This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/1-fujvOT9Nzk33dcGy888-8__GUg.roa File: 1-fujvOT9Nzk33dcGy888-8__GUg.roa (raw, json) Hash identifier: XDy4HY+2OicQCXekMw1WRq7N4kP6fY3CuIb4XAYAHKw= Subject key identifier: F9:FB:A3:BC:E4:FD:37:39:37:DD:D7:06:CB:CF:3C:FB:CF:FF:19:48 Certificate issuer: /CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe Certificate serial: 019A5E715CC9E01B95D052ABFDEB99E07009 Authority key identifier: 4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/1-fujvOT9Nzk33dcGy888-8__GUg.roa Signing time: Fri 07 Nov 2025 13:11:18 +0000 ROA not before: Fri 07 Nov 2025 13:11:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15576 IP address blocks: 185.75.152.0/22 maxlen: 22 193.104.116.0/24 maxlen: 24 2a03:4ae0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5e:71:5c:c9:e0:1b:95:d0:52:ab:fd:eb:99:e0:70:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe Validity Not Before: Nov 7 13:11:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f9fba3bce4fd373937ddd706cbcf3cfbcfff1948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:29:7c:44:61:09:65:99:44:f1:16:06:a8:98: 2c:c2:2c:42:fd:32:81:0a:1e:c1:34:eb:a2:9b:82: 62:fe:ae:f4:d2:81:f4:50:72:cc:f5:b4:cd:c6:7f: a8:10:8b:f3:b5:3a:4d:28:e5:08:89:b2:bb:ba:39: 0f:59:7e:c3:93:94:6c:a4:2b:06:95:55:8f:80:37: 9b:87:df:8f:27:78:c0:dc:cf:28:67:3a:2e:42:d6: 4d:7a:59:19:dd:8e:19:da:e7:23:fe:fa:eb:ec:a2: 66:87:03:de:91:a4:3a:9e:8e:c5:5b:4d:dd:c5:9f: 38:b5:ce:02:dd:aa:62:d5:71:3d:91:ca:ca:c2:3a: 27:5f:2a:53:bf:e8:ea:2d:6d:6d:51:63:ed:e0:53: f2:55:ad:33:c4:ac:d2:fc:78:54:c3:a3:ea:e2:72: de:76:40:cb:99:99:89:2e:79:c4:11:65:a9:74:7a: ca:3f:79:3a:92:30:45:49:fb:22:84:25:cb:83:d6: bb:ed:c4:31:f6:e1:6f:ec:dd:f5:2c:04:8c:ee:2e: 1f:02:07:bc:bf:53:50:ec:5e:b0:14:5c:7f:4f:be: 74:b4:e3:95:b1:e8:17:e3:98:ed:ce:9e:ba:ae:7b: 12:a1:c8:34:c2:ab:05:9e:9f:e7:20:33:40:95:04: b6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FB:A3:BC:E4:FD:37:39:37:DD:D7:06:CB:CF:3C:FB:CF:FF:19:48 X509v3 Authority Key Identifier: keyid:4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/1-fujvOT9Nzk33dcGy888-8__GUg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.152.0/22 193.104.116.0/24 IPv6: 2a03:4ae0::/32 Signature Algorithm: sha256WithRSAEncryption ba:40:1c:e0:6f:df:35:36:fd:ea:e7:c6:f7:b3:c3:b9:3f:c4: 14:af:b2:27:15:6a:bc:87:31:11:09:23:a4:f5:35:e0:4c:51: 6d:35:99:d0:5f:14:4d:b4:f9:cb:c5:ab:0b:e4:72:3f:98:1e: 87:fb:e6:be:34:14:53:c0:02:cb:e6:80:e5:38:30:ef:5a:b5: 94:fc:70:8e:f3:8f:42:cd:9a:5c:ec:c5:da:3d:e6:8a:c8:6e: da:1f:99:7d:38:d5:70:17:52:ca:3d:cf:eb:a5:2c:3b:fc:96: 03:06:80:c8:c7:ff:c9:d1:f8:7e:50:e3:37:6f:d4:1a:b1:ed: e5:a0:f6:cb:9e:e1:8d:ec:3c:d2:8e:d9:35:ad:25:e9:7f:81: aa:98:7d:59:e6:f0:33:3a:1e:a5:a6:6c:a5:76:ad:4f:8e:b9: 08:3f:48:7f:f2:b0:01:bc:f4:08:e9:5c:02:d4:a3:71:d7:dd: 7f:86:36:7a:e1:0e:cf:a6:8b:51:25:06:b0:3d:24:92:b6:03: 6c:8a:79:1a:fe:f7:f0:62:29:b4:99:10:27:b8:fc:bf:54:ee: e4:3b:5e:ac:4e:0e:9d:25:ba:fc:ec:e4:13:e5:07:cc:2f:4e: 07:90:8a:e7:da:7d:7f:a4:b3:86:87:a2:ee:ce:39:5f:b6:c1: c1:0a:88:6f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZpecVzJ4BuV0FKr/euZ4HAJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNGRhMDlmYmJlOTBmYjc5ZjBmMDhiMjA3ZjgzNWYwZjBk YTI5ZmUwHhcNMjUxMTA3MTMxMTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWZiYTNiY2U0ZmQzNzM5MzdkZGQ3MDZjYmNmM2NmYmNmZmYxOTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yl8RGEJZZlE8RYGqJgswixC/TKB Ch7BNOuim4Ji/q700oH0UHLM9bTNxn+oEIvztTpNKOUIibK7ujkPWX7Dk5RspCsG lVWPgDebh9+PJ3jA3M8oZzouQtZNelkZ3Y4Z2ucj/vrr7KJmhwPekaQ6no7FW03d xZ84tc4C3api1XE9kcrKwjonXypTv+jqLW1tUWPt4FPyVa0zxKzS/HhUw6Pq4nLe dkDLmZmJLnnEEWWpdHrKP3k6kjBFSfsihCXLg9a77cQx9uFv7N31LASM7i4fAge8 v1NQ7F6wFFx/T750tOOVsegX45jtzp66rnsSocg0wqsFnp/nIDNAlQS2yQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFPn7o7zk/Tc5N93XBsvPPPvP/xlIMB8GA1UdIwQY MBaAFE9NoJ+76Q+3nw8Isgf4NfDw2in+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDAyZ243dnBEN2VmRHdpeUJfZzE4UERhS2Y0LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82NmJkM2EtNTEyMS00OTBkLThjOTIt NmVhOTRhOTYxZDRjLzEvMS1mdWp2T1Q5TnprMzNkY0d5ODg4LThfX0dVZy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODMvNjZiZDNhLTUxMjEtNDkwZC04YzkyLTZlYTk0YTk2MWQ0 Yy8xL1QwMmduN3ZwRDdlZkR3aXlCX2cxOFBEYUtmNC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEArlLmAME AMFodDANBAIAAjAHAwUAKgNK4DANBgkqhkiG9w0BAQsFAAOCAQEAukAc4G/fNTb9 6ufG97PDuT/EFK+yJxVqvIcxEQkjpPU14ExRbTWZ0F8UTbT5y8WrC+RyP5geh/vm vjQUU8ACy+aA5Tgw71q1lPxwjvOPQs2aXOzF2j3mishu2h+ZfTjVcBdSyj3P66Us O/yWAwaAyMf/ydH4flDjN2/UGrHt5aD2y57hjew80o7ZNa0l6X+Bqph9WebwMzoe paZspXatT465CD9If/KwAbz0COlcAtSjcdfdf4Y2euEOz6aLUSUGsD0kkrYDbIp5 Gv738GIptJkQJ7j8v1Tu5DterE4OnSW6/OzkE+UHzC9OB5CK59p9f6Szhoei7s45 X7bBwQqIbw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:52:19 2025 by rpki-client