9a:09:5f:0a:9d:83:a6:be:ee:b2:81:32:db: 54:8b:88:45:6a:cf:b4:a5:f6:7a:4f:eb:7e:a3:94: e5:44:c8:7d:3e:e7:83:02:21:3a:34:3d:66:03:3c: 09:5c:5b:96:27:f1:75:5a:1f:8a:ab:12:40:e6:93: a6:ae:a2:98:f1:cd:bd:37:ae:ce:f0:05:2c:df:3b: 82:3d:9f:64:f9:8f:92:c9:6f:ce:5c:66:20:25:19: f1:c9:8a:12:db:92:0b:3e:b6:d4:e2:f0:af:00:3d: f1:2e:e4:d6:dd:e0:31:9c:18:a0:0f:4a:58:9f:cb: 52:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:6A:73:86:6E:35:9C:CE:DF:2D:E7:64:F7:D8:45:0A:6C:FC:2A:6F X509v3 Authority Key Identifier: keyid:85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/DGpzhm41nM7fLedk99hFCmz8Km8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.187.216.0/21 185.176.144.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:e1:2a:2c:b3:2d:09:81:c5:bd:89:ed:8a:53:fa:1e:18:8e: dc:8a:e7:2c:4d:ac:99:0b:40:8f:85:c9:58:c9:10:4c:97:1f: 81:84:38:e7:04:68:f0:7e:72:3d:7b:fa:92:9a:95:6b:85:7a: 4f:a3:5a:ab:b7:29:0d:c8:bb:48:83:44:af:15:67:2f:4c:21: 57:a7:23:cf:7d:68:50:63:43:b3:8b:cb:fe:c9:e9:62:3e:e9: a0:3a:2c:2b:f6:72:1e:db:73:3a:30:71:ab:25:f4:5a:0b:9c: 18:cb:a4:ad:6c:41:9d:d4:81:ad:e4:a7:71:9e:fd:7a:b1:d9: 10:10:4c:ae:e5:49:91:73:cb:80:b4:33:89:a2:6d:d0:cc:f9: 66:a4:75:97:13:d3:75:3e:cb:00:45:28:32:69:44:74:16:05: 6d:e4:27:08:5a:1c:87:2e:9f:32:f9:4f:6d:8f:b2:df:c1:ce: 11:e1:8c:c5:14:be:6a:6a:c6:17:e7:c7:0b:c8:8d:b6:92:ee: 11:b5:c6:e2:39:54:6f:56:88:d7:57:d1:d7:aa:b3:0e:bc:82: 8c:c4:3c:99:66:e9:62:81:ee:13:f1:f3:1f:c7:5a:6a:a5:3c: 09:c7:c7:1c:fc:07:53:dd:14:16:bd:99:1e:45:3f:70:9a:7b: 46:d0:f1:72 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqb881T9VnhJAB8tbaB4KHDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NjlmMjEwMGMyZmM0NTRhZDA3YWRlYzc5NmI5ZTZmNjM2 NmYwNzEwHhcNMjUxMTE5MTE1MDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzZhNzM4NjZlMzU5Y2NlZGYyZGU3NjRmN2Q4NDUwYTZjZmMyYTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj1flnVciuiPnWUqssW5nB/WGRTm tf0sdobj1ASIL59DzL/SjtxbT6jxmir9O7cfkcdPqMjNllZSBhYcffqlkRaRbiiy S2Lj2AgMsOuKszf2lA3GlEzVV3HFokNA68etDUOyJSQZc3NHbEqeTSq7rDKYBlSz m6KlIQLxvC1ubfRRTa9USdmTfJoJXwqdg6a+7rKBMttUi4hFas+0pfZ6T+t+o5Tl RMh9PueDAiE6ND1mAzwJXFuWJ/F1Wh+KqxJA5pOmrqKY8c29N67O8AUs3zuCPZ9k +Y+SyW/OXGYgJRnxyYoS25ILPrbU4vCvAD3xLuTW3eAxnBigD0pYn8tSaQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAxqc4ZuNZzO3y3nZPfYRQps/CpvMB8GA1UdIwQY MBaAFIVp8hAML8RUrQet7Hlrnm9jZvBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MjY1NmYtZWIzMi00MDJhLWEzMzEt MjMzNmNkYjliYTlmLzEvREdwemhtNDFuTTdmTGVkazk5aEZDbXo4S204LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MjY1NmYtZWIzMi00MDJhLWEzMzEtMjMzNmNkYjliYTlm LzEvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDWbvYAwQC ubCQMA0GCSqGSIb3DQEBCwUAA4IBAQAs4Sossy0JgcW9ie2KU/oeGI7ciucsTayZ C0CPhclYyRBMlx+BhDjnBGjwfnI9e/qSmpVrhXpPo1qrtykNyLtIg0SvFWcvTCFX pyPPfWhQY0Ozi8v+yeliPumgOiwr9nIe23M6MHGrJfRaC5wYy6StbEGd1IGt5Kdx nv16sdkQEEyu5UmRc8uAtDOJom3QzPlmpHWXE9N1PssARSgyaUR0FgVt5CcIWhyH Lp8y+U9tj7Lfwc4R4YzFFL5qasYX58cLyI22ku4RtcbiOVRvVojXV9HXqrMOvIKM xDyZZulige4T8fMfx1pqpTwJx8cc/AdT3RQWvZkeRT9wmntG0PFy -----END CERTIFICATE-----Generated at Sat Dec 6 16:16:28 2025 by rpki-client