This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/Ta7GvGgg-bPfFWriKdj0eEqjLQs.roa File: Ta7GvGgg-bPfFWriKdj0eEqjLQs.roa (raw, json) Hash identifier: i+dy6kCtfabYggOgUQEwIA55BDXvizsoJUVxKQ0JiAI= Subject key identifier: 4D:AE:C6:BC:68:20:F9:B3:DF:15:6A:E2:29:D8:F4:78:4A:A3:2D:0B Certificate issuer: /CN=d3ee4d6e1c04a0f58295b2a97210acd47bf7d96a Certificate serial: 019AA596FBC38AB478C7D9B4050BCD2943EE Authority key identifier: D3:EE:4D:6E:1C:04:A0:F5:82:95:B2:A9:72:10:AC:D4:7B:F7:D9:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/Ta7GvGgg-bPfFWriKdj0eEqjLQs.roa Signing time: Fri 21 Nov 2025 08:45:26 +0000 ROA not before: Fri 21 Nov 2025 08:45:26 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 398300 IP address blocks: 193.34.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:96:fb:c3:8a:b4:78:c7:d9:b4:05:0b:cd:29:43:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3ee4d6e1c04a0f58295b2a97210acd47bf7d96a Validity Not Before: Nov 21 08:45:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4daec6bc6820f9b3df156ae229d8f4784aa32d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7c:25:6b:5e:ac:d8:fb:9b:7d:19:f6:b0:78: 31:01:8e:34:7b:be:d1:c0:25:81:39:40:d1:5d:b3: 8f:64:1d:4b:81:39:83:b0:2c:49:b0:86:60:9f:07: 3c:d8:f7:f5:ba:ec:cf:c6:41:e0:18:cc:9c:60:b0: da:54:da:c7:e3:ac:19:25:f5:04:b6:49:08:e5:27: ea:1b:8a:27:46:7d:0f:e3:47:1a:56:e1:65:e9:0f: 82:91:65:df:25:52:5a:c3:46:61:28:d4:43:25:ac: 8e:6e:68:59:c4:1d:9c:be:76:ef:98:bc:a7:7c:33: a1:30:2b:bd:65:f2:1d:91:f4:37:a3:c0:58:d3:f2: f3:b9:60:1b:64:90:d6:df:4f:e1:b7:78:b6:69:81: 7e:1d:37:d1:70:37:52:f2:10:5f:46:70:af:72:c1: d3:08:20:6b:46:6a:d5:30:78:dc:66:3c:e3:de:91: c7:d7:b1:c0:c7:2b:89:e2:11:63:db:88:d8:6e:7d: 99:6b:cf:0b:f3:de:04:3a:5d:bd:a4:51:14:0c:68: 31:9f:8a:28:82:e4:26:24:90:0f:ad:46:0a:04:95: c1:60:0b:9d:5b:c3:4d:29:13:15:6e:d2:a0:4d:a1: 22:9f:9c:2b:d3:73:c2:c5:d5:e3:b8:c9:4a:33:1e: 6d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AE:C6:BC:68:20:F9:B3:DF:15:6A:E2:29:D8:F4:78:4A:A3:2D:0B X509v3 Authority Key Identifier: keyid:D3:EE:4D:6E:1C:04:A0:F5:82:95:B2:A9:72:10:AC:D4:7B:F7:D9:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/Ta7GvGgg-bPfFWriKdj0eEqjLQs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.148.0/23 Signature Algorithm: sha256WithRSAEncryption 63:20:62:43:53:1f:0f:ed:7b:0e:74:70:57:49:8e:67:13:3a: 39:2a:04:93:f1:5c:28:49:08:2e:c2:cf:b1:8b:54:6f:5a:5e: 0a:5e:7d:ea:2d:3b:df:df:7a:6c:04:73:40:ff:ee:d0:bf:ed: 5a:ec:2c:00:a9:24:99:bd:7c:ab:95:77:0b:e7:0a:3a:f6:df: 5e:91:ec:f7:5d:d1:55:2c:22:e9:d9:de:b5:bf:eb:89:db:5b: 57:8b:1b:c1:df:36:da:74:b6:d3:e9:ab:35:2c:38:ad:db:f1: f7:fe:2e:cd:99:59:0d:8b:06:d6:0f:e8:12:7d:fb:a2:c9:cb: ed:ea:04:0d:64:50:82:52:50:80:2a:20:41:52:65:da:96:e1: bf:2c:a7:00:14:18:93:07:64:82:12:8c:d6:12:cd:86:39:8d: c1:b9:7f:5f:96:c1:1a:8c:93:a7:84:08:94:d0:60:65:d6:23: a5:5a:56:76:35:8d:8a:9a:b2:82:37:ad:05:29:2d:2e:28:b3: 3e:9d:de:be:db:aa:52:a6:4d:8f:50:9a:f9:b4:c4:36:05:74: f4:5d:2a:08:55:19:8c:62:56:a3:b2:e2:fc:c4:2f:5d:fe:f3: 9f:0f:00:b0:86:ad:93:86:23:dc:c2:2e:e8:47:83:b6:08:4d: 3f:42:ad:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqllvvDirR4x9m0BQvNKUPuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZWU0ZDZlMWMwNGEwZjU4Mjk1YjJhOTcyMTBhY2Q0N2Jm N2Q5NmEwHhcNMjUxMTIxMDg0NTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGFlYzZiYzY4MjBmOWIzZGYxNTZhZTIyOWQ4ZjQ3ODRhYTMyZDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3wla16s2PubfRn2sHgxAY40e77R wCWBOUDRXbOPZB1LgTmDsCxJsIZgnwc82Pf1uuzPxkHgGMycYLDaVNrH46wZJfUE tkkI5SfqG4onRn0P40caVuFl6Q+CkWXfJVJaw0ZhKNRDJayObmhZxB2cvnbvmLyn fDOhMCu9ZfIdkfQ3o8BY0/LzuWAbZJDW30/ht3i2aYF+HTfRcDdS8hBfRnCvcsHT CCBrRmrVMHjcZjzj3pHH17HAxyuJ4hFj24jYbn2Za88L894EOl29pFEUDGgxn4oo guQmJJAPrUYKBJXBYAudW8NNKRMVbtKgTaEin5wr03PCxdXjuMlKMx5tXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE2uxrxoIPmz3xVq4inY9HhKoy0LMB8GA1UdIwQY MBaAFNPuTW4cBKD1gpWyqXIQrNR799lqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC01TmJod0VvUFdDbGJLcGNoQ3MxSHYzMldvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mZDhlZjktNzgzMy00OTc0LTkyNTct NjViNGE2OWZiYmNlLzEvVGE3R3ZHZ2ctYlBmRldyaUtkajBlRXFqTFFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9mZDhlZjktNzgzMy00OTc0LTkyNTctNjViNGE2OWZiYmNl LzEvMC01TmJod0VvUFdDbGJLcGNoQ3MxSHYzMldvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwSKUMA0G CSqGSIb3DQEBCwUAA4IBAQBjIGJDUx8P7XsOdHBXSY5nEzo5KgST8VwoSQguws+x i1RvWl4KXn3qLTvf33psBHNA/+7Qv+1a7CwAqSSZvXyrlXcL5wo69t9ekez3XdFV LCLp2d61v+uJ21tXixvB3zbadLbT6as1LDit2/H3/i7NmVkNiwbWD+gSffuiycvt 6gQNZFCCUlCAKiBBUmXaluG/LKcAFBiTB2SCEozWEs2GOY3BuX9flsEajJOnhAiU 0GBl1iOlWlZ2NY2KmrKCN60FKS0uKLM+nd6+26pSpk2PUJr5tMQ2BXT0XSoIVRmM YlajsuL8xC9d/vOfDwCwhq2ThiPcwi7oR4O2CE0/Qq3Q -----END CERTIFICATE-----Generated at Sat Dec 6 15:41:37 2025 by rpki-client