This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/eUrM9rglerjy_yKmpaCAHSCnVMk.roa File: eUrM9rglerjy_yKmpaCAHSCnVMk.roa (raw, json) Hash identifier: vgbPkRS3OV/i8VciSjbi3lxHTP3L8ORZ3ULTLSSBnO4= Subject key identifier: 79:4A:CC:F6:B8:25:7A:B8:F2:FF:22:A6:A5:A0:80:1D:20:A7:54:C9 Certificate issuer: /CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720 Certificate serial: 019AC40B72521E3CAFAFF588739141D6B471 Authority key identifier: F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/eUrM9rglerjy_yKmpaCAHSCnVMk.roa Signing time: Thu 27 Nov 2025 06:41:15 +0000 ROA not before: Thu 27 Nov 2025 06:41:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56753 IP address blocks: 195.254.170.0/23 maxlen: 23 195.254.170.0/24 maxlen: 24 195.254.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c4:0b:72:52:1e:3c:af:af:f5:88:73:91:41:d6:b4:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720 Validity Not Before: Nov 27 06:41:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=794accf6b8257ab8f2ff22a6a5a0801d20a754c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ca:73:f4:be:53:33:5b:23:dc:af:b6:33:35: 61:d0:74:78:85:99:59:c2:9a:a6:5f:80:67:c6:0e: ba:93:8d:94:67:0a:5a:ab:4a:47:df:5b:56:aa:33: 93:4f:30:dd:a6:de:51:54:bc:de:70:cb:b9:4c:dd: ad:7a:4f:e8:ef:10:02:05:e8:12:74:46:da:60:cc: 4b:ad:94:df:5a:c6:66:a4:f4:e5:14:9c:84:c4:31: d8:aa:7c:ca:f3:40:62:1d:a9:0d:b3:69:9c:aa:3b: 86:35:3c:ac:c1:b7:5d:6c:bc:9e:5e:51:3a:bd:dd: 53:81:85:03:54:c8:b2:8b:54:13:62:46:cf:16:07: 0c:80:bb:a7:57:4c:df:f3:5c:46:cd:f3:50:43:66: 59:0a:08:07:f4:7f:a6:36:18:c0:e1:e7:70:66:e1: c1:c0:4c:d5:e0:f0:a7:14:04:50:55:d4:56:6f:78: 0e:c2:5d:53:26:32:23:cc:95:42:5e:28:55:3e:5c: 25:ae:1a:a4:b7:9c:d5:f8:4c:b9:da:3c:03:df:fd: 21:62:d1:7c:e0:1b:4b:11:71:9f:69:55:06:d6:bf: 40:54:f3:a1:bd:9d:37:70:af:dd:30:97:96:44:6b: ab:ba:ff:3e:ae:d3:3f:89:ee:e8:bd:ab:2e:34:0e: 39:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4A:CC:F6:B8:25:7A:B8:F2:FF:22:A6:A5:A0:80:1D:20:A7:54:C9 X509v3 Authority Key Identifier: keyid:F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/eUrM9rglerjy_yKmpaCAHSCnVMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.254.170.0/23 Signature Algorithm: sha256WithRSAEncryption 38:24:15:e9:e4:0d:6e:6e:ff:60:9c:08:aa:cd:f9:f1:6d:cd: a6:32:6a:3d:8d:1d:b0:28:2f:54:f7:76:57:7c:8b:94:46:fa: 4f:73:cf:16:96:f3:22:e5:d7:7e:dc:fd:94:5d:9c:7d:2a:a4: 07:3a:cd:22:a1:b2:93:11:4e:21:a9:0d:b9:7f:7a:f1:44:30: 59:e0:8f:d3:58:bd:af:a4:a6:57:84:aa:da:dd:ce:27:3a:c5: 5e:4f:96:08:e4:43:02:7e:0b:15:d1:a9:91:41:6d:49:40:34: 8d:a1:a4:ee:56:7c:00:ab:f2:d8:27:fd:e8:d7:5a:e7:b6:de: d2:4a:1a:27:27:1d:4a:6a:5c:e5:a3:ed:82:f8:70:24:b0:ab: e6:3d:45:a9:fe:3c:53:9d:58:c0:c8:0e:63:67:79:e2:9f:06: 0d:54:f7:70:8a:3c:c0:bd:f3:a5:4b:79:f8:8b:28:9c:55:0f: aa:0d:c4:e3:be:2c:e1:14:ef:9a:fb:61:db:65:ab:c0:36:0c: 2d:db:60:59:5e:1a:47:9b:3b:80:e1:dd:08:4a:3f:31:f2:24: bd:77:11:4c:81:b3:1b:22:66:0c:eb:3f:09:47:68:df:6b:c1: 18:29:aa:89:90:6f:43:a1:16:39:bf:a1:7c:2c:e6:20:e8:aa: 72:13:f9:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrEC3JSHjyvr/WIc5FB1rRxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmRlNzJiZjVhMDBiZGVjNGQxZWZkZDdkMDIwMjllZTc5 ZTQ3MjAwHhcNMjUxMTI3MDY0MTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTRhY2NmNmI4MjU3YWI4ZjJmZjIyYTZhNWEwODAxZDIwYTc1NGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08pz9L5TM1sj3K+2MzVh0HR4hZlZ wpqmX4Bnxg66k42UZwpaq0pH31tWqjOTTzDdpt5RVLzecMu5TN2tek/o7xACBegS dEbaYMxLrZTfWsZmpPTlFJyExDHYqnzK80BiHakNs2mcqjuGNTyswbddbLyeXlE6 vd1TgYUDVMiyi1QTYkbPFgcMgLunV0zf81xGzfNQQ2ZZCggH9H+mNhjA4edwZuHB wEzV4PCnFARQVdRWb3gOwl1TJjIjzJVCXihVPlwlrhqkt5zV+Ey52jwD3/0hYtF8 4BtLEXGfaVUG1r9AVPOhvZ03cK/dMJeWRGuruv8+rtM/ie7ovasuNA45vQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHlKzPa4JXq48v8ipqWggB0gp1TJMB8GA1UdIwQY MBaAFPX95yv1oAvexNHv3X0CAp7nnkcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWYzbktfV2dDOTdFMGVfZGZRSUNudWVlUnlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8zNGMyZTQtNGU5Yi00ODQ3LWE4ZWYt MDgzOGY3OGMwMjU5LzEvZVVyTTlyZ2xlcmp5X3lLbXBhQ0FIU0NuVk1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8zNGMyZTQtNGU5Yi00ODQ3LWE4ZWYtMDgzOGY3OGMwMjU5 LzEvOWYzbktfV2dDOTdFMGVfZGZRSUNudWVlUnlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/6qMA0G CSqGSIb3DQEBCwUAA4IBAQA4JBXp5A1ubv9gnAiqzfnxbc2mMmo9jR2wKC9U93ZX fIuURvpPc88WlvMi5dd+3P2UXZx9KqQHOs0iobKTEU4hqQ25f3rxRDBZ4I/TWL2v pKZXhKra3c4nOsVeT5YI5EMCfgsV0amRQW1JQDSNoaTuVnwAq/LYJ/3o11rntt7S ShonJx1Kalzlo+2C+HAksKvmPUWp/jxTnVjAyA5jZ3ninwYNVPdwijzAvfOlS3n4 iyicVQ+qDcTjvizhFO+a+2HbZavANgwt22BZXhpHmzuA4d0ISj8x8iS9dxFMgbMb ImYM6z8JR2jfa8EYKaqJkG9DoRY5v6F8LOYg6KpyE/nj -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:22 2025 by rpki-client