This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/98F0ZRor4OUtYmZXNw0GKGX-nAM.roa File: 98F0ZRor4OUtYmZXNw0GKGX-nAM.roa (raw, json) Hash identifier: 6flqTQWBrUkvuFChAUWn2ljnQUYrkULVtmr6AZSdXDE= Subject key identifier: F7:C1:74:65:1A:2B:E0:E5:2D:62:66:57:37:0D:06:28:65:FE:9C:03 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 019AA0E68D776869474E46D7512FA277A5A4 Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/98F0ZRor4OUtYmZXNw0GKGX-nAM.roa Signing time: Thu 20 Nov 2025 10:54:15 +0000 ROA not before: Thu 20 Nov 2025 10:54:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56534 IP address blocks: 82.115.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:e6:8d:77:68:69:47:4e:46:d7:51:2f:a2:77:a5:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Nov 20 10:54:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f7c174651a2be0e52d626657370d062865fe9c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:82:59:a9:75:de:ec:9d:92:10:d8:e9:8e:d9: 88:56:56:37:f9:98:e7:ca:1b:db:1d:9b:ae:13:f6: a3:95:a7:33:0d:8a:ce:11:e3:71:dc:7c:43:30:06: f2:d4:8f:f6:a4:a2:45:ae:ae:de:e2:74:8b:3d:a8: a5:ee:8b:97:2f:79:1b:1c:95:60:83:e3:ac:0d:c4: a8:ca:a4:06:9b:89:f3:e7:01:d3:1d:59:eb:d2:a1: cd:a8:78:37:0d:78:e9:44:39:11:29:92:9c:44:eb: d6:db:99:2f:bf:c1:1f:30:d7:22:ff:d3:27:3e:38: 9f:34:06:7e:5e:95:38:a6:e5:eb:de:73:64:00:0a: 48:81:82:0b:6e:2d:a5:4e:19:6b:31:f4:02:d3:3c: 75:7d:09:e6:c3:c1:e6:e0:e1:66:70:6b:a1:2b:ca: 01:a7:ee:58:5d:56:44:e8:09:02:ee:79:c6:2c:ff: 1b:c0:87:3a:97:61:05:04:da:f8:ac:f3:95:24:ed: dc:3e:c2:e7:43:e5:27:a0:66:92:9b:52:94:02:42: 29:54:2a:09:1c:47:12:78:34:c6:41:b8:40:64:5b: f5:b1:01:99:fd:a7:dd:7b:ff:65:e0:6d:2d:73:41: d2:4e:a1:da:bd:f9:8e:d2:57:8c:37:73:e5:f5:a2: 26:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C1:74:65:1A:2B:E0:E5:2D:62:66:57:37:0D:06:28:65:FE:9C:03 X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/98F0ZRor4OUtYmZXNw0GKGX-nAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.115.55.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:45:f3:4e:0f:c5:f0:6c:f6:98:ab:f5:7a:7c:29:06:0f:2b: 2d:59:c1:74:39:73:5d:38:a3:db:30:bd:f3:87:75:2a:09:a5: b1:09:90:fa:a0:1d:ad:60:f0:57:0a:1f:c2:31:a4:56:f3:ee: b1:6a:cb:82:ae:7a:33:d5:41:aa:ed:71:a0:5f:44:ab:6c:02: bd:ef:cb:dd:46:d6:20:c8:68:e7:2a:55:64:04:24:d7:de:8a: 7e:37:16:2f:0b:77:b5:3c:e2:58:1a:07:51:22:02:a6:29:3f: 50:f6:4b:c2:06:8c:a9:f9:92:19:d1:f4:fd:67:fc:9a:97:06: e2:e2:2d:fb:c1:15:32:ff:2d:ec:ff:d0:18:87:dc:55:8d:90: 71:3d:f0:43:ab:95:d7:3d:5f:77:99:a3:f6:8c:c5:f4:91:40: 65:ca:de:88:fd:b8:e2:1e:d9:b4:f3:43:d7:a8:30:d2:21:13: 04:40:e5:40:53:eb:d0:40:e7:db:1a:16:58:58:ba:2d:9b:bc: 9d:a6:05:1d:56:0c:6b:d8:1e:64:bb:1f:93:0c:23:c9:39:7b: 3e:8a:48:ea:13:14:55:f8:80:29:d3:08:bf:c8:bf:c5:d5:af: 86:b6:38:b4:86:bb:2e:13:49:73:92:a6:ef:aa:4a:49:53:c2: f4:2d:7c:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqg5o13aGlHTkbXUS+id6WkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjUxMTIwMTA1NDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2MxNzQ2NTFhMmJlMGU1MmQ2MjY2NTczNzBkMDYyODY1ZmU5YzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4JZqXXe7J2SENjpjtmIVlY3+Zjn yhvbHZuuE/ajlaczDYrOEeNx3HxDMAby1I/2pKJFrq7e4nSLPail7ouXL3kbHJVg g+OsDcSoyqQGm4nz5wHTHVnr0qHNqHg3DXjpRDkRKZKcROvW25kvv8EfMNci/9Mn PjifNAZ+XpU4puXr3nNkAApIgYILbi2lThlrMfQC0zx1fQnmw8Hm4OFmcGuhK8oB p+5YXVZE6AkC7nnGLP8bwIc6l2EFBNr4rPOVJO3cPsLnQ+UnoGaSm1KUAkIpVCoJ HEcSeDTGQbhAZFv1sQGZ/afde/9l4G0tc0HSTqHavfmO0leMN3Pl9aImzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPfBdGUaK+DlLWJmVzcNBihl/pwDMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvOThGMFpSb3I0T1V0WW1aWE53MEdLR1gtbkFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUnM3MA0G CSqGSIb3DQEBCwUAA4IBAQBeRfNOD8XwbPaYq/V6fCkGDystWcF0OXNdOKPbML3z h3UqCaWxCZD6oB2tYPBXCh/CMaRW8+6xasuCrnoz1UGq7XGgX0SrbAK978vdRtYg yGjnKlVkBCTX3op+NxYvC3e1POJYGgdRIgKmKT9Q9kvCBoyp+ZIZ0fT9Z/yalwbi 4i37wRUy/y3s/9AYh9xVjZBxPfBDq5XXPV93maP2jMX0kUBlyt6I/bjiHtm080PX qDDSIRMEQOVAU+vQQOfbGhZYWLotm7ydpgUdVgxr2B5kux+TDCPJOXs+ikjqExRV +IAp0wi/yL/F1a+Gtji0hrsuE0lzkqbvqkpJU8L0LXxl -----END CERTIFICATE-----Generated at Sat Dec 6 18:58:49 2025 by rpki-client