This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/4q5yWs-H0Iayb3QOvX6WcRBdwlw.roa File: 4q5yWs-H0Iayb3QOvX6WcRBdwlw.roa (raw, json) Hash identifier: qEBn/vQGgrtsIFTxVIm7czvnIpSpWJ9zYm+dXfDvi4A= Subject key identifier: E2:AE:72:5A:CF:87:D0:86:B2:6F:74:0E:BD:7E:96:71:10:5D:C2:5C Certificate issuer: /CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae Certificate serial: 019ACAB85035B4FC635D5B582AD83F3240F6 Authority key identifier: 6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/4q5yWs-H0Iayb3QOvX6WcRBdwlw.roa Signing time: Fri 28 Nov 2025 13:47:48 +0000 ROA not before: Fri 28 Nov 2025 13:47:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8762 IP address blocks: 147.95.0.0/16 maxlen: 16 147.95.128.0/20 maxlen: 20 147.95.160.0/24 maxlen: 24 147.95.200.0/24 maxlen: 24 147.95.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ca:b8:50:35:b4:fc:63:5d:5b:58:2a:d8:3f:32:40:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae Validity Not Before: Nov 28 13:47:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e2ae725acf87d086b26f740ebd7e9671105dc25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:92:d5:31:61:9b:60:60:23:54:e8:03:c6:f0: 38:82:1f:ef:97:c4:b7:9b:45:a2:af:72:9c:fa:93: fa:34:3a:83:07:af:7f:9d:6b:87:f7:0a:89:37:26: 6d:5e:d9:ef:9f:73:44:f3:8f:43:6b:19:52:00:0e: 34:88:36:5d:27:57:76:d2:8e:cc:c7:d4:b8:41:6a: 98:54:54:e4:44:b4:c5:1a:8a:89:84:36:89:04:b8: 98:3a:76:9c:f7:dc:1e:74:a3:08:bf:aa:c4:56:65: 09:ef:79:66:2f:3c:ee:0e:e1:0c:91:0e:f4:93:ea: b6:83:fd:d0:5b:66:5f:e2:22:16:6f:21:a1:4d:14: 99:af:2c:7f:06:80:ba:e4:f5:b4:3b:35:55:ab:7d: 62:f6:95:d7:08:48:8a:65:34:0b:52:c5:77:5e:59: c9:77:4e:03:67:29:ea:0b:2e:da:44:0a:47:09:70: 99:01:64:8f:fa:37:70:11:b9:67:69:02:d5:7a:a6: 51:ed:8a:1e:7b:bd:3c:2e:9b:2c:ee:c8:7f:df:c6: ed:cd:ba:f9:9c:61:f4:7a:2e:63:5f:56:b4:75:92: 67:49:83:91:9c:3d:e2:51:6f:55:a5:cd:98:54:b2: 83:d0:52:5e:e0:05:6c:55:60:1a:3e:7f:61:39:55: 92:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AE:72:5A:CF:87:D0:86:B2:6F:74:0E:BD:7E:96:71:10:5D:C2:5C X509v3 Authority Key Identifier: keyid:6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/4q5yWs-H0Iayb3QOvX6WcRBdwlw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.95.0.0/16 Signature Algorithm: sha256WithRSAEncryption 74:1c:f2:92:8a:56:14:4b:ca:c3:44:2c:e4:ae:eb:50:37:60: 37:89:67:07:bc:b1:fb:cf:86:97:ae:b0:0b:a9:de:d8:03:ed: b9:ce:21:c0:7a:76:0d:bc:cf:7b:50:38:8f:74:b6:01:26:62: fe:cb:9a:7a:5f:ff:82:fa:c1:f9:fa:b5:ad:7f:5f:11:77:97: f5:45:15:29:64:c3:a1:42:94:42:a1:e3:9c:d5:08:e6:50:72: d1:48:a0:91:2f:41:b0:5d:66:9e:68:99:a1:9e:61:86:f2:ae: 28:36:4b:d9:51:3d:4d:d9:a2:fc:9f:ff:8c:32:63:c7:4b:aa: e1:84:20:ac:52:d0:27:40:e9:63:2f:13:6f:4d:43:18:84:39: 04:b1:3c:f8:98:ec:33:25:8b:5a:a0:b2:a2:3a:61:0c:79:b8: aa:d5:e1:03:58:e8:5f:94:c7:39:d8:c0:16:8e:ac:28:34:fe: c2:19:2f:d4:ed:5e:11:67:4a:ba:8a:13:0c:39:a1:51:06:d5: 5b:78:a2:ae:20:bb:6d:96:a1:3b:40:76:70:00:88:b2:6e:fe: ac:fa:5b:c0:98:81:7b:4a:29:3b:6c:1a:3c:1e:28:53:27:52: cb:85:92:dd:71:b9:be:71:e3:cd:f5:89:85:73:c6:83:52:bc: 25:a2:c7:53 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZrKuFA1tPxjXVtYKtg/MkD2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMzRmYTUzZDFkODRkYmFiZTY5OGQ1YmJjY2FlZGYxMDlk MTU3YWUwHhcNMjUxMTI4MTM0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmFlNzI1YWNmODdkMDg2YjI2Zjc0MGViZDdlOTY3MTEwNWRjMjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpLVMWGbYGAjVOgDxvA4gh/vl8S3 m0Wir3Kc+pP6NDqDB69/nWuH9wqJNyZtXtnvn3NE849DaxlSAA40iDZdJ1d20o7M x9S4QWqYVFTkRLTFGoqJhDaJBLiYOnac99wedKMIv6rEVmUJ73lmLzzuDuEMkQ70 k+q2g/3QW2Zf4iIWbyGhTRSZryx/BoC65PW0OzVVq31i9pXXCEiKZTQLUsV3XlnJ d04DZynqCy7aRApHCXCZAWSP+jdwEblnaQLVeqZR7Yoee708Lpss7sh/38btzbr5 nGH0ei5jX1a0dZJnSYORnD3iUW9Vpc2YVLKD0FJe4AVsVWAaPn9hOVWSbQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFOKuclrPh9CGsm90Dr1+lnEQXcJcMB8GA1UdIwQY MBaAFGs0+lPR2E26vmmNW7zK7fEJ0VeuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXpUNlU5SFlUYnEtYVkxYnZNcnQ4UW5SVjY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81MjhkZTEtOGY2OC00Y2I5LWI2Y2Ut ZmZhYWEyOTlhZjYxLzEvNHE1eVdzLUgwSWF5YjNRT3ZYNldjUkJkd2x3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi81MjhkZTEtOGY2OC00Y2I5LWI2Y2UtZmZhYWEyOTlhZjYx LzEvYXpUNlU5SFlUYnEtYVkxYnZNcnQ4UW5SVjY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk18wDQYJ KoZIhvcNAQELBQADggEBAHQc8pKKVhRLysNELOSu61A3YDeJZwe8sfvPhpeusAup 3tgD7bnOIcB6dg28z3tQOI90tgEmYv7Lmnpf/4L6wfn6ta1/XxF3l/VFFSlkw6FC lEKh45zVCOZQctFIoJEvQbBdZp5omaGeYYbyrig2S9lRPU3Zovyf/4wyY8dLquGE IKxS0CdA6WMvE29NQxiEOQSxPPiY7DMli1qgsqI6YQx5uKrV4QNY6F+UxznYwBaO rCg0/sIZL9TtXhFnSrqKEww5oVEG1Vt4oq4gu22WoTtAdnAAiLJu/qz6W8CYgXtK KTtsGjweKFMnUsuFkt1xub5x4831iYVzxoNSvCWix1M= -----END CERTIFICATE-----Generated at Sun Dec 7 05:56:58 2025 by rpki-client