This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/0jMTux-3swOFYJuHmZf_7dIUV-M.roa File: 0jMTux-3swOFYJuHmZf_7dIUV-M.roa (raw, json) Hash identifier: FrxVTzFJQeHe8mjWBidC6aBhDpb0ro+aRCPDmQWBbvc= Subject key identifier: D2:33:13:BB:1F:B7:B3:03:85:60:9B:87:99:97:FF:ED:D2:14:57:E3 Certificate issuer: /CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a Certificate serial: 019AA7183FE44646089489D03F4B3C90CCC1 Authority key identifier: A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/0jMTux-3swOFYJuHmZf_7dIUV-M.roa Signing time: Fri 21 Nov 2025 15:46:15 +0000 ROA not before: Fri 21 Nov 2025 15:46:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203306 IP address blocks: 81.95.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a7:18:3f:e4:46:46:08:94:89:d0:3f:4b:3c:90:cc:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a Validity Not Before: Nov 21 15:46:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d23313bb1fb7b30385609b879997ffedd21457e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3d:76:88:55:a7:ba:29:83:f8:1a:3e:3b:80: 71:dd:f3:e0:93:a2:da:f3:a6:ce:03:9d:36:5c:dd: 36:24:18:92:67:e9:bd:f2:90:ef:18:34:1c:3f:ee: f9:e3:4b:88:47:42:7d:14:88:61:90:2d:53:e7:46: 15:1a:e1:c8:8c:86:56:fe:51:6b:9b:14:42:e5:0b: 43:e1:4b:55:13:bd:e5:a6:4b:63:04:be:93:78:9f: 6e:25:f5:c9:a8:4c:3a:b7:28:d2:d9:f2:ee:17:1e: 24:d9:2b:78:5e:11:82:b7:21:fd:1d:4a:09:6e:a0: dc:d8:5f:39:0b:c0:13:eb:e0:09:3c:d6:99:35:cd: c8:21:31:56:d3:7c:e2:d3:97:17:b7:d7:58:79:60: d9:2f:b6:52:8d:c6:67:ee:b1:0c:1a:f6:37:ee:38: 3b:7e:59:4d:8e:37:a9:66:45:1d:23:b9:62:81:44: 20:34:bf:70:9c:9b:98:41:a3:66:e7:74:16:03:80: 49:20:d6:77:d4:ac:dc:68:45:b2:6a:34:2c:8d:90: cb:21:92:32:36:bb:2d:32:fb:66:48:c0:00:6d:89: 80:8a:3c:88:fa:bf:66:0e:53:13:59:fc:0c:2b:09: 7f:2d:e2:c0:33:ed:65:a9:ab:65:8d:71:67:ab:93: 94:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:33:13:BB:1F:B7:B3:03:85:60:9B:87:99:97:FF:ED:D2:14:57:E3 X509v3 Authority Key Identifier: keyid:A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/0jMTux-3swOFYJuHmZf_7dIUV-M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.95.199.0/24 Signature Algorithm: sha256WithRSAEncryption 72:4d:fc:ea:52:42:72:d8:46:f6:57:b8:3a:4a:47:39:c7:50: a3:21:97:c3:72:4b:c7:6d:14:09:43:91:12:44:51:e1:4d:5d: 9a:be:e2:e8:35:eb:69:8e:6e:be:51:c2:2c:ce:73:ba:5c:e2: f2:43:9f:77:cd:ab:b9:f3:3a:e8:d5:07:fc:4f:e5:f0:94:77: 92:8d:1d:05:8b:6b:63:11:57:0a:68:22:87:33:b6:f9:1b:f9: bd:d9:4f:db:e2:27:20:cb:dd:d4:60:59:63:dc:f2:df:f3:fa: f3:a6:41:3e:49:cb:ac:4d:d7:8c:88:00:bb:f1:f9:4d:35:1c: 91:41:9c:8a:a0:2b:aa:77:07:70:6d:98:eb:03:99:b5:43:1d: fb:29:91:44:7d:d2:99:ba:70:ca:94:56:2d:10:fe:15:d9:42: 98:ce:a3:4b:10:d4:41:c6:2c:53:f7:00:2f:27:8e:84:64:b5: ea:dd:72:de:42:bc:95:07:b1:22:8f:0b:c8:c2:9b:10:a1:13: 7a:06:c4:56:a8:5e:c0:ba:76:c9:0b:9d:f3:92:12:4b:49:e9: 28:97:ce:71:c8:c0:fa:e0:94:d7:b2:df:cf:e1:d3:f4:e1:d2: 88:8d:02:55:de:73:4d:3b:56:55:86:b6:2d:34:15:1d:de:2a: cf:50:9f:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqnGD/kRkYIlInQP0s8kMzBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ODI0MzA4YmM4M2I0ZWU1NmYxYzBjMWI5ZmJmYzMxMWIw Y2Q0NGEwHhcNMjUxMTIxMTU0NjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjMzMTNiYjFmYjdiMzAzODU2MDliODc5OTk3ZmZlZGQyMTQ1N2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT12iFWnuimD+Bo+O4Bx3fPgk6La 86bOA502XN02JBiSZ+m98pDvGDQcP+7540uIR0J9FIhhkC1T50YVGuHIjIZW/lFr mxRC5QtD4UtVE73lpktjBL6TeJ9uJfXJqEw6tyjS2fLuFx4k2St4XhGCtyH9HUoJ bqDc2F85C8AT6+AJPNaZNc3IITFW03zi05cXt9dYeWDZL7ZSjcZn7rEMGvY37jg7 fllNjjepZkUdI7ligUQgNL9wnJuYQaNm53QWA4BJINZ31KzcaEWyajQsjZDLIZIy NrstMvtmSMAAbYmAijyI+r9mDlMTWfwMKwl/LeLAM+1lqatljXFnq5OU7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNIzE7sft7MDhWCbh5mX/+3SFFfjMB8GA1UdIwQY MBaAFKSCQwi8g7TuVvHAwbn7/DEbDNRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcElKRENMeUR0TzVXOGNEQnVmdjhNUnNNMUVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81ZmViMTMtOWU0My00MzI1LTg1Yzkt MTk2ZTZmMzc1ZmQ2LzEvMGpNVHV4LTNzd09GWUp1SG1aZl83ZElVVi1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81ZmViMTMtOWU0My00MzI1LTg1YzktMTk2ZTZmMzc1ZmQ2 LzEvcElKRENMeUR0TzVXOGNEQnVmdjhNUnNNMUVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUV/HMA0G CSqGSIb3DQEBCwUAA4IBAQByTfzqUkJy2Eb2V7g6Skc5x1CjIZfDckvHbRQJQ5ES RFHhTV2avuLoNetpjm6+UcIsznO6XOLyQ593zau58zro1Qf8T+XwlHeSjR0Fi2tj EVcKaCKHM7b5G/m92U/b4icgy93UYFlj3PLf8/rzpkE+ScusTdeMiAC78flNNRyR QZyKoCuqdwdwbZjrA5m1Qx37KZFEfdKZunDKlFYtEP4V2UKYzqNLENRBxixT9wAv J46EZLXq3XLeQryVB7EijwvIwpsQoRN6BsRWqF7AunbJC53zkhJLSekol85xyMD6 4JTXst/P4dP04dKIjQJV3nNNO1ZVhrYtNBUd3irPUJ/Z -----END CERTIFICATE-----Generated at Sat Dec 6 11:53:40 2025 by rpki-client