This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/0Ry4NdXZ6HSZfXpnlF4lTl30iXY.roa File: 0Ry4NdXZ6HSZfXpnlF4lTl30iXY.roa (raw, json) Hash identifier: p83Umogvc+YuBZePLrggWd7M/c1sFHt2HTKsOBLpp78= Subject key identifier: D1:1C:B8:35:D5:D9:E8:74:99:7D:7A:67:94:5E:25:4E:5D:F4:89:76 Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B21077348A235C5BC71655B4ACEBE57FF Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/0Ry4NdXZ6HSZfXpnlF4lTl30iXY.roa Signing time: Mon 15 Dec 2025 08:01:35 +0000 ROA not before: Mon 15 Dec 2025 08:01:35 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 77.242.146.0/23 maxlen: 24 83.137.158.0/24 maxlen: 24 88.151.56.0/23 maxlen: 24 88.151.61.0/24 maxlen: 24 88.209.198.0/24 maxlen: 24 88.209.201.0/24 maxlen: 24 88.209.209.0/24 maxlen: 24 88.209.226.0/24 maxlen: 24 88.209.227.0/24 maxlen: 24 88.209.232.0/22 maxlen: 24 88.209.247.0/24 maxlen: 24 88.209.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:07:73:48:a2:35:c5:bc:71:65:5b:4a:ce:be:57:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Dec 15 08:01:35 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d11cb835d5d9e874997d7a67945e254e5df48976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:03:a1:63:37:0b:ea:9e:89:02:4a:19:4d:e0: 25:02:f3:5b:89:1c:fc:b0:46:60:69:25:9a:1c:16: 4b:f8:2c:c7:91:49:3f:94:a8:3a:08:dd:78:c5:5c: bb:21:31:16:b9:e3:d0:fe:f8:90:65:9e:b5:84:93: f2:c6:a4:64:20:d1:7b:f3:97:d3:5f:77:cc:c5:a9: 69:dd:17:a1:32:d0:44:96:60:48:43:69:ae:a2:92: c6:18:61:38:3f:41:9a:73:32:2d:a7:42:6b:13:06: df:f6:f4:49:20:ef:46:1c:3d:94:d5:f6:bd:69:fc: d7:cd:de:48:85:03:35:c0:23:60:a8:b6:d0:92:e5: 02:b9:06:64:06:d9:4a:5c:cc:8f:92:0b:45:65:98: 79:d7:6d:e6:0d:23:fc:44:ad:5d:e7:80:4f:43:a9: 04:0d:d5:df:28:62:bc:69:ea:f7:32:01:fa:c1:62: bb:c6:df:d8:1f:01:81:cf:76:6b:b6:cf:53:35:ab: ab:12:c8:d8:bb:1e:37:d9:5d:03:11:98:c4:46:db: 02:c0:f4:2f:09:3a:b0:cc:ec:6c:66:09:0b:77:3b: 6e:ff:2b:2d:65:01:e8:f0:c9:a5:a5:38:21:ea:70: 8c:5b:5a:23:25:c4:34:77:d9:27:b3:f9:49:3b:41: a9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1C:B8:35:D5:D9:E8:74:99:7D:7A:67:94:5E:25:4E:5D:F4:89:76 X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/0Ry4NdXZ6HSZfXpnlF4lTl30iXY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.242.146.0/23 83.137.158.0/24 88.151.56.0/23 88.151.61.0/24 88.209.198.0/24 88.209.201.0/24 88.209.209.0/24 88.209.226.0/23 88.209.232.0/22 88.209.247.0/24 88.209.254.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:70:74:42:5d:cc:2d:5c:b0:04:ac:3b:32:1d:79:2c:a9:56: 43:1e:56:fe:db:10:17:57:1d:d8:1b:97:bc:1d:2e:7c:66:e8: 5f:9e:0f:7f:e1:76:2d:af:4c:f3:75:19:00:2c:24:2a:5e:1b: 25:d5:4e:f3:7f:fc:37:82:a0:bf:e6:f8:98:3c:9f:da:b1:95: 02:b3:71:bc:00:e9:83:96:ae:89:4e:c9:df:16:80:9e:50:a4: 69:cf:a2:d9:6c:92:93:41:25:29:64:b1:52:b5:d8:6e:b6:1c: 16:49:7e:f8:fd:08:14:f8:e1:0a:2e:8e:91:f8:42:8d:a4:8c: b6:9b:1d:87:d9:a3:24:69:31:75:5b:2c:64:85:37:cb:0a:28: 4f:c1:e4:c8:06:bb:29:f0:1d:97:8b:b6:3c:bd:28:67:4c:49: 54:dd:bb:b7:b7:5d:5a:c3:c2:e9:ce:7d:49:fd:57:84:bf:07: 4d:5a:da:8d:ce:86:af:1f:15:ff:87:5e:4b:a7:8d:84:fb:7b: 6e:31:aa:b9:1c:a1:9b:ba:2f:7a:90:55:68:3e:ee:b6:db:6a: f2:60:2c:da:c2:b6:ec:55:16:bb:88:eb:5c:32:7c:cf:64:0e: bf:94:6b:08:7c:5e:51:23:84:10:eb:4a:73:92:c2:8d:7d:70: 96:d6:6f:7e -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZshB3NIojXFvHFlW0rOvlf/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjUxMjE1MDgwMTM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTFjYjgzNWQ1ZDllODc0OTk3ZDdhNjc5NDVlMjU0ZTVkZjQ4OTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowOhYzcL6p6JAkoZTeAlAvNbiRz8 sEZgaSWaHBZL+CzHkUk/lKg6CN14xVy7ITEWuePQ/viQZZ61hJPyxqRkINF785fT X3fMxalp3RehMtBElmBIQ2muopLGGGE4P0GaczItp0JrEwbf9vRJIO9GHD2U1fa9 afzXzd5IhQM1wCNgqLbQkuUCuQZkBtlKXMyPkgtFZZh5123mDSP8RK1d54BPQ6kE DdXfKGK8aer3MgH6wWK7xt/YHwGBz3Zrts9TNaurEsjYux432V0DEZjERtsCwPQv CTqwzOxsZgkLdztu/ystZQHo8MmlpTgh6nCMW1ojJcQ0d9kns/lJO0GpRwIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFNEcuDXV2eh0mX16Z5ReJU5d9Il2MB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvMFJ5NE5kWFo2SFNaZlhwbmxGNGxUbDMwaVhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQBTfKSAwQA U4meAwQBWJc4AwQAWJc9AwQAWNHGAwQAWNHJAwQAWNHRAwQBWNHiAwQCWNHoAwQA WNH3AwQAWNH+MA0GCSqGSIb3DQEBCwUAA4IBAQBucHRCXcwtXLAErDsyHXksqVZD Hlb+2xAXVx3YG5e8HS58Zuhfng9/4XYtr0zzdRkALCQqXhsl1U7zf/w3gqC/5viY PJ/asZUCs3G8AOmDlq6JTsnfFoCeUKRpz6LZbJKTQSUpZLFStdhuthwWSX74/QgU +OEKLo6R+EKNpIy2mx2H2aMkaTF1WyxkhTfLCihPweTIBrsp8B2Xi7Y8vShnTElU 3bu3t11aw8Lpzn1J/VeEvwdNWtqNzoavHxX/h15Lp42E+3tuMaq5HKGbui96kFVo Pu6222ryYCzawrbsVRa7iOtcMnzPZA6/lGsIfF5RI4QQ60pzksKNfXCW1m9+ -----END CERTIFICATE-----Generated at Mon Dec 15 17:21:46 2025 by rpki-client