This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/ToMuWHyiRaajps4vDuhQJOslyAU.roa File: ToMuWHyiRaajps4vDuhQJOslyAU.roa (raw, json) Hash identifier: ke6Ja8Xs3dkfS5WPMbYkREYjZOPIsKYiNDdqbTUvm8g= Subject key identifier: 4E:83:2E:58:7C:A2:45:A6:A3:A6:CE:2F:0E:E8:50:24:EB:25:C8:05 Certificate issuer: /CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900 Certificate serial: 019A9C20AA2AEC0E8054B26C45EC09383DC7 Authority key identifier: AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/ToMuWHyiRaajps4vDuhQJOslyAU.roa Signing time: Wed 19 Nov 2025 12:39:37 +0000 ROA not before: Wed 19 Nov 2025 12:39:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208221 IP address blocks: 185.84.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9c:20:aa:2a:ec:0e:80:54:b2:6c:45:ec:09:38:3d:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900 Validity Not Before: Nov 19 12:39:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4e832e587ca245a6a3a6ce2f0ee85024eb25c805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:bc:8b:08:4b:a1:9f:64:44:ba:17:ba:34:fc: 3e:c1:52:74:51:5a:20:68:bb:69:30:67:49:53:d9: e1:14:c6:57:e0:19:e5:a2:a6:3e:2a:fb:e6:0a:73: 6a:70:6f:21:d7:30:35:ef:0d:53:35:f6:03:19:cc: e4:39:72:81:21:ef:a8:e5:bc:93:e8:44:27:39:36: 58:e6:73:5e:bb:4a:dc:21:2b:70:45:7e:ca:e5:69: 77:ca:b4:e7:42:b4:8f:40:4e:53:19:04:36:38:17: 78:1e:aa:26:ce:e9:8f:7a:b2:1d:8c:cc:a8:88:da: 2b:dc:07:81:49:c9:78:24:ec:55:35:32:ea:0a:5c: ce:99:f7:9c:41:22:83:9b:3a:4a:e6:38:f4:ff:b2: 1f:84:d7:4e:bc:99:d3:dd:f2:a2:d3:7a:5a:cb:55: 3b:b4:d4:83:c0:a2:27:8a:5a:ee:d8:5c:e9:d5:13: b8:54:c5:f3:00:25:33:04:03:b6:f4:50:c9:e8:38: 6d:dc:28:9f:a9:18:54:b5:87:2e:fa:77:c6:37:d3: e4:a7:8c:83:2e:27:35:56:ee:0a:93:ab:ac:56:9a: 01:d1:eb:7d:28:ff:3e:0e:8f:47:9c:7e:3e:b5:03: af:3c:df:55:fb:e7:dc:ef:ff:8a:c7:4f:a6:08:75: 63:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:83:2E:58:7C:A2:45:A6:A3:A6:CE:2F:0E:E8:50:24:EB:25:C8:05 X509v3 Authority Key Identifier: keyid:AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/ToMuWHyiRaajps4vDuhQJOslyAU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.84.172.0/23 Signature Algorithm: sha256WithRSAEncryption 65:64:f1:da:77:47:17:cc:94:b1:5e:76:ae:be:be:c7:d0:44: a1:0d:35:3e:49:76:4f:5e:8f:eb:9f:46:05:f9:ae:c8:a2:c7: cf:2a:76:40:7d:02:b3:f9:f4:81:92:0a:53:1f:31:b5:98:e0: 5b:24:51:80:34:e5:94:c6:65:fd:70:29:6c:ee:2c:33:c5:5f: 57:d4:cf:1d:9c:87:ff:bb:59:21:90:7a:b2:3d:35:90:24:7c: d6:44:75:3c:e8:79:23:74:5f:b3:14:b9:e3:7f:5f:d5:88:a5: de:52:0b:48:3a:7a:98:6e:66:31:2e:d2:39:82:c8:08:57:ec: c3:a1:b6:bf:9a:43:67:89:f9:0d:24:3f:e8:2d:34:c2:b1:98: 64:41:8f:a0:bd:d0:bf:89:7c:d0:43:7e:04:4c:45:b8:99:4f: 33:57:4c:a1:33:45:52:dd:9a:51:a6:32:76:50:9e:58:0d:85: 2e:e9:62:08:c6:4d:2d:82:6b:0c:0d:f9:0b:fc:76:e4:b8:47: e8:55:31:49:0c:6f:ce:20:1c:8b:f2:0a:a9:04:17:c4:2e:91: 9c:1e:80:27:d5:e8:11:c3:23:1a:1c:36:29:a9:14:fd:01:29: fa:fd:3d:d2:40:b2:9b:8f:47:ef:ef:4e:92:6a:19:c4:b4:27: bc:8f:43:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqcIKoq7A6AVLJsRewJOD3HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlN2Y3NDdkZjVmMjQzNTMxNTRkYzRkNGJmNzBkMmRkY2I1 M2U5MDAwHhcNMjUxMTE5MTIzOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTgzMmU1ODdjYTI0NWE2YTNhNmNlMmYwZWU4NTAyNGViMjVjODA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9byLCEuhn2REuhe6NPw+wVJ0UVog aLtpMGdJU9nhFMZX4BnloqY+KvvmCnNqcG8h1zA17w1TNfYDGczkOXKBIe+o5byT 6EQnOTZY5nNeu0rcIStwRX7K5Wl3yrTnQrSPQE5TGQQ2OBd4HqomzumPerIdjMyo iNor3AeBScl4JOxVNTLqClzOmfecQSKDmzpK5jj0/7IfhNdOvJnT3fKi03pay1U7 tNSDwKInilru2Fzp1RO4VMXzACUzBAO29FDJ6Dht3CifqRhUtYcu+nfGN9Pkp4yD Lic1Vu4Kk6usVpoB0et9KP8+Do9HnH4+tQOvPN9V++fc7/+Kx0+mCHVjrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE6DLlh8okWmo6bOLw7oUCTrJcgFMB8GA1UdIwQY MBaAFK5/dH318kNTFU3E1L9w0t3LU+kAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm45MGZmWHlRMU1WVGNUVXYzRFMzY3RUNlFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi81OGFmMjQtYzQ1NC00NGIwLWE3Y2Et YzZmMWU2YWM5YmE5LzEvVG9NdVdIeWlSYWFqcHM0dkR1aFFKT3NseUFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi81OGFmMjQtYzQ1NC00NGIwLWE3Y2EtYzZmMWU2YWM5YmE5 LzEvcm45MGZmWHlRMU1WVGNUVXYzRFMzY3RUNlFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuVSsMA0G CSqGSIb3DQEBCwUAA4IBAQBlZPHad0cXzJSxXnauvr7H0EShDTU+SXZPXo/rn0YF +a7IosfPKnZAfQKz+fSBkgpTHzG1mOBbJFGANOWUxmX9cCls7iwzxV9X1M8dnIf/ u1khkHqyPTWQJHzWRHU86HkjdF+zFLnjf1/ViKXeUgtIOnqYbmYxLtI5gsgIV+zD oba/mkNnifkNJD/oLTTCsZhkQY+gvdC/iXzQQ34ETEW4mU8zV0yhM0VS3ZpRpjJ2 UJ5YDYUu6WIIxk0tgmsMDfkL/HbkuEfoVTFJDG/OIByL8gqpBBfELpGcHoAn1egR wyMaHDYpqRT9ASn6/T3SQLKbj0fv706SahnEtCe8j0MA -----END CERTIFICATE-----Generated at Sat Dec 6 22:12:41 2025 by rpki-client