This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/AdOd8Jb54cEXRecTsgv4rvZgW2w.roa File: AdOd8Jb54cEXRecTsgv4rvZgW2w.roa (raw, json) Hash identifier: XlRu/FC0Vkrd6YTWXK4UeFe1TUsmJeqRlhyiiXPRuFk= Subject key identifier: 01:D3:9D:F0:96:F9:E1:C1:17:45:E7:13:B2:0B:F8:AE:F6:60:5B:6C Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06 Certificate serial: 019B12BDD64A28C24A0012E98E97009C9F55 Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/AdOd8Jb54cEXRecTsgv4rvZgW2w.roa Signing time: Fri 12 Dec 2025 13:26:29 +0000 ROA not before: Fri 12 Dec 2025 13:26:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215218 IP address blocks: 194.164.39.0/24 maxlen: 24 217.113.55.0/24 maxlen: 24 2a13:e700:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:bd:d6:4a:28:c2:4a:00:12:e9:8e:97:00:9c:9f:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06 Validity Not Before: Dec 12 13:26:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=01d39df096f9e1c11745e713b20bf8aef6605b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:67:b9:4e:3d:a6:b0:cb:fb:e3:65:22:d8:aa: c9:64:cc:e9:70:c1:2a:8c:a0:f4:89:8b:6b:c8:e2: 26:98:4a:b7:d4:f4:c6:72:c1:dd:e7:00:4b:43:5b: 8f:ac:4a:67:86:3b:46:ce:8a:0e:c5:c2:82:f9:b7: df:ec:a8:f3:88:04:ee:6b:84:f0:d1:71:c6:ff:ee: cb:f9:53:9b:c3:e8:82:43:0d:bb:e2:87:04:35:e0: b5:d3:97:c2:6f:07:2a:41:82:5b:36:12:16:14:46: b9:1f:b1:f6:4b:b5:22:09:79:d8:20:5b:a3:71:1d: df:49:4a:f8:4c:91:92:42:15:70:ef:f8:d2:c8:a0: 48:e6:fa:2d:c1:7d:8f:00:94:40:1d:60:c9:26:05: ff:0e:9a:2e:3b:fc:ba:4f:13:86:04:19:1d:0b:3a: c7:3c:e2:23:d0:a7:3b:1b:73:44:2b:e5:e4:8d:ea: 1f:88:25:90:0f:a1:12:19:11:73:b8:66:58:8b:9f: 41:f8:28:56:4c:74:e2:5a:4f:6f:69:ad:a3:52:64: f1:43:07:73:2b:d9:d0:de:b7:02:45:23:4b:9f:31: 52:b9:84:50:eb:27:9a:3d:4a:85:fd:99:79:ad:6d: 89:db:2f:21:be:3f:04:2a:1c:b0:de:fe:e9:5a:ad: f8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D3:9D:F0:96:F9:E1:C1:17:45:E7:13:B2:0B:F8:AE:F6:60:5B:6C X509v3 Authority Key Identifier: keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/AdOd8Jb54cEXRecTsgv4rvZgW2w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.164.39.0/24 217.113.55.0/24 IPv6: 2a13:e700:1::/48 Signature Algorithm: sha256WithRSAEncryption 3b:8e:09:5b:a1:7d:21:cb:d0:ce:14:e5:b4:78:65:5b:70:19: b5:5a:43:c2:c6:88:2f:e2:ae:cf:5b:0c:a1:38:32:e9:d7:39: 5a:94:37:e1:4e:52:b2:3e:ea:6e:fe:53:71:08:18:1e:a7:43: 14:7e:c4:77:6c:9a:51:bd:54:b6:49:db:9e:b0:32:6a:a5:b0: 34:4c:30:64:e7:63:b0:67:2f:15:a5:80:d4:23:83:20:bb:78: 6a:c2:0a:aa:ff:61:8b:d7:fd:9d:34:46:7a:db:78:e9:a6:87: e1:fb:9e:33:cf:30:47:e6:42:e2:a5:89:69:57:ae:ba:cb:5c: b0:11:08:93:69:14:46:1c:e7:0c:60:80:a3:7a:9c:43:3d:14: bb:7d:82:ed:9f:08:a1:ad:57:c5:12:a7:ef:be:3c:c1:e2:9f: 9d:8d:f4:5e:f5:06:69:64:d7:29:a4:24:12:90:e3:81:ea:ed: 79:08:19:ed:7d:1f:8e:5b:4e:fa:16:24:a1:4b:82:46:45:c5: f3:47:8d:0d:7f:0c:22:7a:1c:77:5a:18:d4:9f:ec:c1:28:48: 74:fe:82:c3:fa:fe:91:e5:fb:70:a2:87:4e:de:00:ad:ea:1c: 07:66:31:78:ef:27:62:e9:14:dc:e7:01:2c:ad:12:60:29:9e: 53:34:fc:f7 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZsSvdZKKMJKABLpjpcAnJ9VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMDVjYTExMWMwMDkzYjU2NTE0MjE1YmU0NjdiNTE1ZGRh NTZjMDYwHhcNMjUxMjEyMTMyNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWQzOWRmMDk2ZjllMWMxMTc0NWU3MTNiMjBiZjhhZWY2NjA1YjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ge5Tj2msMv742Ui2KrJZMzpcMEq jKD0iYtryOImmEq31PTGcsHd5wBLQ1uPrEpnhjtGzooOxcKC+bff7KjziATua4Tw 0XHG/+7L+VObw+iCQw274ocENeC105fCbwcqQYJbNhIWFEa5H7H2S7UiCXnYIFuj cR3fSUr4TJGSQhVw7/jSyKBI5votwX2PAJRAHWDJJgX/DpouO/y6TxOGBBkdCzrH POIj0Kc7G3NEK+XkjeofiCWQD6ESGRFzuGZYi59B+ChWTHTiWk9vaa2jUmTxQwdz K9nQ3rcCRSNLnzFSuYRQ6yeaPUqF/Zl5rW2J2y8hvj8EKhyw3v7pWq34hQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFAHTnfCW+eHBF0XnE7IL+K72YFtsMB8GA1UdIwQY MBaAFAwFyhEcAJO1ZRQhW+RntRXdpWwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wZmJmNDgtNWRiNy00OWZlLWJmNDQt NmEzNjcwNWJiYTZmLzEvQWRPZDhKYjU0Y0VYUmVjVHNndjRydlpnVzJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wZmJmNDgtNWRiNy00OWZlLWJmNDQtNmEzNjcwNWJiYTZm LzEvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwqQnAwQA 2XE3MA8EAgACMAkDBwAqE+cAAAEwDQYJKoZIhvcNAQELBQADggEBADuOCVuhfSHL 0M4U5bR4ZVtwGbVaQ8LGiC/irs9bDKE4MunXOVqUN+FOUrI+6m7+U3EIGB6nQxR+ xHdsmlG9VLZJ256wMmqlsDRMMGTnY7BnLxWlgNQjgyC7eGrCCqr/YYvX/Z00Rnrb eOmmh+H7njPPMEfmQuKliWlXrrrLXLARCJNpFEYc5wxggKN6nEM9FLt9gu2fCKGt V8USp+++PMHin52N9F71Bmlk1ymkJBKQ44Hq7XkIGe19H45bTvoWJKFLgkZFxfNH jQ1/DCJ6HHdaGNSf7MEoSHT+gsP6/pHl+3Cih07eAK3qHAdmMXjvJ2LpFNznASyt EmApnlM0/Pc= -----END CERTIFICATE-----Generated at Sun Dec 21 09:19:27 2025 by rpki-client