This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Dezi1ijDOF-OPCEDHru1fKdXRlk.roa File: Dezi1ijDOF-OPCEDHru1fKdXRlk.roa (raw, json) Hash identifier: ijUREuRxLB0hmc4ZeMzkTD/bxEwJJjlncyvAzDp+NgQ= Subject key identifier: 0D:EC:E2:D6:28:C3:38:5F:8E:3C:21:03:1E:BB:B5:7C:A7:57:46:59 Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019AF24130DAD6B38017BCF476A5E761315A Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Dezi1ijDOF-OPCEDHru1fKdXRlk.roa Signing time: Sat 06 Dec 2025 06:02:29 +0000 ROA not before: Sat 06 Dec 2025 06:02:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205899 IP address blocks: 91.217.166.0/24 maxlen: 24 185.113.10.0/24 maxlen: 24 195.254.165.0/24 maxlen: 24 2a05:9080:5::/48 maxlen: 48 2a05:9080:14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:41:30:da:d6:b3:80:17:bc:f4:76:a5:e7:61:31:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Dec 6 06:02:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0dece2d628c3385f8e3c21031ebbb57ca7574659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cf:3a:a6:7d:5b:a2:d4:48:fe:6a:15:df:ab: 28:fc:d0:c3:7e:d6:ab:1a:16:c0:ea:5b:9e:98:2f: 09:7d:b4:2f:5b:68:39:85:52:ec:87:48:5e:4c:bf: 3a:2c:e8:aa:c4:3b:09:b1:ba:c3:8d:54:9c:35:a9: 89:2d:91:44:0d:ca:f0:81:88:c8:6c:96:ee:5f:0e: ac:a3:46:f0:b8:22:45:be:1e:35:19:20:26:01:17: 3b:02:2a:e0:03:2d:5d:be:df:cb:6e:db:fc:3f:2b: c1:ce:bf:ea:9d:6b:f2:f8:84:57:c4:66:2c:38:3f: 72:95:14:0f:20:48:2d:4e:d7:03:a6:7a:ad:59:fd: 68:1e:9d:83:12:9b:ad:3b:43:40:38:29:33:d0:71: 10:52:36:da:9f:f3:ca:c8:41:83:0a:c6:ac:99:60: 74:bd:23:50:43:f7:d9:67:76:74:23:36:1e:32:c8: a0:60:79:3d:3c:a0:76:bc:2d:b8:ef:00:cc:d8:cb: 73:1e:9d:b9:e6:76:96:dc:de:d4:57:58:4e:8c:b3: 1f:83:12:cb:d8:04:3c:41:cd:02:11:39:b9:1d:2f: 9b:15:9e:14:26:04:a7:e2:50:d5:2f:12:1f:dc:e5: 3f:4f:aa:00:21:fe:71:e2:30:b1:cf:8d:28:cf:5b: 14:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:EC:E2:D6:28:C3:38:5F:8E:3C:21:03:1E:BB:B5:7C:A7:57:46:59 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Dezi1ijDOF-OPCEDHru1fKdXRlk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.166.0/24 185.113.10.0/24 195.254.165.0/24 IPv6: 2a05:9080:5::/48 2a05:9080:14::/48 Signature Algorithm: sha256WithRSAEncryption 77:80:a9:42:96:2d:ba:44:e8:71:15:c8:20:68:d7:40:74:fd: 8b:8d:fa:76:61:1a:98:2e:7a:43:02:9e:37:7b:19:3e:51:36: 98:f9:1f:e5:d7:ae:6a:08:94:e5:75:02:5e:9b:5b:e7:24:53: e1:49:59:aa:79:d4:9c:9f:27:02:cc:d4:05:0b:3d:5e:4e:e6: 00:a6:f3:cb:f0:5f:98:41:a8:58:73:22:87:95:b4:17:d4:0d: 0d:a3:4c:4e:3e:87:ed:b5:a2:ee:56:f9:ed:f7:6e:69:d0:54: 4b:88:0b:37:76:af:11:c7:2f:2f:4a:01:9f:9d:c7:e8:2a:0c: 45:f6:0c:91:78:6c:f7:bf:33:98:65:28:8e:90:4a:01:89:1f: d5:8c:9a:ef:2e:6f:ad:2b:3a:a9:9d:c7:db:e7:fa:1a:68:85: 9c:59:33:16:17:10:6c:50:4d:ca:0a:f9:66:1d:6a:87:a1:38: c3:08:f3:37:e6:f0:31:9a:36:b3:cb:fe:6d:41:c2:31:bc:aa: c1:7b:e5:ba:34:fc:1e:1c:ff:00:ba:39:67:9a:da:a4:a0:48: 5c:2b:b5:0e:15:82:7d:cc:19:33:20:c5:2f:48:c0:af:66:b3: 3c:e4:60:6e:67:91:b4:19:27:2c:7f:c0:73:39:6a:35:33:41: 73:f7:0f:50 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZryQTDa1rOAF7z0dqXnYTFaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjUxMjA2MDYwMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGVjZTJkNjI4YzMzODVmOGUzYzIxMDMxZWJiYjU3Y2E3NTc0NjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc86pn1botRI/moV36so/NDDftar GhbA6luemC8JfbQvW2g5hVLsh0heTL86LOiqxDsJsbrDjVScNamJLZFEDcrwgYjI bJbuXw6so0bwuCJFvh41GSAmARc7AirgAy1dvt/Lbtv8PyvBzr/qnWvy+IRXxGYs OD9ylRQPIEgtTtcDpnqtWf1oHp2DEputO0NAOCkz0HEQUjban/PKyEGDCsasmWB0 vSNQQ/fZZ3Z0IzYeMsigYHk9PKB2vC247wDM2MtzHp255naW3N7UV1hOjLMfgxLL 2AQ8Qc0CETm5HS+bFZ4UJgSn4lDVLxIf3OU/T6oAIf5x4jCxz40oz1sU1wIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFA3s4tYowzhfjjwhAx67tXynV0ZZMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvRGV6aTFpakRPRi1PUENFREhydTFmS2RYUmxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIAATASAwQAW9mmAwQA uXEKAwQAw/6lMBgEAgACMBIDBwAqBZCAAAUDBwAqBZCAABQwDQYJKoZIhvcNAQEL BQADggEBAHeAqUKWLbpE6HEVyCBo10B0/YuN+nZhGpguekMCnjd7GT5RNpj5H+XX rmoIlOV1Al6bW+ckU+FJWap51JyfJwLM1AULPV5O5gCm88vwX5hBqFhzIoeVtBfU DQ2jTE4+h+21ou5W+e33bmnQVEuICzd2rxHHLy9KAZ+dx+gqDEX2DJF4bPe/M5hl KI6QSgGJH9WMmu8ub60rOqmdx9vn+hpohZxZMxYXEGxQTcoK+WYdaoehOMMI8zfm 8DGaNrPL/m1BwjG8qsF75bo0/B4c/wC6OWea2qSgSFwrtQ4Vgn3MGTMgxS9IwK9m szzkYG5nkbQZJyx/wHM5ajUzQXP3D1A= -----END CERTIFICATE-----Generated at Sat Dec 6 23:30:51 2025 by rpki-client