This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/_5kn6K8DdeOgfuAfLiKfLXi7yxY.roa File: _5kn6K8DdeOgfuAfLiKfLXi7yxY.roa (raw, json) Hash identifier: 6PNOTlFouZY02QoVHVq1Ql0nf7kxEM6UvNLLWE887CQ= Subject key identifier: FF:99:27:E8:AF:03:75:E3:A0:7E:E0:1F:2E:22:9F:2D:78:BB:CB:16 Certificate issuer: /CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e Certificate serial: 019AEA9D9ED43831E4BD4479A23F68137741 Authority key identifier: C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/_5kn6K8DdeOgfuAfLiKfLXi7yxY.roa Signing time: Thu 04 Dec 2025 18:26:29 +0000 ROA not before: Thu 04 Dec 2025 18:26:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12334 IP address blocks: 94.101.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ea:9d:9e:d4:38:31:e4:bd:44:79:a2:3f:68:13:77:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e Validity Not Before: Dec 4 18:26:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ff9927e8af0375e3a07ee01f2e229f2d78bbcb16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9f:de:e9:be:7c:f2:8f:44:0d:1e:fc:8e:27: 7e:3d:64:3d:3c:bc:55:c3:91:07:37:7b:a9:93:f0: 53:65:7f:b2:89:13:c6:04:e9:63:0c:3b:de:4d:02: 93:69:f9:36:bd:92:42:8b:db:8a:7e:8e:a3:60:71: dd:9b:d6:80:9a:16:ea:b5:d7:43:c7:b0:b5:5e:79: 4e:a3:03:17:43:53:ed:cd:ee:cd:24:28:59:7e:0f: 2b:3c:c4:04:ac:69:0b:20:8a:9b:9c:61:03:23:45: cf:82:25:e1:9d:ec:80:11:a6:64:20:09:00:25:4a: ab:52:83:7b:29:d2:39:1d:0e:91:90:07:16:ca:61: 0b:f0:c9:c2:be:40:4b:5e:79:73:fd:78:0f:08:2e: 93:52:6d:98:e6:e3:42:65:a4:e4:38:78:a3:56:a3: 03:fd:5d:fd:b0:85:3c:55:f6:08:7b:b8:c7:8d:aa: a8:cc:74:9c:62:78:c7:df:12:85:49:30:08:77:86: 1a:fa:79:4c:47:be:01:e8:38:b6:13:ef:32:bb:1a: c3:0c:ba:ea:c1:b0:e1:17:c2:ca:50:70:6b:2b:7f: b4:c7:5f:cc:6e:0a:3b:f5:39:f3:33:a7:1b:70:60: eb:e5:23:c5:46:5e:77:e5:46:ed:1a:3b:ac:2b:0a: 73:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:99:27:E8:AF:03:75:E3:A0:7E:E0:1F:2E:22:9F:2D:78:BB:CB:16 X509v3 Authority Key Identifier: keyid:C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/_5kn6K8DdeOgfuAfLiKfLXi7yxY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.101.106.0/24 Signature Algorithm: sha256WithRSAEncryption a1:75:85:fa:25:ae:3a:f1:25:e3:8f:67:2e:1b:be:22:50:c6: 3b:fc:bc:ee:44:50:e8:6d:77:53:a7:4b:ff:fc:70:5a:02:bc: 9e:bd:c1:f1:f5:1e:7c:94:a5:15:9e:58:38:6d:55:9a:8d:b6: 92:b3:c3:d2:39:e8:11:70:c0:35:c5:ad:d6:cc:ad:7c:01:df: da:50:8d:39:ba:c3:55:a5:9e:fd:0f:77:a1:2a:c4:5e:e3:a0: 7b:a2:ea:60:77:e2:e0:9c:16:4a:3a:75:b2:fb:ca:d0:56:24: d4:9d:c8:b6:23:93:5f:a5:d7:17:aa:2d:56:d5:9b:86:ad:ac: e7:b5:80:8f:09:bb:e1:50:99:9b:1b:88:05:1f:92:ec:a7:e5: 67:c2:b7:63:79:73:19:c9:d6:12:60:25:bc:5c:cc:a3:b4:98: 6d:0b:e8:d2:bc:c7:12:76:8a:af:1a:87:f8:21:d1:a3:d5:60: 49:c4:bc:96:d0:fb:62:8b:18:f0:b2:5f:70:24:34:54:f7:d7: c3:99:5a:74:a2:d1:8e:54:a6:f5:6e:85:59:06:06:a8:f2:10: 53:29:e2:6c:9b:d6:5f:34:58:ed:76:2d:04:f1:b8:62:fb:c3: 5e:3f:7b:4e:77:cc:ac:96:14:ca:e1:46:18:32:53:d7:81:41: 1c:91:24:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrqnZ7UODHkvUR5oj9oE3dBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMTgxYTkyM2U5YWMzYzAwNWViNGM3M2VkYzdhMWU4MzI1 YTViMWUwHhcNMjUxMjA0MTgyNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjk5MjdlOGFmMDM3NWUzYTA3ZWUwMWYyZTIyOWYyZDc4YmJjYjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Z/e6b588o9EDR78jid+PWQ9PLxV w5EHN3upk/BTZX+yiRPGBOljDDveTQKTafk2vZJCi9uKfo6jYHHdm9aAmhbqtddD x7C1XnlOowMXQ1Ptze7NJChZfg8rPMQErGkLIIqbnGEDI0XPgiXhneyAEaZkIAkA JUqrUoN7KdI5HQ6RkAcWymEL8MnCvkBLXnlz/XgPCC6TUm2Y5uNCZaTkOHijVqMD /V39sIU8VfYIe7jHjaqozHScYnjH3xKFSTAId4Ya+nlMR74B6Di2E+8yuxrDDLrq wbDhF8LKUHBrK3+0x1/Mbgo79TnzM6cbcGDr5SPFRl535UbtGjusKwpzwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP+ZJ+ivA3XjoH7gHy4iny14u8sWMB8GA1UdIwQY MBaAFMMYGpI+msPABetMc+3HoegyWlseMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3hnYWtqNmF3OEFGNjB4ejdjZWg2REphV3g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS85YmNhZGEtZDk1NS00ZjJhLTkyNTQt ZjllYzU2NjY4NmI5LzEvXzVrbjZLOERkZU9nZnVBZkxpS2ZMWGk3eXhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS85YmNhZGEtZDk1NS00ZjJhLTkyNTQtZjllYzU2NjY4NmI5 LzEvd3hnYWtqNmF3OEFGNjB4ejdjZWg2REphV3g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXmVqMA0G CSqGSIb3DQEBCwUAA4IBAQChdYX6Ja468SXjj2cuG74iUMY7/LzuRFDobXdTp0v/ /HBaAryevcHx9R58lKUVnlg4bVWajbaSs8PSOegRcMA1xa3WzK18Ad/aUI05usNV pZ79D3ehKsRe46B7oupgd+LgnBZKOnWy+8rQViTUnci2I5NfpdcXqi1W1ZuGrazn tYCPCbvhUJmbG4gFH5Lsp+VnwrdjeXMZydYSYCW8XMyjtJhtC+jSvMcSdoqvGof4 IdGj1WBJxLyW0Ptiixjwsl9wJDRU99fDmVp0otGOVKb1boVZBgao8hBTKeJsm9Zf NFjtdi0E8bhi+8NeP3tOd8yslhTK4UYYMlPXgUEckSR8 -----END CERTIFICATE-----Generated at Sat Dec 6 16:51:44 2025 by rpki-client