This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/xdPapWF0tdey3UHoWcJmnElAqc8.roa File: xdPapWF0tdey3UHoWcJmnElAqc8.roa (raw, json) Hash identifier: UpBMEgudpinOKQgNTPLZQtu9Gq0DYyNmOximTQiYoTs= Subject key identifier: C5:D3:DA:A5:61:74:B5:D7:B2:DD:41:E8:59:C2:66:9C:49:40:A9:CF Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e Certificate serial: 019B0EB7DE7B9DC88BFA94449A92F59D9D04 Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/xdPapWF0tdey3UHoWcJmnElAqc8.roa Signing time: Thu 11 Dec 2025 18:41:29 +0000 ROA not before: Thu 11 Dec 2025 18:41:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213220 IP address blocks: 84.252.100.0/23 maxlen: 24 185.243.243.0/24 maxlen: 24 185.245.40.0/24 maxlen: 24 185.245.42.0/23 maxlen: 24 185.245.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:b7:de:7b:9d:c8:8b:fa:94:44:9a:92:f5:9d:9d:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089423af1be03027196d1f81df22992978cda6e Validity Not Before: Dec 11 18:41:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c5d3daa56174b5d7b2dd41e859c2669c4940a9cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ce:de:b4:e1:0e:a2:44:74:11:05:a9:73:bf: 41:96:23:66:ae:b6:c2:0c:6d:e8:88:e3:5e:68:a7: 02:05:d2:4f:57:e9:e3:1f:90:1e:03:4a:eb:0c:92: e9:93:e4:54:56:5d:ca:21:5d:41:6c:05:1f:18:4a: 3c:63:31:1d:ee:66:27:28:be:f8:4b:06:e4:5e:67: 5e:5e:3b:04:e9:47:46:5a:e8:ed:95:c6:6a:69:6e: 50:e0:0d:6f:b6:54:ef:ef:e9:7e:6c:64:43:9b:e3: 6e:b6:45:10:20:c8:42:3a:8a:ee:b8:8d:20:0d:3b: 31:a2:77:7d:4f:39:e3:76:b1:73:ea:a9:02:94:e9: d6:e1:ad:be:32:15:e5:0e:f6:f3:42:ae:87:fa:20: 2c:38:52:a1:f7:a4:67:2b:19:58:be:be:fb:3b:3a: 62:a5:d9:39:76:64:34:38:f8:e9:51:31:09:65:a4: 22:90:46:2a:32:c4:c3:5f:81:f6:15:21:9f:f7:d6: 5d:56:48:aa:89:b3:4d:9c:67:19:bb:e8:22:d4:fc: 95:8f:86:90:86:b9:73:56:1d:dc:e7:00:f4:59:ab: b9:28:b9:72:47:b1:e6:a9:da:98:49:a5:41:65:b3: 30:02:cd:05:36:eb:e9:e8:18:ec:57:5e:96:35:ba: 75:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D3:DA:A5:61:74:B5:D7:B2:DD:41:E8:59:C2:66:9C:49:40:A9:CF X509v3 Authority Key Identifier: keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/xdPapWF0tdey3UHoWcJmnElAqc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.252.100.0/23 185.243.243.0/24 185.245.40.0/24 185.245.42.0/23 Signature Algorithm: sha256WithRSAEncryption 80:2b:2e:98:f9:9d:65:62:7e:80:a7:65:4c:f0:fe:5e:ff:db: 08:a0:fd:99:69:e1:b2:da:d2:5f:4a:51:08:76:2e:0f:e7:27: 4a:b0:0f:78:b5:5f:66:a0:55:f7:d5:92:49:ee:9e:91:a6:32: 50:d5:03:73:13:3a:95:ad:d2:70:fe:6b:ba:5f:fe:5e:b4:ea: da:59:ec:13:ba:b4:7c:ba:fd:c4:ee:3f:d5:43:2e:2f:19:38: 5a:04:13:43:7e:d8:4f:57:8a:9d:fe:f8:f5:35:a3:02:0d:87: c9:29:fb:f2:e5:4b:79:80:ad:51:59:22:13:20:26:08:e2:3d: ce:10:e3:df:11:99:8c:d0:7c:1f:82:b6:c3:24:1f:0e:95:6a: 57:06:02:45:70:b5:7f:cd:b0:b6:9e:a6:2f:5e:0a:5d:cc:dd: 5c:b4:01:45:51:3c:f1:56:90:e4:3b:23:40:69:7f:fb:f9:51: 39:24:37:e9:4c:98:39:c8:a0:84:c6:cd:c3:ac:d8:70:5b:bf: 98:a0:27:29:5e:27:b6:5a:52:20:0d:00:36:1f:ca:fe:a6:53: 07:32:87:5f:13:42:80:2f:56:f8:7c:46:d9:52:a8:f3:ac:46: f1:34:5b:71:4a:13:74:73:d1:50:77:d8:02:1e:1e:57:90:a1: 79:73:ea:48 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZsOt957nciL+pREmpL1nZ0EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwODk0MjNhZjFiZTAzMDI3MTk2ZDFmODFkZjIyOTkyOTc4 Y2RhNmUwHhcNMjUxMjExMTg0MTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWQzZGFhNTYxNzRiNWQ3YjJkZDQxZTg1OWMyNjY5YzQ5NDBhOWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5M7etOEOokR0EQWpc79BliNmrrbC DG3oiONeaKcCBdJPV+njH5AeA0rrDJLpk+RUVl3KIV1BbAUfGEo8YzEd7mYnKL74 SwbkXmdeXjsE6UdGWujtlcZqaW5Q4A1vtlTv7+l+bGRDm+NutkUQIMhCOoruuI0g DTsxond9TznjdrFz6qkClOnW4a2+MhXlDvbzQq6H+iAsOFKh96RnKxlYvr77Ozpi pdk5dmQ0OPjpUTEJZaQikEYqMsTDX4H2FSGf99ZdVkiqibNNnGcZu+gi1PyVj4aQ hrlzVh3c5wD0Wau5KLlyR7HmqdqYSaVBZbMwAs0FNuvp6BjsV16WNbp1WQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFMXT2qVhdLXXst1B6FnCZpxJQKnPMB8GA1UdIwQY MBaAFMCJQjrxvgMCcZbR+B3yKZKXjNpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgt NjUzMzJiNDdmNWViLzEveGRQYXBXRjB0ZGV5M1VIb1djSm1uRWxBcWM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgtNjUzMzJiNDdmNWVi LzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBVPxkAwQA ufPzAwQAufUoAwQBufUqMA0GCSqGSIb3DQEBCwUAA4IBAQCAKy6Y+Z1lYn6Ap2VM 8P5e/9sIoP2ZaeGy2tJfSlEIdi4P5ydKsA94tV9moFX31ZJJ7p6RpjJQ1QNzEzqV rdJw/mu6X/5etOraWewTurR8uv3E7j/VQy4vGThaBBNDfthPV4qd/vj1NaMCDYfJ Kfvy5Ut5gK1RWSITICYI4j3OEOPfEZmM0HwfgrbDJB8OlWpXBgJFcLV/zbC2nqYv XgpdzN1ctAFFUTzxVpDkOyNAaX/7+VE5JDfpTJg5yKCExs3DrNhwW7+YoCcpXie2 WlIgDQA2H8r+plMHModfE0KAL1b4fEbZUqjzrEbxNFtxShN0c9FQd9gCHh5XkKF5 c+pI -----END CERTIFICATE-----Generated at Fri Dec 19 23:21:04 2025 by rpki-client