This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/T3OhLBOAw7e0wv44p_23R0s8qHo.roa File: T3OhLBOAw7e0wv44p_23R0s8qHo.roa (raw, json) Hash identifier: 8DuBuaHSGCknynomXt614XNhRxVs83fH+JHNcKSNBiQ= Subject key identifier: 4F:73:A1:2C:13:80:C3:B7:B4:C2:FE:38:A7:FD:B7:47:4B:3C:A8:7A Certificate issuer: /CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5 Certificate serial: 019A96005E7DF89720C23D524813FB9DF7F9 Authority key identifier: 7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/T3OhLBOAw7e0wv44p_23R0s8qHo.roa Signing time: Tue 18 Nov 2025 08:06:37 +0000 ROA not before: Tue 18 Nov 2025 08:06:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6730 IP address blocks: 193.72.144.0/24 maxlen: 24 193.72.145.0/24 maxlen: 24 193.72.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:00:5e:7d:f8:97:20:c2:3d:52:48:13:fb:9d:f7:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5 Validity Not Before: Nov 18 08:06:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4f73a12c1380c3b7b4c2fe38a7fdb7474b3ca87a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:62:63:bb:7e:11:36:3b:ab:c3:da:9f:f4:b9: 80:15:b9:d2:97:a1:11:7a:c2:ac:a7:c6:a1:e8:99: 4b:d0:41:fb:e8:4d:8a:01:d4:64:ec:6e:87:2d:73: cf:c3:91:ca:9a:c7:2f:66:2c:aa:70:db:24:a9:b4: 2c:bb:e3:79:7d:6f:32:db:e3:d6:52:e1:06:f8:05: 00:1c:5d:27:35:b9:dd:a7:ef:e8:dd:31:ea:ad:73: 28:11:0c:f8:2c:71:c1:92:7d:c3:9f:d1:ce:87:62: 2f:f3:8c:68:e0:92:90:46:0a:4b:d2:76:a8:27:40: bc:18:b7:dd:c5:2b:63:92:2b:9b:5c:63:e8:9b:ec: 75:92:b0:5d:98:6d:90:c8:d0:52:98:68:9d:14:78: c1:27:3e:b2:f8:48:ea:19:19:a7:cb:f1:27:e5:b4: 28:d3:08:0d:4e:f7:de:69:97:cd:a6:bf:c5:86:d9: cd:0c:10:d6:de:5d:2a:85:c1:49:a5:2f:84:df:92: 41:c0:53:c3:f0:f1:0b:fc:be:e8:b0:88:c5:4b:00: 63:ba:8e:56:01:4e:f1:61:ab:31:4c:09:28:05:70: 01:e0:0f:e5:67:2e:d3:5a:da:a7:0a:71:34:39:58: 76:ed:4f:35:2a:6d:14:96:9c:2f:1f:88:d5:ab:46: 38:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:73:A1:2C:13:80:C3:B7:B4:C2:FE:38:A7:FD:B7:47:4B:3C:A8:7A X509v3 Authority Key Identifier: keyid:7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/T3OhLBOAw7e0wv44p_23R0s8qHo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.72.144.0-193.72.146.255 Signature Algorithm: sha256WithRSAEncryption 82:78:09:78:51:78:c6:d5:c8:97:29:70:f4:9d:60:fc:c6:84: 23:4f:63:33:46:7f:7a:19:d9:32:4c:78:18:cf:96:c8:b3:db: a6:04:56:d1:cd:46:98:2f:fa:43:0f:16:42:cd:54:da:f7:fa: 60:95:ec:6f:d8:98:8c:5e:3c:be:af:44:e4:46:8c:ae:af:fd: fd:96:fa:bb:ac:0c:39:2c:db:77:76:ed:fd:e9:2b:f0:3e:6c: ce:5e:e1:02:9d:3e:a5:b5:00:af:f4:c8:4b:a5:ea:ae:6a:8e: 02:3c:6e:50:12:10:ad:10:a9:5e:d1:44:9d:16:13:67:59:46: 5e:11:12:54:cf:13:f6:9f:e1:a3:09:ad:9b:af:fd:e1:01:90: c1:8f:04:ad:ab:38:6e:70:f4:2d:52:b2:2a:e2:43:75:df:6f: 99:b8:69:9d:f8:5f:f2:51:09:19:8f:3b:14:92:cb:60:05:db: d9:dd:64:a3:35:c9:4c:47:1b:ed:fc:fd:08:78:c7:ab:93:74: 59:01:c3:e6:3c:7d:26:1f:b8:17:46:b0:c9:e3:b9:03:99:f4: c9:99:9e:ce:ac:9f:a0:59:10:6d:28:8a:e0:de:cd:c3:90:f0: de:b5:7b:24:9c:5c:e0:7a:be:5c:a3:62:86:9d:9b:e8:53:6b: dc:eb:f3:c9 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZqWAF59+Jcgwj1SSBP7nff5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmM2UwYjI3YjhlNGQ3OThmOTJiOWRlMTU3ZjFkYTVhNDNj ZDQ5ZTUwHhcNMjUxMTE4MDgwNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjczYTEyYzEzODBjM2I3YjRjMmZlMzhhN2ZkYjc0NzRiM2NhODdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WJju34RNjurw9qf9LmAFbnSl6ER esKsp8ah6JlL0EH76E2KAdRk7G6HLXPPw5HKmscvZiyqcNskqbQsu+N5fW8y2+PW UuEG+AUAHF0nNbndp+/o3THqrXMoEQz4LHHBkn3Dn9HOh2Iv84xo4JKQRgpL0nao J0C8GLfdxStjkiubXGPom+x1krBdmG2QyNBSmGidFHjBJz6y+EjqGRmny/En5bQo 0wgNTvfeaZfNpr/FhtnNDBDW3l0qhcFJpS+E35JBwFPD8PEL/L7osIjFSwBjuo5W AU7xYasxTAkoBXAB4A/lZy7TWtqnCnE0OVh27U81Km0UlpwvH4jVq0Y4JQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFE9zoSwTgMO3tML+OKf9t0dLPKh6MB8GA1UdIwQY MBaAFH8+Cye45NeY+Sud4Vfx2lpDzUnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZno0TEo3amsxNWo1SzUzaFZfSGFXa1BOU2VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hMGM5YWMtM2E0Ny00ZDZjLWFhMTUt YTQyZWM4Nzc2ZmJiLzEvVDNPaExCT0F3N2Uwd3Y0NHBfMjNSMHM4cUhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9hMGM5YWMtM2E0Ny00ZDZjLWFhMTUtYTQyZWM4Nzc2ZmJi LzEvZno0TEo3amsxNWo1SzUzaFZfSGFXa1BOU2VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBATBSJAD BADBSJIwDQYJKoZIhvcNAQELBQADggEBAIJ4CXhReMbVyJcpcPSdYPzGhCNPYzNG f3oZ2TJMeBjPlsiz26YEVtHNRpgv+kMPFkLNVNr3+mCV7G/YmIxePL6vRORGjK6v /f2W+rusDDks23d27f3pK/A+bM5e4QKdPqW1AK/0yEul6q5qjgI8blASEK0QqV7R RJ0WE2dZRl4RElTPE/af4aMJrZuv/eEBkMGPBK2rOG5w9C1SsiriQ3Xfb5m4aZ34 X/JRCRmPOxSSy2AF29ndZKM1yUxHG+38/Qh4x6uTdFkBw+Y8fSYfuBdGsMnjuQOZ 9MmZns6sn6BZEG0oiuDezcOQ8N61eyScXOB6vlyjYoadm+hTa9zr88k= -----END CERTIFICATE-----Generated at Sat Dec 6 20:52:28 2025 by rpki-client