This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/0RhoQOT0d1HbtsJfB7sOVTR-dWI.roa File: 0RhoQOT0d1HbtsJfB7sOVTR-dWI.roa (raw, json) Hash identifier: 0SPwTYDJNOUbIi7e9SuGgIE4NWQBIuLTmCxHMDmcXBc= Subject key identifier: D1:18:68:40:E4:F4:77:51:DB:B6:C2:5F:07:BB:0E:55:34:7E:75:62 Certificate issuer: /CN=2d78e4ae0eb9dcac625d9106ce885c5b498075d7 Certificate serial: 019A817BFCB08C9E1738C37E41E67D53010F Authority key identifier: 2D:78:E4:AE:0E:B9:DC:AC:62:5D:91:06:CE:88:5C:5B:49:80:75:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/0RhoQOT0d1HbtsJfB7sOVTR-dWI.roa Signing time: Fri 14 Nov 2025 08:29:37 +0000 ROA not before: Fri 14 Nov 2025 08:29:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203556 IP address blocks: 185.130.180.0/22 maxlen: 22 185.130.180.0/24 maxlen: 24 185.130.181.0/24 maxlen: 24 185.130.182.0/24 maxlen: 24 185.130.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.crl rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:7b:fc:b0:8c:9e:17:38:c3:7e:41:e6:7d:53:01:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d78e4ae0eb9dcac625d9106ce885c5b498075d7 Validity Not Before: Nov 14 08:29:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d1186840e4f47751dbb6c25f07bb0e55347e7562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c7:8c:8a:5c:0f:a8:80:ee:e0:7a:da:00:fd: 5f:3a:53:56:c0:7c:c8:2f:a8:cd:ef:c7:b4:92:d0: 66:10:c8:fe:12:6e:65:08:6b:28:b2:0d:61:c2:88: 0b:71:b4:14:bb:f1:0a:f8:b8:ae:f3:89:7a:27:47: f9:63:25:2d:b9:42:b0:60:1d:05:09:3c:fe:13:e9: 57:06:0b:c1:5a:e1:24:d3:f6:07:e7:91:4a:14:f9: d2:7c:0b:23:e3:c3:49:a7:2c:f0:5b:59:cd:55:eb: a2:00:b8:3d:08:55:ec:7f:0e:f0:7d:9f:c1:be:41: d8:ae:20:5f:32:e7:41:c2:27:d7:cb:3a:25:ae:97: 1d:a8:83:2d:aa:8c:ea:d5:a9:6e:ca:07:dd:ac:5b: cf:23:83:fa:fa:8f:87:aa:e5:e3:79:98:90:64:97: 29:c4:f0:3f:a3:3c:4c:bc:55:2a:d3:a4:1d:b8:f0: 4e:a2:b0:eb:18:c5:9b:b0:b5:5b:d9:27:57:63:98: 54:aa:b5:ad:c2:ad:b8:54:f6:7a:28:ad:ac:6d:2e: 44:66:f4:f9:d7:96:7f:7b:b6:63:81:ed:aa:7d:17: 1d:24:ed:52:2f:94:63:c0:ca:19:de:f8:f2:b9:58: 0e:34:1d:40:94:c8:16:08:5f:7f:88:4c:f7:77:db: 21:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:18:68:40:E4:F4:77:51:DB:B6:C2:5F:07:BB:0E:55:34:7E:75:62 X509v3 Authority Key Identifier: keyid:2D:78:E4:AE:0E:B9:DC:AC:62:5D:91:06:CE:88:5C:5B:49:80:75:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/0RhoQOT0d1HbtsJfB7sOVTR-dWI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.130.180.0/22 Signature Algorithm: sha256WithRSAEncryption 66:7b:57:69:8e:c3:3e:52:21:1d:f6:32:4c:77:c7:da:b7:43: a8:dd:41:94:28:05:92:e3:42:c3:e7:6f:37:4c:97:9c:88:9c: 86:30:e1:56:c8:42:ac:8b:4c:4b:81:63:d2:d8:85:42:5b:2d: 81:5d:c2:69:bf:50:e2:21:33:36:4d:a7:fc:19:be:c8:0f:94: 65:80:61:6c:2a:7b:cc:95:bf:4d:a9:2f:af:80:4f:60:6d:a0: 8c:43:5c:6e:bc:72:7d:68:88:a9:0f:a7:e6:43:97:07:8d:45: 57:1c:71:05:cb:02:91:8a:17:03:9b:a4:84:d7:94:da:4e:ce: 6c:4b:2d:64:58:f5:02:22:0e:cf:0f:11:09:48:7a:0e:a8:f6: 45:ec:c1:fb:75:6c:e3:30:72:d5:23:30:0e:91:33:e1:d9:f7: 23:e7:41:a9:8c:84:2f:b5:a4:37:c4:2e:09:ab:b6:3f:fe:17: 50:20:08:1c:29:89:b5:71:10:71:b7:53:22:4e:94:f9:20:b9: 2d:d4:c8:eb:e2:6f:09:10:36:01:9d:ae:9d:bd:45:74:66:9f: 96:09:7e:d7:28:dd:6b:f6:ee:8a:d0:0d:6b:0a:c5:02:e6:73: 64:19:1c:df:7a:a6:95:4b:99:dc:67:ee:76:9e:bb:5a:49:19: 91:fb:91:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqBe/ywjJ4XOMN+QeZ9UwEPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNzhlNGFlMGViOWRjYWM2MjVkOTEwNmNlODg1YzViNDk4 MDc1ZDcwHhcNMjUxMTE0MDgyOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTE4Njg0MGU0ZjQ3NzUxZGJiNmMyNWYwN2JiMGU1NTM0N2U3NTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MeMilwPqIDu4HraAP1fOlNWwHzI L6jN78e0ktBmEMj+Em5lCGsosg1hwogLcbQUu/EK+Liu84l6J0f5YyUtuUKwYB0F CTz+E+lXBgvBWuEk0/YH55FKFPnSfAsj48NJpyzwW1nNVeuiALg9CFXsfw7wfZ/B vkHYriBfMudBwifXyzolrpcdqIMtqozq1aluygfdrFvPI4P6+o+HquXjeZiQZJcp xPA/ozxMvFUq06QduPBOorDrGMWbsLVb2SdXY5hUqrWtwq24VPZ6KK2sbS5EZvT5 15Z/e7Zjge2qfRcdJO1SL5RjwMoZ3vjyuVgONB1AlMgWCF9/iEz3d9shjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNEYaEDk9HdR27bCXwe7DlU0fnViMB8GA1UdIwQY MBaAFC145K4OudysYl2RBs6IXFtJgHXXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFhqa3JnNjUzS3hpWFpFR3pvaGNXMG1BZGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81MjhiMzEtNDJjOS00NjI5LWE0NWQt ZjY1Njc1NTI2MDVlLzEvMFJob1FPVDBkMUhidHNKZkI3c09WVFItZFdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS81MjhiMzEtNDJjOS00NjI5LWE0NWQtZjY1Njc1NTI2MDVl LzEvTFhqa3JnNjUzS3hpWFpFR3pvaGNXMG1BZGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYK0MA0G CSqGSIb3DQEBCwUAA4IBAQBme1dpjsM+UiEd9jJMd8fat0Oo3UGUKAWS40LD5283 TJeciJyGMOFWyEKsi0xLgWPS2IVCWy2BXcJpv1DiITM2Taf8Gb7ID5RlgGFsKnvM lb9NqS+vgE9gbaCMQ1xuvHJ9aIipD6fmQ5cHjUVXHHEFywKRihcDm6SE15TaTs5s Sy1kWPUCIg7PDxEJSHoOqPZF7MH7dWzjMHLVIzAOkTPh2fcj50GpjIQvtaQ3xC4J q7Y//hdQIAgcKYm1cRBxt1MiTpT5ILkt1Mjr4m8JEDYBna6dvUV0Zp+WCX7XKN1r 9u6K0A1rCsUC5nNkGRzfeqaVS5ncZ+52nrtaSRmR+5Hz -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:19 2025 by rpki-client