This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/04pxtS7w1egRSF27QFM1O16OMv8.roa File: 04pxtS7w1egRSF27QFM1O16OMv8.roa (raw, json) Hash identifier: zo/xXEQHZIy6pzs5KsP7ry+qVYGgePwKJEivqzXLtqg= Subject key identifier: D3:8A:71:B5:2E:F0:D5:E8:11:48:5D:BB:40:53:35:3B:5E:8E:32:FF Certificate issuer: /CN=3076e9855f9bca3017a10137b443ee8c528ca952 Certificate serial: 019AB62EDC1B403525CD469AD30F9568670E Authority key identifier: 30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/04pxtS7w1egRSF27QFM1O16OMv8.roa Signing time: Mon 24 Nov 2025 14:05:15 +0000 ROA not before: Mon 24 Nov 2025 14:05:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206539 IP address blocks: 95.169.64.0/19 maxlen: 24 95.169.64.0/21 maxlen: 24 95.169.72.0/21 maxlen: 24 95.169.80.0/22 maxlen: 24 95.169.88.0/21 maxlen: 24 2a0b:5580::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:2e:dc:1b:40:35:25:cd:46:9a:d3:0f:95:68:67:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3076e9855f9bca3017a10137b443ee8c528ca952 Validity Not Before: Nov 24 14:05:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d38a71b52ef0d5e811485dbb4053353b5e8e32ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:25:d0:0a:98:14:28:8e:1a:e7:79:4f:26:eb: fd:af:d6:fb:d5:08:67:19:41:69:73:5a:76:e2:9b: 29:1c:21:b9:d0:fa:b4:79:9a:4f:82:c6:52:6e:a0: 5f:bb:75:0c:13:2b:c3:ca:4f:c9:db:98:53:a4:32: e7:80:5b:c2:bc:e8:0c:c1:bb:5b:8e:12:bd:58:05: fb:db:45:6f:6c:77:5d:45:1e:3c:3e:c5:76:f9:8d: 84:8a:c4:01:80:9f:0a:20:d1:20:6a:2d:91:9c:1d: f0:3b:df:21:73:98:73:15:54:37:55:98:ee:29:a8: 01:67:71:e3:30:33:84:e8:f0:8e:f2:ef:99:ba:d4: d6:b2:20:ee:0e:e8:76:d0:70:0a:a2:63:0b:85:48: 8a:70:60:ce:4e:f8:0f:dd:9e:0c:ed:55:99:44:2e: da:0c:db:ff:c7:68:1b:0c:41:01:16:ba:cf:45:f4: 0f:4b:9d:54:5f:59:76:d6:1c:3b:ba:c2:f6:75:82: 33:23:d8:72:a1:fe:c3:5b:45:aa:a8:6b:a9:ee:e4: 9b:9c:fe:5d:4d:9e:8d:0a:0d:75:d7:45:77:0e:09: a1:0f:55:11:e1:6d:b2:1b:d2:58:77:c9:a8:b1:c0: 97:8c:fb:96:20:63:2e:a8:5f:69:94:9a:93:bb:b3: 5e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8A:71:B5:2E:F0:D5:E8:11:48:5D:BB:40:53:35:3B:5E:8E:32:FF X509v3 Authority Key Identifier: keyid:30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/04pxtS7w1egRSF27QFM1O16OMv8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.169.64.0/19 IPv6: 2a0b:5580::/29 Signature Algorithm: sha256WithRSAEncryption 6a:d1:b3:9a:90:86:0f:fd:4f:99:1e:0e:fa:05:49:b6:32:91: 7a:ba:32:c8:9b:ef:75:67:a3:2c:bd:5a:2d:6a:63:02:e6:82: e0:aa:fd:32:c4:18:8b:68:d6:51:b8:85:01:b8:0b:8e:67:62: e2:49:c2:2d:2b:73:a3:2b:71:16:78:18:3a:74:9a:c1:57:4a: 0f:b8:b9:f9:a3:97:a4:c5:98:7f:c7:c3:5a:40:3b:ae:f1:c2: 07:ba:a5:7a:c4:8f:0a:4a:0a:8d:2f:56:d4:31:df:b9:49:90: 59:34:6b:8f:f5:28:d8:ed:d3:54:0a:a3:93:e4:bb:9f:88:82: b0:61:38:d1:1a:8a:6e:a1:dd:9f:19:c7:3c:45:5c:eb:7a:e9: 1b:0d:c0:27:aa:08:4c:ef:19:22:bf:de:14:20:a3:36:6c:20: 15:19:e6:f9:12:14:d2:81:ad:1a:38:9c:ba:c4:fc:9e:39:ab: 25:f5:db:24:7a:70:ba:47:ee:61:40:b1:f1:a7:e7:4f:b5:4b: 38:6e:8e:91:0c:2f:e5:27:d5:5c:2b:e3:fa:6f:c2:eb:f0:22: de:b6:cc:25:d1:7f:2c:b1:27:f1:09:b2:f8:8a:ca:c4:94:31: f7:11:a0:57:d0:43:9b:35:06:2b:75:72:73:15:97:c6:2f:0a: 07:cf:3a:83 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZq2LtwbQDUlzUaa0w+VaGcOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNzZlOTg1NWY5YmNhMzAxN2ExMDEzN2I0NDNlZThjNTI4 Y2E5NTIwHhcNMjUxMTI0MTQwNTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzhhNzFiNTJlZjBkNWU4MTE0ODVkYmI0MDUzMzUzYjVlOGUzMmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSXQCpgUKI4a53lPJuv9r9b71Qhn GUFpc1p24pspHCG50Pq0eZpPgsZSbqBfu3UMEyvDyk/J25hTpDLngFvCvOgMwbtb jhK9WAX720VvbHddRR48PsV2+Y2EisQBgJ8KINEgai2RnB3wO98hc5hzFVQ3VZju KagBZ3HjMDOE6PCO8u+ZutTWsiDuDuh20HAKomMLhUiKcGDOTvgP3Z4M7VWZRC7a DNv/x2gbDEEBFrrPRfQPS51UX1l21hw7usL2dYIzI9hyof7DW0WqqGup7uSbnP5d TZ6NCg1110V3DgmhD1UR4W2yG9JYd8moscCXjPuWIGMuqF9plJqTu7Ne1QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNOKcbUu8NXoEUhdu0BTNTtejjL/MB8GA1UdIwQY MBaAFDB26YVfm8owF6EBN7RD7oxSjKlSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUhicGhWLWJ5akFYb1FFM3RFUHVqRktNcVZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lMjUyNjktY2ZjOS00ODQ4LWIxZTUt N2Y3ODZiYjM0MzQ0LzEvMDRweHRTN3cxZWdSU0YyN1FGTTFPMTZPTXY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9lMjUyNjktY2ZjOS00ODQ4LWIxZTUtN2Y3ODZiYjM0MzQ0 LzEvTUhicGhWLWJ5akFYb1FFM3RFUHVqRktNcVZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFX6lAMA0E AgACMAcDBQMqC1WAMA0GCSqGSIb3DQEBCwUAA4IBAQBq0bOakIYP/U+ZHg76BUm2 MpF6ujLIm+91Z6MsvVotamMC5oLgqv0yxBiLaNZRuIUBuAuOZ2LiScItK3OjK3EW eBg6dJrBV0oPuLn5o5ekxZh/x8NaQDuu8cIHuqV6xI8KSgqNL1bUMd+5SZBZNGuP 9SjY7dNUCqOT5LufiIKwYTjRGopuod2fGcc8RVzreukbDcAnqghM7xkiv94UIKM2 bCAVGeb5EhTSga0aOJy6xPyeOasl9dskenC6R+5hQLHxp+dPtUs4bo6RDC/lJ9Vc K+P6b8Lr8CLetswl0X8ssSfxCbL4isrElDH3EaBX0EObNQYrdXJzFZfGLwoHzzqD -----END CERTIFICATE-----Generated at Sat Dec 6 21:29:44 2025 by rpki-client