This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/Apq4Tu4C58xcWMKMM4IqdYmdkdM.roa File: Apq4Tu4C58xcWMKMM4IqdYmdkdM.roa (raw, json) Hash identifier: QAVqy0VawV5+3T0dTssniGX3DyrARSWBrdF9GLAoezA= Subject key identifier: 02:9A:B8:4E:EE:02:E7:CC:5C:58:C2:8C:33:82:2A:75:89:9D:91:D3 Certificate issuer: /CN=346474a33c051d17152b21322ccf4ff3808b4270 Certificate serial: 019A9E00F93CB630C3710DB730C387FEC217 Authority key identifier: 34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/Apq4Tu4C58xcWMKMM4IqdYmdkdM.roa Signing time: Wed 19 Nov 2025 21:24:15 +0000 ROA not before: Wed 19 Nov 2025 21:24:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215307 IP address blocks: 91.234.11.0/24 maxlen: 24 193.169.128.0/23 maxlen: 24 194.26.67.0/24 maxlen: 24 2a14:1f40::/32 maxlen: 48 2a14:1f40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9e:00:f9:3c:b6:30:c3:71:0d:b7:30:c3:87:fe:c2:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=346474a33c051d17152b21322ccf4ff3808b4270 Validity Not Before: Nov 19 21:24:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=029ab84eee02e7cc5c58c28c33822a75899d91d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:24:56:66:15:87:54:71:20:9a:c8:1e:71:a4: 47:c5:d3:94:2d:0f:81:38:7a:7e:6f:30:e4:b4:db: 8a:23:bb:fb:cb:0c:43:30:40:80:09:44:19:0e:f7: 23:6d:e3:fa:f4:89:2d:f8:11:8e:e7:df:3e:ca:53: 2a:b5:87:57:53:1b:76:54:f7:95:db:e7:99:0f:21: 52:be:51:ea:63:d9:45:82:1d:e9:cc:0e:ae:58:67: 1d:41:e0:9d:30:cb:d7:7c:d4:35:d0:e4:e8:3c:7b: 06:a0:47:73:f8:4d:95:31:d6:88:06:81:0b:41:c5: e3:8c:ed:8e:c7:b0:6a:d7:c1:c4:a9:80:ea:3b:b0: 87:bb:3c:83:82:65:3c:54:29:08:d6:6e:57:0a:5e: 55:c3:e4:91:20:66:82:a8:af:61:7b:6a:ef:6b:a3: 76:da:08:e4:d6:64:6f:de:38:af:b4:3e:67:51:1b: 60:56:90:f0:ff:6f:61:64:a1:4b:ec:46:f7:38:45: 58:19:46:23:d3:03:eb:e5:6e:0d:81:15:42:e3:aa: 3c:08:30:70:76:bd:3a:49:df:7c:36:88:7d:60:c2: a9:cb:9f:ad:7a:98:b3:67:61:c7:16:2e:d8:56:c1: fc:5e:32:b1:9b:22:08:e7:3a:f0:20:d7:c7:95:3f: 54:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9A:B8:4E:EE:02:E7:CC:5C:58:C2:8C:33:82:2A:75:89:9D:91:D3 X509v3 Authority Key Identifier: keyid:34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/Apq4Tu4C58xcWMKMM4IqdYmdkdM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.11.0/24 193.169.128.0/23 194.26.67.0/24 IPv6: 2a14:1f40::/32 Signature Algorithm: sha256WithRSAEncryption c3:e1:3f:f6:82:0b:93:1d:3f:20:b9:41:91:dc:6f:b6:b6:02: 56:5c:fd:70:50:c1:29:76:09:53:fb:b2:3f:46:2c:5c:8b:81: a6:a9:08:11:26:95:d0:dd:96:a9:3a:92:b5:cf:f8:c7:da:07: d7:95:11:f4:ac:3c:54:81:30:09:49:ff:65:d5:39:75:41:30: 65:8b:a7:bc:1c:4c:37:e0:02:83:ff:1e:37:9e:9b:25:ce:a3: 7c:dc:f2:b2:16:f6:e7:a8:dc:ae:13:ea:a1:f9:6b:9c:a9:c5: c6:ab:3e:bc:c1:68:2f:9e:58:f7:2a:5d:39:dd:9a:66:3e:9b: db:be:ca:7c:73:6d:04:bd:88:20:ee:6d:84:d1:8f:e0:ce:82: 0d:19:6e:74:e4:3d:b4:8a:86:17:36:6a:57:cc:a2:6c:b6:f6: 6f:eb:41:19:59:ae:2a:8d:ae:b1:b8:b4:d7:15:83:50:0f:2b: 07:c9:0a:d3:5c:82:04:e1:77:28:20:8a:b7:7c:dd:c0:02:fb: de:e6:2e:49:c5:eb:1d:80:14:a0:a5:de:69:f0:8d:8f:0b:d0: 78:44:5f:96:be:16:6b:f7:eb:0f:77:b7:57:d8:a1:23:ed:3f: 97:84:6d:f9:4c:7e:51:9a:66:90:69:bf:06:26:f3:f2:24:86: a1:45:1f:21 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZqeAPk8tjDDcQ23MMOH/sIXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NjQ3NGEzM2MwNTFkMTcxNTJiMjEzMjJjY2Y0ZmYzODA4 YjQyNzAwHhcNMjUxMTE5MjEyNDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjlhYjg0ZWVlMDJlN2NjNWM1OGMyOGMzMzgyMmE3NTg5OWQ5MWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliRWZhWHVHEgmsgecaRHxdOULQ+B OHp+bzDktNuKI7v7ywxDMECACUQZDvcjbeP69Ikt+BGO598+ylMqtYdXUxt2VPeV 2+eZDyFSvlHqY9lFgh3pzA6uWGcdQeCdMMvXfNQ10OToPHsGoEdz+E2VMdaIBoEL QcXjjO2Ox7Bq18HEqYDqO7CHuzyDgmU8VCkI1m5XCl5Vw+SRIGaCqK9he2rva6N2 2gjk1mRv3jivtD5nURtgVpDw/29hZKFL7Eb3OEVYGUYj0wPr5W4NgRVC46o8CDBw dr06Sd98Noh9YMKpy5+tepizZ2HHFi7YVsH8XjKxmyII5zrwINfHlT9UBwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFAKauE7uAufMXFjCjDOCKnWJnZHTMB8GA1UdIwQY MBaAFDRkdKM8BR0XFSshMizPT/OAi0JwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkdSMG96d0ZIUmNWS3lFeUxNOVA4NENMUW5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8yYjlhNzItNjE4Ni00MTU0LWFlM2It MDE1MjFlNjU4ZTk5LzEvQXBxNFR1NEM1OHhjV01LTU00SXFkWW1ka2RNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8yYjlhNzItNjE4Ni00MTU0LWFlM2ItMDE1MjFlNjU4ZTk5 LzEvTkdSMG96d0ZIUmNWS3lFeUxNOVA4NENMUW5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAW+oLAwQB wamAAwQAwhpDMA0EAgACMAcDBQAqFB9AMA0GCSqGSIb3DQEBCwUAA4IBAQDD4T/2 gguTHT8guUGR3G+2tgJWXP1wUMEpdglT+7I/Rixci4GmqQgRJpXQ3ZapOpK1z/jH 2gfXlRH0rDxUgTAJSf9l1Tl1QTBli6e8HEw34AKD/x43npslzqN83PKyFvbnqNyu E+qh+WucqcXGqz68wWgvnlj3Kl053ZpmPpvbvsp8c20EvYgg7m2E0Y/gzoINGW50 5D20ioYXNmpXzKJstvZv60EZWa4qja6xuLTXFYNQDysHyQrTXIIE4XcoIIq3fN3A Avve5i5JxesdgBSgpd5p8I2PC9B4RF+WvhZr9+sPd7dX2KEj7T+XhG35TH5RmmaQ ab8GJvPyJIahRR8h -----END CERTIFICATE-----Generated at Sat Dec 6 09:41:58 2025 by rpki-client