This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/mXukzpv1NM2kvaZ-rWoJrVpFTLM.roa File: mXukzpv1NM2kvaZ-rWoJrVpFTLM.roa (raw, json) Hash identifier: J7bgse+ysB7WfLwdEC9SLyRriybRWTjR+3BU7PrhOOk= Subject key identifier: 99:7B:A4:CE:9B:F5:34:CD:A4:BD:A6:7E:AD:6A:09:AD:5A:45:4C:B3 Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Certificate serial: 019A40362C274128263FC992DDC110B5B3D4 Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/mXukzpv1NM2kvaZ-rWoJrVpFTLM.roa Signing time: Sat 01 Nov 2025 16:18:03 +0000 ROA not before: Sat 01 Nov 2025 16:18:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60246 IP address blocks: 193.109.160.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:40:36:2c:27:41:28:26:3f:c9:92:dd:c1:10:b5:b3:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Validity Not Before: Nov 1 16:18:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=997ba4ce9bf534cda4bda67ead6a09ad5a454cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6d:a4:38:c9:c7:ba:16:83:b2:9a:64:df:8d: 2f:ab:ae:89:fc:53:44:2b:7f:c6:2a:18:e3:ce:d9: 10:38:1c:e8:67:4d:17:a0:42:ac:42:4d:13:30:ea: a9:14:14:73:dd:74:b7:d8:89:0f:d7:fb:cc:2e:bc: 77:1c:8f:59:bd:0a:31:04:6e:5b:4e:87:e4:44:c9: f3:49:bf:68:f8:48:f7:a8:6d:f0:25:da:87:6f:e5: 42:1d:31:d0:d7:7b:f9:09:ec:22:88:92:7c:e0:f0: e9:ea:a1:c0:13:e1:28:d0:75:35:01:05:50:9f:62: c1:e8:33:6b:eb:ac:98:98:7a:6c:be:9d:57:ee:47: 70:f0:7e:f0:8c:b9:76:df:87:4b:45:5e:33:87:8f: 16:25:b2:c4:dd:36:94:09:99:14:9a:f7:87:50:e1: 0d:37:e6:67:31:6c:8e:45:33:cd:02:50:37:74:4d: 14:88:8a:f4:d9:6d:93:e8:16:05:19:f6:86:28:08: 80:be:85:8d:4b:5c:4a:be:ee:7b:4e:91:f3:4d:10: cc:ec:a9:ef:04:5b:4d:bd:d7:32:2b:eb:3d:8b:d7: 84:c7:14:8e:68:4d:2d:cb:f3:97:fd:78:e7:1d:32: 3f:66:a6:90:9a:36:df:4a:c5:fa:ad:aa:7d:ad:8e: ba:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:7B:A4:CE:9B:F5:34:CD:A4:BD:A6:7E:AD:6A:09:AD:5A:45:4C:B3 X509v3 Authority Key Identifier: keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/mXukzpv1NM2kvaZ-rWoJrVpFTLM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.160.0/22 Signature Algorithm: sha256WithRSAEncryption 51:c1:06:9e:c1:bf:54:23:4b:d4:7a:16:24:94:f3:f2:cf:8f: 67:2d:ed:a1:ad:91:87:31:75:33:73:32:cd:07:6a:f0:9e:56: d2:e8:49:a9:b7:f6:ba:c1:b7:22:f2:06:95:73:67:15:12:09: 9a:55:77:27:5f:d1:5b:a3:89:01:5e:11:0b:cb:31:af:8c:1f: a4:5f:7f:d1:c4:48:0a:7c:04:e5:a1:d3:d4:72:f3:7f:76:90: 0d:25:9e:ce:99:fd:3a:8b:48:f4:3e:90:f0:0c:c6:0e:17:b3: 65:83:c9:55:b7:a0:2d:5b:74:81:3b:1c:b2:d3:98:c9:ef:e9: f4:9d:bb:d2:96:ba:3e:d8:db:2c:d8:24:bd:7b:b5:64:f8:4d: ec:03:d8:2e:f7:f0:8e:9c:20:14:38:16:98:1c:60:5c:d2:5a: f3:58:ef:24:35:fe:6b:e2:b0:c3:57:f4:ed:87:6b:08:20:6f: 56:ce:14:77:e8:6e:77:20:c1:fc:51:c2:bd:e0:c8:68:b9:03: 3d:dc:28:38:76:a2:96:b2:75:00:80:64:8a:1f:a2:b9:5f:61: 93:71:e1:8a:20:a4:4e:dc:9e:94:19:d6:cc:96:96:7c:f4:07: 1f:5d:d4:45:b8:3b:28:d4:4f:9f:71:97:e5:6f:2b:02:0a:5c: 10:8d:39:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpANiwnQSgmP8mS3cEQtbPUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx OWZiMjAwHhcNMjUxMTAxMTYxODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTdiYTRjZTliZjUzNGNkYTRiZGE2N2VhZDZhMDlhZDVhNDU0Y2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW2kOMnHuhaDsppk340vq66J/FNE K3/GKhjjztkQOBzoZ00XoEKsQk0TMOqpFBRz3XS32IkP1/vMLrx3HI9ZvQoxBG5b TofkRMnzSb9o+Ej3qG3wJdqHb+VCHTHQ13v5CewiiJJ84PDp6qHAE+Eo0HU1AQVQ n2LB6DNr66yYmHpsvp1X7kdw8H7wjLl234dLRV4zh48WJbLE3TaUCZkUmveHUOEN N+ZnMWyORTPNAlA3dE0UiIr02W2T6BYFGfaGKAiAvoWNS1xKvu57TpHzTRDM7Knv BFtNvdcyK+s9i9eExxSOaE0ty/OX/XjnHTI/ZqaQmjbfSsX6rap9rY66AwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJl7pM6b9TTNpL2mfq1qCa1aRUyzMB8GA1UdIwQY MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt NDI2OWI1NmJmN2Q0LzEvbVh1a3pwdjFOTTJrdmFaLXJXb0pyVnBGVExNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0 LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwW2gMA0G CSqGSIb3DQEBCwUAA4IBAQBRwQaewb9UI0vUehYklPPyz49nLe2hrZGHMXUzczLN B2rwnlbS6Empt/a6wbci8gaVc2cVEgmaVXcnX9Fbo4kBXhELyzGvjB+kX3/RxEgK fATlodPUcvN/dpANJZ7Omf06i0j0PpDwDMYOF7Nlg8lVt6AtW3SBOxyy05jJ7+n0 nbvSlro+2Nss2CS9e7Vk+E3sA9gu9/COnCAUOBaYHGBc0lrzWO8kNf5r4rDDV/Tt h2sIIG9WzhR36G53IMH8UcK94MhouQM93Cg4dqKWsnUAgGSKH6K5X2GTceGKIKRO 3J6UGdbMlpZ89AcfXdRFuDso1E+fcZflbysCClwQjTlK -----END CERTIFICATE-----Generated at Sun Dec 7 05:56:51 2025 by rpki-client