This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/My4ZYlmWq5xzJJRo3aSOQHgAIFE.roa File: My4ZYlmWq5xzJJRo3aSOQHgAIFE.roa (raw, json) Hash identifier: Lm0iLMb+ZMY5dREuT/5yKUYez1dcNUbHn2YSgFkm1RE= Subject key identifier: 33:2E:19:62:59:96:AB:9C:73:24:94:68:DD:A4:8E:40:78:00:20:51 Certificate issuer: /CN=ffa019a5c196bbd1cc17d1a8d36c4d657f3816a0 Certificate serial: 019AD5626BCF91C8ACB6B96C83D966910525 Authority key identifier: FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/My4ZYlmWq5xzJJRo3aSOQHgAIFE.roa Signing time: Sun 30 Nov 2025 15:29:48 +0000 ROA not before: Sun 30 Nov 2025 15:29:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203656 IP address blocks: 193.32.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.crl rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d5:62:6b:cf:91:c8:ac:b6:b9:6c:83:d9:66:91:05:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa019a5c196bbd1cc17d1a8d36c4d657f3816a0 Validity Not Before: Nov 30 15:29:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=332e19625996ab9c73249468dda48e4078002051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:70:dc:38:be:17:e8:c9:86:67:23:d8:13:4a: 08:67:03:40:91:8b:24:74:cb:d9:83:ed:d9:58:7b: 38:31:4e:71:ee:36:9b:67:a9:40:3c:d4:6f:c5:e7: 35:49:00:9a:65:80:16:1c:57:e6:46:e4:78:43:f8: aa:55:78:28:95:df:a7:a2:b4:4c:bc:4f:82:26:35: 97:aa:6a:0a:ff:06:69:20:db:22:7f:46:25:5f:1a: 35:a5:e8:70:01:f0:fa:d7:01:15:72:e0:cc:81:d0: 79:a8:5a:c7:c1:d9:ae:80:cd:2a:21:0f:cb:03:da: c9:f9:2a:05:f9:7b:7f:c1:2c:74:76:be:a1:94:60: 16:70:c1:c3:1b:32:3f:90:ac:99:24:9b:a1:94:bb: 81:26:dd:42:61:38:00:81:80:41:d2:11:9d:e2:00: 74:b2:c0:d1:de:d0:4d:78:3a:ac:45:be:17:99:5c: 54:33:80:aa:25:34:ae:81:11:a3:f7:39:2a:ce:0b: f0:e9:98:68:d4:43:e7:6e:ec:ae:0e:48:4f:2d:37: 30:ad:2b:bb:54:1d:9e:90:80:a4:eb:f3:59:7e:ed: 9b:84:65:e5:f6:d1:93:d8:31:7b:64:22:a9:69:b6: e9:89:10:6f:b5:22:dc:44:77:50:16:de:15:21:47: 39:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2E:19:62:59:96:AB:9C:73:24:94:68:DD:A4:8E:40:78:00:20:51 X509v3 Authority Key Identifier: keyid:FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/My4ZYlmWq5xzJJRo3aSOQHgAIFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.32.115.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:6e:04:d0:d2:6f:01:9d:a1:1c:6d:c0:05:fe:18:a7:bd:de: 74:f7:f2:db:e1:2f:44:3d:e9:6e:84:cf:75:eb:ba:b8:d9:ff: 69:b2:87:2c:d7:8f:74:9f:9e:8f:cf:96:83:6a:59:34:23:93: 50:e5:a8:dd:c1:cc:8f:03:10:a2:9d:20:81:73:4b:46:58:d0: 2c:f1:c1:1d:61:67:f3:d2:91:6b:be:e7:a0:ec:80:a5:e9:c1: da:c7:e7:ae:40:35:18:cf:91:f9:ab:0f:b7:7b:ea:4e:b0:16: eb:c8:64:68:5b:95:7c:50:34:99:59:ee:7d:37:9a:a7:02:e1: 9c:f1:71:13:70:55:fe:53:bb:5e:e4:5d:6d:a2:a3:d0:d7:5c: 69:41:4b:3f:dd:5c:cd:7c:16:6c:95:ac:d2:15:e1:4e:e9:8f: 36:c0:df:6c:25:fa:61:6c:19:54:a3:f3:5a:96:e9:b8:7e:4b: 76:ef:d8:24:52:a1:1c:4c:2c:79:4f:2a:f4:f4:50:e0:61:9b: 32:71:b0:09:d4:87:0f:67:33:91:2a:5b:17:41:a7:c1:a4:c9: 8c:52:8e:7d:c1:b0:2d:04:5c:ba:a9:3d:7c:a5:1f:1f:d0:29: 98:35:f2:86:59:07:ae:6a:41:67:f6:e5:9d:7b:06:9e:ec:6e: 3b:a8:07:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrVYmvPkcistrlsg9lmkQUlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTAxOWE1YzE5NmJiZDFjYzE3ZDFhOGQzNmM0ZDY1N2Yz ODE2YTAwHhcNMjUxMTMwMTUyOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzJlMTk2MjU5OTZhYjljNzMyNDk0NjhkZGE0OGU0MDc4MDAyMDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7HDcOL4X6MmGZyPYE0oIZwNAkYsk dMvZg+3ZWHs4MU5x7jabZ6lAPNRvxec1SQCaZYAWHFfmRuR4Q/iqVXgold+norRM vE+CJjWXqmoK/wZpINsif0YlXxo1pehwAfD61wEVcuDMgdB5qFrHwdmugM0qIQ/L A9rJ+SoF+Xt/wSx0dr6hlGAWcMHDGzI/kKyZJJuhlLuBJt1CYTgAgYBB0hGd4gB0 ssDR3tBNeDqsRb4XmVxUM4CqJTSugRGj9zkqzgvw6Zho1EPnbuyuDkhPLTcwrSu7 VB2ekICk6/NZfu2bhGXl9tGT2DF7ZCKpabbpiRBvtSLcRHdQFt4VIUc53QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDMuGWJZlquccySUaN2kjkB4ACBRMB8GA1UdIwQY MBaAFP+gGaXBlrvRzBfRqNNsTWV/OBagMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZBWnBjR1d1OUhNRjlHbzAyeE5aWDg0RnFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9jMDkwNWUtOTFiZC00MWIwLTlkNzct OWU1NmY5NzVkN2U2LzEvTXk0WllsbVdxNXh6SkpSbzNhU09RSGdBSUZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9jMDkwNWUtOTFiZC00MWIwLTlkNzctOWU1NmY5NzVkN2U2 LzEvXzZBWnBjR1d1OUhNRjlHbzAyeE5aWDg0RnFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSBzMA0G CSqGSIb3DQEBCwUAA4IBAQArbgTQ0m8BnaEcbcAF/hinvd509/Lb4S9EPeluhM91 67q42f9psocs1490n56Pz5aDalk0I5NQ5ajdwcyPAxCinSCBc0tGWNAs8cEdYWfz 0pFrvueg7ICl6cHax+euQDUYz5H5qw+3e+pOsBbryGRoW5V8UDSZWe59N5qnAuGc 8XETcFX+U7te5F1toqPQ11xpQUs/3VzNfBZslazSFeFO6Y82wN9sJfphbBlUo/Na lum4fkt279gkUqEcTCx5Tyr09FDgYZsycbAJ1IcPZzORKlsXQafBpMmMUo59wbAt BFy6qT18pR8f0CmYNfKGWQeuakFn9uWdewae7G47qAew -----END CERTIFICATE-----Generated at Sat Dec 6 18:09:15 2025 by rpki-client