This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/r93z9Jq8KCMy95hIpMR2wPfgXIg.roa File: r93z9Jq8KCMy95hIpMR2wPfgXIg.roa (raw, json) Hash identifier: QV/odSgO66kvDHRkk8MAxym1rf6ROxdaLHUmKl3Yctk= Subject key identifier: AF:DD:F3:F4:9A:BC:28:23:32:F7:98:48:A4:C4:76:C0:F7:E0:5C:88 Certificate issuer: /CN=1d05dc740f6f4bb5bc4b03387e9b47530850743c Certificate serial: 019AE8BF671CE1DF44816FF19AC05A779D34 Authority key identifier: 1D:05:DC:74:0F:6F:4B:B5:BC:4B:03:38:7E:9B:47:53:08:50:74:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQXcdA9vS7W8SwM4fptHUwhQdDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/r93z9Jq8KCMy95hIpMR2wPfgXIg.roa Signing time: Thu 04 Dec 2025 09:44:09 +0000 ROA not before: Thu 04 Dec 2025 09:44:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212185 IP address blocks: 76.74.180.0/23 maxlen: 23 76.74.182.0/23 maxlen: 23 2a07:3044:1::/48 maxlen: 48 2a07:3044:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.crl rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.mft rsync://rpki.ripe.net/repository/DEFAULT/HQXcdA9vS7W8SwM4fptHUwhQdDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:bf:67:1c:e1:df:44:81:6f:f1:9a:c0:5a:77:9d:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d05dc740f6f4bb5bc4b03387e9b47530850743c Validity Not Before: Dec 4 09:44:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=afddf3f49abc282332f79848a4c476c0f7e05c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d5:0e:b5:13:c8:e7:3a:a4:d4:70:75:53:99: 10:c6:50:7a:4f:fa:99:a1:67:c0:06:11:dd:8d:4f: 0e:e8:89:b9:b3:9f:48:22:0a:dd:a5:6b:06:0f:9b: 0e:70:d5:2f:ac:ee:ab:1f:03:22:e3:b5:01:92:3b: ef:de:4b:c9:4b:df:61:2d:4f:fa:77:89:86:de:df: 81:1c:2d:91:8c:73:89:37:33:8d:46:da:1d:df:00: 4a:a2:54:5a:0f:09:ae:bf:b9:fa:84:94:5d:20:e2: 60:71:d0:f4:7d:3b:56:69:5d:26:6f:80:20:5b:3c: 7b:a4:0c:a4:80:47:97:a3:88:48:a1:b2:5a:5d:31: 03:6e:65:9b:ec:6d:de:e6:9f:9e:c0:c0:37:a9:3a: b2:e5:14:1f:40:f4:20:b6:85:c3:03:28:5e:48:8a: 6e:e9:ef:f2:7f:46:db:59:cd:60:a8:08:8e:8d:af: 26:4e:a9:e9:d9:03:97:9b:e4:ae:cf:d8:c8:51:cc: da:e1:8f:dc:0c:30:a4:a5:b5:6b:f1:82:0e:78:b1: 83:b4:07:2d:db:2a:5c:e2:99:9a:cf:72:63:59:d0: 45:1c:f3:6a:fb:76:c1:1a:67:6e:0e:93:35:cd:bd: a0:7b:09:8c:fb:2d:dd:19:9d:05:46:bb:74:d4:5a: 13:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:DD:F3:F4:9A:BC:28:23:32:F7:98:48:A4:C4:76:C0:F7:E0:5C:88 X509v3 Authority Key Identifier: keyid:1D:05:DC:74:0F:6F:4B:B5:BC:4B:03:38:7E:9B:47:53:08:50:74:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQXcdA9vS7W8SwM4fptHUwhQdDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/r93z9Jq8KCMy95hIpMR2wPfgXIg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.74.180.0/22 IPv6: 2a07:3044:1::-2a07:3044:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 90:d5:1a:c8:cd:2a:05:3f:f0:d5:2c:09:c2:26:5b:e7:de:15: 3e:b7:41:5b:d4:0d:89:fb:7d:a2:ee:df:c7:45:11:5f:44:d2: 48:10:16:2b:ca:bb:80:d7:5f:29:41:9e:40:2a:b9:bb:33:0b: bd:ab:c3:54:0b:15:ca:fc:35:9d:8c:5f:8d:a8:20:ee:48:03: 9c:ed:c2:94:0f:fb:59:cc:39:ed:00:28:b4:04:35:fe:fc:ff: 77:6d:36:82:21:81:e2:5f:a4:bf:41:eb:ec:7e:fb:c4:3d:b2: dd:fb:74:c1:77:16:98:a0:76:e8:ee:71:5c:54:79:ae:64:7a: d4:48:a3:09:f3:5f:9e:38:f9:d0:1a:e6:fa:52:48:1b:8c:db: 1f:39:77:51:7b:95:e0:25:cb:55:51:13:23:9b:42:f8:a1:22: df:0c:bf:90:14:8b:a3:dc:c7:94:9d:25:56:62:48:9b:be:f9: 2a:cb:11:f7:cf:a1:bd:a1:c3:fa:f4:e0:d8:89:35:d8:3f:3f: 69:51:cf:25:df:51:1b:a5:18:34:9d:b2:42:0f:d3:72:15:cf: ea:10:b2:c0:4e:24:2a:ef:11:4a:61:24:ce:f6:64:88:2b:0d: 3c:ab:8c:29:1f:e2:89:a0:4a:08:e4:4f:51:12:a3:8e:f5:3f: a6:c3:e1:64 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrov2cc4d9EgW/xmsBad500MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMDVkYzc0MGY2ZjRiYjViYzRiMDMzODdlOWI0NzUzMDg1 MDc0M2MwHhcNMjUxMjA0MDk0NDA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmRkZjNmNDlhYmMyODIzMzJmNzk4NDhhNGM0NzZjMGY3ZTA1Yzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtUOtRPI5zqk1HB1U5kQxlB6T/qZ oWfABhHdjU8O6Im5s59IIgrdpWsGD5sOcNUvrO6rHwMi47UBkjvv3kvJS99hLU/6 d4mG3t+BHC2RjHOJNzONRtod3wBKolRaDwmuv7n6hJRdIOJgcdD0fTtWaV0mb4Ag Wzx7pAykgEeXo4hIobJaXTEDbmWb7G3e5p+ewMA3qTqy5RQfQPQgtoXDAyheSIpu 6e/yf0bbWc1gqAiOja8mTqnp2QOXm+Suz9jIUcza4Y/cDDCkpbVr8YIOeLGDtAct 2ypc4pmaz3JjWdBFHPNq+3bBGmduDpM1zb2gewmM+y3dGZ0FRrt01FoTPQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFK/d8/SavCgjMveYSKTEdsD34FyIMB8GA1UdIwQY MBaAFB0F3HQPb0u1vEsDOH6bR1MIUHQ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFFYY2RBOXZTN1c4U3dNNGZwdEhVd2hRZER3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wNGU0YzYtMzM0OS00YWVkLTg4YmMt NWVlNTM0ZmRiMzliLzEvcjkzejlKcThLQ015OTVoSXBNUjJ3UGZnWElnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8wNGU0YzYtMzM0OS00YWVkLTg4YmMtNWVlNTM0ZmRiMzli LzEvSFFYY2RBOXZTN1c4U3dNNGZwdEhVd2hRZER3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQCTEq0MBoE AgACMBQwEgMHACoHMEQAAQMHACoHMEQAAjANBgkqhkiG9w0BAQsFAAOCAQEAkNUa yM0qBT/w1SwJwiZb594VPrdBW9QNift9ou7fx0URX0TSSBAWK8q7gNdfKUGeQCq5 uzMLvavDVAsVyvw1nYxfjagg7kgDnO3ClA/7Wcw57QAotAQ1/vz/d202giGB4l+k v0Hr7H77xD2y3ft0wXcWmKB26O5xXFR5rmR61EijCfNfnjj50Brm+lJIG4zbHzl3 UXuV4CXLVVETI5tC+KEi3wy/kBSLo9zHlJ0lVmJIm775KssR98+hvaHD+vTg2Ik1 2D8/aVHPJd9RG6UYNJ2yQg/TchXP6hCywE4kKu8RSmEkzvZkiCsNPKuMKR/iiaBK CORPURKjjvU/psPhZA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:44:49 2025 by rpki-client