This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/csjA1XzPZVDmuFMOF4FVNAGTAvc.roa File: csjA1XzPZVDmuFMOF4FVNAGTAvc.roa (raw, json) Hash identifier: gyaRxHTvsY2fQ/zZCrzxFkfMjoim5rMmBV2aGfzP9aM= Subject key identifier: 72:C8:C0:D5:7C:CF:65:50:E6:B8:53:0E:17:81:55:34:01:93:02:F7 Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f Certificate serial: 019A25BC877AC9004421EC5B1337B42A02B7 Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/csjA1XzPZVDmuFMOF4FVNAGTAvc.roa Signing time: Mon 27 Oct 2025 12:55:03 +0000 ROA not before: Mon 27 Oct 2025 12:55:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212422 IP address blocks: 193.59.94.0/24 maxlen: 24 193.59.95.0/24 maxlen: 24 193.59.98.0/24 maxlen: 24 193.59.102.0/24 maxlen: 24 193.59.103.0/24 maxlen: 24 194.181.181.0/24 maxlen: 24 194.181.250.0/24 maxlen: 24 195.187.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:25:bc:87:7a:c9:00:44:21:ec:5b:13:37:b4:2a:02:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f Validity Not Before: Oct 27 12:55:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=72c8c0d57ccf6550e6b8530e17815534019302f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:35:9e:c5:3c:24:91:28:3a:8a:1e:cc:21:aa: 17:b3:1c:fd:41:3a:c8:f8:dd:c6:46:f8:42:12:dd: 96:ea:2a:9a:81:fd:65:56:d4:0a:28:9c:26:f0:19: c9:10:7f:f8:cb:8e:34:a8:20:29:8e:65:30:df:d6: d4:e5:de:bc:b1:b6:cd:cd:55:5b:bd:ad:eb:83:2f: 62:16:ac:b1:a2:ac:60:fd:40:78:1c:bd:84:ca:b6: 79:60:80:2e:30:c2:8e:2a:f3:d9:6d:ea:fa:8a:bf: 4b:b6:41:01:42:78:da:00:cc:71:94:51:99:17:ae: e9:c0:ab:16:32:30:57:27:c1:ae:fb:2b:1b:d3:65: 88:f2:27:10:55:82:e9:84:0f:25:77:ec:bc:aa:e6: 1a:b3:5d:76:e4:36:23:66:96:25:3c:4b:6e:55:b5: b4:83:13:4a:3e:5c:24:cd:76:95:6a:84:3c:88:6f: 28:30:7a:fa:7c:9e:b9:5a:2b:4d:1b:1f:2d:aa:41: 5c:52:ae:3e:46:46:ae:19:f1:b6:c1:8c:8e:85:65: a0:68:4d:4b:6e:e9:77:04:5c:41:00:16:9f:ff:b8: 93:30:41:05:13:74:b1:ae:07:36:33:88:79:ae:7b: 09:70:e3:5b:d0:bb:02:8b:c3:ac:89:3b:96:42:c7: 0f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C8:C0:D5:7C:CF:65:50:E6:B8:53:0E:17:81:55:34:01:93:02:F7 X509v3 Authority Key Identifier: keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/csjA1XzPZVDmuFMOF4FVNAGTAvc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.59.94.0/23 193.59.98.0/24 193.59.102.0/23 194.181.181.0/24 194.181.250.0/24 195.187.35.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:72:af:1d:ee:fb:62:24:77:ec:5a:30:e9:70:90:72:9f:45: cd:81:25:27:c1:3e:76:a7:06:e0:56:de:b6:8c:ed:ce:49:01: 1c:09:7a:8f:1c:2a:73:ef:8b:d2:8f:6d:d1:4a:2c:de:50:06: 12:a5:81:c2:d3:60:af:ce:d0:1c:da:63:28:b3:68:c1:cc:a0: 76:f3:41:9c:7c:de:11:61:8a:37:9b:70:e1:98:b8:e9:4f:f0: 87:ae:dc:ac:99:0d:29:b2:06:68:ce:37:0d:7d:21:c9:50:b1: 28:3c:ba:a8:eb:49:4d:f0:f9:cd:72:b4:fc:63:80:5a:43:d9: 69:40:7e:d4:a9:5c:d9:13:15:af:d2:34:6f:79:73:c9:93:f0: 86:ff:11:13:e4:5d:b2:67:b5:54:6d:ab:3a:5b:27:e9:83:ec: 6d:99:ac:a4:03:27:63:4f:b0:31:4e:aa:d5:7c:ec:23:01:2e: 5b:25:f6:e4:9a:a7:74:9b:4d:35:24:39:75:5d:2e:c4:8b:46: 38:b5:69:80:63:3c:e6:4e:06:28:10:20:10:de:af:50:b5:1c: 3a:e4:6f:65:14:e2:37:b0:fb:0e:99:0e:89:3f:0e:07:8b:75: 34:3a:b0:fe:5e:cf:e8:45:b7:f5:67:8f:83:17:14:b9:4a:76: cf:87:e4:f1 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZolvId6yQBEIexbEze0KgK3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw MTE4OGYwHhcNMjUxMDI3MTI1NTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmM4YzBkNTdjY2Y2NTUwZTZiODUzMGUxNzgxNTUzNDAxOTMwMmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDWexTwkkSg6ih7MIaoXsxz9QTrI +N3GRvhCEt2W6iqagf1lVtQKKJwm8BnJEH/4y440qCApjmUw39bU5d68sbbNzVVb va3rgy9iFqyxoqxg/UB4HL2EyrZ5YIAuMMKOKvPZber6ir9LtkEBQnjaAMxxlFGZ F67pwKsWMjBXJ8Gu+ysb02WI8icQVYLphA8ld+y8quYas1125DYjZpYlPEtuVbW0 gxNKPlwkzXaVaoQ8iG8oMHr6fJ65WitNGx8tqkFcUq4+RkauGfG2wYyOhWWgaE1L bul3BFxBABaf/7iTMEEFE3Sxrgc2M4h5rnsJcONb0LsCi8OsiTuWQscPIQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFHLIwNV8z2VQ5rhTDheBVTQBkwL3MB8GA1UdIwQY MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt YzA2NzFiZjRjZjNlLzEvY3NqQTFYelBaVkRtdUZNT0Y0RlZOQUdUQXZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBwTteAwQA wTtiAwQBwTtmAwQAwrW1AwQAwrX6AwQAw7sjMA0GCSqGSIb3DQEBCwUAA4IBAQAP cq8d7vtiJHfsWjDpcJByn0XNgSUnwT52pwbgVt62jO3OSQEcCXqPHCpz74vSj23R SizeUAYSpYHC02CvztAc2mMos2jBzKB280GcfN4RYYo3m3DhmLjpT/CHrtysmQ0p sgZozjcNfSHJULEoPLqo60lN8PnNcrT8Y4BaQ9lpQH7UqVzZExWv0jRveXPJk/CG /xET5F2yZ7VUbas6Wyfpg+xtmaykAydjT7AxTqrVfOwjAS5bJfbkmqd0m001JDl1 XS7Ei0Y4tWmAYzzmTgYoECAQ3q9QtRw65G9lFOI3sPsOmQ6JPw4Hi3U0OrD+Xs/o Rbf1Z4+DFxS5SnbPh+Tx -----END CERTIFICATE-----Generated at Sat Dec 6 16:34:20 2025 by rpki-client