This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/t1tVJGBluZh-0mfN4PeuFoM57sA.roa File: t1tVJGBluZh-0mfN4PeuFoM57sA.roa (raw, json) Hash identifier: B2QvfVIr2IotFiNTcyNDGGRMucF1Vy+EXL4gM8BJPEs= Subject key identifier: B7:5B:55:24:60:65:B9:98:7E:D2:67:CD:E0:F7:AE:16:83:39:EE:C0 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019ADE41D8A7FBE37100681AD5304F89A495 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/t1tVJGBluZh-0mfN4PeuFoM57sA.roa Signing time: Tue 02 Dec 2025 08:50:48 +0000 ROA not before: Tue 02 Dec 2025 08:50:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20473 IP address blocks: 188.255.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:41:d8:a7:fb:e3:71:00:68:1a:d5:30:4f:89:a4:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Dec 2 08:50:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b75b55246065b9987ed267cde0f7ae168339eec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:79:ea:3d:37:ac:02:9e:d6:c7:ba:f1:72:30: 5e:bc:4e:b6:a1:d7:8d:86:f5:6e:b7:f2:4d:96:8c: 7e:88:ea:d9:68:a7:3c:d6:c9:ad:51:bd:b7:ed:8d: 22:62:44:ea:5f:29:24:1c:7c:20:79:82:e4:90:b2: 84:6e:4c:82:9e:87:89:b2:d1:39:c1:c3:e3:68:b4: a5:78:42:ec:00:c3:e9:e9:90:45:02:a1:9f:28:75: 02:9a:80:96:3a:50:cf:9d:e3:68:40:43:fa:2c:e8: 05:7d:0e:4e:4e:90:56:0e:06:c8:5a:78:cc:e9:59: 4d:5f:5d:a6:82:f4:bd:f7:13:22:37:28:7b:ae:2d: b0:c8:3b:27:2a:2b:25:4a:e5:45:84:22:59:16:1f: 3d:e9:37:f1:d1:f2:de:5f:f9:29:06:ff:40:24:2d: 69:8e:67:8b:cd:97:5e:28:38:23:7c:f9:f2:af:8f: 7e:7f:7e:68:26:dd:bd:fd:5d:1d:8e:26:f3:2f:c1: 44:8f:75:7d:60:12:2d:5c:bf:2d:f4:a0:3c:8e:41: e5:1d:f8:d7:62:89:e6:61:e0:f5:e8:00:03:a8:83: a8:59:b6:a5:b6:6d:d3:7b:7a:70:38:29:86:45:3d: b0:67:56:2b:41:16:0d:d3:72:7d:4c:37:d5:c8:cb: 82:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5B:55:24:60:65:B9:98:7E:D2:67:CD:E0:F7:AE:16:83:39:EE:C0 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/t1tVJGBluZh-0mfN4PeuFoM57sA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.255.148.0/24 Signature Algorithm: sha256WithRSAEncryption 83:55:c1:d9:d8:ca:f3:a6:49:52:77:c6:39:1f:b4:2a:2a:20: db:22:a0:b8:b0:99:2d:17:c5:3c:95:19:59:4a:06:c7:04:51: 7a:f7:25:48:d9:7a:33:69:77:ba:d2:07:c7:5f:1e:43:ac:e7: 38:d6:53:a7:48:31:98:31:cf:f8:a9:e4:7a:1c:dd:8c:97:25: f7:f9:55:97:26:8f:89:73:ce:3e:fe:68:cd:50:c9:de:6e:fe: 3b:72:1b:7f:50:31:bc:89:92:e7:2a:bb:d4:9f:32:80:05:2b: 4a:e5:f5:96:cd:14:54:d4:81:c4:c9:f4:10:e6:de:5c:6f:4c: a9:ab:00:f8:6a:d5:b4:8b:40:47:36:23:85:a1:df:57:d8:ad: 12:1e:d1:9c:5e:43:93:ed:69:88:b3:f7:50:4b:bf:5f:08:e2: a2:75:4f:24:46:40:29:9e:43:a4:ae:9e:02:91:14:7f:f8:ca: 09:77:cf:56:b6:8c:32:f6:76:66:30:e2:30:10:e3:f5:3d:7d: 4a:64:2c:7e:15:14:a7:45:73:30:e5:00:fb:51:b4:0f:53:24: 58:35:fa:e5:88:fa:71:af:31:be:e7:b7:f6:c3:36:a7:c6:e9: 5b:8c:0e:bd:9d:77:55:7c:1e:d4:87:d0:dc:cd:16:da:1f:98: 65:e1:aa:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZreQdin++NxAGga1TBPiaSVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMjAyMDg1MDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzViNTUyNDYwNjViOTk4N2VkMjY3Y2RlMGY3YWUxNjgzMzllZWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/HnqPTesAp7Wx7rxcjBevE62odeN hvVut/JNlox+iOrZaKc81smtUb237Y0iYkTqXykkHHwgeYLkkLKEbkyCnoeJstE5 wcPjaLSleELsAMPp6ZBFAqGfKHUCmoCWOlDPneNoQEP6LOgFfQ5OTpBWDgbIWnjM 6VlNX12mgvS99xMiNyh7ri2wyDsnKislSuVFhCJZFh896Tfx0fLeX/kpBv9AJC1p jmeLzZdeKDgjfPnyr49+f35oJt29/V0djibzL8FEj3V9YBItXL8t9KA8jkHlHfjX YonmYeD16AADqIOoWbaltm3Te3pwOCmGRT2wZ1YrQRYN03J9TDfVyMuChwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLdbVSRgZbmYftJnzeD3rhaDOe7AMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvdDF0VkpHQmx1WmgtMG1mTjRQZXVGb001N3NBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvP+UMA0G CSqGSIb3DQEBCwUAA4IBAQCDVcHZ2MrzpklSd8Y5H7QqKiDbIqC4sJktF8U8lRlZ SgbHBFF69yVI2XozaXe60gfHXx5DrOc41lOnSDGYMc/4qeR6HN2MlyX3+VWXJo+J c84+/mjNUMnebv47cht/UDG8iZLnKrvUnzKABStK5fWWzRRU1IHEyfQQ5t5cb0yp qwD4atW0i0BHNiOFod9X2K0SHtGcXkOT7WmIs/dQS79fCOKidU8kRkApnkOkrp4C kRR/+MoJd89Wtowy9nZmMOIwEOP1PX1KZCx+FRSnRXMw5QD7UbQPUyRYNfrliPpx rzG+57f2wzanxulbjA69nXdVfB7Uh9DczRbaH5hl4aoc -----END CERTIFICATE-----Generated at Sat Dec 6 14:54:02 2025 by rpki-client