This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/iRUodLE1DVdXVbsDmeR8dkSigaA.roa File: iRUodLE1DVdXVbsDmeR8dkSigaA.roa (raw, json) Hash identifier: kHQs2ZLF93r8KV/ddmtNOXWCYhSdAElOf8ic9XQOGBo= Subject key identifier: 89:15:28:74:B1:35:0D:57:57:55:BB:03:99:E4:7C:76:44:A2:81:A0 Certificate issuer: /CN=3238786e9f70e6db74230d72675a483bd24ef256 Certificate serial: 019A9823DAEB30C94CF6D95B605B71877638 Authority key identifier: 32:38:78:6E:9F:70:E6:DB:74:23:0D:72:67:5A:48:3B:D2:4E:F2:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/iRUodLE1DVdXVbsDmeR8dkSigaA.roa Signing time: Tue 18 Nov 2025 18:04:37 +0000 ROA not before: Tue 18 Nov 2025 18:04:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47535 IP address blocks: 91.204.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:98:23:da:eb:30:c9:4c:f6:d9:5b:60:5b:71:87:76:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3238786e9f70e6db74230d72675a483bd24ef256 Validity Not Before: Nov 18 18:04:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=89152874b1350d575755bb0399e47c7644a281a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6c:81:45:45:d8:19:14:53:35:6e:5b:c2:f5: 67:08:73:80:01:6b:01:a0:98:cb:3a:cf:e6:e8:52: f9:2e:f1:3d:bb:9d:5d:53:e5:ee:91:6b:39:df:f6: 76:08:2e:94:52:41:6a:90:1f:f7:44:ba:59:e6:46: aa:ef:0e:e2:98:31:c3:79:03:ab:f0:31:a2:09:79: da:a9:b3:f3:72:47:91:99:79:00:98:9f:f9:99:74: 85:7e:0a:c8:e1:97:0d:c1:a7:02:9c:6f:f3:d7:f1: a8:e8:bc:bb:e3:9d:bc:d4:c9:b3:74:ec:8f:55:3c: 43:a0:3c:ae:2d:95:7e:cb:43:8e:09:6b:d6:23:b2: a6:16:ca:72:3d:55:66:d5:42:5d:69:1e:3a:30:44: dd:e9:cf:cc:34:b0:af:43:3a:fc:6f:ac:43:97:f1: 35:89:f5:ff:b9:c3:44:8d:5f:5a:51:8d:29:1e:07: 92:d7:12:0f:19:79:b2:8a:c9:83:34:fb:23:9d:67: 98:f7:58:48:3e:80:fc:93:c8:52:b1:d7:a8:ff:f1: 09:ed:c9:7b:b7:a2:d0:16:36:9e:eb:e6:34:4d:8e: ea:3c:9a:3a:9b:72:d8:a0:f8:5a:88:79:54:9f:12: 08:69:a3:f7:22:d1:0b:30:6e:f7:90:65:31:f4:a3: eb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:15:28:74:B1:35:0D:57:57:55:BB:03:99:E4:7C:76:44:A2:81:A0 X509v3 Authority Key Identifier: keyid:32:38:78:6E:9F:70:E6:DB:74:23:0D:72:67:5A:48:3B:D2:4E:F2:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/iRUodLE1DVdXVbsDmeR8dkSigaA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.204.172.0/22 Signature Algorithm: sha256WithRSAEncryption a6:89:d2:da:ba:e7:ff:69:5d:f8:c1:92:8f:5a:de:0a:6d:33: 47:55:ae:b5:4e:e4:d1:7e:c5:ca:a4:c1:b1:86:38:d6:6f:9f: 32:ca:24:83:cc:15:a2:f0:28:88:f5:08:36:85:1f:db:ab:5c: 77:9a:ba:09:61:f8:f9:6b:89:9c:7b:6c:99:b0:1f:54:0f:4d: 9c:0b:c0:17:c7:af:07:8c:1a:d0:f7:da:59:a1:ef:d9:b6:73: bf:e3:7d:2f:88:61:0e:fb:6b:ee:87:f6:1a:c7:78:c4:a4:7b: 37:01:42:1a:b5:9d:fd:ec:dd:b2:61:c0:1e:01:ab:d6:8e:04: 3c:cc:68:c9:7a:a1:85:d1:e8:d6:ef:32:52:d7:ee:e2:0f:27: fe:b2:c5:e0:fa:e0:75:93:12:b0:03:85:39:c7:c8:b8:32:2e: 4e:cb:e5:be:db:45:b5:c8:04:5e:be:0b:cf:97:2c:28:d7:c4: a1:cf:59:db:2a:1b:6f:48:a3:23:b0:a5:7e:9f:bc:0a:63:a1: 28:c8:3e:ae:2c:79:3a:9c:b6:41:ff:a0:fd:47:7d:35:b7:f1: 8d:a5:6c:e6:e4:06:3b:62:83:89:c4:71:88:1f:ed:97:e4:a6: da:b3:98:62:83:6f:3f:1c:37:ed:d6:ac:f9:a7:c8:94:22:30: 6c:8f:c2:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqYI9rrMMlM9tlbYFtxh3Y4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMzg3ODZlOWY3MGU2ZGI3NDIzMGQ3MjY3NWE0ODNiZDI0 ZWYyNTYwHhcNMjUxMTE4MTgwNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTE1Mjg3NGIxMzUwZDU3NTc1NWJiMDM5OWU0N2M3NjQ0YTI4MWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2yBRUXYGRRTNW5bwvVnCHOAAWsB oJjLOs/m6FL5LvE9u51dU+XukWs53/Z2CC6UUkFqkB/3RLpZ5kaq7w7imDHDeQOr 8DGiCXnaqbPzckeRmXkAmJ/5mXSFfgrI4ZcNwacCnG/z1/Go6Ly745281MmzdOyP VTxDoDyuLZV+y0OOCWvWI7KmFspyPVVm1UJdaR46METd6c/MNLCvQzr8b6xDl/E1 ifX/ucNEjV9aUY0pHgeS1xIPGXmyismDNPsjnWeY91hIPoD8k8hSsdeo//EJ7cl7 t6LQFjae6+Y0TY7qPJo6m3LYoPhaiHlUnxIIaaP3ItELMG73kGUx9KPr4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIkVKHSxNQ1XV1W7A5nkfHZEooGgMB8GA1UdIwQY MBaAFDI4eG6fcObbdCMNcmdaSDvSTvJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWpoNGJwOXc1dHQwSXcxeVoxcElPOUpPOGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85YTk1MDYtMjBkNC00YWI3LWI1NjMt ZTJkM2Q5NGNjMjM4LzEvaVJVb2RMRTFEVmRYVmJzRG1lUjhka1NpZ2FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS85YTk1MDYtMjBkNC00YWI3LWI1NjMtZTJkM2Q5NGNjMjM4 LzEvTWpoNGJwOXc1dHQwSXcxeVoxcElPOUpPOGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8ysMA0G CSqGSIb3DQEBCwUAA4IBAQCmidLauuf/aV34wZKPWt4KbTNHVa61TuTRfsXKpMGx hjjWb58yyiSDzBWi8CiI9Qg2hR/bq1x3mroJYfj5a4mce2yZsB9UD02cC8AXx68H jBrQ99pZoe/ZtnO/430viGEO+2vuh/Yax3jEpHs3AUIatZ397N2yYcAeAavWjgQ8 zGjJeqGF0ejW7zJS1+7iDyf+ssXg+uB1kxKwA4U5x8i4Mi5Oy+W+20W1yARevgvP lywo18Shz1nbKhtvSKMjsKV+n7wKY6EoyD6uLHk6nLZB/6D9R301t/GNpWzm5AY7 YoOJxHGIH+2X5Kbas5hig28/HDft1qz5p8iUIjBsj8L/ -----END CERTIFICATE-----Generated at Sun Dec 7 06:52:10 2025 by rpki-client