This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/pBNH2AvH3F_7NHfh2pdfWJm5GAw.roa File: pBNH2AvH3F_7NHfh2pdfWJm5GAw.roa (raw, json) Hash identifier: 65SqIpROrgrk/ZTF3DMhTQ4zJ8Yp0X8B5YheGcQu0b0= Subject key identifier: A4:13:47:D8:0B:C7:DC:5F:FB:34:77:E1:DA:97:5F:58:99:B9:18:0C Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7 Certificate serial: 019B0F08701138F09C3BF482D2396A41F3E1 Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/pBNH2AvH3F_7NHfh2pdfWJm5GAw.roa Signing time: Thu 11 Dec 2025 20:09:29 +0000 ROA not before: Thu 11 Dec 2025 20:09:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202761 IP address blocks: 193.218.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 23:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:08:70:11:38:f0:9c:3b:f4:82:d2:39:6a:41:f3:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7 Validity Not Before: Dec 11 20:09:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a41347d80bc7dc5ffb3477e1da975f5899b9180c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:36:07:d6:62:0e:a5:10:b1:a5:61:6b:c3:8f: 36:4a:e4:da:6c:74:d2:d1:3a:fe:d8:66:98:fe:4d: f2:7a:33:8c:bb:1b:71:1f:33:7f:dc:2e:a8:0f:62: 23:28:c1:dd:0f:69:34:d3:df:51:32:14:75:80:e9: 86:aa:3a:9a:e9:82:a0:83:61:e6:8a:36:48:3d:00: 33:a5:e1:e9:ce:14:5a:f6:6f:d4:e1:cb:fb:4b:2a: ed:f8:5b:a1:64:8d:79:44:9c:ec:b2:fc:7c:20:66: 6f:eb:bf:67:66:f1:08:87:5b:36:02:bc:78:55:48: 62:cb:ce:3c:6b:44:c6:61:ab:1b:76:0c:f7:f0:ec: 09:a2:8f:19:22:37:76:92:da:26:0f:42:0a:c0:b2: a9:5a:48:42:bb:cd:a9:15:7a:66:01:74:10:cd:4a: 73:01:fe:62:29:7f:2a:43:a6:b8:37:6c:50:e9:53: 16:38:6c:bb:b4:b4:43:21:61:f9:2a:21:95:e2:1e: d3:87:51:b5:12:a2:73:d9:9f:f6:bd:a9:96:46:19: 73:8f:55:91:26:e1:cd:fa:5b:2e:12:f1:d9:3b:23: 16:38:ef:66:ec:12:ba:56:80:6c:dc:5a:a6:ad:0a: be:38:b9:60:5a:b8:7b:21:25:af:66:10:fb:50:07: 70:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:13:47:D8:0B:C7:DC:5F:FB:34:77:E1:DA:97:5F:58:99:B9:18:0C X509v3 Authority Key Identifier: keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/pBNH2AvH3F_7NHfh2pdfWJm5GAw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.218.176.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:2c:0a:09:66:b9:28:85:47:ce:46:e6:f4:54:4a:74:bf:6b: f4:91:04:2c:69:48:64:a8:39:66:38:86:b0:fb:c6:8b:0a:74: d8:c3:e5:8a:89:56:82:73:28:3d:19:e2:0b:ba:f9:09:1c:4a: e9:e7:26:71:88:c9:1d:ef:0c:99:24:1f:fe:90:4b:58:bc:59: fa:7e:ac:a3:c3:84:7d:59:ec:99:fb:b0:74:54:88:aa:ba:2d: 4b:17:8c:9b:30:fe:3b:3f:f8:c4:38:39:3d:05:8e:7a:9f:57: 8d:15:fd:57:35:0e:7f:19:f9:e2:e7:52:f4:4f:7a:e0:47:30: 6f:a6:c5:eb:de:02:ec:bb:ec:f1:35:70:9e:7d:0d:40:8b:e6: 84:10:cb:d6:d5:14:40:1c:39:88:14:04:49:0f:70:ca:aa:dc: 8a:1b:45:14:7b:e0:45:f0:33:89:fe:d6:f8:48:d2:38:5c:27: d9:07:fb:f9:e7:14:3a:eb:63:1b:11:45:1e:20:05:61:b4:ed: 17:e2:f8:e7:4c:70:0f:8a:2c:e9:08:58:7d:a2:19:78:da:eb: 73:e7:67:89:ba:7f:49:9b:ef:35:e9:f1:ce:2e:9d:8b:e9:80: cb:3b:b0:ba:00:00:67:b6:bf:3d:3e:31:63:8e:e8:44:c6:d0: 8f:4c:a7:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsPCHAROPCcO/SC0jlqQfPhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2Y2ZhOTRmNjEzNGUzOTYwZWE1ZjMxODg0NmEzMGNmM2U5 MjJkZDcwHhcNMjUxMjExMjAwOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDEzNDdkODBiYzdkYzVmZmIzNDc3ZTFkYTk3NWY1ODk5YjkxODBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDYH1mIOpRCxpWFrw482SuTabHTS 0Tr+2GaY/k3yejOMuxtxHzN/3C6oD2IjKMHdD2k0099RMhR1gOmGqjqa6YKgg2Hm ijZIPQAzpeHpzhRa9m/U4cv7Syrt+FuhZI15RJzssvx8IGZv679nZvEIh1s2Arx4 VUhiy848a0TGYasbdgz38OwJoo8ZIjd2ktomD0IKwLKpWkhCu82pFXpmAXQQzUpz Af5iKX8qQ6a4N2xQ6VMWOGy7tLRDIWH5KiGV4h7Th1G1EqJz2Z/2vamWRhlzj1WR JuHN+lsuEvHZOyMWOO9m7BK6VoBs3FqmrQq+OLlgWrh7ISWvZhD7UAdwgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKQTR9gLx9xf+zR34dqXX1iZuRgMMB8GA1UdIwQY MBaAFMbPqU9hNOOWDqXzGIRqMM8+ki3XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHMtcFQyRTA0NVlPcGZNWWhHb3d6ejZTTGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85NTllMDMtNzhmYy00NTg5LWFjZGUt ZjlhNDM3MDlkMDBiLzEvcEJOSDJBdkgzRl83TkhmaDJwZGZXSm01R0F3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi85NTllMDMtNzhmYy00NTg5LWFjZGUtZjlhNDM3MDlkMDBi LzEveHMtcFQyRTA0NVlPcGZNWWhHb3d6ejZTTGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwdqwMA0G CSqGSIb3DQEBCwUAA4IBAQA7LAoJZrkohUfORub0VEp0v2v0kQQsaUhkqDlmOIaw +8aLCnTYw+WKiVaCcyg9GeILuvkJHErp5yZxiMkd7wyZJB/+kEtYvFn6fqyjw4R9 WeyZ+7B0VIiqui1LF4ybMP47P/jEODk9BY56n1eNFf1XNQ5/Gfni51L0T3rgRzBv psXr3gLsu+zxNXCefQ1Ai+aEEMvW1RRAHDmIFARJD3DKqtyKG0UUe+BF8DOJ/tb4 SNI4XCfZB/v55xQ662MbEUUeIAVhtO0X4vjnTHAPiizpCFh9ohl42utz52eJun9J m+816fHOLp2L6YDLO7C6AABntr89PjFjjuhExtCPTKcq -----END CERTIFICATE-----Generated at Fri Dec 19 08:34:26 2025 by rpki-client