This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/DrsXtqunxYOYM23d3mYOmcIvG5c.roa File: DrsXtqunxYOYM23d3mYOmcIvG5c.roa (raw, json) Hash identifier: uw0TXDNaq9rLWuq4JI39+UZWRzoXMIxEtdGdl2jRFWU= Subject key identifier: 0E:BB:17:B6:AB:A7:C5:83:98:33:6D:DD:DE:66:0E:99:C2:2F:1B:97 Certificate issuer: /CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934 Certificate serial: 019B2B724DC94AEF44FFF32E5D2613AF3FCC Authority key identifier: 34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/DrsXtqunxYOYM23d3mYOmcIvG5c.roa Signing time: Wed 17 Dec 2025 08:34:29 +0000 ROA not before: Wed 17 Dec 2025 08:34:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 201986 IP address blocks: 45.153.212.0/23 maxlen: 23 45.153.214.0/23 maxlen: 23 109.68.127.0/24 maxlen: 24 178.219.56.0/21 maxlen: 21 178.219.58.0/23 maxlen: 23 185.57.68.0/22 maxlen: 22 185.57.69.0/24 maxlen: 24 185.150.164.0/22 maxlen: 22 185.150.164.0/23 maxlen: 23 185.150.166.0/24 maxlen: 24 185.150.167.0/24 maxlen: 24 194.61.88.0/22 maxlen: 24 194.61.90.0/24 maxlen: 24 2a02:5960::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:72:4d:c9:4a:ef:44:ff:f3:2e:5d:26:13:af:3f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934 Validity Not Before: Dec 17 08:34:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0ebb17b6aba7c58398336dddde660e99c22f1b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7f:84:44:d1:5c:d7:ad:a5:10:7e:6d:e9:bf: 27:fe:61:a7:93:1a:2e:0c:fd:77:62:08:f1:27:3e: 0a:5e:44:88:08:7e:98:bd:b9:96:1b:d6:a6:e9:e1: 84:4c:af:79:c5:ea:71:b9:38:30:d5:91:17:5a:fe: 7d:77:d5:3a:6a:73:51:18:23:ba:b8:3e:4e:ad:04: a8:65:b3:55:41:80:a1:ef:97:8c:ba:67:21:c9:5d: 90:71:3b:84:aa:fb:49:c0:09:1a:c8:af:51:99:f2: f5:1e:a2:12:16:f0:bd:55:c9:87:69:f0:80:11:30: 9b:55:c6:a8:4e:8d:26:e1:f3:07:92:2d:23:d0:42: 84:01:5b:f1:b9:a7:eb:5a:6e:b4:88:ac:7f:9a:ab: f1:80:92:f4:84:89:16:3f:79:43:41:0b:0e:c7:70: 6f:32:a9:7e:7a:b7:19:39:c5:24:d0:f1:e8:8a:9f: 58:fa:d3:55:fd:be:ee:e9:d1:0c:cf:93:95:c5:a5: 26:00:59:91:b4:5f:e0:8c:9d:40:b2:e3:9f:1a:4f: bd:56:58:c6:d7:14:22:c5:4b:82:79:eb:33:59:8c: 0b:3b:b7:da:91:5d:3c:b7:48:dc:04:dc:67:7c:7d: 48:d6:c8:5f:93:41:cd:09:b8:0f:e9:c4:94:4a:ad: 85:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BB:17:B6:AB:A7:C5:83:98:33:6D:DD:DE:66:0E:99:C2:2F:1B:97 X509v3 Authority Key Identifier: keyid:34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/DrsXtqunxYOYM23d3mYOmcIvG5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.212.0/22 109.68.127.0/24 178.219.56.0/21 185.57.68.0/22 185.150.164.0/22 194.61.88.0/22 IPv6: 2a02:5960::/32 Signature Algorithm: sha256WithRSAEncryption 91:7a:de:08:cf:f7:d8:ec:db:c2:30:59:86:5a:e8:6c:82:13: c7:73:e7:47:e9:3b:3b:7f:ec:cb:6d:ca:5e:85:72:f2:15:26: 05:7c:17:5b:1b:61:33:99:35:cd:17:cc:61:2a:39:88:f1:5f: de:97:2e:81:cd:e9:26:1d:c4:0e:bd:95:b6:80:53:79:53:04: 49:68:95:d4:43:80:45:74:72:40:8b:bc:c0:6a:5e:80:97:9a: 84:04:a2:fb:c5:fa:4e:c9:b9:ac:3c:b1:9f:6c:a9:e4:5a:f7: 3b:ff:e6:76:11:30:85:f9:84:1b:da:c9:2b:d0:d8:ab:f2:6e: b9:a7:73:a9:7d:89:f6:24:14:95:bc:8e:cb:63:8a:6a:6c:98: 27:3b:19:b3:ae:84:10:6e:e8:fe:e4:88:16:53:d8:85:33:fe: 8e:34:09:0b:4a:4b:af:56:0f:67:32:a4:59:d6:63:95:cc:da: 50:b0:44:2b:99:bb:79:7f:b7:5f:7e:21:04:4a:23:3a:55:ce: 59:1d:2e:e4:d0:e5:c3:3a:f5:69:b0:77:56:da:e3:b9:8d:6c: 09:19:db:c6:96:de:95:5a:40:fc:d4:53:fc:63:e2:9f:f8:3e: 5c:09:cf:45:84:91:b0:98:97:4d:fa:b4:0c:93:5a:ef:2b:d2: 94:07:63:63 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZsrck3JSu9E//MuXSYTrz/MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZDBlYzdhYzRjMzkxZTRlY2JhOWQwYTM3NDkxOTFiMThl YmY5MzQwHhcNMjUxMjE3MDgzNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWJiMTdiNmFiYTdjNTgzOTgzMzZkZGRkZTY2MGU5OWMyMmYxYjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH+ERNFc162lEH5t6b8n/mGnkxou DP13YgjxJz4KXkSICH6YvbmWG9am6eGETK95xepxuTgw1ZEXWv59d9U6anNRGCO6 uD5OrQSoZbNVQYCh75eMumchyV2QcTuEqvtJwAkayK9RmfL1HqISFvC9VcmHafCA ETCbVcaoTo0m4fMHki0j0EKEAVvxuafrWm60iKx/mqvxgJL0hIkWP3lDQQsOx3Bv Mql+ercZOcUk0PHoip9Y+tNV/b7u6dEMz5OVxaUmAFmRtF/gjJ1AsuOfGk+9VljG 1xQixUuCeeszWYwLO7fakV08t0jcBNxnfH1I1shfk0HNCbgP6cSUSq2F9wIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFA67F7arp8WDmDNt3d5mDpnCLxuXMB8GA1UdIwQY MBaAFDTQ7HrEw5Hk7LqdCjdJGRsY6/k0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUt YjdjMjY5NmJhZTUwLzEvRHJzWHRxdW54WU9ZTTIzZDNtWU9tY0l2RzVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUtYjdjMjY5NmJhZTUw LzEvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQCLZnUAwQA bUR/AwQDsts4AwQCuTlEAwQCuZakAwQCwj1YMA0EAgACMAcDBQAqAllgMA0GCSqG SIb3DQEBCwUAA4IBAQCRet4Iz/fY7NvCMFmGWuhsghPHc+dH6Ts7f+zLbcpehXLy FSYFfBdbG2EzmTXNF8xhKjmI8V/ely6BzekmHcQOvZW2gFN5UwRJaJXUQ4BFdHJA i7zAal6Al5qEBKL7xfpOybmsPLGfbKnkWvc7/+Z2ETCF+YQb2skr0Nir8m65p3Op fYn2JBSVvI7LY4pqbJgnOxmzroQQbuj+5IgWU9iFM/6ONAkLSkuvVg9nMqRZ1mOV zNpQsEQrmbt5f7dffiEESiM6Vc5ZHS7k0OXDOvVpsHdW2uO5jWwJGdvGlt6VWkD8 1FP8Y+Kf+D5cCc9FhJGwmJdN+rQMk1rvK9KUB2Nj -----END CERTIFICATE-----Generated at Sat Dec 20 15:40:08 2025 by rpki-client