This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/9SnkD6X0ObnnXzhsQAfU50wq92M.roa File: 9SnkD6X0ObnnXzhsQAfU50wq92M.roa (raw, json) Hash identifier: YB0Si3z91yhXo2AwK4adljOM6Q3ovpqDkxIzPkthN04= Subject key identifier: F5:29:E4:0F:A5:F4:39:B9:E7:5F:38:6C:40:07:D4:E7:4C:2A:F7:63 Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Certificate serial: 019AEF2B1773A572F6FE84C67468C79988BB Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/9SnkD6X0ObnnXzhsQAfU50wq92M.roa Signing time: Fri 05 Dec 2025 15:39:29 +0000 ROA not before: Fri 05 Dec 2025 15:39:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212815 IP address blocks: 80.71.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:2b:17:73:a5:72:f6:fe:84:c6:74:68:c7:99:88:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Validity Not Before: Dec 5 15:39:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f529e40fa5f439b9e75f386c4007d4e74c2af763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d1:73:9b:ea:e4:4c:04:ef:b0:88:f6:24:37: 0d:78:54:32:59:a0:ee:a0:2d:bf:e2:75:95:57:40: c5:2d:75:e1:0b:22:57:18:01:cb:00:f3:01:e9:c4: 9d:e2:cb:04:18:77:c3:55:d8:1d:5c:bb:00:b3:91: 80:ce:09:e8:8f:09:fd:08:42:b3:ad:4e:84:4e:b6: 29:69:fb:1e:79:36:a8:52:a9:09:f2:c8:c6:bb:40: 0d:c5:55:52:a6:3a:3b:0a:69:6b:e9:a8:20:fa:24: fd:f0:ec:81:ef:1a:66:cb:b1:93:9b:0e:4a:3a:e7: 39:93:b3:94:1c:bf:b7:f2:20:49:24:53:52:96:19: 8a:65:03:a3:48:08:04:7d:48:de:66:e0:92:d2:dc: 6e:30:fb:a0:4e:3b:fa:c5:ed:1c:98:05:e0:db:29: b6:a9:a6:ac:65:50:63:14:37:7c:ed:5f:03:86:51: 23:42:70:92:0a:1a:7b:c8:4d:98:8d:cc:29:47:40: b3:3c:cd:de:a1:78:a1:b1:1f:41:eb:e7:96:cd:ab: ad:69:36:56:83:e5:b0:49:02:56:36:de:f1:5a:c1: d9:6f:4c:45:73:59:b7:dc:dc:f1:d2:50:65:34:d1: 95:42:81:c9:88:c7:2e:aa:e3:2f:1e:47:a3:da:d5: b2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:29:E4:0F:A5:F4:39:B9:E7:5F:38:6C:40:07:D4:E7:4C:2A:F7:63 X509v3 Authority Key Identifier: keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/9SnkD6X0ObnnXzhsQAfU50wq92M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.71.237.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:d8:b4:29:04:b3:a8:04:c4:67:34:b0:2c:96:48:50:2a:49: 7d:d1:a3:eb:b8:cb:14:11:38:de:42:2b:2c:f5:58:91:27:37: fc:27:c2:92:b8:37:9d:ff:a9:e1:ed:ef:f6:6e:7f:d2:24:c0: 11:96:d1:bc:3b:35:71:a5:c6:3c:fd:1d:dd:3a:d9:bc:3b:ae: af:77:8f:41:14:83:d8:44:eb:a5:3d:a6:74:83:ae:d9:23:02: ac:51:51:9e:1a:fd:28:57:82:23:8c:11:dc:35:77:31:65:cd: a4:75:f6:08:9c:81:94:f7:a3:3d:39:83:68:80:e0:e8:61:1b: d9:77:f6:e7:ef:09:1c:97:6c:dd:f9:d0:58:66:b6:b1:46:8b: e9:af:f4:a4:c6:9e:1f:2e:fb:bb:38:87:87:27:26:44:ea:12: 98:e5:0c:f2:ff:62:ac:0c:ea:9e:27:3d:03:4c:8b:75:f9:f2: 96:cf:1c:5f:66:06:37:c2:ad:69:d8:46:cf:db:26:15:5e:cf: e2:3a:10:6c:d7:44:0d:e3:2a:06:c0:b2:4e:70:d9:91:be:8d: 0a:c0:c9:57:c0:57:10:10:90:79:28:0c:53:46:c9:00:a8:58: 92:9a:b3:bb:62:f7:4c:a4:dd:f4:b3:88:14:ec:73:72:5f:ca: b4:44:97:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrvKxdzpXL2/oTGdGjHmYi7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx MDhlNDcwHhcNMjUxMjA1MTUzOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTI5ZTQwZmE1ZjQzOWI5ZTc1ZjM4NmM0MDA3ZDRlNzRjMmFmNzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNFzm+rkTATvsIj2JDcNeFQyWaDu oC2/4nWVV0DFLXXhCyJXGAHLAPMB6cSd4ssEGHfDVdgdXLsAs5GAzgnojwn9CEKz rU6ETrYpafseeTaoUqkJ8sjGu0ANxVVSpjo7Cmlr6agg+iT98OyB7xpmy7GTmw5K Ouc5k7OUHL+38iBJJFNSlhmKZQOjSAgEfUjeZuCS0txuMPugTjv6xe0cmAXg2ym2 qaasZVBjFDd87V8DhlEjQnCSChp7yE2YjcwpR0CzPM3eoXihsR9B6+eWzautaTZW g+WwSQJWNt7xWsHZb0xFc1m33Nzx0lBlNNGVQoHJiMcuquMvHkej2tWy+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPUp5A+l9Dm55184bEAH1OdMKvdjMB8GA1UdIwQY MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt MTkxODliM2M5YzdkLzEvOVNua0Q2WDBPYm5uWHpoc1FBZlU1MHdxOTJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEftMA0G CSqGSIb3DQEBCwUAA4IBAQBK2LQpBLOoBMRnNLAslkhQKkl90aPruMsUETjeQiss 9ViRJzf8J8KSuDed/6nh7e/2bn/SJMARltG8OzVxpcY8/R3dOtm8O66vd49BFIPY ROulPaZ0g67ZIwKsUVGeGv0oV4IjjBHcNXcxZc2kdfYInIGU96M9OYNogODoYRvZ d/bn7wkcl2zd+dBYZraxRovpr/Skxp4fLvu7OIeHJyZE6hKY5Qzy/2KsDOqeJz0D TIt1+fKWzxxfZgY3wq1p2EbP2yYVXs/iOhBs10QN4yoGwLJOcNmRvo0KwMlXwFcQ EJB5KAxTRskAqFiSmrO7YvdMpN30s4gU7HNyX8q0RJdv -----END CERTIFICATE-----Generated at Sat Dec 6 18:21:55 2025 by rpki-client