This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/IV7k3Tjdhy4ZX_pfulT7j2N4neg.roa File: IV7k3Tjdhy4ZX_pfulT7j2N4neg.roa (raw, json) Hash identifier: bOlJxw58BeHAyOfR0fMmgPMaYfohjFrYpoO6kc7FZd4= Subject key identifier: 21:5E:E4:DD:38:DD:87:2E:19:5F:FA:5F:BA:54:FB:8F:63:78:9D:E8 Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Certificate serial: 019A5922169B19AEFF5D9BE6E7744325D0AC Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/IV7k3Tjdhy4ZX_pfulT7j2N4neg.roa Signing time: Thu 06 Nov 2025 12:26:37 +0000 ROA not before: Thu 06 Nov 2025 12:26:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42619 IP address blocks: 194.92.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:59:22:16:9b:19:ae:ff:5d:9b:e6:e7:74:43:25:d0:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Validity Not Before: Nov 6 12:26:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=215ee4dd38dd872e195ffa5fba54fb8f63789de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:53:0b:eb:cb:70:1b:2d:b9:4f:23:81:2c:40: 18:1c:70:7d:65:50:8a:16:5d:cc:b1:99:91:94:37: d4:d4:1d:f5:ab:bb:20:3b:25:08:a6:b6:aa:fa:5f: 27:ae:71:60:a1:d4:d2:81:96:26:5b:0e:7d:ec:a3: bd:cb:e3:3e:91:b6:9d:41:07:a0:86:3c:eb:e1:be: 02:03:53:6c:60:1f:5f:f1:be:43:19:ab:ff:5a:1a: 89:fe:a0:a8:9c:ad:9d:b8:40:7d:c6:ff:7b:a4:52: c4:68:60:57:3b:b9:89:f6:4c:2d:da:94:79:bf:10: f2:1f:7e:dd:db:1a:e8:83:e8:d0:dd:d0:47:52:3b: 80:f8:e5:85:c9:b9:12:7e:64:7f:2f:81:dd:3b:4e: b3:00:cb:93:66:99:d7:8f:0c:10:fa:fd:99:f7:be: b5:fe:0e:b1:94:f8:0d:81:e9:a7:e9:d3:1e:84:e4: c3:72:ce:2e:76:58:cb:01:69:ed:bc:74:5a:15:02: 76:40:de:ef:a9:d2:6d:9e:a6:50:a1:ae:94:07:95: aa:18:b5:d8:41:bd:bc:b8:30:a4:ad:36:34:34:75: c6:cb:3e:78:e7:98:e9:3d:44:9e:56:08:cd:95:30: c9:86:e3:73:3f:48:d7:40:c6:c8:2f:f4:57:61:e5: 12:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5E:E4:DD:38:DD:87:2E:19:5F:FA:5F:BA:54:FB:8F:63:78:9D:E8 X509v3 Authority Key Identifier: keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/IV7k3Tjdhy4ZX_pfulT7j2N4neg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.92.108.0/22 Signature Algorithm: sha256WithRSAEncryption 51:d3:d9:cb:c9:58:7a:70:82:a2:de:79:f3:26:bc:8f:ad:b9: 88:37:4b:e0:dd:03:aa:1c:ef:9a:19:b1:d1:93:2b:93:65:8d: 8a:d9:4d:24:24:54:9b:23:5d:76:df:b6:df:37:4b:35:4f:c5: 12:99:61:24:71:79:0a:a9:86:11:1c:7c:3e:14:ba:20:02:c5: 58:02:a7:39:12:60:51:8d:67:7d:87:05:6d:60:71:b7:5a:d4: 95:28:e1:ba:37:f1:9c:45:55:69:24:17:61:cf:d2:0c:96:54: 25:56:5c:2c:4f:fc:5e:29:cb:67:3f:a5:f8:ea:b6:f9:57:a9: 61:d6:45:76:ed:9f:0a:6c:86:37:1b:fd:2b:79:ad:10:43:8e: 65:69:2d:c8:24:a6:6b:5d:ad:fc:0d:40:68:7c:c3:06:2e:53: 9a:da:b6:6f:ed:b0:2f:5a:f9:5a:53:dd:16:fc:7e:94:7d:cc: 43:da:e1:04:3c:3e:34:a4:ca:86:1b:79:db:d6:d5:a7:72:0c: 85:9d:4d:3d:7c:0c:62:ac:01:90:fb:05:c4:a2:77:a2:00:6b: 13:aa:ca:4f:b7:1b:e1:e1:d4:12:77:d2:42:81:45:b3:c4:6d: 28:1e:51:25:60:01:68:6b:5b:65:ba:d9:59:72:fd:36:17:67: 41:0d:2d:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpZIhabGa7/XZvm53RDJdCsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOWU5Njk2ZGNjZjZjMWE0MzIwOTA0MDg1MTRhZWNkYzNm NjA3MzkwHhcNMjUxMTA2MTIyNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTVlZTRkZDM4ZGQ4NzJlMTk1ZmZhNWZiYTU0ZmI4ZjYzNzg5ZGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lML68twGy25TyOBLEAYHHB9ZVCK Fl3MsZmRlDfU1B31q7sgOyUIpraq+l8nrnFgodTSgZYmWw597KO9y+M+kbadQQeg hjzr4b4CA1NsYB9f8b5DGav/WhqJ/qConK2duEB9xv97pFLEaGBXO7mJ9kwt2pR5 vxDyH37d2xrog+jQ3dBHUjuA+OWFybkSfmR/L4HdO06zAMuTZpnXjwwQ+v2Z9761 /g6xlPgNgemn6dMehOTDcs4udljLAWntvHRaFQJ2QN7vqdJtnqZQoa6UB5WqGLXY Qb28uDCkrTY0NHXGyz5455jpPUSeVgjNlTDJhuNzP0jXQMbIL/RXYeUSnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCFe5N043YcuGV/6X7pU+49jeJ3oMB8GA1UdIwQY MBaAFG+elpbcz2waQyCQQIUUrs3D9gc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjIt YmFmNGUwYjRhNjllLzEvSVY3azNUamRoeTRaWF9wZnVsVDdqMk40bmVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjItYmFmNGUwYjRhNjll LzEvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwlxsMA0G CSqGSIb3DQEBCwUAA4IBAQBR09nLyVh6cIKi3nnzJryPrbmIN0vg3QOqHO+aGbHR kyuTZY2K2U0kJFSbI11237bfN0s1T8USmWEkcXkKqYYRHHw+FLogAsVYAqc5EmBR jWd9hwVtYHG3WtSVKOG6N/GcRVVpJBdhz9IMllQlVlwsT/xeKctnP6X46rb5V6lh 1kV27Z8KbIY3G/0rea0QQ45laS3IJKZrXa38DUBofMMGLlOa2rZv7bAvWvlaU90W /H6UfcxD2uEEPD40pMqGG3nb1tWncgyFnU09fAxirAGQ+wXEoneiAGsTqspPtxvh 4dQSd9JCgUWzxG0oHlElYAFoa1tlutlZcv02F2dBDS3l -----END CERTIFICATE-----Generated at Sat Dec 6 21:52:03 2025 by rpki-client