This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b60b69-2e42-483d-8e71-b7428487ab3d/1/95ojNrCRHrkw3Lw0A9w7F9KN3K4.roa File: 95ojNrCRHrkw3Lw0A9w7F9KN3K4.roa (raw, json) Hash identifier: sfSKA+1SpVw/MDk+oNTr+sF8VTzQjSJ1fbmRWnJ6h44= Subject key identifier: F7:9A:23:36:B0:91:1E:B9:30:DC:BC:34:03:DC:3B:17:D2:8D:DC:AE Certificate issuer: /CN=312258ef43360de84c25c26f9fb57ab7e78f9162 Certificate serial: 019A9A86ABA288C41A0C73EABDD92EE69C28 Authority key identifier: 31:22:58:EF:43:36:0D:E8:4C:25:C2:6F:9F:B5:7A:B7:E7:8F:91:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSJY70M2DehMJcJvn7V6t-ePkWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b60b69-2e42-483d-8e71-b7428487ab3d/1/95ojNrCRHrkw3Lw0A9w7F9KN3K4.roa Signing time: Wed 19 Nov 2025 05:11:48 +0000 ROA not before: Wed 19 Nov 2025 05:11:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9115 IP address blocks: 91.136.0.0/17 maxlen: 17 91.136.0.0/24 maxlen: 24 91.136.125.0/24 maxlen: 24 2a01:7f60::/32 maxlen: 32 2a01:7f60:20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b60b69-2e42-483d-8e71-b7428487ab3d/1/MSJY70M2DehMJcJvn7V6t-ePkWI.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/b60b69-2e42-483d-8e71-b7428487ab3d/1/MSJY70M2DehMJcJvn7V6t-ePkWI.mft rsync://rpki.ripe.net/repository/DEFAULT/MSJY70M2DehMJcJvn7V6t-ePkWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9a:86:ab:a2:88:c4:1a:0c:73:ea:bd:d9:2e:e6:9c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=312258ef43360de84c25c26f9fb57ab7e78f9162 Validity Not Before: Nov 19 05:11:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f79a2336b0911eb930dcbc3403dc3b17d28ddcae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1d:ac:f9:f2:f3:fb:9e:b1:f6:56:fc:a1:fd: 04:82:13:37:03:c4:ac:21:04:8e:6d:3a:59:1b:dc: f3:10:ce:98:7f:b7:60:50:cf:24:8d:85:66:9f:14: e4:07:6c:3c:e5:ae:98:bc:ba:5b:87:ef:5c:b9:3d: be:dd:31:60:fd:26:de:59:7b:93:ea:65:ea:5e:ff: bd:4e:46:55:e4:23:9f:e7:94:36:9a:24:5b:a8:17: 01:c9:63:df:81:8b:c3:6f:af:71:a6:9c:6a:d4:76: 8b:39:72:45:41:7d:35:2e:1a:fb:a0:c1:fc:03:bc: 16:5a:88:de:ed:d1:7c:1b:16:f1:0c:72:a5:d0:c1: 5a:65:82:61:7e:c1:04:1f:46:0e:46:1b:3d:ec:5c: ee:6c:07:ff:e9:b8:db:bb:c1:f5:f6:ea:1c:48:ac: 6d:66:d0:41:7b:1b:eb:17:82:ec:5e:ab:56:ce:05: eb:bb:17:cc:01:8a:53:2b:9b:8b:b0:2c:28:f0:55: 54:b7:97:a1:66:7c:a7:bd:39:79:dc:49:3a:27:bd: 36:68:33:e0:63:8c:0d:f7:52:32:88:12:a9:05:53: c9:80:74:9a:f5:c3:d8:c7:b4:b2:d5:1f:1c:a1:0d: 16:5a:59:4c:35:7a:ea:43:e2:08:82:c4:c9:6f:ae: 0e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:9A:23:36:B0:91:1E:B9:30:DC:BC:34:03:DC:3B:17:D2:8D:DC:AE X509v3 Authority Key Identifier: keyid:31:22:58:EF:43:36:0D:E8:4C:25:C2:6F:9F:B5:7A:B7:E7:8F:91:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSJY70M2DehMJcJvn7V6t-ePkWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b60b69-2e42-483d-8e71-b7428487ab3d/1/95ojNrCRHrkw3Lw0A9w7F9KN3K4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b60b69-2e42-483d-8e71-b7428487ab3d/1/MSJY70M2DehMJcJvn7V6t-ePkWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.136.0.0/17 IPv6: 2a01:7f60::/32 Signature Algorithm: sha256WithRSAEncryption d5:72:10:04:a8:d1:06:da:bb:56:d4:b0:6a:13:7c:14:9f:ad: 3e:53:b1:8a:78:4b:86:e7:91:56:95:99:43:87:01:bb:da:6a: 53:12:ba:02:e6:64:db:33:64:56:84:83:49:e5:24:d3:70:88: b0:c6:20:f4:e6:4c:9e:3e:f5:69:49:a8:b7:77:96:9c:cc:70: 0c:94:2a:c6:e0:34:c2:ab:15:7c:ee:45:98:88:c8:fb:95:5e: 01:64:33:5a:73:9d:47:4b:a5:0b:f9:f0:48:0f:4b:c5:2d:d6: 23:c3:b9:31:dc:0c:a3:f2:94:96:27:a1:12:fa:c9:a8:5e:52: 65:c1:aa:5a:be:79:bb:5d:4c:cf:44:a2:dd:04:5a:bb:22:8f: e3:b9:bf:e2:b3:28:66:eb:1a:13:ca:80:70:86:2b:e6:b9:b6: f1:ed:d6:52:ca:a7:fe:dd:f2:b7:86:02:7a:8e:c7:65:ab:f9: ec:02:85:59:2e:7f:e7:83:6d:44:e2:fe:65:51:fa:7a:34:e8: e8:67:1e:b6:34:fa:78:88:60:28:13:e6:82:25:0e:af:b9:19: 39:8f:d9:7e:5b:7c:eb:84:d5:c2:7a:4f:fd:22:32:ee:62:b5: 49:89:c7:39:16:18:85:8a:48:1a:57:2c:ae:91:82:f7:9d:8f: b5:f2:54:2f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZqahquiiMQaDHPqvdku5pwoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMjI1OGVmNDMzNjBkZTg0YzI1YzI2ZjlmYjU3YWI3ZTc4 ZjkxNjIwHhcNMjUxMTE5MDUxMTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzlhMjMzNmIwOTExZWI5MzBkY2JjMzQwM2RjM2IxN2QyOGRkY2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB2s+fLz+56x9lb8of0EghM3A8Ss IQSObTpZG9zzEM6Yf7dgUM8kjYVmnxTkB2w85a6YvLpbh+9cuT2+3TFg/SbeWXuT 6mXqXv+9TkZV5COf55Q2miRbqBcByWPfgYvDb69xppxq1HaLOXJFQX01Lhr7oMH8 A7wWWoje7dF8GxbxDHKl0MFaZYJhfsEEH0YORhs97FzubAf/6bjbu8H19uocSKxt ZtBBexvrF4LsXqtWzgXruxfMAYpTK5uLsCwo8FVUt5ehZnynvTl53Ek6J702aDPg Y4wN91IyiBKpBVPJgHSa9cPYx7Sy1R8coQ0WWllMNXrqQ+IIgsTJb64OBwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPeaIzawkR65MNy8NAPcOxfSjdyuMB8GA1UdIwQY MBaAFDEiWO9DNg3oTCXCb5+1erfnj5FiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVNKWTcwTTJEZWhNSmNKdm43VjZ0LWVQa1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iNjBiNjktMmU0Mi00ODNkLThlNzEt Yjc0Mjg0ODdhYjNkLzEvOTVvak5yQ1JIcmt3M0x3MEE5dzdGOUtOM0s0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9iNjBiNjktMmU0Mi00ODNkLThlNzEtYjc0Mjg0ODdhYjNk LzEvTVNKWTcwTTJEZWhNSmNKdm43VjZ0LWVQa1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQHW4gAMA0E AgACMAcDBQAqAX9gMA0GCSqGSIb3DQEBCwUAA4IBAQDVchAEqNEG2rtW1LBqE3wU n60+U7GKeEuG55FWlZlDhwG72mpTEroC5mTbM2RWhINJ5STTcIiwxiD05kyePvVp Sai3d5aczHAMlCrG4DTCqxV87kWYiMj7lV4BZDNac51HS6UL+fBID0vFLdYjw7kx 3Ayj8pSWJ6ES+smoXlJlwapavnm7XUzPRKLdBFq7Io/jub/isyhm6xoTyoBwhivm ubbx7dZSyqf+3fK3hgJ6jsdlq/nsAoVZLn/ng21E4v5lUfp6NOjoZx62NPp4iGAo E+aCJQ6vuRk5j9l+W3zrhNXCek/9IjLuYrVJicc5FhiFikgaVyyukYL3nY+18lQv -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:23 2025 by rpki-client