This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/Ut4GTsDHJeU3zkPEm31-Rn0qsYs.roa File: Ut4GTsDHJeU3zkPEm31-Rn0qsYs.roa (raw, json) Hash identifier: 3T0SrQbpOW/kf5QQEBkIw9oRgVjDjlSvCikCjuKXds8= Subject key identifier: 52:DE:06:4E:C0:C7:25:E5:37:CE:43:C4:9B:7D:7E:46:7D:2A:B1:8B Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e Certificate serial: 019A93B0EFD0DF78D0701056E8DB0ACFA51A Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/Ut4GTsDHJeU3zkPEm31-Rn0qsYs.roa Signing time: Mon 17 Nov 2025 21:20:37 +0000 ROA not before: Mon 17 Nov 2025 21:20:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59586 IP address blocks: 94.136.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:93:b0:ef:d0:df:78:d0:70:10:56:e8:db:0a:cf:a5:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e Validity Not Before: Nov 17 21:20:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=52de064ec0c725e537ce43c49b7d7e467d2ab18b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:69:5c:50:bf:1b:41:30:47:7b:bf:0f:df:b0: 5f:8c:89:cc:2f:91:4d:8f:72:10:d3:d8:9e:97:f5: 73:23:f1:70:41:68:6e:c4:6b:ed:39:e8:8f:cd:60: f0:db:5f:e1:a9:0e:c9:f3:cf:dc:24:f6:3a:47:1d: bb:fb:91:c1:1a:02:4e:27:de:bb:a6:ac:30:70:71: de:65:ac:6d:b9:fa:3d:82:a1:5d:cc:c8:8c:54:11: 3f:56:cd:aa:02:27:f5:73:98:9a:84:0e:d9:54:4f: a7:86:5d:bd:c5:6a:b4:af:4a:bd:e6:9a:54:ba:54: ed:4e:8c:22:bb:fb:04:60:ce:af:2e:7c:38:b2:29: b2:aa:57:9d:2d:8b:3e:09:e4:95:1a:45:bf:0b:d2: 77:c8:8f:6f:d4:b3:0a:fb:41:15:fc:86:82:06:89: aa:03:87:cb:f5:4b:1e:e9:09:8b:58:b2:13:18:a7: d8:74:1c:00:ed:51:8f:4d:74:6c:75:16:c6:7c:b1: f7:73:20:af:8f:d0:dc:9c:b9:06:d5:11:2d:4f:8e: 0c:f5:ee:9f:7a:aa:5e:67:7e:cf:df:06:10:3d:f7: fe:9b:77:65:3a:d6:b4:86:c6:d7:e6:bb:f2:90:97: 38:87:4d:f2:d5:f1:81:80:7f:ef:a2:3b:47:f1:40: df:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DE:06:4E:C0:C7:25:E5:37:CE:43:C4:9B:7D:7E:46:7D:2A:B1:8B X509v3 Authority Key Identifier: keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/Ut4GTsDHJeU3zkPEm31-Rn0qsYs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.136.75.0/24 Signature Algorithm: sha256WithRSAEncryption 86:e2:99:e5:25:89:e9:ca:29:d6:70:37:84:a6:90:13:2d:c4: 2f:1e:38:f7:b5:dd:79:54:d7:8a:2e:ad:79:57:82:d6:23:56: 8e:99:af:f5:c7:f9:8c:6e:32:10:55:44:67:5c:05:72:a5:a0: 10:c6:56:57:d7:02:0c:16:46:1d:9e:cb:6e:cf:83:3d:2f:cb: 34:63:3d:fa:08:b0:5f:01:96:3d:50:24:b5:11:30:67:1f:24: 48:19:37:fe:c6:5b:87:7a:80:82:b0:fd:12:45:a0:75:c4:35: a6:fe:00:7d:5f:c4:dc:c7:90:5b:d2:c9:58:86:3f:49:d7:7b: 63:cd:24:a5:8f:93:91:0a:b7:7c:93:1d:27:79:b3:9a:cc:47: ec:36:c3:cf:a2:52:9c:6b:5f:0d:b2:55:3c:2e:c7:a2:4f:75: 84:33:1e:76:54:35:b3:da:90:08:38:c1:84:f7:d3:6e:b8:55: 2e:1a:ba:e1:23:4e:31:fa:7f:b6:a8:3b:f9:ae:39:eb:a6:8b: 09:1d:73:55:31:20:13:1e:81:bb:fb:1b:99:f0:fe:e7:3d:6c: 5d:c8:e1:32:ba:24:51:2e:97:72:35:bc:3b:1a:42:57:b3:c3: d0:0b:89:f3:34:47:5f:2d:33:0c:bb:60:80:ef:c3:15:81:40: ed:15:39:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqTsO/Q33jQcBBW6NsKz6UaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmOTM4NTAzZDcyOTMxNjI2ZGNiOGQxZTk0NmIyYWUwNmE3 M2QwMmUwHhcNMjUxMTE3MjEyMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmRlMDY0ZWMwYzcyNWU1MzdjZTQzYzQ5YjdkN2U0NjdkMmFiMThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWlcUL8bQTBHe78P37BfjInML5FN j3IQ09iel/VzI/FwQWhuxGvtOeiPzWDw21/hqQ7J88/cJPY6Rx27+5HBGgJOJ967 pqwwcHHeZaxtufo9gqFdzMiMVBE/Vs2qAif1c5iahA7ZVE+nhl29xWq0r0q95ppU ulTtTowiu/sEYM6vLnw4simyqledLYs+CeSVGkW/C9J3yI9v1LMK+0EV/IaCBomq A4fL9Use6QmLWLITGKfYdBwA7VGPTXRsdRbGfLH3cyCvj9DcnLkG1REtT44M9e6f eqpeZ37P3wYQPff+m3dlOta0hsbX5rvykJc4h03y1fGBgH/vojtH8UDfEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFLeBk7AxyXlN85DxJt9fkZ9KrGLMB8GA1UdIwQY MBaAFK+ThQPXKTFibcuNHpRrKuBqc9AuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYt M2I4YjBkMWE1OWE5LzEvVXQ0R1RzREhKZVUzemtQRW0zMS1SbjBxc1lzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYtM2I4YjBkMWE1OWE5 LzEvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXohLMA0G CSqGSIb3DQEBCwUAA4IBAQCG4pnlJYnpyinWcDeEppATLcQvHjj3td15VNeKLq15 V4LWI1aOma/1x/mMbjIQVURnXAVypaAQxlZX1wIMFkYdnstuz4M9L8s0Yz36CLBf AZY9UCS1ETBnHyRIGTf+xluHeoCCsP0SRaB1xDWm/gB9X8Tcx5Bb0slYhj9J13tj zSSlj5ORCrd8kx0nebOazEfsNsPPolKca18NslU8LseiT3WEMx52VDWz2pAIOMGE 99NuuFUuGrrhI04x+n+2qDv5rjnrposJHXNVMSATHoG7+xuZ8P7nPWxdyOEyuiRR LpdyNbw7GkJXs8PQC4nzNEdfLTMMu2CA78MVgUDtFTkA -----END CERTIFICATE-----Generated at Sat Dec 6 09:42:02 2025 by rpki-client