This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/_fSVy8gUALSmUPQ-yxN1Q7l_wXM.roa File: _fSVy8gUALSmUPQ-yxN1Q7l_wXM.roa (raw, json) Hash identifier: FrBR6FuZTCnouiuHvCixUxsBalYSZNZhY0D3KcXPGlM= Subject key identifier: FD:F4:95:CB:C8:14:00:B4:A6:50:F4:3E:CB:13:75:43:B9:7F:C1:73 Certificate issuer: /CN=0c7887582d83d3f087682af8780a324a353ce782 Certificate serial: 019A783D5858CD67F7A4331A379D861CC6E4 Authority key identifier: 0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/_fSVy8gUALSmUPQ-yxN1Q7l_wXM.roa Signing time: Wed 12 Nov 2025 13:24:37 +0000 ROA not before: Wed 12 Nov 2025 13:24:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205886 IP address blocks: 213.179.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:3d:58:58:cd:67:f7:a4:33:1a:37:9d:86:1c:c6:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c7887582d83d3f087682af8780a324a353ce782 Validity Not Before: Nov 12 13:24:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fdf495cbc81400b4a650f43ecb137543b97fc173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cf:96:ab:e9:a5:80:0a:84:55:de:5a:d7:e0: 08:ff:b8:3e:8e:18:11:01:81:44:f2:3e:61:df:c6: 4d:e8:1a:3c:d5:b2:26:8a:2b:48:ed:d9:0b:d5:fe: 4e:6f:61:31:a4:1f:e9:c4:53:7c:9f:48:c4:50:24: 2f:fa:e8:2c:bf:12:85:2d:73:fb:1e:f9:67:ab:aa: 38:f6:f5:cb:ae:ff:c4:a2:d9:b6:cf:3b:48:56:4d: 64:6e:ab:27:f9:a9:c1:a2:14:f7:63:0e:48:00:c1: f5:3b:02:ac:9b:41:10:40:45:75:1d:93:e3:9c:ac: 25:5d:64:45:df:ed:c6:28:c6:16:a3:2e:46:35:72: ac:82:af:4d:c5:c7:1c:76:81:9b:c8:14:9b:e7:46: 73:0c:40:b3:d3:fa:61:d4:60:a2:25:c6:71:75:a1: 53:0f:a9:55:8d:18:c7:69:cc:58:02:7e:22:39:2f: 3e:ba:08:fd:10:29:1f:f6:40:3c:9a:17:88:0e:21: dd:6e:b3:ac:a7:86:4d:3c:c1:81:eb:8d:51:30:18: 0a:da:2d:5f:5d:db:b1:82:dc:3b:c8:6f:98:8f:f5: 4e:0f:a4:0a:d0:13:1c:79:9a:8c:48:43:24:cf:74: 66:30:d8:f5:bc:b1:0e:06:d1:3f:39:6e:55:4c:8f: d6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F4:95:CB:C8:14:00:B4:A6:50:F4:3E:CB:13:75:43:B9:7F:C1:73 X509v3 Authority Key Identifier: keyid:0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/_fSVy8gUALSmUPQ-yxN1Q7l_wXM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.179.70.0/24 Signature Algorithm: sha256WithRSAEncryption 37:d5:a7:96:68:d6:1b:10:26:84:ab:98:83:87:b3:8a:38:f3: 3a:da:1b:53:85:c4:9d:e3:76:5b:70:90:e1:98:b6:33:65:e9: 30:da:cb:e6:d8:50:a6:2b:59:e7:d7:05:a9:b7:40:d5:70:29: 2e:61:41:c9:c2:fe:14:94:e6:5f:1b:6f:d7:05:4f:41:f9:eb: 97:de:65:1e:a7:51:a0:b1:e4:a4:8c:df:87:8d:4c:45:34:5c: 2f:c4:2a:69:36:67:fc:99:e1:c4:9c:43:0a:bd:fa:ca:fa:fb: 8f:f8:94:24:c7:02:cf:d3:f0:aa:fc:cf:d8:6b:49:e1:39:a2: 82:5b:14:e4:78:68:57:79:a5:7e:1f:07:17:b9:94:22:16:ba: 48:20:05:c6:4c:56:3f:a6:7d:47:df:84:54:2f:de:a0:c7:d6: 8e:94:a7:37:1a:a1:56:5b:c9:ff:86:aa:bf:b9:03:fc:87:3e: a9:77:1a:dd:e3:17:2c:a6:78:bf:14:89:ac:b7:8e:91:2f:cd: 44:9c:19:4d:2f:b4:fe:06:8d:2f:14:05:cd:2b:94:e5:31:5a: ab:84:df:11:68:c4:47:36:44:6c:88:de:d1:b3:bc:0e:5a:66: 54:e7:28:c3:35:c8:79:50:ae:fb:06:cf:a8:b7:fd:28:00:76: 61:99:cf:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp4PVhYzWf3pDMaN52GHMbkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNzg4NzU4MmQ4M2QzZjA4NzY4MmFmODc4MGEzMjRhMzUz Y2U3ODIwHhcNMjUxMTEyMTMyNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGY0OTVjYmM4MTQwMGI0YTY1MGY0M2VjYjEzNzU0M2I5N2ZjMTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM+Wq+mlgAqEVd5a1+AI/7g+jhgR AYFE8j5h38ZN6Bo81bImiitI7dkL1f5Ob2ExpB/pxFN8n0jEUCQv+ugsvxKFLXP7 Hvlnq6o49vXLrv/Eotm2zztIVk1kbqsn+anBohT3Yw5IAMH1OwKsm0EQQEV1HZPj nKwlXWRF3+3GKMYWoy5GNXKsgq9NxcccdoGbyBSb50ZzDECz0/ph1GCiJcZxdaFT D6lVjRjHacxYAn4iOS8+ugj9ECkf9kA8mheIDiHdbrOsp4ZNPMGB641RMBgK2i1f Xduxgtw7yG+Yj/VOD6QK0BMceZqMSEMkz3RmMNj1vLEOBtE/OW5VTI/WrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP30lcvIFAC0plD0PssTdUO5f8FzMB8GA1UdIwQY MBaAFAx4h1gtg9Pwh2gq+HgKMko1POeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREhpSFdDMkQwX0NIYUNyNGVBb3lTalU4NTRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iZmY0OGYtMGEzMC00NzhkLWIyZGIt YWQ0YTFkYTM5M2ExLzEvX2ZTVnk4Z1VBTFNtVVBRLXl4TjFRN2xfd1hNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9iZmY0OGYtMGEzMC00NzhkLWIyZGItYWQ0YTFkYTM5M2Ex LzEvREhpSFdDMkQwX0NIYUNyNGVBb3lTalU4NTRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1bNGMA0G CSqGSIb3DQEBCwUAA4IBAQA31aeWaNYbECaEq5iDh7OKOPM62htThcSd43ZbcJDh mLYzZekw2svm2FCmK1nn1wWpt0DVcCkuYUHJwv4UlOZfG2/XBU9B+euX3mUep1Gg seSkjN+HjUxFNFwvxCppNmf8meHEnEMKvfrK+vuP+JQkxwLP0/Cq/M/Ya0nhOaKC WxTkeGhXeaV+HwcXuZQiFrpIIAXGTFY/pn1H34RUL96gx9aOlKc3GqFWW8n/hqq/ uQP8hz6pdxrd4xcspni/FImst46RL81EnBlNL7T+Bo0vFAXNK5TlMVqrhN8RaMRH NkRsiN7Rs7wOWmZU5yjDNch5UK77Bs+ot/0oAHZhmc8H -----END CERTIFICATE-----Generated at Sat Dec 6 09:42:16 2025 by rpki-client