This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/dBKhxuJSL53c965dxWDnC2hqswk.roa File: dBKhxuJSL53c965dxWDnC2hqswk.roa (raw, json) Hash identifier: r+a1Cg72eHOGch8WK+OGEhGG31PFatTfiOwYRDsGjJQ= Subject key identifier: 74:12:A1:C6:E2:52:2F:9D:DC:F7:AE:5D:C5:60:E7:0B:68:6A:B3:09 Certificate issuer: /CN=37778681361b1fff87ce398402efa63869e5bfd1 Certificate serial: 019B352620CB1C6C166DD26FEBA542A981CA Authority key identifier: 37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/dBKhxuJSL53c965dxWDnC2hqswk.roa Signing time: Fri 19 Dec 2025 05:47:29 +0000 ROA not before: Fri 19 Dec 2025 05:47:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203971 IP address blocks: 185.118.48.0/22 maxlen: 22 185.118.48.0/24 maxlen: 24 185.118.49.0/24 maxlen: 24 185.118.50.0/24 maxlen: 24 185.118.51.0/24 maxlen: 24 185.222.92.0/22 maxlen: 22 185.222.92.0/24 maxlen: 24 185.222.93.0/24 maxlen: 24 185.222.94.0/24 maxlen: 24 185.222.95.0/24 maxlen: 24 217.179.126.0/24 maxlen: 24 2a06:91c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 14:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:26:20:cb:1c:6c:16:6d:d2:6f:eb:a5:42:a9:81:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37778681361b1fff87ce398402efa63869e5bfd1 Validity Not Before: Dec 19 05:47:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7412a1c6e2522f9ddcf7ae5dc560e70b686ab309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:21:dd:a1:31:c7:cd:56:bf:2f:5c:b5:e9:b9: fd:6d:eb:d2:a0:f2:a5:73:a9:d7:65:19:56:e8:89: ea:a2:a2:04:be:d2:fa:a0:b0:13:3e:58:da:56:ce: 23:78:65:2c:cc:f1:ff:5b:23:ea:78:42:a0:0c:94: 1b:5d:35:19:a9:17:4e:ba:47:50:89:ce:68:b0:dd: af:ef:cc:33:6c:4e:83:ac:b1:78:6b:ca:df:09:77: 31:bb:b4:39:ca:9c:e8:02:9a:8f:b3:5c:a5:51:88: 47:be:68:09:ac:bc:b9:b0:41:fa:37:eb:bc:ab:1b: 7d:e4:39:42:4b:d7:c5:6b:b2:c5:c1:b7:fa:e8:fd: 75:2b:68:19:9e:1b:a4:ab:26:a6:6f:15:9b:42:0e: 60:5f:db:41:af:7e:a2:84:d1:a6:e8:b4:6d:c7:ee: f9:29:a7:a2:e1:fa:46:cf:de:a8:b0:8e:85:55:81: 74:d3:bb:9e:36:0b:6c:61:15:82:00:f1:4a:62:67: 04:4c:3f:8a:c9:ae:ee:e1:9b:90:bc:f0:cc:aa:c6: d8:5a:a2:01:a7:0b:8e:d7:97:95:9a:16:4c:0c:e9: 00:58:7a:b0:29:70:65:83:05:04:07:cc:24:49:38: 0c:5a:f4:fd:1a:82:84:89:d3:3e:f4:b4:97:df:e0: 6d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:12:A1:C6:E2:52:2F:9D:DC:F7:AE:5D:C5:60:E7:0B:68:6A:B3:09 X509v3 Authority Key Identifier: keyid:37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/dBKhxuJSL53c965dxWDnC2hqswk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.118.48.0/22 185.222.92.0/22 217.179.126.0/24 IPv6: 2a06:91c0::/29 Signature Algorithm: sha256WithRSAEncryption 1d:ba:c5:69:56:9b:a5:17:78:26:f5:0f:b7:19:98:1e:d6:1b: 03:89:2b:eb:18:d9:a3:62:cd:5e:8b:70:b4:f9:39:61:b0:ef: f8:4b:b6:6e:91:86:16:07:dc:f2:4e:76:5b:02:00:5b:4a:71: 51:3d:85:39:b5:6d:6f:f6:84:bf:b0:5d:7e:c5:18:db:77:f2: 9b:02:8b:63:ad:e4:16:12:67:a4:c7:0e:bf:8c:e8:e2:ae:92: 75:f1:2c:9f:57:c7:83:0b:31:8f:bd:0c:99:85:d9:40:3c:31: 86:68:7c:00:de:0d:2b:5d:ef:4f:8e:ff:e5:ce:66:c7:d0:12: 88:b7:55:44:e1:c9:5c:db:60:4c:7f:41:09:83:9e:42:7b:8f: dd:b0:8d:ff:fc:6a:00:a0:ce:56:62:f6:d5:77:3b:4e:9a:2a: 14:f0:6b:0e:1f:99:19:8a:31:d3:05:fb:9d:7e:08:6b:2e:48: 35:2d:69:83:31:99:f7:93:46:df:9b:64:64:ac:ed:58:b1:14: cc:94:a7:88:05:7b:2a:b0:3a:8b:b6:3c:59:85:b1:2b:6c:4c: d7:38:4a:83:66:5c:6c:ec:e9:2f:dc:68:0e:c5:09:ef:87:0f: ed:5b:63:78:62:33:4e:44:06:e2:b0:24:46:a5:ed:7a:bd:7e: 51:8e:d0:cc -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZs1JiDLHGwWbdJv66VCqYHKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3Nzc4NjgxMzYxYjFmZmY4N2NlMzk4NDAyZWZhNjM4Njll NWJmZDEwHhcNMjUxMjE5MDU0NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDEyYTFjNmUyNTIyZjlkZGNmN2FlNWRjNTYwZTcwYjY4NmFiMzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CHdoTHHzVa/L1y16bn9bevSoPKl c6nXZRlW6InqoqIEvtL6oLATPljaVs4jeGUszPH/WyPqeEKgDJQbXTUZqRdOukdQ ic5osN2v78wzbE6DrLF4a8rfCXcxu7Q5ypzoApqPs1ylUYhHvmgJrLy5sEH6N+u8 qxt95DlCS9fFa7LFwbf66P11K2gZnhukqyambxWbQg5gX9tBr36ihNGm6LRtx+75 Kaei4fpGz96osI6FVYF007ueNgtsYRWCAPFKYmcETD+Kya7u4ZuQvPDMqsbYWqIB pwuO15eVmhZMDOkAWHqwKXBlgwUEB8wkSTgMWvT9GoKEidM+9LSX3+BtTwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFHQSocbiUi+d3PeuXcVg5wtoarMJMB8GA1UdIwQY MBaAFDd3hoE2Gx//h845hALvpjhp5b/RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjNlR2dUWWJIXy1IemptRUF1LW1PR25sdjlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC82NjBjY2EtYzFhYS00NTU4LWFkMWUt ZTUzZjkwNGExZjU4LzEvZEJLaHh1SlNMNTNjOTY1ZHhXRG5DMmhxc3drLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC82NjBjY2EtYzFhYS00NTU4LWFkMWUtZTUzZjkwNGExZjU4 LzEvTjNlR2dUWWJIXy1IemptRUF1LW1PR25sdjlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuXYwAwQC ud5cAwQA2bN+MA0EAgACMAcDBQMqBpHAMA0GCSqGSIb3DQEBCwUAA4IBAQAdusVp VpulF3gm9Q+3GZge1hsDiSvrGNmjYs1ei3C0+TlhsO/4S7ZukYYWB9zyTnZbAgBb SnFRPYU5tW1v9oS/sF1+xRjbd/KbAotjreQWEmekxw6/jOjirpJ18SyfV8eDCzGP vQyZhdlAPDGGaHwA3g0rXe9Pjv/lzmbH0BKIt1VE4clc22BMf0EJg55Ce4/dsI3/ /GoAoM5WYvbVdztOmioU8GsOH5kZijHTBfudfghrLkg1LWmDMZn3k0bfm2RkrO1Y sRTMlKeIBXsqsDqLtjxZhbErbEzXOEqDZlxs7Okv3GgOxQnvhw/tW2N4YjNORAbi sCRGpe16vX5RjtDM -----END CERTIFICATE-----Generated at Mon Dec 22 19:06:45 2025 by rpki-client