This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9iO5r3jzGfqO9kmyfQm59MqVouQ.roa File: 9iO5r3jzGfqO9kmyfQm59MqVouQ.roa (raw, json) Hash identifier: ImM2UGdcCoP6SDp4FyEJJDIGoNugfR4c9dZ2nMP4Syw= Subject key identifier: F6:23:B9:AF:78:F3:19:FA:8E:F6:49:B2:7D:09:B9:F4:CA:95:A2:E4 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019AF36ABCCA7B3CB5DF58FC78AF69FB58CE Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9iO5r3jzGfqO9kmyfQm59MqVouQ.roa Signing time: Sat 06 Dec 2025 11:27:29 +0000 ROA not before: Sat 06 Dec 2025 11:27:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 4766 IP address blocks: 93.152.68.0/24 maxlen: 24 93.152.74.0/24 maxlen: 24 93.152.78.0/24 maxlen: 24 93.152.82.0/24 maxlen: 24 93.152.88.0/24 maxlen: 24 93.152.105.0/24 maxlen: 24 93.152.108.0/24 maxlen: 24 93.152.111.0/24 maxlen: 24 93.152.123.0/24 maxlen: 24 93.152.126.0/24 maxlen: 24 109.174.236.0/22 maxlen: 22 195.172.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:6a:bc:ca:7b:3c:b5:df:58:fc:78:af:69:fb:58:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Dec 6 11:27:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f623b9af78f319fa8ef649b27d09b9f4ca95a2e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:43:69:42:d0:7d:5a:81:c1:7b:85:6c:11:a0: e3:65:b5:db:5f:25:a6:e5:47:9e:1f:44:ed:48:a2: b0:a2:00:f3:46:e9:12:ed:16:e4:de:b5:2f:c4:11: ee:cc:89:0c:99:95:97:32:fa:85:fc:aa:9a:08:27: 80:8c:8c:f4:21:93:5a:94:f2:a0:32:f8:5f:0c:91: bc:5f:cb:68:ea:5e:97:27:6c:0a:75:cc:f1:b7:32: 88:d5:33:f6:3a:d5:ae:8a:d4:a0:f5:82:8a:81:69: 35:f6:25:2e:42:93:64:a5:11:db:5d:e9:a9:9e:ee: b6:43:86:05:86:1c:bb:27:61:10:9d:a1:01:88:e2: 69:38:60:4c:07:1b:29:05:9a:60:51:03:3d:a7:ed: 34:79:85:1b:16:96:e5:7b:86:ef:3d:53:30:d4:ba: 2a:d8:ab:1a:cd:ca:ef:4c:bf:9a:be:83:35:c5:40: a9:a3:44:67:7e:51:6c:de:55:85:48:9b:06:92:fc: 11:4e:80:b4:cc:60:65:1b:97:98:01:08:76:a7:65: ea:64:87:10:76:61:4b:2f:29:f8:85:c1:b3:d0:d4: cc:55:f6:f9:d3:66:64:03:7d:c9:68:86:77:54:43: be:c5:c2:f2:ab:95:95:a9:f0:85:a6:c9:1f:18:b0: 3c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:23:B9:AF:78:F3:19:FA:8E:F6:49:B2:7D:09:B9:F4:CA:95:A2:E4 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9iO5r3jzGfqO9kmyfQm59MqVouQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.152.68.0/24 93.152.74.0/24 93.152.78.0/24 93.152.82.0/24 93.152.88.0/24 93.152.105.0/24 93.152.108.0/24 93.152.111.0/24 93.152.123.0/24 93.152.126.0/24 109.174.236.0/22 195.172.206.0/23 Signature Algorithm: sha256WithRSAEncryption 27:0a:89:48:98:dc:f1:7b:23:14:eb:d0:24:8b:9d:2c:4e:5b: 0c:f9:d7:ba:31:a2:9e:10:c7:9f:4a:d5:cd:5d:44:37:16:01: 9a:da:db:b5:36:95:ba:5a:cd:69:12:be:31:da:95:2f:2d:93: 9e:b2:49:ed:3b:0a:94:f2:32:9e:fc:42:81:b9:81:62:88:e7: 69:47:0f:1c:bc:e7:75:c1:17:e4:83:22:d5:f3:a3:ec:f8:fc: 1a:bd:25:01:bf:42:42:c7:1d:45:1e:fc:19:a5:41:2f:fe:8d: 2f:fd:9c:cc:1e:4b:f5:88:23:cd:81:36:75:99:97:e2:39:08: 0f:7b:7d:f1:b5:04:20:89:8b:46:39:5c:fa:96:6b:c5:97:27: e0:8e:24:c5:b2:84:28:1d:58:84:3a:3b:f1:2f:c7:b3:50:d8: fd:39:01:63:c9:85:3f:f0:9c:14:58:06:c2:66:9f:97:3c:b2: af:84:fa:71:d1:94:b0:00:cf:2e:8c:45:2e:0f:09:34:79:e1: 02:9f:a4:3c:12:8f:04:20:4b:de:94:eb:6a:64:76:83:8f:a8: 1c:d6:46:46:a3:29:96:b9:ab:0b:dc:69:b9:60:0b:8c:ce:53: e0:f0:1f:3f:0a:48:9c:24:0a:2e:87:9f:58:78:58:ed:95:2e: ae:ad:f6:80 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZrzarzKezy131j8eK9p+1jOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMjA2MTEyNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjIzYjlhZjc4ZjMxOWZhOGVmNjQ5YjI3ZDA5YjlmNGNhOTVhMmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUNpQtB9WoHBe4VsEaDjZbXbXyWm 5UeeH0TtSKKwogDzRukS7Rbk3rUvxBHuzIkMmZWXMvqF/KqaCCeAjIz0IZNalPKg MvhfDJG8X8to6l6XJ2wKdczxtzKI1TP2OtWuitSg9YKKgWk19iUuQpNkpRHbXemp nu62Q4YFhhy7J2EQnaEBiOJpOGBMBxspBZpgUQM9p+00eYUbFpble4bvPVMw1Loq 2KsazcrvTL+avoM1xUCpo0RnflFs3lWFSJsGkvwRToC0zGBlG5eYAQh2p2XqZIcQ dmFLLyn4hcGz0NTMVfb502ZkA33JaIZ3VEO+xcLyq5WVqfCFpskfGLA8wwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPYjua948xn6jvZJsn0JufTKlaLkMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvOWlPNXIzanpHZnFPOWtteWZRbTU5TXFWb3VRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAXZhEAwQA XZhKAwQAXZhOAwQAXZhSAwQAXZhYAwQAXZhpAwQAXZhsAwQAXZhvAwQAXZh7AwQA XZh+AwQCba7sAwQBw6zOMA0GCSqGSIb3DQEBCwUAA4IBAQAnColImNzxeyMU69Ak i50sTlsM+de6MaKeEMefStXNXUQ3FgGa2tu1NpW6Ws1pEr4x2pUvLZOeskntOwqU 8jKe/EKBuYFiiOdpRw8cvOd1wRfkgyLV86Ps+PwavSUBv0JCxx1FHvwZpUEv/o0v /ZzMHkv1iCPNgTZ1mZfiOQgPe33xtQQgiYtGOVz6lmvFlyfgjiTFsoQoHViEOjvx L8ezUNj9OQFjyYU/8JwUWAbCZp+XPLKvhPpx0ZSwAM8ujEUuDwk0eeECn6Q8Eo8E IEvelOtqZHaDj6gc1kZGoymWuasL3Gm5YAuMzlPg8B8/CkicJAouh59YeFjtlS6u rfaA -----END CERTIFICATE-----Generated at Tue Dec 16 04:56:04 2025 by rpki-client