This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RtWFwDIfgpMQr8rxvhlLKQQxMDI.roa File: RtWFwDIfgpMQr8rxvhlLKQQxMDI.roa (raw, json) Hash identifier: xq184u0zDcK2Dye0ZcYW45oJKodTRSGMxBcEUSKolNI= Subject key identifier: 46:D5:85:C0:32:1F:82:93:10:AF:CA:F1:BE:19:4B:29:04:31:30:32 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B22B69A511200A74C04E6114151C664DF Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RtWFwDIfgpMQr8rxvhlLKQQxMDI.roa Signing time: Mon 15 Dec 2025 15:52:30 +0000 ROA not before: Mon 15 Dec 2025 15:52:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 26383 IP address blocks: 2.58.95.0/24 maxlen: 24 31.13.248.0/24 maxlen: 24 93.123.13.0/24 maxlen: 24 94.156.116.0/24 maxlen: 24 193.58.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:b6:9a:51:12:00:a7:4c:04:e6:11:41:51:c6:64:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Dec 15 15:52:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=46d585c0321f829310afcaf1be194b2904313032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:af:82:6a:a3:51:18:8b:75:15:e3:28:bb:0b: 71:8f:a6:0a:9b:73:69:89:aa:f6:33:0f:3b:ab:f3: 6b:db:d1:d5:78:e5:e0:df:fd:46:61:f0:dc:ec:0a: 91:b0:75:5f:fd:0b:da:e2:a6:01:5e:a5:2e:17:db: b8:7c:61:7a:86:6b:99:10:69:62:91:54:62:c6:d7: 03:a4:94:0a:bf:43:09:26:56:72:b8:67:50:78:db: 36:d2:fb:0c:65:48:7f:eb:53:5c:21:ed:e4:80:fe: 78:ca:20:f0:4e:c2:1e:d3:1c:54:d2:86:57:73:72: 24:63:93:91:36:30:2d:d0:22:2c:e8:db:37:24:e8: 5c:ae:bf:e8:78:9a:cd:67:b8:f1:2c:65:94:a7:ca: 8c:6f:a0:5e:b7:bc:ed:a6:d3:57:37:9f:74:47:b7: 43:e4:a7:ed:38:4e:04:00:f1:4f:51:44:3f:5e:1f: 51:89:f4:ce:db:92:a5:a2:05:5b:34:0f:b6:2b:79: 14:a5:52:3e:10:bf:9f:77:29:7e:5a:3d:76:99:18: 77:77:d7:7e:a4:04:04:bf:3c:da:ed:2f:d7:ed:22: a7:04:37:7c:c8:6a:ab:4d:95:85:4f:f7:4a:da:13: 25:8e:36:31:0a:83:7b:ee:c3:71:be:2c:5f:1c:0a: e9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D5:85:C0:32:1F:82:93:10:AF:CA:F1:BE:19:4B:29:04:31:30:32 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RtWFwDIfgpMQr8rxvhlLKQQxMDI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.95.0/24 31.13.248.0/24 93.123.13.0/24 94.156.116.0/24 193.58.120.0/24 Signature Algorithm: sha256WithRSAEncryption 21:9f:a3:00:7e:a9:9d:90:4b:3a:4f:9a:8c:52:03:80:1e:0b: f4:f1:5f:50:92:85:b3:3c:1a:72:d2:77:41:5d:05:ea:2d:12: 19:d1:bd:e2:ab:fc:ef:56:77:ad:84:3e:57:75:67:41:59:e3: 66:bc:53:18:8b:63:e5:d7:11:4a:18:4a:e0:18:b9:4d:00:9b: 72:88:46:85:76:a1:1d:a8:13:cc:bb:06:34:e3:61:c3:b7:d5: 55:95:38:b7:6b:2c:9d:66:b5:c0:6b:66:e8:30:de:84:38:03: 75:c4:27:12:82:af:76:54:39:ee:eb:70:f2:a9:4c:2d:a4:68: 40:d8:31:22:3b:f0:b9:24:00:55:8e:0d:03:0f:f7:1c:a1:5f: 97:4d:bc:39:d1:c7:29:52:f1:a3:9f:45:7b:f3:03:c5:0d:09: be:9c:59:d3:a6:11:67:a6:c4:53:91:f3:22:f4:41:74:42:a9: 56:46:81:79:5d:21:51:d3:09:27:f3:0f:fc:89:44:6c:ff:73: 98:87:ab:91:8f:dd:a5:d0:52:02:2e:28:f4:64:a3:1b:7e:e5: 0f:dd:61:62:d7:4c:4d:1f:f0:d7:a2:d3:1d:97:e0:fc:2f:12: cf:7d:0c:4d:75:cf:69:ea:b3:fa:c0:5b:72:2a:61:6d:05:9b: a5:41:a6:3f -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZsitppREgCnTATmEUFRxmTfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMjE1MTU1MjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmQ1ODVjMDMyMWY4MjkzMTBhZmNhZjFiZTE5NGIyOTA0MzEzMDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6+CaqNRGIt1FeMouwtxj6YKm3Np iar2Mw87q/Nr29HVeOXg3/1GYfDc7AqRsHVf/Qva4qYBXqUuF9u4fGF6hmuZEGli kVRixtcDpJQKv0MJJlZyuGdQeNs20vsMZUh/61NcIe3kgP54yiDwTsIe0xxU0oZX c3IkY5ORNjAt0CIs6Ns3JOhcrr/oeJrNZ7jxLGWUp8qMb6Bet7ztptNXN590R7dD 5KftOE4EAPFPUUQ/Xh9RifTO25KlogVbNA+2K3kUpVI+EL+fdyl+Wj12mRh3d9d+ pAQEvzza7S/X7SKnBDd8yGqrTZWFT/dK2hMljjYxCoN77sNxvixfHArpnwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFEbVhcAyH4KTEK/K8b4ZSykEMTAyMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvUnRXRndESWZncE1RcjhyeHZobExLUVF4TURJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAAjpfAwQA Hw34AwQAXXsNAwQAXpx0AwQAwTp4MA0GCSqGSIb3DQEBCwUAA4IBAQAhn6MAfqmd kEs6T5qMUgOAHgv08V9QkoWzPBpy0ndBXQXqLRIZ0b3iq/zvVnethD5XdWdBWeNm vFMYi2Pl1xFKGErgGLlNAJtyiEaFdqEdqBPMuwY042HDt9VVlTi3ayydZrXAa2bo MN6EOAN1xCcSgq92VDnu63DyqUwtpGhA2DEiO/C5JABVjg0DD/ccoV+XTbw50ccp UvGjn0V78wPFDQm+nFnTphFnpsRTkfMi9EF0QqlWRoF5XSFR0wkn8w/8iURs/3OY h6uRj92l0FICLij0ZKMbfuUP3WFi10xNH/DXotMdl+D8LxLPfQxNdc9p6rP6wFty KmFtBZulQaY/ -----END CERTIFICATE-----Generated at Tue Dec 16 05:07:10 2025 by rpki-client