This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/RgvNoQwhfUfFSly4wsxrkplqa6U.roa File: RgvNoQwhfUfFSly4wsxrkplqa6U.roa (raw, json) Hash identifier: a7UBOECzNWSgSxQ3snxK4l4lfMQRnfYTMYgia5xl/Qc= Subject key identifier: 46:0B:CD:A1:0C:21:7D:47:C5:4A:5C:B8:C2:CC:6B:92:99:6A:6B:A5 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019AA1337A431ED7A682BF6ABF1EE7CA2770 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/RgvNoQwhfUfFSly4wsxrkplqa6U.roa Signing time: Thu 20 Nov 2025 12:18:16 +0000 ROA not before: Thu 20 Nov 2025 12:18:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 34133 IP address blocks: 193.183.104.0/24 maxlen: 24 193.183.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a1:33:7a:43:1e:d7:a6:82:bf:6a:bf:1e:e7:ca:27:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Nov 20 12:18:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=460bcda10c217d47c54a5cb8c2cc6b92996a6ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:19:e7:76:7d:cb:3e:99:1c:35:1d:de:67:bc: 93:a5:5a:92:ac:10:74:eb:0a:df:f1:66:86:0d:1c: 39:f3:8d:20:2f:71:7c:bd:c1:fd:8c:6a:c9:4e:8c: 0c:3d:5c:bd:85:5a:85:33:e8:58:76:04:f8:03:d2: ed:30:44:17:6d:8f:ec:84:8c:ce:22:ce:19:bc:9f: ee:bc:22:a9:a5:82:99:00:a5:52:8d:c6:0a:a6:82: 4d:0b:98:c0:46:c1:6b:de:42:d0:87:7d:5f:5a:e7: 04:b0:a5:54:0c:96:2d:e1:b0:6d:06:fd:09:ac:0e: 50:fe:50:d9:7d:dc:0b:e2:c5:a4:2f:5f:a0:6a:6f: e7:a2:cf:71:86:b5:8f:67:f1:27:01:aa:35:12:8c: 6b:82:87:39:d8:22:f1:a5:18:1b:14:fe:dc:b4:fe: 37:5c:58:5c:91:5d:6c:6f:90:63:18:d2:72:d9:7b: d6:96:12:24:cd:e8:18:de:bf:e3:12:e0:40:93:da: 4e:b8:2d:ce:24:f6:0a:ae:72:03:f6:19:6b:f8:4c: 95:f8:52:b7:82:22:2d:f9:3f:a6:3f:0d:7a:45:1b: a1:2d:7a:3a:ff:de:b9:a9:07:0b:38:1a:d2:8a:0c: 52:1f:28:d1:a2:31:04:2b:56:9d:0e:df:8b:36:28: 4b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0B:CD:A1:0C:21:7D:47:C5:4A:5C:B8:C2:CC:6B:92:99:6A:6B:A5 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/RgvNoQwhfUfFSly4wsxrkplqa6U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.183.104.0/23 Signature Algorithm: sha256WithRSAEncryption 58:00:e5:e7:37:9b:b3:3e:a4:b7:4c:3f:6a:03:23:e5:83:b6: 0e:63:75:01:05:14:93:20:79:3a:8a:7f:8d:14:d9:96:a7:e8: ac:35:a7:4e:d4:45:7e:4b:76:46:2b:4a:a8:64:62:da:2c:3f: f3:e4:17:54:66:dd:f6:ed:66:a0:1f:8c:1e:35:b2:64:ef:5f: 03:94:57:9a:92:eb:3f:a1:be:ef:54:af:2d:8e:15:ae:d4:da: 19:2b:7a:8e:dd:39:12:34:18:20:61:fd:d8:af:bb:1b:4d:3a: 94:ab:49:77:83:dd:7e:8f:71:35:2f:d7:c2:0f:18:b4:b0:c8: a2:24:8b:a1:37:7d:63:d9:c5:a1:00:cb:ca:ed:8f:a2:dc:35: c3:8f:5c:c3:90:17:03:cf:70:83:16:41:f3:97:6c:23:15:f2: 62:11:95:e7:a9:1b:57:01:9f:70:f0:d6:ac:98:4c:32:02:e7: e3:98:45:7b:8a:95:3f:84:2f:13:fa:7f:cc:df:02:88:a7:ed: f6:2a:72:79:f8:17:b2:8d:f2:80:3f:14:77:5e:fb:bf:94:26: 6e:8c:2d:dd:c3:22:e9:a6:0e:16:53:0c:2d:7e:bf:a8:67:bb: 97:a2:81:df:fe:46:25:b8:4e:24:14:b2:be:74:9c:7d:f4:ac: 49:1e:59:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqhM3pDHtemgr9qvx7nyidwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjUxMTIwMTIxODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjBiY2RhMTBjMjE3ZDQ3YzU0YTVjYjhjMmNjNmI5Mjk5NmE2YmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxnndn3LPpkcNR3eZ7yTpVqSrBB0 6wrf8WaGDRw5840gL3F8vcH9jGrJTowMPVy9hVqFM+hYdgT4A9LtMEQXbY/shIzO Is4ZvJ/uvCKppYKZAKVSjcYKpoJNC5jARsFr3kLQh31fWucEsKVUDJYt4bBtBv0J rA5Q/lDZfdwL4sWkL1+gam/nos9xhrWPZ/EnAao1Eoxrgoc52CLxpRgbFP7ctP43 XFhckV1sb5BjGNJy2XvWlhIkzegY3r/jEuBAk9pOuC3OJPYKrnID9hlr+EyV+FK3 giIt+T+mPw16RRuhLXo6/965qQcLOBrSigxSHyjRojEEK1adDt+LNihLbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEYLzaEMIX1HxUpcuMLMa5KZamulMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvUmd2Tm9Rd2hmVWZGU2x5NHdzeHJrcGxxYTZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwbdoMA0G CSqGSIb3DQEBCwUAA4IBAQBYAOXnN5uzPqS3TD9qAyPlg7YOY3UBBRSTIHk6in+N FNmWp+isNadO1EV+S3ZGK0qoZGLaLD/z5BdUZt327WagH4weNbJk718DlFeakus/ ob7vVK8tjhWu1NoZK3qO3TkSNBggYf3Yr7sbTTqUq0l3g91+j3E1L9fCDxi0sMii JIuhN31j2cWhAMvK7Y+i3DXDj1zDkBcDz3CDFkHzl2wjFfJiEZXnqRtXAZ9w8Nas mEwyAufjmEV7ipU/hC8T+n/M3wKIp+32KnJ5+BeyjfKAPxR3Xvu/lCZujC3dwyLp pg4WUwwtfr+oZ7uXooHf/kYluE4kFLK+dJx99KxJHlmw -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:47 2025 by rpki-client