This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/sDIABi-NxM3KNvAMpS9f9LMeDro.roa File: sDIABi-NxM3KNvAMpS9f9LMeDro.roa (raw, json) Hash identifier: 2fZD0tm8spxkVprfSBfodTdfq91wWyAoGPPPYFBNTMs= Subject key identifier: B0:32:00:06:2F:8D:C4:CD:CA:36:F0:0C:A5:2F:5F:F4:B3:1E:0E:BA Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019B050061DDF4C5D9AEEB7513FD1C104658 Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/sDIABi-NxM3KNvAMpS9f9LMeDro.roa Signing time: Tue 09 Dec 2025 21:24:29 +0000 ROA not before: Tue 09 Dec 2025 21:24:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 3320 IP address blocks: 5.35.192.0/21 maxlen: 24 62.112.30.0/24 maxlen: 24 85.204.160.0/22 maxlen: 24 88.135.96.0/20 maxlen: 24 89.39.172.0/23 maxlen: 24 94.26.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:00:61:dd:f4:c5:d9:ae:eb:75:13:fd:1c:10:46:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Dec 9 21:24:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b03200062f8dc4cdca36f00ca52f5ff4b31e0eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:07:3e:11:1a:d3:2d:1d:42:38:cd:3f:9d:7b: fa:29:29:87:7c:e4:2e:2b:d0:19:e3:05:99:cd:eb: 06:44:3f:c0:d5:5a:fa:84:e4:ca:b1:2b:20:f6:5a: f2:6e:24:61:52:98:49:62:79:f2:c2:9b:ab:58:39: 4a:0c:ef:2d:cc:1d:4c:76:34:6c:30:09:22:40:53: 2b:b3:0a:b6:c3:12:49:0f:27:fd:5c:23:34:9c:58: 59:56:53:82:a0:4e:bd:41:22:5b:07:03:7a:1e:c4: eb:7c:e7:e6:81:58:ea:3f:3f:e5:10:24:27:f7:ab: f9:b5:c4:9b:80:2f:8d:5b:37:a8:55:f8:b3:0d:ea: 30:48:27:0d:57:51:b0:cb:83:bd:16:01:f9:77:a2: 37:30:bc:15:c7:56:5f:21:ea:d4:6a:42:f6:95:71: d5:97:7a:39:11:eb:0c:ca:42:11:33:28:68:31:b1: 97:01:3b:77:8e:7b:60:66:1a:b3:69:77:c7:43:6d: bb:cf:3e:5b:9a:25:65:f0:73:62:6e:bf:a9:99:af: ab:77:17:10:b7:a5:30:00:16:14:87:6f:e8:67:7b: 1b:2d:75:39:44:6e:1f:7f:89:89:79:12:ee:70:1e: e0:91:29:48:c1:81:c3:95:9a:ae:a9:c3:9e:38:3f: c0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:32:00:06:2F:8D:C4:CD:CA:36:F0:0C:A5:2F:5F:F4:B3:1E:0E:BA X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/sDIABi-NxM3KNvAMpS9f9LMeDro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.35.192.0/21 62.112.30.0/24 85.204.160.0/22 88.135.96.0/20 89.39.172.0/23 94.26.64.0/23 Signature Algorithm: sha256WithRSAEncryption 49:03:6d:10:3e:72:8c:0a:25:7d:02:2c:83:7e:c7:db:f6:d0: e3:92:dd:58:14:1a:5f:99:96:41:8d:87:d3:5f:03:7b:a9:e6: 73:fc:e7:a4:68:02:1f:2c:a9:02:56:47:c3:6e:a7:5b:9a:c4: 6d:eb:4d:d1:9f:b8:6e:c9:40:ef:ec:af:1d:36:57:3c:8a:28: 7b:29:aa:f8:32:ac:aa:14:26:d6:1f:77:fd:98:09:6c:4e:a6: 4e:5f:ff:f3:4e:8d:31:60:fe:5e:9c:9a:08:52:ca:4d:43:9c: 0e:e7:ae:d8:8c:55:44:a5:ed:27:0d:8f:3c:d9:ff:21:11:cd: e4:96:59:aa:7e:9d:7f:ff:9a:5b:2a:02:9f:a9:e4:45:f9:b8: 3f:47:1a:af:72:bc:bf:38:6f:b1:78:2f:38:51:f7:4c:60:95: 61:03:fa:5f:d7:0c:ac:8f:b2:33:a0:14:bf:33:19:76:0b:f4: 2f:20:9c:a2:a0:62:b0:a1:81:73:1d:d5:7d:5b:ca:18:77:c6: da:3e:ac:49:8e:cd:78:68:f2:94:4f:e4:9b:12:56:4b:7d:a9: 89:60:79:51:f5:be:91:34:d8:1e:1d:2c:fd:78:96:2b:55:96: 54:c5:ab:06:7c:73:8a:5b:5a:47:cd:06:37:ea:5b:b2:22:5b: e3:2c:dd:1a -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZsFAGHd9MXZrut1E/0cEEZYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjUxMjA5MjEyNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDMyMDAwNjJmOGRjNGNkY2EzNmYwMGNhNTJmNWZmNGIzMWUwZWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAc+ERrTLR1COM0/nXv6KSmHfOQu K9AZ4wWZzesGRD/A1Vr6hOTKsSsg9lrybiRhUphJYnnywpurWDlKDO8tzB1MdjRs MAkiQFMrswq2wxJJDyf9XCM0nFhZVlOCoE69QSJbBwN6HsTrfOfmgVjqPz/lECQn 96v5tcSbgC+NWzeoVfizDeowSCcNV1Gwy4O9FgH5d6I3MLwVx1ZfIerUakL2lXHV l3o5EesMykIRMyhoMbGXATt3jntgZhqzaXfHQ227zz5bmiVl8HNibr+pma+rdxcQ t6UwABYUh2/oZ3sbLXU5RG4ff4mJeRLucB7gkSlIwYHDlZquqcOeOD/ARwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFLAyAAYvjcTNyjbwDKUvX/SzHg66MB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvc0RJQUJpLU54TTNLTnZBTXBTOWY5TE1lRHJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQDBSPAAwQA PnAeAwQCVcygAwQEWIdgAwQBWSesAwQBXhpAMA0GCSqGSIb3DQEBCwUAA4IBAQBJ A20QPnKMCiV9AiyDfsfb9tDjkt1YFBpfmZZBjYfTXwN7qeZz/OekaAIfLKkCVkfD bqdbmsRt603Rn7huyUDv7K8dNlc8iih7Kar4MqyqFCbWH3f9mAlsTqZOX//zTo0x YP5enJoIUspNQ5wO567YjFVEpe0nDY882f8hEc3kllmqfp1//5pbKgKfqeRF+bg/ Rxqvcry/OG+xeC84UfdMYJVhA/pf1wysj7IzoBS/Mxl2C/QvIJyioGKwoYFzHdV9 W8oYd8baPqxJjs14aPKUT+SbElZLfamJYHlR9b6RNNgeHSz9eJYrVZZUxasGfHOK W1pHzQY36luyIlvjLN0a -----END CERTIFICATE-----Generated at Tue Dec 16 06:18:49 2025 by rpki-client