This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/p_T_usfdv8xlZZdYjAIfsVouVbk.roa File: p_T_usfdv8xlZZdYjAIfsVouVbk.roa (raw, json) Hash identifier: 6jbjq1+jiWQ0ooeWaGdPlb/s9JUI9tUJMn1ZAmNsUm8= Subject key identifier: A7:F4:FF:BA:C7:DD:BF:CC:65:65:97:58:8C:02:1F:B1:5A:2E:55:B9 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019A5889324530AAF7C5691395A3B0476B71 Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/p_T_usfdv8xlZZdYjAIfsVouVbk.roa Signing time: Thu 06 Nov 2025 09:39:37 +0000 ROA not before: Thu 06 Nov 2025 09:39:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202228 IP address blocks: 94.240.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:58:89:32:45:30:aa:f7:c5:69:13:95:a3:b0:47:6b:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Nov 6 09:39:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a7f4ffbac7ddbfcc656597588c021fb15a2e55b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:69:1d:7f:53:18:07:3f:a1:4f:60:8a:ca:3a: 0f:18:a9:ff:ea:92:99:6c:8f:1b:db:ce:97:7b:ed: c5:40:83:d2:1e:a8:be:71:0f:bf:ce:28:5e:65:e2: 8d:75:0b:a5:47:47:72:87:28:67:96:3b:12:ae:08: 0e:44:c5:0e:d5:c8:ae:0e:cf:6c:61:e6:09:e6:53: 3e:c5:fb:4c:7d:88:4b:2a:98:a2:5a:54:a5:50:89: c7:8e:62:8c:d5:00:61:3d:8c:0e:10:f1:6b:ed:26: b3:75:be:fb:14:c4:42:99:40:97:b1:40:a3:db:ae: 84:1c:b5:e8:6a:ec:e4:e7:ae:e1:bf:8f:4b:78:e8: c1:e8:b4:08:17:06:c8:08:ec:96:62:b7:a0:1a:de: 1e:b2:73:72:2d:1a:7e:9d:16:e7:e8:d1:12:e2:b7: a5:16:a7:9d:9c:76:bf:ac:43:40:40:28:ef:ff:7c: fc:1b:3a:3b:43:62:0c:66:7c:ba:32:a4:6c:48:b9: eb:29:9a:04:43:96:1f:2d:99:21:4b:91:15:90:d6: ff:e1:56:cd:6e:d8:d9:5d:e0:e9:9a:2a:0a:f5:9c: 08:c1:29:98:ad:bf:8f:ea:93:f7:09:0c:dc:b1:5b: d2:91:d9:37:f2:aa:2f:dc:8f:8f:22:6d:25:79:ac: 45:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F4:FF:BA:C7:DD:BF:CC:65:65:97:58:8C:02:1F:B1:5A:2E:55:B9 X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/p_T_usfdv8xlZZdYjAIfsVouVbk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.240.16.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:56:d9:d3:26:41:8b:e3:1e:c6:7f:75:7f:74:20:33:98:10: ed:55:6b:ab:0a:b8:7f:f7:d7:96:bd:92:4b:0f:65:ba:88:d7: 83:89:1f:a7:3e:af:d3:28:d2:6e:6b:b4:80:78:72:c3:7f:e6: 5a:54:6d:06:94:e0:9b:df:52:fa:bd:7b:12:eb:9a:8f:e9:4d: e7:e8:6f:16:18:4a:8a:c7:b1:25:b0:66:88:58:2f:83:d3:26: 1b:03:86:36:91:3c:79:22:08:72:a1:f6:74:3c:1d:f0:78:15: d1:a3:a6:d7:a5:98:db:87:64:0a:c7:a6:91:77:30:c8:1a:e1: cb:bb:b2:06:4d:eb:f8:40:bc:35:14:3a:96:f8:2f:62:37:1c: da:77:bb:39:51:9a:0e:a7:23:37:e4:c8:f8:32:10:42:56:99: 95:96:16:8e:f0:58:bf:02:e7:f5:5c:ac:bd:f9:33:f1:6a:6a: 12:7a:9e:99:0f:68:02:f7:5d:30:bb:0c:d9:49:55:13:7c:77: e5:ad:ba:db:0f:d1:2b:31:b8:8b:d4:9c:49:bd:39:db:25:bd: 2c:6e:0f:b1:08:c3:0c:c7:0d:60:74:d8:4b:a9:d3:c6:f8:8f: 0b:5d:f2:88:63:8a:75:7e:86:b1:b5:02:01:f1:e6:7f:ed:28: 18:92:14:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpYiTJFMKr3xWkTlaOwR2txMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjUxMTA2MDkzOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2Y0ZmZiYWM3ZGRiZmNjNjU2NTk3NTg4YzAyMWZiMTVhMmU1NWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2kdf1MYBz+hT2CKyjoPGKn/6pKZ bI8b286Xe+3FQIPSHqi+cQ+/ziheZeKNdQulR0dyhyhnljsSrggORMUO1ciuDs9s YeYJ5lM+xftMfYhLKpiiWlSlUInHjmKM1QBhPYwOEPFr7Sazdb77FMRCmUCXsUCj 266EHLXoauzk567hv49LeOjB6LQIFwbICOyWYregGt4esnNyLRp+nRbn6NES4rel FqednHa/rENAQCjv/3z8Gzo7Q2IMZny6MqRsSLnrKZoEQ5YfLZkhS5EVkNb/4VbN btjZXeDpmioK9ZwIwSmYrb+P6pP3CQzcsVvSkdk38qov3I+PIm0leaxFuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKf0/7rH3b/MZWWXWIwCH7FaLlW5MB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvcF9UX3VzZmR2OHhsWlpkWWpBSWZzVm91VmJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXvAQMA0G CSqGSIb3DQEBCwUAA4IBAQAbVtnTJkGL4x7Gf3V/dCAzmBDtVWurCrh/99eWvZJL D2W6iNeDiR+nPq/TKNJua7SAeHLDf+ZaVG0GlOCb31L6vXsS65qP6U3n6G8WGEqK x7ElsGaIWC+D0yYbA4Y2kTx5IghyofZ0PB3weBXRo6bXpZjbh2QKx6aRdzDIGuHL u7IGTev4QLw1FDqW+C9iNxzad7s5UZoOpyM35Mj4MhBCVpmVlhaO8Fi/Auf1XKy9 +TPxamoSep6ZD2gC910wuwzZSVUTfHflrbrbD9ErMbiL1JxJvTnbJb0sbg+xCMMM xw1gdNhLqdPG+I8LXfKIY4p1foaxtQIB8eZ/7SgYkhQq -----END CERTIFICATE-----Generated at Sun Dec 7 04:18:36 2025 by rpki-client