This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/DuNDwuZbdySgNyZH3t9JySoHeko.roa File: DuNDwuZbdySgNyZH3t9JySoHeko.roa (raw, json) Hash identifier: 7Bos8GCQZgZ0caxXOPr6WaqjCwvqpg1+xrlWX2JOjyU= Subject key identifier: 0E:E3:43:C2:E6:5B:77:24:A0:37:26:47:DE:DF:49:C9:2A:07:7A:4A Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B68B375E07652DA6A3D531B1F0DAF3C4B Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/DuNDwuZbdySgNyZH3t9JySoHeko.roa Signing time: Mon 29 Dec 2025 06:02:30 +0000 ROA not before: Mon 29 Dec 2025 06:02:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 194.231.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:b3:75:e0:76:52:da:6a:3d:53:1b:1f:0d:af:3c:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Dec 29 06:02:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0ee343c2e65b7724a0372647dedf49c92a077a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2e:3d:d9:c3:39:28:f1:8e:94:46:17:3b:d9: fa:0f:7d:db:b8:5f:50:c6:3b:f4:f2:df:f5:aa:5b: bd:25:f5:c6:21:9e:21:19:62:05:73:3c:99:e0:33: fa:85:b7:23:6e:e5:62:9b:75:37:d5:20:0a:3a:49: 15:3f:df:60:03:d7:f1:00:e5:67:c9:04:ea:4a:21: 33:96:d3:11:ac:09:f7:2c:6b:1d:ec:46:21:f1:0f: 41:39:0d:e1:a5:95:d9:9e:90:bd:4f:4d:57:68:16: c1:a0:65:84:e5:15:f6:35:b7:9f:93:d6:77:f6:ff: d6:3a:f4:1d:85:50:38:fe:77:0e:7b:11:79:de:25: d3:ef:ae:37:e5:19:47:32:7b:77:24:0a:23:15:01: 1c:04:c8:80:3d:27:1b:3d:50:72:4d:a5:3f:52:52: 27:ae:8f:6b:70:d2:1d:5b:7b:59:51:0a:62:f5:d0: 19:49:9e:71:cb:0c:a9:c4:ea:0e:b5:4a:0d:5c:7d: 1a:7d:0a:3f:24:5d:56:1c:c2:22:55:dc:15:48:4c: d2:1f:fe:62:76:c4:3a:4a:f0:ab:ba:4f:07:52:02: 23:0b:24:75:09:30:8c:29:49:ac:e0:75:56:21:a9: 67:85:da:c5:d3:cb:e7:a5:c7:f3:af:6d:96:01:f9: be:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E3:43:C2:E6:5B:77:24:A0:37:26:47:DE:DF:49:C9:2A:07:7A:4A X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/DuNDwuZbdySgNyZH3t9JySoHeko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.231.196.0/24 Signature Algorithm: sha256WithRSAEncryption ce:f2:55:a2:af:dd:3c:f6:56:36:7a:95:15:a1:10:ed:53:31: 96:7a:c3:72:fc:d7:10:f0:8b:74:51:03:04:04:24:9e:47:4d: 4a:15:5a:12:d1:97:91:02:97:00:eb:53:80:7b:5b:26:ac:92: 9a:09:41:84:ed:47:c9:70:42:47:ce:73:8e:81:30:b8:e1:ce: d1:08:14:a6:66:84:ad:1f:aa:8c:8c:7b:32:c0:14:a8:90:51: f1:a6:27:64:6b:96:d6:f1:34:75:b3:13:10:b2:6f:ac:be:a4: f3:8f:35:5f:8e:f9:94:87:11:89:96:34:b0:00:e2:c1:ac:c8: 8a:50:33:5d:0c:6d:6b:88:41:87:3a:eb:eb:9d:21:d3:d3:67: 66:2c:3c:95:57:c4:ad:b1:df:05:ba:04:aa:b2:ae:b1:62:00: 52:31:c4:d9:f7:1c:aa:4c:57:31:21:78:81:0a:94:c8:3d:b1: d9:36:8b:8d:eb:4e:7a:3a:d7:6f:bc:c8:c6:14:eb:be:8e:79: 90:f3:81:26:35:8c:76:fa:ef:9e:9f:57:59:a2:63:b5:a8:cf: 97:18:44:22:9e:8f:0e:13:c0:68:bf:cc:99:c7:3c:88:ef:fe: 7a:2a:22:87:c1:99:95:75:9a:36:d9:c5:ad:98:39:e8:d4:12: dd:e8:dd:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtos3XgdlLaaj1TGx8NrzxLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjUxMjI5MDYwMjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWUzNDNjMmU2NWI3NzI0YTAzNzI2NDdkZWRmNDljOTJhMDc3YTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC492cM5KPGOlEYXO9n6D33buF9Q xjv08t/1qlu9JfXGIZ4hGWIFczyZ4DP6hbcjbuVim3U31SAKOkkVP99gA9fxAOVn yQTqSiEzltMRrAn3LGsd7EYh8Q9BOQ3hpZXZnpC9T01XaBbBoGWE5RX2Nbefk9Z3 9v/WOvQdhVA4/ncOexF53iXT76435RlHMnt3JAojFQEcBMiAPScbPVByTaU/UlIn ro9rcNIdW3tZUQpi9dAZSZ5xywypxOoOtUoNXH0afQo/JF1WHMIiVdwVSEzSH/5i dsQ6SvCruk8HUgIjCyR1CTCMKUms4HVWIalnhdrF08vnpcfzr22WAfm+SQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA7jQ8LmW3ckoDcmR97fSckqB3pKMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvRHVORHd1WmJkeVNnTnlaSDN0OUp5U29IZWtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwufEMA0G CSqGSIb3DQEBCwUAA4IBAQDO8lWir9089lY2epUVoRDtUzGWesNy/NcQ8It0UQME BCSeR01KFVoS0ZeRApcA61OAe1smrJKaCUGE7UfJcEJHznOOgTC44c7RCBSmZoSt H6qMjHsywBSokFHxpidka5bW8TR1sxMQsm+svqTzjzVfjvmUhxGJljSwAOLBrMiK UDNdDG1riEGHOuvrnSHT02dmLDyVV8Stsd8FugSqsq6xYgBSMcTZ9xyqTFcxIXiB CpTIPbHZNouN6056OtdvvMjGFOu+jnmQ84EmNYx2+u+en1dZomO1qM+XGEQino8O E8Bov8yZxzyI7/56KiKHwZmVdZo22cWtmDno1BLd6N3/ -----END CERTIFICATE-----Generated at Tue Dec 30 08:49:15 2025 by rpki-client