This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/aV0FKOuqhoqYjc8PhMRhlUk_Kr4.roa File: aV0FKOuqhoqYjc8PhMRhlUk_Kr4.roa (raw, json) Hash identifier: 4Zq9HZGSBWYChHHK82q9QSLtG6g08Vt9sV0+tQrBg5c= Subject key identifier: 69:5D:05:28:EB:AA:86:8A:98:8D:CF:0F:84:C4:61:95:49:3F:2A:BE Certificate issuer: /CN=a34e6017e1fe0393278c2859f43043b31ee6c89a Certificate serial: 019AC45B18D91E7330CF0F4D7D3139F2E751 Authority key identifier: A3:4E:60:17:E1:FE:03:93:27:8C:28:59:F4:30:43:B3:1E:E6:C8:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/aV0FKOuqhoqYjc8PhMRhlUk_Kr4.roa Signing time: Thu 27 Nov 2025 08:08:15 +0000 ROA not before: Thu 27 Nov 2025 08:08:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202757 IP address blocks: 46.247.132.0/24 maxlen: 24 46.247.133.0/24 maxlen: 24 46.247.134.0/24 maxlen: 24 46.247.135.0/24 maxlen: 24 89.127.238.0/24 maxlen: 24 185.88.196.0/24 maxlen: 24 185.88.197.0/24 maxlen: 24 185.88.198.0/24 maxlen: 24 185.88.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.crl rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c4:5b:18:d9:1e:73:30:cf:0f:4d:7d:31:39:f2:e7:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a34e6017e1fe0393278c2859f43043b31ee6c89a Validity Not Before: Nov 27 08:08:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=695d0528ebaa868a988dcf0f84c46195493f2abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:db:cc:c5:86:ef:06:6e:4d:66:98:71:08:26: e1:0b:d6:36:e5:34:1c:f4:bf:fa:de:91:22:06:54: a0:79:01:da:c3:00:eb:08:80:3c:f3:45:9f:be:6d: 26:af:2c:52:89:1a:7b:c8:f8:65:05:58:be:5e:94: 0b:f6:8c:f9:55:bb:a7:e1:63:db:fb:09:a0:d4:c5: d0:64:4b:58:62:0e:8d:14:39:64:e7:cf:bb:44:82: 5a:30:a2:e0:8f:74:df:73:68:87:0f:57:29:c5:eb: 83:ed:15:b7:a4:f0:33:86:60:ce:0b:19:64:40:35: 1a:e7:5e:b6:d6:44:0c:56:71:de:99:99:f6:2d:79: 15:91:83:73:69:b2:5b:b6:ea:37:f7:73:50:60:cd: 4b:27:06:de:ea:a1:79:70:ce:f3:ce:8d:d3:9a:95: 98:98:6b:97:75:4a:c7:d0:5e:07:ff:c5:d5:ca:23: f7:73:c4:aa:df:c7:62:54:97:ea:14:49:f9:1c:e6: f3:21:12:0f:02:e9:12:6c:a2:eb:3c:a1:19:e6:78: 06:eb:91:60:50:79:5e:a3:88:df:5e:51:ce:6d:42: 23:63:6b:fa:c4:90:4c:08:44:e2:c7:32:b4:d7:97: c3:72:d4:80:36:b2:b4:65:2f:12:68:2f:e0:d6:f7: 38:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:5D:05:28:EB:AA:86:8A:98:8D:CF:0F:84:C4:61:95:49:3F:2A:BE X509v3 Authority Key Identifier: keyid:A3:4E:60:17:E1:FE:03:93:27:8C:28:59:F4:30:43:B3:1E:E6:C8:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/aV0FKOuqhoqYjc8PhMRhlUk_Kr4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.247.132.0/22 89.127.238.0/24 185.88.196.0/22 Signature Algorithm: sha256WithRSAEncryption 99:36:51:fe:15:b9:1d:6d:6b:71:b4:cf:d5:a3:31:c6:d1:98: 12:01:35:93:6d:48:99:5d:99:d1:c8:05:08:62:32:de:3c:de: 0a:91:17:bb:77:aa:25:5c:1c:5a:9e:db:d2:e3:7c:b6:de:ac: c0:3f:9f:12:3c:5f:3a:b5:1c:cb:b5:83:80:22:29:eb:f7:b4: 50:1a:df:5e:58:40:51:63:bb:93:15:76:0b:1a:3d:c8:1d:cf: e3:01:f2:61:b7:28:e5:7b:2d:72:99:2a:cc:4b:e6:f0:9e:5f: ac:5e:e4:61:06:a9:10:9c:82:64:6d:e3:35:47:d8:5f:99:55: 4e:46:4d:5f:4e:58:ed:f4:16:3e:71:f1:7e:22:56:87:cf:b3: 37:85:30:49:07:ae:5f:35:fc:56:a2:6a:48:71:0d:58:2d:d8: 5a:64:ab:64:06:dd:94:99:c4:e2:f3:c6:af:d2:66:e0:7a:05: 6d:08:2b:4a:a8:38:a7:f1:9e:18:02:8c:71:2a:fe:7d:ad:a1: f0:55:c8:20:af:1e:ad:c7:20:9c:cf:e2:3d:93:e6:7a:60:79: c3:42:68:26:87:71:44:71:de:cf:cd:c4:ef:2b:b8:4f:7e:1c: 7c:df:2d:30:22:b8:8d:39:55:67:02:8e:a5:01:97:f4:b3:de: 3c:f0:74:af -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrEWxjZHnMwzw9NfTE58udRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNGU2MDE3ZTFmZTAzOTMyNzhjMjg1OWY0MzA0M2IzMWVl NmM4OWEwHhcNMjUxMTI3MDgwODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTVkMDUyOGViYWE4NjhhOTg4ZGNmMGY4NGM0NjE5NTQ5M2YyYWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9vMxYbvBm5NZphxCCbhC9Y25TQc 9L/63pEiBlSgeQHawwDrCIA880Wfvm0mryxSiRp7yPhlBVi+XpQL9oz5Vbun4WPb +wmg1MXQZEtYYg6NFDlk58+7RIJaMKLgj3Tfc2iHD1cpxeuD7RW3pPAzhmDOCxlk QDUa51621kQMVnHemZn2LXkVkYNzabJbtuo393NQYM1LJwbe6qF5cM7zzo3TmpWY mGuXdUrH0F4H/8XVyiP3c8Sq38diVJfqFEn5HObzIRIPAukSbKLrPKEZ5ngG65Fg UHleo4jfXlHObUIjY2v6xJBMCETixzK015fDctSANrK0ZS8SaC/g1vc4sQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGldBSjrqoaKmI3PD4TEYZVJPyq+MB8GA1UdIwQY MBaAFKNOYBfh/gOTJ4woWfQwQ7Me5siaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzA1Z0YtSC1BNU1uakNoWjlEQkRzeDdteUpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC82ZDYyNWMtN2U2MC00NTIzLTk0OTEt ZDExMjI5OWZmNjk1LzEvYVYwRktPdXFob3FZamM4UGhNUmhsVWtfS3I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC82ZDYyNWMtN2U2MC00NTIzLTk0OTEtZDExMjI5OWZmNjk1 LzEvbzA1Z0YtSC1BNU1uakNoWjlEQkRzeDdteUpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLveEAwQA WX/uAwQCuVjEMA0GCSqGSIb3DQEBCwUAA4IBAQCZNlH+FbkdbWtxtM/VozHG0ZgS ATWTbUiZXZnRyAUIYjLePN4KkRe7d6olXBxantvS43y23qzAP58SPF86tRzLtYOA Iinr97RQGt9eWEBRY7uTFXYLGj3IHc/jAfJhtyjley1ymSrMS+bwnl+sXuRhBqkQ nIJkbeM1R9hfmVVORk1fTljt9BY+cfF+IlaHz7M3hTBJB65fNfxWompIcQ1YLdha ZKtkBt2UmcTi88av0mbgegVtCCtKqDin8Z4YAoxxKv59raHwVcggrx6txyCcz+I9 k+Z6YHnDQmgmh3FEcd7PzcTvK7hPfhx83y0wIriNOVVnAo6lAZf0s9488HSv -----END CERTIFICATE-----Generated at Sat Dec 6 20:58:04 2025 by rpki-client