This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/I773Hp7jzXxFqxtd4A53rVhKUfg.roa File: I773Hp7jzXxFqxtd4A53rVhKUfg.roa (raw, json) Hash identifier: e0xae4ugiNrb+FPmOR6kAe0RGY+82Cc1UMOVTkb0ZXw= Subject key identifier: 23:BE:F7:1E:9E:E3:CD:7C:45:AB:1B:5D:E0:0E:77:AD:58:4A:51:F8 Certificate issuer: /CN=a023766c62deb51297155708eccb421c8b04780a Certificate serial: 019A77DC4E55F59AD5DD6594EC3C4CDDEA72 Authority key identifier: A0:23:76:6C:62:DE:B5:12:97:15:57:08:EC:CB:42:1C:8B:04:78:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCN2bGLetRKXFVcI7MtCHIsEeAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/I773Hp7jzXxFqxtd4A53rVhKUfg.roa Signing time: Wed 12 Nov 2025 11:38:37 +0000 ROA not before: Wed 12 Nov 2025 11:38:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207784 IP address blocks: 195.144.27.0/24 maxlen: 24 195.149.67.0/24 maxlen: 24 195.149.67.248/30 maxlen: 30 195.149.73.0/24 maxlen: 24 195.149.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft rsync://rpki.ripe.net/repository/DEFAULT/oCN2bGLetRKXFVcI7MtCHIsEeAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:77:dc:4e:55:f5:9a:d5:dd:65:94:ec:3c:4c:dd:ea:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a023766c62deb51297155708eccb421c8b04780a Validity Not Before: Nov 12 11:38:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=23bef71e9ee3cd7c45ab1b5de00e77ad584a51f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3b:55:ef:91:ae:f3:36:78:0c:2b:c1:fc:9e: 75:ef:4a:fa:a8:00:37:88:11:30:51:be:8a:d8:02: 9b:6a:6e:a5:77:6c:46:49:a2:39:f8:b3:41:d1:38: 63:de:a7:ba:66:91:66:49:05:47:3a:b3:5a:75:50: 79:88:79:8c:d5:16:56:fa:27:0e:75:43:6b:a6:61: 96:22:04:d9:cc:50:64:80:93:4a:4b:fa:59:6a:3f: f6:26:4b:f5:5d:ac:c5:5b:81:d8:02:74:b7:94:f5: 90:0f:29:c0:13:9d:24:62:b6:72:03:d5:f9:f7:fd: da:48:f0:be:74:7e:02:03:40:16:4e:d1:9c:45:a6: ff:56:47:87:47:ec:51:53:73:0e:b4:f9:28:cf:ee: ae:d9:fe:e0:45:db:05:1f:6f:d2:e9:5d:64:03:d9: a6:16:69:d2:ee:f3:f5:b8:f7:c8:d0:e1:90:da:9a: b4:bb:d2:0b:3b:ad:31:fd:24:c5:37:75:8c:b0:49: 0d:25:d6:fc:36:d7:73:b4:81:9c:59:1b:d2:d4:a3: 6d:99:2f:7c:d8:05:48:df:2c:bb:6a:80:cc:8d:55: b5:13:ba:26:d4:63:c5:ef:62:3d:de:58:b7:72:c4: da:0f:c3:76:23:de:7c:c3:27:27:eb:6a:29:68:d1: 69:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BE:F7:1E:9E:E3:CD:7C:45:AB:1B:5D:E0:0E:77:AD:58:4A:51:F8 X509v3 Authority Key Identifier: keyid:A0:23:76:6C:62:DE:B5:12:97:15:57:08:EC:CB:42:1C:8B:04:78:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCN2bGLetRKXFVcI7MtCHIsEeAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/I773Hp7jzXxFqxtd4A53rVhKUfg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.144.27.0/24 195.149.67.0/24 195.149.73.0/24 195.149.90.0/24 Signature Algorithm: sha256WithRSAEncryption 81:24:9b:c4:cd:64:38:13:bb:1d:ae:03:d8:45:fd:97:11:88: d5:90:ab:67:24:76:7b:39:67:5a:43:df:9e:6f:bf:e7:94:cc: d0:0c:05:91:6a:c4:03:5f:0a:8a:6c:14:a1:1e:79:ac:df:9e: 05:67:2c:ca:4b:78:7a:fd:15:d5:04:bb:c5:6f:a1:28:c0:cc: 5b:f7:e0:be:7d:13:13:cf:9a:26:1a:b7:81:41:af:29:7c:be: 13:57:89:b8:b4:ba:4c:35:80:28:63:8c:5e:49:78:f1:cc:dd: 37:a0:52:49:e8:14:70:be:f5:0c:be:d6:39:50:19:01:f3:28: ce:8f:37:da:3d:4b:0e:c3:b2:3e:0b:a0:2f:66:3f:40:e2:d4: f4:1b:d1:43:4e:29:a9:f0:59:06:75:15:cd:ee:8d:0a:75:83: 7e:f4:46:26:4a:9d:e8:95:4b:cd:ea:43:b3:c0:12:8b:2c:2f: 3c:5d:d6:40:1d:e9:24:b7:ba:03:f7:1d:4a:0c:72:cb:ed:d9: 31:1c:92:ca:fd:91:64:fb:7c:50:91:52:ef:e0:5d:c4:8c:c5: b7:c9:92:06:bc:75:9e:6a:b1:50:d5:b6:c7:00:4d:db:6d:06: e8:e3:5a:92:fa:fd:8b:d5:d2:69:82:3e:72:44:e3:82:8b:da: 4e:ed:49:8a -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZp33E5V9ZrV3WWU7DxM3epyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMjM3NjZjNjJkZWI1MTI5NzE1NTcwOGVjY2I0MjFjOGIw NDc4MGEwHhcNMjUxMTEyMTEzODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2JlZjcxZTllZTNjZDdjNDVhYjFiNWRlMDBlNzdhZDU4NGE1MWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujtV75Gu8zZ4DCvB/J5170r6qAA3 iBEwUb6K2AKbam6ld2xGSaI5+LNB0Thj3qe6ZpFmSQVHOrNadVB5iHmM1RZW+icO dUNrpmGWIgTZzFBkgJNKS/pZaj/2Jkv1XazFW4HYAnS3lPWQDynAE50kYrZyA9X5 9/3aSPC+dH4CA0AWTtGcRab/VkeHR+xRU3MOtPkoz+6u2f7gRdsFH2/S6V1kA9mm FmnS7vP1uPfI0OGQ2pq0u9ILO60x/STFN3WMsEkNJdb8NtdztIGcWRvS1KNtmS98 2AVI3yy7aoDMjVW1E7om1GPF72I93li3csTaD8N2I958wycn62opaNFpXQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCO+9x6e4818RasbXeAOd61YSlH4MB8GA1UdIwQY MBaAFKAjdmxi3rUSlxVXCOzLQhyLBHgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0NOMmJHTGV0UktYRlZjSTdNdENISXNFZUFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kZjkwOTYtMzZjOS00MzlhLWEwYTAt YTNhMTAwZWY4NmRlLzEvSTc3M0hwN2p6WHhGcXh0ZDRBNTNyVmhLVWZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9kZjkwOTYtMzZjOS00MzlhLWEwYTAtYTNhMTAwZWY4NmRl LzEvb0NOMmJHTGV0UktYRlZjSTdNdENISXNFZUFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAw5AbAwQA w5VDAwQAw5VJAwQAw5VaMA0GCSqGSIb3DQEBCwUAA4IBAQCBJJvEzWQ4E7sdrgPY Rf2XEYjVkKtnJHZ7OWdaQ9+eb7/nlMzQDAWRasQDXwqKbBShHnms354FZyzKS3h6 /RXVBLvFb6EowMxb9+C+fRMTz5omGreBQa8pfL4TV4m4tLpMNYAoY4xeSXjxzN03 oFJJ6BRwvvUMvtY5UBkB8yjOjzfaPUsOw7I+C6AvZj9A4tT0G9FDTimp8FkGdRXN 7o0KdYN+9EYmSp3olUvN6kOzwBKLLC88XdZAHekkt7oD9x1KDHLL7dkxHJLK/ZFk +3xQkVLv4F3EjMW3yZIGvHWearFQ1bbHAE3bbQbo41qS+v2L1dJpgj5yROOCi9pO 7UmK -----END CERTIFICATE-----Generated at Sat Dec 6 09:45:41 2025 by rpki-client