This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/f0t-76IiXeLd5savEiu94YnlFko.roa File: f0t-76IiXeLd5savEiu94YnlFko.roa (raw, json) Hash identifier: XWQiN+uiCeNuRV8xmhiqHYcJeAP9QhC6mKZPlUW2ws4= Subject key identifier: 7F:4B:7E:EF:A2:22:5D:E2:DD:E6:C6:AF:12:2B:BD:E1:89:E5:16:4A Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Certificate serial: 019A96901A0654DA4049F67592187F97B4E1 Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/f0t-76IiXeLd5savEiu94YnlFko.roa Signing time: Tue 18 Nov 2025 10:43:37 +0000 ROA not before: Tue 18 Nov 2025 10:43:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213220 IP address blocks: 203.189.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:90:1a:06:54:da:40:49:f6:75:92:18:7f:97:b4:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Validity Not Before: Nov 18 10:43:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7f4b7eefa2225de2dde6c6af122bbde189e5164a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d7:69:a6:99:14:c0:22:64:ab:32:6a:80:37: 98:a2:f6:d2:8a:cc:04:32:ae:c4:74:e8:4d:73:e9: 59:91:07:f7:93:23:da:42:88:9b:7a:a0:8a:7b:7c: 5c:45:bd:16:c4:d0:74:6f:05:3f:e9:1b:cb:7f:73: 0d:44:80:32:19:a0:43:52:b7:fa:55:7a:95:7e:ac: 57:7d:c3:17:11:b7:e7:83:d9:68:ec:6a:23:38:30: 41:fe:60:ca:42:01:f2:82:9e:57:9d:b6:fc:76:a2: 57:c5:d4:5e:1d:ba:ed:ac:b4:60:6b:60:7c:2d:73: ce:0e:72:37:45:da:9f:89:ed:6e:a2:76:df:6b:37: 25:51:b6:75:42:6f:90:9e:dc:e2:6e:b3:62:39:c3: 6b:cb:69:68:c6:b4:2b:b8:65:89:99:75:d4:d4:7f: fb:65:65:70:44:a9:80:1b:2c:19:ec:06:e1:92:84: 27:25:30:e9:21:03:44:6d:f1:d1:53:46:4b:39:3b: 28:42:7a:35:ab:21:f6:12:30:be:0c:67:8f:62:7f: 8a:6f:1d:ba:98:d5:a9:1d:c0:67:92:42:26:72:8b: 4c:8e:9e:6c:14:f8:4e:5c:25:8a:2f:db:f9:06:f4: 52:49:ef:ae:89:b7:3d:62:9f:c2:71:42:95:45:84: ab:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:4B:7E:EF:A2:22:5D:E2:DD:E6:C6:AF:12:2B:BD:E1:89:E5:16:4A X509v3 Authority Key Identifier: keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/f0t-76IiXeLd5savEiu94YnlFko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.189.233.0/24 Signature Algorithm: sha256WithRSAEncryption c3:20:ad:da:a3:79:9f:a2:70:68:f6:af:c6:76:fe:ea:f2:4f: d1:bf:96:53:e3:87:3c:a4:24:a6:9c:2e:c1:22:6d:4b:4a:20: 7e:7b:c9:4d:e3:8e:0c:14:fd:d0:49:be:0c:77:35:32:a9:91: eb:5d:f8:4a:2d:fc:b4:ee:ba:c7:4e:af:38:17:98:02:7e:3f: dd:f7:bd:01:dd:40:63:b9:24:06:bf:20:2d:c9:83:de:c0:c6: 9a:d5:ee:f2:98:1e:49:3d:b5:1e:a8:44:d3:85:c8:50:66:df: 69:ea:7c:38:6b:94:ef:b9:8f:3e:9e:5b:6e:d4:9b:b3:d5:00: a3:0b:c9:e5:45:55:0a:f6:4e:65:b6:32:40:9e:d7:e5:3c:67: ba:78:f8:bf:6f:2b:1a:8a:d1:8f:a4:4a:44:cd:03:d3:c7:e3: 04:ff:d2:98:74:42:1f:0f:65:5f:ce:71:ff:dd:a9:ff:fa:8e: 7e:6a:d6:b9:b2:77:8f:61:83:63:32:8b:ca:99:11:df:d5:0f: c9:d3:e2:f3:9f:09:cb:b4:3e:a4:07:4b:fe:44:7c:99:01:d9: a6:98:0c:71:ab:1c:c9:39:ea:06:43:6a:bb:d4:8a:1a:fb:06: b5:02:e0:3c:52:ed:ed:ce:2f:01:fc:87:b0:87:36:f6:5b:e4: 3f:e5:84:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqWkBoGVNpASfZ1khh/l7ThMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1 NjU0MmQwHhcNMjUxMTE4MTA0MzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjRiN2VlZmEyMjI1ZGUyZGRlNmM2YWYxMjJiYmRlMTg5ZTUxNjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9dpppkUwCJkqzJqgDeYovbSiswE Mq7EdOhNc+lZkQf3kyPaQoibeqCKe3xcRb0WxNB0bwU/6RvLf3MNRIAyGaBDUrf6 VXqVfqxXfcMXEbfng9lo7GojODBB/mDKQgHygp5Xnbb8dqJXxdReHbrtrLRga2B8 LXPODnI3Rdqfie1uonbfazclUbZ1Qm+QntzibrNiOcNry2loxrQruGWJmXXU1H/7 ZWVwRKmAGywZ7AbhkoQnJTDpIQNEbfHRU0ZLOTsoQno1qyH2EjC+DGePYn+Kbx26 mNWpHcBnkkImcotMjp5sFPhOXCWKL9v5BvRSSe+uibc9Yp/CcUKVRYSroQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH9Lfu+iIl3i3ebGrxIrveGJ5RZKMB8GA1UdIwQY MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt YmQ1ZDNmMDBmYmIyLzEvZjB0LTc2SWlYZUxkNXNhdkVpdTk0WW5sRmtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy73pMA0G CSqGSIb3DQEBCwUAA4IBAQDDIK3ao3mfonBo9q/Gdv7q8k/Rv5ZT44c8pCSmnC7B Im1LSiB+e8lN444MFP3QSb4MdzUyqZHrXfhKLfy07rrHTq84F5gCfj/d970B3UBj uSQGvyAtyYPewMaa1e7ymB5JPbUeqETThchQZt9p6nw4a5TvuY8+nltu1Juz1QCj C8nlRVUK9k5ltjJAntflPGe6ePi/bysaitGPpEpEzQPTx+ME/9KYdEIfD2VfznH/ 3an/+o5+ata5snePYYNjMovKmRHf1Q/J0+LznwnLtD6kB0v+RHyZAdmmmAxxqxzJ OeoGQ2q71Ioa+wa1AuA8Uu3tzi8B/Iewhzb2W+Q/5YTD -----END CERTIFICATE-----Generated at Sat Dec 6 20:31:22 2025 by rpki-client