This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/dLmCIA0WBqPvZ0tgv6iuNeMWI4k.roa File: dLmCIA0WBqPvZ0tgv6iuNeMWI4k.roa (raw, json) Hash identifier: YicG4lKEA73qVApeIKJhpm23B3p/oY3KjALkj9qrn/g= Subject key identifier: 74:B9:82:20:0D:16:06:A3:EF:67:4B:60:BF:A8:AE:35:E3:16:23:89 Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Certificate serial: 019AC554201352ADA65D71F7015EA174D355 Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/dLmCIA0WBqPvZ0tgv6iuNeMWI4k.roa Signing time: Thu 27 Nov 2025 12:40:15 +0000 ROA not before: Thu 27 Nov 2025 12:40:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216180 IP address blocks: 192.250.232.0/24 maxlen: 24 192.250.233.0/24 maxlen: 24 194.39.122.0/24 maxlen: 24 198.38.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c5:54:20:13:52:ad:a6:5d:71:f7:01:5e:a1:74:d3:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Validity Not Before: Nov 27 12:40:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=74b982200d1606a3ef674b60bfa8ae35e3162389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9f:c8:54:4b:ea:ce:36:a6:fc:6c:5f:55:47: 00:84:d6:f7:f3:c4:ab:5f:41:c1:84:a4:a5:e0:1c: 80:f2:c8:80:37:31:37:96:87:9c:5c:bd:3c:6d:06: d9:70:a9:b2:ac:39:ba:58:e8:97:17:14:79:f3:e5: 08:ca:97:89:92:29:c3:40:d6:90:f1:c1:1c:a6:dc: c9:5f:68:52:9b:e2:7b:dd:66:91:f3:35:bd:99:04: 63:18:21:d2:42:23:f7:46:f3:7e:e9:f1:bd:ae:2f: a8:53:ff:52:8c:35:1b:5b:5d:8f:6f:a7:db:6e:c5: c2:c5:01:39:08:e4:69:65:9c:80:a7:3c:7a:fe:23: 1b:6f:6f:18:b3:a1:d6:2e:93:17:b3:e2:64:eb:c8: 8f:28:7d:04:29:03:f1:b8:12:a4:cb:ee:05:f1:39: 82:68:e4:a2:4d:55:ea:11:a3:b5:fa:ec:00:db:a7: b6:ce:c6:24:4b:5d:a0:72:4d:57:a6:99:5c:3a:04: 7b:e1:35:34:a1:44:d0:34:8d:8c:b3:59:96:67:3e: 24:2a:b7:e2:b2:49:b0:3d:c0:1a:6c:ad:f8:8e:00: ec:21:fa:e3:5f:89:0f:f6:27:61:75:91:3c:65:ee: fc:08:3b:0f:c4:b9:9c:89:88:bd:23:c7:ea:c5:7f: 7e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B9:82:20:0D:16:06:A3:EF:67:4B:60:BF:A8:AE:35:E3:16:23:89 X509v3 Authority Key Identifier: keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/dLmCIA0WBqPvZ0tgv6iuNeMWI4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.250.232.0/23 194.39.122.0/24 198.38.93.0/24 Signature Algorithm: sha256WithRSAEncryption 99:9a:16:b5:ab:41:4e:b7:77:7d:bf:f6:d2:48:c6:6d:64:b9: a4:0b:6f:b6:c9:58:d8:5c:8d:94:b9:b8:92:5f:9b:3e:70:00: 4a:06:f4:80:04:b3:13:63:0c:6b:ed:23:d1:64:a1:13:11:62: 86:0c:b2:3e:f1:6f:cf:b7:7e:f7:0e:ee:24:af:f9:9c:86:4b: 4e:dd:85:21:ab:8b:5c:9f:10:a3:dc:b2:87:75:06:ff:52:0a: b7:eb:af:02:6d:55:de:7a:61:05:12:42:6e:87:14:12:2d:5a: 4f:e1:92:90:e3:0e:35:37:75:26:e3:f9:bc:f5:a6:32:24:7d: c4:d5:14:28:66:96:73:82:03:15:b5:91:14:01:45:eb:33:9f: d6:aa:0b:bf:a3:b4:84:5a:53:19:f7:ca:c7:a2:d1:0d:2c:39: 35:46:bf:44:7f:87:96:c7:3f:0d:ba:bc:fd:e8:2b:67:6e:a8: 24:bc:9f:91:f7:eb:83:fd:18:f3:ed:aa:bd:61:ba:b8:83:19: 33:aa:7f:81:a1:a0:88:41:47:38:fc:a8:15:f7:e3:fa:86:cc: 25:c7:40:4c:f8:5f:f5:62:08:21:de:ae:b1:45:93:e0:f1:30: 9e:94:7e:b1:61:e2:c8:fb:94:36:e5:14:3e:c0:fc:6e:f1:59: 8a:27:90:b3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrFVCATUq2mXXH3AV6hdNNVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy ZWU4ZGQwHhcNMjUxMTI3MTI0MDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGI5ODIyMDBkMTYwNmEzZWY2NzRiNjBiZmE4YWUzNWUzMTYyMzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5/IVEvqzjam/GxfVUcAhNb388Sr X0HBhKSl4ByA8siANzE3loecXL08bQbZcKmyrDm6WOiXFxR58+UIypeJkinDQNaQ 8cEcptzJX2hSm+J73WaR8zW9mQRjGCHSQiP3RvN+6fG9ri+oU/9SjDUbW12Pb6fb bsXCxQE5CORpZZyApzx6/iMbb28Ys6HWLpMXs+Jk68iPKH0EKQPxuBKky+4F8TmC aOSiTVXqEaO1+uwA26e2zsYkS12gck1XpplcOgR74TU0oUTQNI2Ms1mWZz4kKrfi skmwPcAabK34jgDsIfrjX4kP9idhdZE8Ze78CDsPxLmciYi9I8fqxX9+CQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHS5giANFgaj72dLYL+orjXjFiOJMB8GA1UdIwQY MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt Y2NhMzc2MDZiZjE4LzEvZExtQ0lBMFdCcVB2WjB0Z3Y2aXVOZU1XSTRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4 LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBwProAwQA wid6AwQAxiZdMA0GCSqGSIb3DQEBCwUAA4IBAQCZmha1q0FOt3d9v/bSSMZtZLmk C2+2yVjYXI2UubiSX5s+cABKBvSABLMTYwxr7SPRZKETEWKGDLI+8W/Pt373Du4k r/mchktO3YUhq4tcnxCj3LKHdQb/Ugq3668CbVXeemEFEkJuhxQSLVpP4ZKQ4w41 N3Um4/m89aYyJH3E1RQoZpZzggMVtZEUAUXrM5/Wqgu/o7SEWlMZ98rHotENLDk1 Rr9Ef4eWxz8Nurz96CtnbqgkvJ+R9+uD/Rjz7aq9Ybq4gxkzqn+BoaCIQUc4/KgV 9+P6hswlx0BM+F/1Yggh3q6xRZPg8TCelH6xYeLI+5Q25RQ+wPxu8VmKJ5Cz -----END CERTIFICATE-----Generated at Sat Dec 6 19:58:39 2025 by rpki-client