This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/02-uNoM21bjmlG-lE4agOekpdKo.roa File: 02-uNoM21bjmlG-lE4agOekpdKo.roa (raw, json) Hash identifier: i3b0MZOpH3uEgzpNG0t5Zhkr23yS2t5mSf33Dy8+wNQ= Subject key identifier: D3:6F:AE:36:83:36:D5:B8:E6:94:6F:A5:13:86:A0:39:E9:29:74:AA Certificate issuer: /CN=a6a8f3436fd83e8af610f216808996e90acac75d Certificate serial: 019ADF1E4BF2DA599263808B23EDE6C44C29 Authority key identifier: A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/02-uNoM21bjmlG-lE4agOekpdKo.roa Signing time: Tue 02 Dec 2025 12:51:35 +0000 ROA not before: Tue 02 Dec 2025 12:51:35 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216068 IP address blocks: 195.10.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:1e:4b:f2:da:59:92:63:80:8b:23:ed:e6:c4:4c:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6a8f3436fd83e8af610f216808996e90acac75d Validity Not Before: Dec 2 12:51:35 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d36fae368336d5b8e6946fa51386a039e92974aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:da:73:80:5b:0e:e5:37:79:ba:41:46:e5:0c: ea:fa:4f:ed:d4:bd:37:d9:59:89:de:4e:8c:19:06: b9:0f:82:dd:be:dd:43:4a:53:da:d3:bb:07:ee:8a: df:3a:d4:40:6c:3d:2d:33:ed:40:c9:a6:dd:47:bc: 00:e0:e8:8b:33:a0:af:f2:b8:3b:12:a6:26:d7:fa: e5:13:8d:86:fa:a8:7e:c8:dc:38:22:5f:c7:86:96: aa:2d:5c:86:f0:e6:55:ab:d7:1a:71:7e:86:dd:f4: b7:53:e9:9f:ba:22:ad:7b:95:71:4b:c8:33:7b:c6: 53:b6:62:f3:3a:75:b5:a2:31:39:25:dc:fd:84:37: 51:18:b2:92:7c:44:07:ea:2f:ff:79:75:f3:aa:d4: 9e:2d:5a:16:7a:c6:be:b0:e5:b6:dc:b1:fd:2e:95: ee:22:98:da:00:e0:23:21:aa:9e:1e:44:0e:9a:ae: d1:68:5b:ec:2b:2c:9d:62:da:79:c4:79:7f:bc:81: 1a:de:e5:1e:56:50:df:23:a5:c4:a5:7b:35:57:f6: f0:e6:33:fb:a8:6e:f4:59:ba:07:01:fb:0c:33:34: b4:af:87:64:c5:21:b7:61:35:11:21:81:81:df:a2: 1d:35:37:d4:7f:de:39:c0:3b:b8:48:ad:dc:ae:34: 46:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6F:AE:36:83:36:D5:B8:E6:94:6F:A5:13:86:A0:39:E9:29:74:AA X509v3 Authority Key Identifier: keyid:A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/02-uNoM21bjmlG-lE4agOekpdKo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.10.193.0/24 Signature Algorithm: sha256WithRSAEncryption 83:18:49:a1:c4:8b:31:ac:be:f3:8c:9a:cc:ab:c5:82:55:2b: ad:45:1b:e9:4f:b9:12:aa:ed:36:8e:db:82:e0:cd:6c:db:ec: 25:de:82:d6:ef:43:2d:3c:08:80:6f:48:5d:84:a0:39:76:5b: 44:48:78:45:d1:c9:79:c0:ca:dc:33:e5:98:25:a7:f9:e9:03: 70:03:51:1f:5e:c3:65:26:62:1e:f8:ec:e0:fb:3f:c5:14:d7: d8:97:ee:62:45:79:19:d6:b4:0c:41:38:bc:0d:f0:b3:d4:c4: ee:84:26:f4:87:bc:db:39:0b:64:b9:9a:41:f8:b9:f7:08:9d: 25:17:1c:d1:26:32:b9:e6:f5:fe:ad:bf:bd:e4:6b:41:24:6d: 58:cc:58:a4:74:f4:10:18:e7:75:3a:17:d0:5a:c5:d0:8e:92: 9d:e7:04:1f:01:e4:1a:0d:3d:15:81:84:b5:db:91:3c:43:db: 1e:bb:96:35:f5:72:e8:54:36:cd:d0:a7:ba:70:e3:e4:67:af: 9d:a3:ac:17:7c:17:9b:d2:fa:b9:76:fe:a0:3a:0f:cb:ec:04: 0a:08:34:36:28:79:f6:5f:b5:72:67:ef:ac:ec:ba:23:a4:f0: 17:20:5c:5a:81:ec:15:c7:c6:94:c1:4a:a2:29:f5:fb:82:2d: fd:f8:44:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrfHkvy2lmSY4CLI+3mxEwpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YThmMzQzNmZkODNlOGFmNjEwZjIxNjgwODk5NmU5MGFj YWM3NWQwHhcNMjUxMjAyMTI1MTM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzZmYWUzNjgzMzZkNWI4ZTY5NDZmYTUxMzg2YTAzOWU5Mjk3NGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntpzgFsO5Td5ukFG5Qzq+k/t1L03 2VmJ3k6MGQa5D4Ldvt1DSlPa07sH7orfOtRAbD0tM+1AyabdR7wA4OiLM6Cv8rg7 EqYm1/rlE42G+qh+yNw4Il/HhpaqLVyG8OZVq9cacX6G3fS3U+mfuiKte5VxS8gz e8ZTtmLzOnW1ojE5Jdz9hDdRGLKSfEQH6i//eXXzqtSeLVoWesa+sOW23LH9LpXu IpjaAOAjIaqeHkQOmq7RaFvsKyydYtp5xHl/vIEa3uUeVlDfI6XEpXs1V/bw5jP7 qG70WboHAfsMMzS0r4dkxSG3YTURIYGB36IdNTfUf945wDu4SK3crjRGIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNNvrjaDNtW45pRvpROGoDnpKXSqMB8GA1UdIwQY MBaAFKao80Nv2D6K9hDyFoCJlukKysddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHFqelEyX1lQb3IyRVBJV2dJbVc2UXJLeDEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi81YjE2NTctYWJmMC00ZDM2LWE4OTIt YWJlNWM4ZTJiYWQ2LzEvMDItdU5vTTIxYmptbEctbEU0YWdPZWtwZEtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi81YjE2NTctYWJmMC00ZDM2LWE4OTItYWJlNWM4ZTJiYWQ2 LzEvcHFqelEyX1lQb3IyRVBJV2dJbVc2UXJLeDEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwrBMA0G CSqGSIb3DQEBCwUAA4IBAQCDGEmhxIsxrL7zjJrMq8WCVSutRRvpT7kSqu02jtuC 4M1s2+wl3oLW70MtPAiAb0hdhKA5dltESHhF0cl5wMrcM+WYJaf56QNwA1EfXsNl JmIe+Ozg+z/FFNfYl+5iRXkZ1rQMQTi8DfCz1MTuhCb0h7zbOQtkuZpB+Ln3CJ0l FxzRJjK55vX+rb+95GtBJG1YzFikdPQQGOd1OhfQWsXQjpKd5wQfAeQaDT0VgYS1 25E8Q9seu5Y19XLoVDbN0Ke6cOPkZ6+do6wXfBeb0vq5dv6gOg/L7AQKCDQ2KHn2 X7VyZ++s7LojpPAXIFxagewVx8aUwUqiKfX7gi39+ERq -----END CERTIFICATE-----Generated at Sat Dec 6 15:39:12 2025 by rpki-client