This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/EnIqlvcohGwr9_QO8UiJDynyMjg.roa File: EnIqlvcohGwr9_QO8UiJDynyMjg.roa (raw, json) Hash identifier: 2SZOKpKm6p7U6uHMsa55SpuH60Kzn75O+euuKRFZlZM= Subject key identifier: 12:72:2A:96:F7:28:84:6C:2B:F7:F4:0E:F1:48:89:0F:29:F2:32:38 Certificate issuer: /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61 Certificate serial: 019A7C1B07C7A94FA9B465E5792C3940D103 Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/EnIqlvcohGwr9_QO8UiJDynyMjg.roa Signing time: Thu 13 Nov 2025 07:25:37 +0000 ROA not before: Thu 13 Nov 2025 07:25:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21352 IP address blocks: 193.109.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7c:1b:07:c7:a9:4f:a9:b4:65:e5:79:2c:39:40:d1:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61 Validity Not Before: Nov 13 07:25:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=12722a96f728846c2bf7f40ef148890f29f23238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:38:ab:1b:b6:eb:fb:0a:50:d9:ac:49:6c:6f: cb:a4:7c:08:fc:f2:42:a6:9d:98:ea:08:69:fb:28: 7f:d7:b8:57:2d:f6:2d:65:d0:c1:1a:04:12:c7:54: 09:cd:51:51:b7:5d:c0:b9:15:d9:79:7c:80:f5:91: ad:a9:cc:b7:18:71:17:72:09:32:35:b0:88:c3:5b: 72:4b:26:9e:d7:05:7e:90:94:50:d9:4f:48:70:4e: 8a:f6:35:8d:fb:5f:f8:62:50:0e:1f:6f:d8:21:56: 74:10:bc:90:d2:38:33:c5:e5:b2:8b:92:d6:3e:16: 79:98:a2:3d:9f:5c:5a:9c:b1:8d:f8:61:35:ba:be: 3b:fd:78:92:6f:cf:01:6c:bc:55:2f:33:79:64:78: 27:68:ec:e8:10:b1:1b:eb:aa:77:49:2f:94:e5:90: fa:d7:11:f9:ac:45:e3:79:de:b7:3b:fb:56:c0:0e: aa:d1:f3:19:04:b6:3d:0c:22:78:28:f5:20:a6:85: dc:d9:e4:40:03:db:9a:66:75:12:87:d2:4b:b6:ed: 87:47:24:d1:a4:85:de:c1:be:bd:bd:14:51:f0:66: 20:a6:c9:7c:ff:63:84:9c:1a:77:9a:f1:bd:a8:16: aa:da:b9:56:a6:f9:c9:c2:29:13:ac:bd:cf:d8:db: 15:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:72:2A:96:F7:28:84:6C:2B:F7:F4:0E:F1:48:89:0F:29:F2:32:38 X509v3 Authority Key Identifier: keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/EnIqlvcohGwr9_QO8UiJDynyMjg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.236.0/24 Signature Algorithm: sha256WithRSAEncryption 74:b7:94:87:71:0d:49:06:65:52:ca:4e:a7:16:43:5e:a4:5b: 90:0f:00:9a:fd:d4:f1:7f:39:3a:de:db:e3:f9:2f:e7:fa:62: c3:fc:c6:f8:fc:5c:16:95:0c:7c:e6:bf:20:e0:b4:ed:2f:b9: d1:92:19:92:f8:c5:4b:6b:9f:da:22:7a:d5:26:f6:2d:25:7c: ba:a5:0f:4e:50:4e:13:80:ee:b2:14:15:3f:c8:5a:38:12:a9: 68:3c:55:c1:6b:11:ac:ed:b8:d3:e1:37:06:70:22:52:b5:3d: 37:c2:b1:7c:36:40:27:9e:a4:36:73:1e:3a:f1:82:ef:0e:78: 35:ca:c7:2f:43:15:47:20:5b:9e:8e:c8:1b:22:97:36:1c:82: 68:3c:d1:d4:f3:b4:be:4d:a9:24:90:ae:8e:52:7f:8f:58:ff: 67:06:ed:e8:d3:5a:ed:c6:ca:12:e4:8d:df:b6:ca:c7:4b:67: 7d:28:53:04:cf:d0:61:59:b5:9e:65:c3:e0:69:a2:4a:7d:15: 90:2c:35:e0:1b:44:43:94:73:9b:04:96:de:ab:bd:43:1e:cf: b7:5e:3f:3f:e6:6b:ee:8a:cb:08:db:2a:20:46:d0:5b:6b:c5: 37:8e:0b:81:a7:a8:f5:40:54:74:31:2c:6e:d9:43:ac:9a:de: 61:7c:6c:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp8GwfHqU+ptGXleSw5QNEDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZGUzMmJiOWNjOTllMTE1ZGRiYWY2YjdmYTIzMDUxNzg5 ZjJmNjEwHhcNMjUxMTEzMDcyNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjcyMmE5NmY3Mjg4NDZjMmJmN2Y0MGVmMTQ4ODkwZjI5ZjIzMjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zirG7br+wpQ2axJbG/LpHwI/PJC pp2Y6ghp+yh/17hXLfYtZdDBGgQSx1QJzVFRt13AuRXZeXyA9ZGtqcy3GHEXcgky NbCIw1tySyae1wV+kJRQ2U9IcE6K9jWN+1/4YlAOH2/YIVZ0ELyQ0jgzxeWyi5LW PhZ5mKI9n1xanLGN+GE1ur47/XiSb88BbLxVLzN5ZHgnaOzoELEb66p3SS+U5ZD6 1xH5rEXjed63O/tWwA6q0fMZBLY9DCJ4KPUgpoXc2eRAA9uaZnUSh9JLtu2HRyTR pIXewb69vRRR8GYgpsl8/2OEnBp3mvG9qBaq2rlWpvnJwikTrL3P2NsVJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBJyKpb3KIRsK/f0DvFIiQ8p8jI4MB8GA1UdIwQY MBaAFMXeMrucyZ4RXduva3+iMFF4ny9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUt MDYzNjc1MzY3OWI2LzEvRW5JcWx2Y29oR3dyOV9RTzhVaUpEeW55TWpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUtMDYzNjc1MzY3OWI2 LzEveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW3sMA0G CSqGSIb3DQEBCwUAA4IBAQB0t5SHcQ1JBmVSyk6nFkNepFuQDwCa/dTxfzk63tvj +S/n+mLD/Mb4/FwWlQx85r8g4LTtL7nRkhmS+MVLa5/aInrVJvYtJXy6pQ9OUE4T gO6yFBU/yFo4EqloPFXBaxGs7bjT4TcGcCJStT03wrF8NkAnnqQ2cx468YLvDng1 yscvQxVHIFuejsgbIpc2HIJoPNHU87S+TakkkK6OUn+PWP9nBu3o01rtxsoS5I3f tsrHS2d9KFMEz9BhWbWeZcPgaaJKfRWQLDXgG0RDlHObBJbeq71DHs+3Xj8/5mvu issI2yogRtBba8U3jguBp6j1QFR0MSxu2UOsmt5hfGwp -----END CERTIFICATE-----Generated at Sat Dec 6 23:30:59 2025 by rpki-client