This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/0SYfMOFLmlHWfOD7GGmjzxxApg0.roa File: 0SYfMOFLmlHWfOD7GGmjzxxApg0.roa (raw, json) Hash identifier: 58074XIGQFehdiB8PI23Nifkeux3z5O0Tv2sRnC0yzo= Subject key identifier: D1:26:1F:30:E1:4B:9A:51:D6:7C:E0:FB:18:69:A3:CF:1C:40:A6:0D Certificate issuer: /CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829 Certificate serial: 019AEE8E88F10165620EB7255EFDFE7BF6DB Authority key identifier: FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/0SYfMOFLmlHWfOD7GGmjzxxApg0.roa Signing time: Fri 05 Dec 2025 12:48:29 +0000 ROA not before: Fri 05 Dec 2025 12:48:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213636 IP address blocks: 92.42.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.crl rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.mft rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:8e:88:f1:01:65:62:0e:b7:25:5e:fd:fe:7b:f6:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fca1e4487cf8d4a2d961dd622f3e7501bdc24829 Validity Not Before: Dec 5 12:48:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d1261f30e14b9a51d67ce0fb1869a3cf1c40a60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ab:55:db:8a:4c:dd:c8:a9:95:d6:eb:2f:9f: e3:b8:93:9a:df:d4:7a:6f:36:26:e4:cf:92:13:00: 0f:9e:2d:a6:6f:ca:4b:a8:80:5b:92:79:24:ae:df: 16:5b:72:98:2a:30:98:62:e4:66:2c:f9:a0:9b:0d: e6:74:66:c6:6c:e9:05:d0:b0:9c:17:b3:cd:3f:3c: 45:18:ef:af:ed:3e:e3:db:97:b5:eb:2f:18:2f:7f: a1:2a:46:d9:80:25:af:c7:63:dc:d0:1b:7a:ae:f9: 44:e9:86:8e:16:5e:c2:22:b1:11:e3:de:ca:da:05: 5d:77:91:3c:cd:85:c3:aa:11:3e:0f:33:d3:5f:c7: 07:ae:3a:81:f2:e8:80:14:9f:0b:24:e7:42:84:64: 9f:f2:6a:9c:e6:4e:cd:9d:30:56:05:b4:12:ab:98: 14:a2:78:c5:8b:97:51:0a:f1:7a:68:79:2b:11:7d: d9:44:21:83:4d:f9:7b:cc:52:79:e5:91:d5:d3:ae: 79:13:fa:f9:24:ce:62:4a:ba:88:ee:f7:ca:c9:ac: fa:5f:16:9f:c9:24:49:1a:71:93:2e:98:a5:39:6d: 84:ee:80:89:65:9f:40:e9:da:ed:a2:e4:94:62:55: 3b:f4:62:21:2b:95:76:9a:3d:a1:51:b7:dd:15:70: b2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:26:1F:30:E1:4B:9A:51:D6:7C:E0:FB:18:69:A3:CF:1C:40:A6:0D X509v3 Authority Key Identifier: keyid:FC:A1:E4:48:7C:F8:D4:A2:D9:61:DD:62:2F:3E:75:01:BD:C2:48:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KHkSHz41KLZYd1iLz51Ab3CSCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/0SYfMOFLmlHWfOD7GGmjzxxApg0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/672974-72b1-44fd-826a-1e292c0e95f1/1/_KHkSHz41KLZYd1iLz51Ab3CSCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.42.202.0/24 Signature Algorithm: sha256WithRSAEncryption 71:a4:dc:ba:c2:6e:a1:b8:91:07:28:38:de:94:03:b4:46:36: 9f:c6:08:c6:86:b3:44:65:0c:49:01:4b:30:87:2b:d7:48:16: 03:f6:aa:94:53:cf:54:d6:36:a9:a7:36:23:25:ab:a4:e9:78: 80:43:18:c5:49:1b:fa:89:8d:8a:54:91:29:21:0f:8b:ee:aa: 3e:bc:cf:38:2a:ae:22:ab:88:7f:e1:38:ea:b9:e9:fb:14:69: 63:d7:46:30:60:6a:85:b7:ba:2f:65:99:d0:b0:7e:ca:e5:6a: 13:9b:e8:92:04:fa:03:1e:5c:d3:8a:e4:21:87:4e:b3:90:3d: 0a:cf:ca:4e:ed:9b:1b:1f:9a:f2:14:3f:b6:b7:7e:50:9b:94: 2d:4a:b8:ad:36:75:6b:f7:47:4e:45:93:e0:95:50:64:bc:1d: c9:4f:c3:87:31:d4:31:65:92:5a:7e:d7:7e:19:80:0e:d4:31: ea:50:81:70:41:59:ab:66:87:e1:66:d7:9e:88:1a:bb:17:54: 23:de:88:71:80:47:98:23:7a:f9:4b:c0:f2:06:67:21:7c:54: 5c:a9:d1:bd:b0:02:b1:2e:8b:fa:3c:ca:4e:14:3a:1e:d3:4f: f6:e0:ae:cb:ad:66:0d:13:17:27:77:aa:c0:67:70:34:89:86: 43:c1:d3:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrujojxAWViDrclXv3+e/bbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYTFlNDQ4N2NmOGQ0YTJkOTYxZGQ2MjJmM2U3NTAxYmRj MjQ4MjkwHhcNMjUxMjA1MTI0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTI2MWYzMGUxNGI5YTUxZDY3Y2UwZmIxODY5YTNjZjFjNDBhNjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qtV24pM3cipldbrL5/juJOa39R6 bzYm5M+SEwAPni2mb8pLqIBbknkkrt8WW3KYKjCYYuRmLPmgmw3mdGbGbOkF0LCc F7PNPzxFGO+v7T7j25e16y8YL3+hKkbZgCWvx2Pc0Bt6rvlE6YaOFl7CIrER497K 2gVdd5E8zYXDqhE+DzPTX8cHrjqB8uiAFJ8LJOdChGSf8mqc5k7NnTBWBbQSq5gU onjFi5dRCvF6aHkrEX3ZRCGDTfl7zFJ55ZHV0655E/r5JM5iSrqI7vfKyaz6Xxaf ySRJGnGTLpilOW2E7oCJZZ9A6drtouSUYlU79GIhK5V2mj2hUbfdFXCyCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNEmHzDhS5pR1nzg+xhpo88cQKYNMB8GA1UdIwQY MBaAFPyh5Eh8+NSi2WHdYi8+dQG9wkgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0tIa1NIejQxS0xaWWQxaUx6NTFBYjNDU0NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82NzI5NzQtNzJiMS00NGZkLTgyNmEt MWUyOTJjMGU5NWYxLzEvMFNZZk1PRkxtbEhXZk9EN0dHbWp6eHhBcGcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82NzI5NzQtNzJiMS00NGZkLTgyNmEtMWUyOTJjMGU5NWYx LzEvX0tIa1NIejQxS0xaWWQxaUx6NTFBYjNDU0NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXCrKMA0G CSqGSIb3DQEBCwUAA4IBAQBxpNy6wm6huJEHKDjelAO0RjafxgjGhrNEZQxJAUsw hyvXSBYD9qqUU89U1jappzYjJauk6XiAQxjFSRv6iY2KVJEpIQ+L7qo+vM84Kq4i q4h/4Tjquen7FGlj10YwYGqFt7ovZZnQsH7K5WoTm+iSBPoDHlzTiuQhh06zkD0K z8pO7ZsbH5ryFD+2t35Qm5QtSritNnVr90dORZPglVBkvB3JT8OHMdQxZZJaftd+ GYAO1DHqUIFwQVmrZofhZteeiBq7F1Qj3ohxgEeYI3r5S8DyBmchfFRcqdG9sAKx Lov6PMpOFDoe00/24K7LrWYNExcnd6rAZ3A0iYZDwdNe -----END CERTIFICATE-----Generated at Sat Dec 6 23:19:22 2025 by rpki-client