This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/E15Wtdf7QjwNa-WGNJdx65kIRHY.roa File: E15Wtdf7QjwNa-WGNJdx65kIRHY.roa (raw, json) Hash identifier: xMr7LDGnz5MoT5Z0v+CdpOlyhQmgyy107A3FPzyXN1s= Subject key identifier: 13:5E:56:B5:D7:FB:42:3C:0D:6B:E5:86:34:97:71:EB:99:08:44:76 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019ABF636E5A9EC6BA009FE3E18A8874F7F9 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/E15Wtdf7QjwNa-WGNJdx65kIRHY.roa Signing time: Wed 26 Nov 2025 08:59:15 +0000 ROA not before: Wed 26 Nov 2025 08:59:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60345 IP address blocks: 193.182.129.0/24 maxlen: 24 193.182.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:63:6e:5a:9e:c6:ba:00:9f:e3:e1:8a:88:74:f7:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Nov 26 08:59:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=135e56b5d7fb423c0d6be586349771eb99084476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fa:c1:77:7d:75:3a:1b:bc:ed:87:fd:8b:5d: 20:38:22:b6:3c:1a:b3:2e:4f:12:0e:a8:d5:9f:69: e1:cd:ee:2a:2a:3c:fa:59:96:af:a8:9d:dd:a1:15: 74:32:78:69:ee:ae:32:44:93:1f:26:47:e8:ec:85: c2:61:6a:a6:6e:8c:1d:5c:33:a0:8a:74:b0:57:54: a3:18:49:a6:1e:78:4d:bc:05:78:cb:75:87:7e:31: fc:cd:cb:1c:7d:0f:f8:13:e8:45:ea:1f:6b:af:9a: a1:df:ad:eb:e1:43:95:90:0c:b7:18:cf:42:81:29: 37:0d:c8:5d:98:44:9b:45:d7:52:b4:5a:21:5d:81: a7:11:43:3d:80:78:cd:1f:9b:c9:ba:ee:0b:53:0b: 9e:af:67:26:b6:1a:ec:86:55:28:bd:df:70:7b:3e: 21:a0:6a:10:13:7c:9f:24:b5:9f:68:94:e1:9c:88: 81:95:5e:98:d0:10:a1:a9:39:ad:c6:66:65:37:02: 12:a4:56:41:39:58:a6:6a:45:ef:0e:cf:e8:6c:02: 36:5d:85:df:48:16:d4:ec:73:3b:ed:cb:a0:1b:45: 97:b2:78:ec:67:6e:fc:f8:1d:dd:4a:19:64:fc:7b: e1:14:3c:54:83:c1:d4:a1:2d:0d:c7:47:46:67:8a: f3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5E:56:B5:D7:FB:42:3C:0D:6B:E5:86:34:97:71:EB:99:08:44:76 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/E15Wtdf7QjwNa-WGNJdx65kIRHY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.182.129.0-193.182.130.255 Signature Algorithm: sha256WithRSAEncryption 36:8f:75:8b:bf:c0:c4:9c:7a:cd:88:c3:4f:e8:5d:6a:61:ee: 3c:c6:20:f3:9f:b9:ad:16:50:af:90:ef:3b:14:39:d1:f5:6e: b4:ab:64:cf:72:82:6a:94:d9:0d:35:83:a5:8c:98:72:fc:e8: e9:65:14:21:23:72:93:0e:43:9a:df:9b:6c:ac:10:87:69:69: 56:9b:db:b8:c1:f8:0b:b9:98:bb:77:4c:1c:3b:42:57:8d:9e: a5:7e:c6:b8:01:13:4c:60:65:a2:6c:1c:f0:5f:a2:7b:36:00: 40:9f:d9:c0:a1:a7:35:be:25:47:40:9c:61:dc:ff:96:9a:7f: 17:e6:f3:55:96:dc:28:71:1e:d3:d0:0c:3b:eb:ac:b1:11:26: 90:c0:f1:07:6d:08:b8:9d:4c:6f:06:9e:f3:a3:99:23:02:69: fe:12:0c:14:e1:1b:3f:33:3f:9d:8e:f7:16:d3:b9:ba:b5:61: 8c:c9:da:18:d4:0f:99:fd:47:d8:d7:77:cb:7e:48:b3:bc:d8: e4:7f:6f:ed:45:a0:08:ab:60:d7:33:4a:1d:15:c8:5e:7c:d3: d7:f4:d5:6a:00:88:4d:e8:96:d5:31:f7:aa:da:f8:bb:0c:a7: b1:a8:7c:0e:2f:76:fb:61:26:c0:7c:72:79:d2:7a:85:1e:b5: 5b:76:44:a9 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZq/Y25ansa6AJ/j4YqIdPf5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjUxMTI2MDg1OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzVlNTZiNWQ3ZmI0MjNjMGQ2YmU1ODYzNDk3NzFlYjk5MDg0NDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPrBd311Ohu87Yf9i10gOCK2PBqz Lk8SDqjVn2nhze4qKjz6WZavqJ3doRV0Mnhp7q4yRJMfJkfo7IXCYWqmbowdXDOg inSwV1SjGEmmHnhNvAV4y3WHfjH8zcscfQ/4E+hF6h9rr5qh363r4UOVkAy3GM9C gSk3DchdmESbRddStFohXYGnEUM9gHjNH5vJuu4LUwuer2cmthrshlUovd9wez4h oGoQE3yfJLWfaJThnIiBlV6Y0BChqTmtxmZlNwISpFZBOVimakXvDs/obAI2XYXf SBbU7HM77cugG0WXsnjsZ278+B3dShlk/HvhFDxUg8HUoS0Nx0dGZ4rz7QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFBNeVrXX+0I8DWvlhjSXceuZCER2MB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvRTE1V3RkZjdRandOYS1XR05KZHg2NWtJUkhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADBtoED BADBtoIwDQYJKoZIhvcNAQELBQADggEBADaPdYu/wMSces2Iw0/oXWph7jzGIPOf ua0WUK+Q7zsUOdH1brSrZM9ygmqU2Q01g6WMmHL86OllFCEjcpMOQ5rfm2ysEIdp aVab27jB+Au5mLt3TBw7QleNnqV+xrgBE0xgZaJsHPBfons2AECf2cChpzW+JUdA nGHc/5aafxfm81WW3ChxHtPQDDvrrLERJpDA8QdtCLidTG8GnvOjmSMCaf4SDBTh Gz8zP52O9xbTubq1YYzJ2hjUD5n9R9jXd8t+SLO82OR/b+1FoAirYNczSh0VyF58 09f01WoAiE3oltUx96ra+LsMp7GofA4vdvthJsB8cnnSeoUetVt2RKk= -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:25 2025 by rpki-client