This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/_41gquUxogOoHWCKFYbWi_vSDC8.roa File: _41gquUxogOoHWCKFYbWi_vSDC8.roa (raw, json) Hash identifier: M2zvcs7Z6gkeVy1BDzE0VTUjwyY3RsEd2ac2dCksOEU= Subject key identifier: FF:8D:60:AA:E5:31:A2:03:A8:1D:60:8A:15:86:D6:8B:FB:D2:0C:2F Certificate issuer: /CN=96ff45e6de48bfc0397dacad83a84831db7952d1 Certificate serial: 019A8108A09EFA7C4E0D766719411DA91D6E Authority key identifier: 96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/_41gquUxogOoHWCKFYbWi_vSDC8.roa Signing time: Fri 14 Nov 2025 06:23:37 +0000 ROA not before: Fri 14 Nov 2025 06:23:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43399 IP address blocks: 109.172.74.0/24 maxlen: 24 178.130.128.0/23 maxlen: 23 178.130.128.0/24 maxlen: 24 178.130.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:08:a0:9e:fa:7c:4e:0d:76:67:19:41:1d:a9:1d:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96ff45e6de48bfc0397dacad83a84831db7952d1 Validity Not Before: Nov 14 06:23:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ff8d60aae531a203a81d608a1586d68bfbd20c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7e:19:6d:58:dd:b7:f9:71:10:cc:62:76:1a: 33:c1:6b:1f:fc:11:d3:ea:3a:8c:7b:6b:3a:15:79: 50:e3:b7:cb:44:b7:5b:3f:46:15:55:af:d0:d4:cf: b1:14:39:67:92:b7:e4:3c:76:84:17:64:a3:87:53: f3:04:ac:8c:7d:d8:7b:77:d1:14:6b:a7:f0:3e:10: 73:26:86:01:66:6b:37:39:07:89:08:ba:73:2f:0a: 99:9e:95:24:9d:2e:1d:77:0c:3c:67:83:5b:4c:91: 8e:94:94:9a:61:81:e4:99:e3:a1:72:9e:62:cb:04: 34:47:6e:99:3a:ba:29:49:d5:3b:45:37:2d:e3:07: 14:81:95:8d:c3:08:53:09:07:de:30:e8:0d:90:29: 21:cb:fe:d6:f0:44:1e:a5:f8:69:c7:f7:f9:21:e2: 60:80:59:18:a9:8f:fb:21:0c:50:2a:16:9d:df:fa: 67:3e:f9:e9:39:9b:05:30:d6:e3:4a:c7:74:30:e6: 42:35:2e:72:7b:e9:f1:0e:49:93:56:b1:f4:90:ff: 1a:57:35:51:47:99:d5:c5:3a:e3:09:23:b0:2d:43: b1:64:6b:37:72:3b:49:b5:6f:11:bb:06:1c:b9:fc: 6f:d9:df:84:81:f1:25:b6:df:f8:2c:76:0d:0b:be: 54:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8D:60:AA:E5:31:A2:03:A8:1D:60:8A:15:86:D6:8B:FB:D2:0C:2F X509v3 Authority Key Identifier: keyid:96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/_41gquUxogOoHWCKFYbWi_vSDC8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.172.74.0/24 178.130.128.0/23 Signature Algorithm: sha256WithRSAEncryption d7:9e:cd:a3:8f:9e:72:bd:2e:c8:b9:5c:c4:d9:f4:50:d3:bd: cb:4a:2c:e1:6d:89:f3:d5:9a:cc:6a:d7:ee:2e:5b:82:62:98: ff:67:4c:71:05:80:dd:23:e8:c8:6d:dd:3f:94:b1:dc:2c:b5: 41:12:06:03:22:9c:5d:96:f7:27:7d:c2:75:cf:8f:f6:3f:6f: 9c:8f:7e:63:2e:b8:95:f4:7e:2d:0f:ef:1e:23:4e:a4:a5:b5: cf:bd:a9:d3:3a:cf:f9:75:0a:ec:0a:25:5a:c0:e5:be:a3:75: a7:0c:84:f5:f2:a7:c7:c4:0e:71:cd:f8:49:32:c8:10:f0:22: 68:59:95:b7:06:9a:3b:33:20:85:27:eb:48:c4:18:6f:1f:11: 1a:a2:6d:24:de:da:e0:2b:6e:e6:78:f5:99:d8:40:0b:48:1c: 18:9e:5f:3e:4d:29:bd:68:96:94:79:d4:75:4e:e7:3a:96:35: 4b:85:9b:b7:e3:5a:c1:5c:af:39:39:e4:47:6f:33:b8:31:b8: de:e0:b9:d5:52:e7:9b:90:1f:e4:59:cd:44:c1:1a:f0:32:c7: 2d:40:60:ef:a3:30:95:e6:36:c6:55:43:1b:fa:c3:17:f4:17: 74:b0:7d:94:77:61:0d:c0:3e:e7:ab:3c:f3:27:2e:2f:1c:5f: bf:23:06:92 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqBCKCe+nxODXZnGUEdqR1uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZmY0NWU2ZGU0OGJmYzAzOTdkYWNhZDgzYTg0ODMxZGI3 OTUyZDEwHhcNMjUxMTE0MDYyMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjhkNjBhYWU1MzFhMjAzYTgxZDYwOGExNTg2ZDY4YmZiZDIwYzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo34ZbVjdt/lxEMxidhozwWsf/BHT 6jqMe2s6FXlQ47fLRLdbP0YVVa/Q1M+xFDlnkrfkPHaEF2Sjh1PzBKyMfdh7d9EU a6fwPhBzJoYBZms3OQeJCLpzLwqZnpUknS4ddww8Z4NbTJGOlJSaYYHkmeOhcp5i ywQ0R26ZOropSdU7RTct4wcUgZWNwwhTCQfeMOgNkCkhy/7W8EQepfhpx/f5IeJg gFkYqY/7IQxQKhad3/pnPvnpOZsFMNbjSsd0MOZCNS5ye+nxDkmTVrH0kP8aVzVR R5nVxTrjCSOwLUOxZGs3cjtJtW8RuwYcufxv2d+EgfEltt/4LHYNC75UfwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP+NYKrlMaIDqB1gihWG1ov70gwvMB8GA1UdIwQY MBaAFJb/RebeSL/AOX2srYOoSDHbeVLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHY5RjV0NUl2OEE1ZmF5dGc2aElNZHQ1VXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82YzdiMjgtZjJjZS00NDVmLThmOTAt MGY1ZDM3OTdhMzI1LzEvXzQxZ3F1VXhvZ09vSFdDS0ZZYldpX3ZTREM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS82YzdiMjgtZjJjZS00NDVmLThmOTAtMGY1ZDM3OTdhMzI1 LzEvbHY5RjV0NUl2OEE1ZmF5dGc2aElNZHQ1VXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbaxKAwQB soKAMA0GCSqGSIb3DQEBCwUAA4IBAQDXns2jj55yvS7IuVzE2fRQ073LSizhbYnz 1ZrMatfuLluCYpj/Z0xxBYDdI+jIbd0/lLHcLLVBEgYDIpxdlvcnfcJ1z4/2P2+c j35jLriV9H4tD+8eI06kpbXPvanTOs/5dQrsCiVawOW+o3WnDIT18qfHxA5xzfhJ MsgQ8CJoWZW3Bpo7MyCFJ+tIxBhvHxEaom0k3trgK27mePWZ2EALSBwYnl8+TSm9 aJaUedR1Tuc6ljVLhZu341rBXK85OeRHbzO4Mbje4LnVUuebkB/kWc1EwRrwMsct QGDvozCV5jbGVUMb+sMX9Bd0sH2Ud2ENwD7nqzzzJy4vHF+/IwaS -----END CERTIFICATE-----Generated at Sat Dec 6 12:02:58 2025 by rpki-client