This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/CdpEVxlMCXV7mI-cZj5I8rQYJkg.roa File: CdpEVxlMCXV7mI-cZj5I8rQYJkg.roa (raw, json) Hash identifier: S9ON+rgEegtU+X2eC9uCPBMef30Le5qvB4KW8iBVSpI= Subject key identifier: 09:DA:44:57:19:4C:09:75:7B:98:8F:9C:66:3E:48:F2:B4:18:26:48 Certificate issuer: /CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f Certificate serial: 019B36A6A5B1EF20278D29654089878CCDCF Authority key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/CdpEVxlMCXV7mI-cZj5I8rQYJkg.roa Signing time: Fri 19 Dec 2025 12:47:29 +0000 ROA not before: Fri 19 Dec 2025 12:47:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200845 IP address blocks: 77.75.176.0/21 maxlen: 24 77.75.180.0/24 maxlen: 24 91.209.234.0/24 maxlen: 24 91.219.21.0/24 maxlen: 24 185.154.8.0/22 maxlen: 24 185.184.148.0/22 maxlen: 24 185.193.68.0/22 maxlen: 24 194.116.152.0/23 maxlen: 24 212.121.224.0/19 maxlen: 24 212.121.248.0/24 maxlen: 24 213.148.192.0/19 maxlen: 24 213.148.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:a6:a5:b1:ef:20:27:8d:29:65:40:89:87:8c:cd:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f Validity Not Before: Dec 19 12:47:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=09da4457194c09757b988f9c663e48f2b4182648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:48:7b:87:6a:d7:d3:e7:e0:bc:8f:9c:c6:bf: da:b2:38:1d:32:ac:59:6e:45:a4:57:c9:54:aa:9d: ff:7e:ac:33:11:58:52:db:b4:df:42:79:c9:e2:45: 67:9b:c5:81:b9:9b:44:82:42:f1:07:25:bb:4c:a9: 26:7b:f0:c7:d2:3a:53:9f:81:d0:91:e4:c9:ca:15: b5:97:dc:e8:8b:63:27:e5:82:24:ed:d3:5a:47:02: ab:88:53:16:04:9a:12:3f:05:79:80:5b:2c:d9:3c: c4:95:64:d5:a0:2d:0d:3d:de:bb:8c:e8:b3:07:17: 8f:c6:80:e3:fe:79:b4:e7:12:3d:c7:b4:85:11:f5: 31:db:71:59:5d:4b:e2:b9:96:f3:08:22:21:1a:36: 69:d5:b9:a6:7b:05:9d:a9:e1:25:a2:58:46:8c:b6: 4b:f8:f2:ac:57:05:2c:bf:90:fd:be:da:5f:a6:4b: a9:97:75:71:d0:e8:00:f8:99:c7:a1:28:76:64:68: f5:5b:5c:e2:0e:f5:ea:b3:71:90:71:16:b4:ec:82: c7:f6:0a:bf:d7:9f:94:d6:20:f5:23:0e:a9:2a:e2: 2c:4c:32:96:a5:c4:c0:e6:8f:36:53:ab:a2:11:49: 68:e8:ee:c0:84:66:89:59:fa:18:2d:59:97:fc:42: 70:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DA:44:57:19:4C:09:75:7B:98:8F:9C:66:3E:48:F2:B4:18:26:48 X509v3 Authority Key Identifier: keyid:22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/CdpEVxlMCXV7mI-cZj5I8rQYJkg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.75.176.0/21 91.209.234.0/24 91.219.21.0/24 185.154.8.0/22 185.184.148.0/22 185.193.68.0/22 194.116.152.0/23 212.121.224.0/19 213.148.192.0/19 Signature Algorithm: sha256WithRSAEncryption 00:6c:22:91:c1:9a:a4:ab:b0:9b:db:79:b2:92:96:c4:04:ca: 0e:0a:0e:eb:49:d6:82:b0:cc:25:1a:64:3a:7e:4c:cc:3b:fc: 82:15:c6:e3:eb:6e:8c:64:b8:e5:2b:0a:ca:a5:b6:c7:36:fe: 30:20:4c:23:7b:45:ae:fe:2c:fc:bd:6c:9e:3e:00:90:e2:c5: 24:25:7b:a4:b0:7b:c2:b1:6f:e1:27:80:96:e3:2d:d7:84:cf: fe:32:ca:ae:d4:2e:71:84:88:ce:61:ba:65:a7:96:33:a9:50: 39:a2:8e:6b:0d:25:e7:87:ea:6b:79:f8:db:c1:1e:47:85:44: 92:68:45:e2:65:51:b3:d3:48:8f:4b:45:fd:cc:42:2c:35:b8: 20:7b:ab:1d:b7:19:24:3d:9e:c0:8d:de:fb:88:8e:6d:f5:be: 1e:93:eb:b4:b5:41:72:80:87:66:10:e4:4b:81:bc:79:52:0b: 3f:b6:06:d3:63:b0:71:93:37:10:f1:81:da:0d:d3:a7:ed:d4: 4f:51:d7:a4:b1:1a:f9:5f:14:2c:f2:27:13:e1:f4:4d:de:08: 02:90:5f:00:43:40:86:83:8f:af:d0:73:71:d6:0b:7e:d2:6b: 3b:51:f5:7a:c2:32:ad:92:35:f7:c8:4b:d0:91:dd:ef:97:f5: 5e:1f:db:5c -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZs2pqWx7yAnjSllQImHjM3PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzdjZGE3NWY0ZTE1ZTQ4NmRlZTVhNjUwMWNiZTIwMThi YzBlMGYwHhcNMjUxMjE5MTI0NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWRhNDQ1NzE5NGMwOTc1N2I5ODhmOWM2NjNlNDhmMmI0MTgyNjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/kh7h2rX0+fgvI+cxr/asjgdMqxZ bkWkV8lUqp3/fqwzEVhS27TfQnnJ4kVnm8WBuZtEgkLxByW7TKkme/DH0jpTn4HQ keTJyhW1l9zoi2Mn5YIk7dNaRwKriFMWBJoSPwV5gFss2TzElWTVoC0NPd67jOiz BxePxoDj/nm05xI9x7SFEfUx23FZXUviuZbzCCIhGjZp1bmmewWdqeElolhGjLZL +PKsVwUsv5D9vtpfpkupl3Vx0OgA+JnHoSh2ZGj1W1ziDvXqs3GQcRa07ILH9gq/ 15+U1iD1Iw6pKuIsTDKWpcTA5o82U6uiEUlo6O7AhGaJWfoYLVmX/EJwFwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFAnaRFcZTAl1e5iPnGY+SPK0GCZIMB8GA1UdIwQY MBaAFCLHzadfThXkht7lplAcviAYvA4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNmTnAxOU9GZVNHM3VXbVVCeS1JQmk4RGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iOTIzMzEtMmJiNC00YTU5LTk5Nzgt NzUxYjE3ZDFjNDM3LzEvQ2RwRVZ4bE1DWFY3bUktY1pqNUk4clFZSmtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9iOTIzMzEtMmJiNC00YTU5LTk5NzgtNzUxYjE3ZDFjNDM3 LzEvSXNmTnAxOU9GZVNHM3VXbVVCeS1JQmk4RGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQDTUuwAwQA W9HqAwQAW9sVAwQCuZoIAwQCubiUAwQCucFEAwQBwnSYAwQF1HngAwQF1ZTAMA0G CSqGSIb3DQEBCwUAA4IBAQAAbCKRwZqkq7Cb23mykpbEBMoOCg7rSdaCsMwlGmQ6 fkzMO/yCFcbj626MZLjlKwrKpbbHNv4wIEwje0Wu/iz8vWyePgCQ4sUkJXuksHvC sW/hJ4CW4y3XhM/+Msqu1C5xhIjOYbplp5YzqVA5oo5rDSXnh+prefjbwR5HhUSS aEXiZVGz00iPS0X9zEIsNbgge6sdtxkkPZ7Ajd77iI5t9b4ek+u0tUFygIdmEORL gbx5Ugs/tgbTY7BxkzcQ8YHaDdOn7dRPUdeksRr5XxQs8icT4fRN3ggCkF8AQ0CG g4+v0HNx1gt+0ms7UfV6wjKtkjX3yEvQkd3vl/VeH9tc -----END CERTIFICATE-----Generated at Sun Dec 21 03:47:17 2025 by rpki-client