This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/00tdIzHocd6TrMlmwl0fE9GtEYA.roa File: 00tdIzHocd6TrMlmwl0fE9GtEYA.roa (raw, json) Hash identifier: oq1BzbGnWJoT/ZcE/ggd3PS4E29zXCy8zLCqvn+wWU8= Subject key identifier: D3:4B:5D:23:31:E8:71:DE:93:AC:C9:66:C2:5D:1F:13:D1:AD:11:80 Certificate issuer: /CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881 Certificate serial: 019AB9EE5455D73A7C870F761B2A73BAC56A Authority key identifier: EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/00tdIzHocd6TrMlmwl0fE9GtEYA.roa Signing time: Tue 25 Nov 2025 07:33:15 +0000 ROA not before: Tue 25 Nov 2025 07:33:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213990 IP address blocks: 193.9.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b9:ee:54:55:d7:3a:7c:87:0f:76:1b:2a:73:ba:c5:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881 Validity Not Before: Nov 25 07:33:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d34b5d2331e871de93acc966c25d1f13d1ad1180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c8:2a:9f:8f:e9:88:33:02:98:81:e2:d7:68: 2b:b4:81:e3:9c:50:1a:97:26:b3:66:fb:78:9e:2b: 08:a3:84:8a:99:33:3f:f9:93:5f:84:81:88:ff:da: 20:70:75:2f:b1:ba:41:08:58:3c:7e:92:f4:06:07: d5:ff:63:29:12:ab:3f:59:64:11:a1:37:b0:61:76: b3:b3:f1:fa:86:4d:a6:5b:f2:c2:eb:b4:3a:c0:63: 71:e0:2b:71:e6:c5:08:2f:0a:ed:5e:30:d4:f5:c9: ba:c6:f6:46:1a:b1:d1:fc:95:9a:21:b0:ce:ea:3f: 25:18:70:92:ea:1f:f4:37:65:8f:48:41:c9:79:7c: b3:02:2a:70:ab:16:fd:9e:58:d3:1e:c9:64:44:38: 56:84:9e:e4:ba:1b:96:a5:9c:f4:b0:83:6b:1d:dc: 5e:d7:ea:81:14:8c:00:1b:ab:91:86:e4:9f:71:d5: 59:8f:59:34:4d:d9:2b:78:3a:cd:7a:89:d4:6d:5d: 84:6f:9b:7a:df:92:3b:5b:1b:b3:df:cf:d3:8d:28: e5:46:b7:46:e5:9a:b2:d1:b9:e2:a9:1e:8e:91:9e: cd:13:41:8e:e5:d4:63:b4:5f:66:4f:c5:85:45:98: 58:ea:93:21:27:93:06:ec:47:2d:bf:72:12:62:b5: 2a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4B:5D:23:31:E8:71:DE:93:AC:C9:66:C2:5D:1F:13:D1:AD:11:80 X509v3 Authority Key Identifier: keyid:EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/00tdIzHocd6TrMlmwl0fE9GtEYA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.9.16.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:9c:11:61:57:6d:8a:ef:1e:ff:da:ba:fb:a0:fe:ab:63:a7: fe:7f:08:c9:c9:e4:5e:a2:10:ae:fd:1f:50:9d:09:c5:7f:c2: 2c:ba:8d:d8:64:1f:fc:44:20:16:a9:2e:9a:85:19:79:38:01: 0f:24:02:1f:10:26:55:39:09:14:0c:02:be:07:e0:71:53:6e: 31:31:27:93:b5:3c:96:b4:a9:80:6d:c4:df:27:a9:23:53:a8: 09:27:01:57:ea:7a:6a:cf:cc:0b:42:8a:d7:51:c1:a4:e2:84: 78:35:64:fb:94:f5:46:0b:52:53:9f:aa:1e:b1:08:bb:8a:b1: cd:3e:1c:52:ae:ec:21:a3:b0:7d:29:55:8c:6d:98:74:f4:23: 4d:99:df:38:22:8e:c1:07:3e:84:d0:67:00:da:cf:44:3b:f8: 2d:fb:b6:58:16:54:07:cd:a6:c4:a6:0d:a4:7f:6d:3c:88:34: b1:ba:7d:ea:99:b5:d2:95:cb:64:3a:56:05:03:4b:c0:f7:7b: 29:83:6b:f4:af:a7:1f:d9:47:e3:34:ba:59:57:52:48:6b:0d: da:8a:f8:b6:a0:a6:8f:b9:10:37:d0:71:6c:af:55:59:a3:77: fa:f8:6b:cc:4a:94:4e:fb:1e:14:43:1e:9c:81:30:72:6f:6c: 4c:bc:d9:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq57lRV1zp8hw92GypzusVqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNjVmMjQ2YmZjMWVhOGZjMzg2Yzg2ZGQ0OWZiYWE4ZDg4 YzQ4ODEwHhcNMjUxMTI1MDczMzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzRiNWQyMzMxZTg3MWRlOTNhY2M5NjZjMjVkMWYxM2QxYWQxMTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8gqn4/piDMCmIHi12grtIHjnFAa lyazZvt4nisIo4SKmTM/+ZNfhIGI/9ogcHUvsbpBCFg8fpL0BgfV/2MpEqs/WWQR oTewYXazs/H6hk2mW/LC67Q6wGNx4Ctx5sUILwrtXjDU9cm6xvZGGrHR/JWaIbDO 6j8lGHCS6h/0N2WPSEHJeXyzAipwqxb9nljTHslkRDhWhJ7kuhuWpZz0sINrHdxe 1+qBFIwAG6uRhuSfcdVZj1k0TdkreDrNeonUbV2Eb5t635I7Wxuz38/TjSjlRrdG 5Zqy0bniqR6OkZ7NE0GO5dRjtF9mT8WFRZhY6pMhJ5MG7Ectv3ISYrUqFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNNLXSMx6HHek6zJZsJdHxPRrRGAMB8GA1UdIwQY MBaAFOxl8ka/weqPw4bIbdSfuqjYjEiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0dYeVJyX0I2b19EaHNodDFKLTZxTmlNU0lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82ZjAzZmQtNTIxNy00ZTUyLWExNTkt NzgxMjgwZmQyNDEyLzEvMDB0ZEl6SG9jZDZUck1sbXdsMGZFOUd0RVlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82ZjAzZmQtNTIxNy00ZTUyLWExNTktNzgxMjgwZmQyNDEy LzEvN0dYeVJyX0I2b19EaHNodDFKLTZxTmlNU0lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQkQMA0G CSqGSIb3DQEBCwUAA4IBAQBOnBFhV22K7x7/2rr7oP6rY6f+fwjJyeReohCu/R9Q nQnFf8Isuo3YZB/8RCAWqS6ahRl5OAEPJAIfECZVOQkUDAK+B+BxU24xMSeTtTyW tKmAbcTfJ6kjU6gJJwFX6npqz8wLQorXUcGk4oR4NWT7lPVGC1JTn6oesQi7irHN PhxSruwho7B9KVWMbZh09CNNmd84Io7BBz6E0GcA2s9EO/gt+7ZYFlQHzabEpg2k f208iDSxun3qmbXSlctkOlYFA0vA93spg2v0r6cf2UfjNLpZV1JIaw3aivi2oKaP uRA30HFsr1VZo3f6+GvMSpRO+x4UQx6cgTByb2xMvNmR -----END CERTIFICATE-----Generated at Sat Dec 6 13:11:15 2025 by rpki-client