This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/nOiNWJ-i5dURvJrnb-UFxx1qFR4.roa File: nOiNWJ-i5dURvJrnb-UFxx1qFR4.roa (raw, json) Hash identifier: Gb+jmLlW78LaJODUMsMQolCStI4IVcksSh8B2dzPGko= Subject key identifier: 9C:E8:8D:58:9F:A2:E5:D5:11:BC:9A:E7:6F:E5:05:C7:1D:6A:15:1E Certificate issuer: /CN=0526b03c717184c3680817e55e2455f85d73a413 Certificate serial: 019ADE36DBF05A226E9F50B35E17776DC3C0 Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/nOiNWJ-i5dURvJrnb-UFxx1qFR4.roa Signing time: Tue 02 Dec 2025 08:38:48 +0000 ROA not before: Tue 02 Dec 2025 08:38:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57172 IP address blocks: 37.123.208.0/23 maxlen: 23 37.123.208.0/24 maxlen: 24 109.202.96.0/21 maxlen: 21 109.202.97.0/24 maxlen: 24 109.232.224.0/21 maxlen: 21 109.232.226.0/24 maxlen: 24 188.95.48.0/21 maxlen: 21 188.95.50.0/24 maxlen: 24 188.95.54.0/24 maxlen: 24 188.95.55.0/24 maxlen: 24 213.152.160.0/19 maxlen: 19 2a00:1678::/32 maxlen: 32 2a00:1678:be1::/48 maxlen: 48 2a00:1678:be2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:36:db:f0:5a:22:6e:9f:50:b3:5e:17:77:6d:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413 Validity Not Before: Dec 2 08:38:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9ce88d589fa2e5d511bc9ae76fe505c71d6a151e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d0:ff:55:fd:9c:20:9e:f2:ad:87:d1:ab:cd: 8f:0c:22:71:d8:95:2f:a0:f7:9b:43:48:39:41:a6: 6c:31:ed:ca:cd:1a:8a:0e:38:d8:2f:ad:26:4e:e2: 4f:1b:43:5e:4e:21:75:d0:fa:4e:8f:98:ca:58:40: 7f:8f:71:ed:1b:07:49:e7:5d:69:eb:c0:21:65:d3: 67:9b:ef:92:26:e8:7a:e2:76:45:2e:cc:29:78:5f: c5:04:b8:d9:36:a3:0b:c7:29:f2:74:83:2e:6c:60: e5:ae:b2:7d:30:d8:19:2a:50:a0:0b:29:96:28:52: e4:a1:85:a7:2e:0e:bb:47:ef:10:f2:ee:aa:4d:a4: 57:c7:17:da:5a:29:0f:89:72:59:7e:8a:26:68:30: 85:26:f8:50:66:2c:4f:f4:c1:8c:61:ee:8d:cc:bd: fc:0e:a6:d0:09:bc:8e:b2:e0:08:f6:56:51:4d:29: 15:e4:bf:cf:fc:9f:61:94:b0:51:a5:d7:2a:f5:7f: 86:17:54:ff:63:08:b1:9c:d4:8f:91:aa:0c:d8:e6: 7a:17:79:07:60:91:ef:31:ee:0e:0f:85:0e:9c:8d: 90:99:ae:20:1d:5d:e9:40:7d:14:57:ce:4c:fb:9a: 48:4b:81:e0:c6:e1:81:57:01:ff:5f:5f:24:9e:a5: 26:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E8:8D:58:9F:A2:E5:D5:11:BC:9A:E7:6F:E5:05:C7:1D:6A:15:1E X509v3 Authority Key Identifier: keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/nOiNWJ-i5dURvJrnb-UFxx1qFR4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.123.208.0/23 109.202.96.0/21 109.232.224.0/21 188.95.48.0/21 213.152.160.0/19 IPv6: 2a00:1678::/32 Signature Algorithm: sha256WithRSAEncryption 44:33:4b:c0:a8:cd:1b:65:df:2f:35:8f:97:08:1f:51:c8:0c: d3:ad:34:c0:9e:92:c5:4a:d2:c9:a6:4c:9a:42:95:b1:8d:34: e0:92:36:a4:68:14:d7:03:66:4b:ba:b7:09:e2:ec:cd:fc:0c: 0b:10:72:d0:ae:a2:65:25:a4:6b:b0:71:2e:5e:24:dc:e5:ac: d0:92:d4:2e:63:b9:8c:ab:41:d0:54:3c:cf:95:6f:fa:97:ca: 35:65:71:cf:33:0b:11:a9:49:1a:5c:14:01:ae:4a:61:cd:1e: a3:df:23:cc:f7:15:1d:88:9d:2e:13:fe:2d:65:1c:cb:e2:c0: 2c:08:d6:2e:f1:7e:6d:19:1f:db:0a:ca:78:27:81:a0:94:e4: c3:00:12:e4:20:2c:0e:fa:6f:02:72:62:06:f6:43:9d:5a:85: 0d:9b:d8:ba:2e:d4:13:eb:71:68:4e:35:79:58:84:38:f1:a7: 2a:e4:13:b1:d8:5f:9d:22:ff:82:4f:6f:b9:94:70:fb:c5:9d: 1a:29:71:fd:27:37:ec:dd:17:f8:b2:b2:e8:98:fb:f4:41:81: bc:bd:a4:25:7a:55:d7:87:6b:d9:72:b5:59:e0:f5:2d:88:d2: a9:ea:a1:20:8b:55:b4:ac:5e:0a:0b:f1:3b:db:dd:1f:b6:37: 96:08:d2:7e -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZreNtvwWiJun1CzXhd3bcPAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MjZiMDNjNzE3MTg0YzM2ODA4MTdlNTVlMjQ1NWY4NWQ3 M2E0MTMwHhcNMjUxMjAyMDgzODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2U4OGQ1ODlmYTJlNWQ1MTFiYzlhZTc2ZmU1MDVjNzFkNmExNTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyND/Vf2cIJ7yrYfRq82PDCJx2JUv oPebQ0g5QaZsMe3KzRqKDjjYL60mTuJPG0NeTiF10PpOj5jKWEB/j3HtGwdJ511p 68AhZdNnm++SJuh64nZFLswpeF/FBLjZNqMLxynydIMubGDlrrJ9MNgZKlCgCymW KFLkoYWnLg67R+8Q8u6qTaRXxxfaWikPiXJZfoomaDCFJvhQZixP9MGMYe6NzL38 DqbQCbyOsuAI9lZRTSkV5L/P/J9hlLBRpdcq9X+GF1T/YwixnNSPkaoM2OZ6F3kH YJHvMe4OD4UOnI2Qma4gHV3pQH0UV85M+5pIS4HgxuGBVwH/X18knqUmXQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFJzojVifouXVEbya52/lBccdahUeMB8GA1UdIwQY MBaAFAUmsDxxcYTDaAgX5V4kVfhdc6QTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9hMzM4M2EtMDRlYi00M2Y4LWE5NTMt M2JmMDRhMmE5M2Q4LzEvbk9pTldKLWk1ZFVSdkpybmItVUZ4eDFxRlI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9hMzM4M2EtMDRlYi00M2Y4LWE5NTMtM2JmMDRhMmE5M2Q4 LzEvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQBJXvQAwQD bcpgAwQDbejgAwQDvF8wAwQF1ZigMA0EAgACMAcDBQAqABZ4MA0GCSqGSIb3DQEB CwUAA4IBAQBEM0vAqM0bZd8vNY+XCB9RyAzTrTTAnpLFStLJpkyaQpWxjTTgkjak aBTXA2ZLurcJ4uzN/AwLEHLQrqJlJaRrsHEuXiTc5azQktQuY7mMq0HQVDzPlW/6 l8o1ZXHPMwsRqUkaXBQBrkphzR6j3yPM9xUdiJ0uE/4tZRzL4sAsCNYu8X5tGR/b Csp4J4GglOTDABLkICwO+m8CcmIG9kOdWoUNm9i6LtQT63FoTjV5WIQ48acq5BOx 2F+dIv+CT2+5lHD7xZ0aKXH9Jzfs3Rf4srLomPv0QYG8vaQlelXXh2vZcrVZ4PUt iNKp6qEgi1W0rF4KC/E7290ftjeWCNJ+ -----END CERTIFICATE-----Generated at Sat Dec 6 15:39:10 2025 by rpki-client