This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/pHa9pNSqhegXl-F2Rnj5qm1kKYY.roa File: pHa9pNSqhegXl-F2Rnj5qm1kKYY.roa (raw, json) Hash identifier: NaSVWzADFkveB7jFn1yrCHIkaQHOjYyq2bcymguUkY8= Subject key identifier: A4:76:BD:A4:D4:AA:85:E8:17:97:E1:76:46:78:F9:AA:6D:64:29:86 Certificate issuer: /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2 Certificate serial: 019A74F30F2726915A7C6652EF13D048A864 Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/pHa9pNSqhegXl-F2Rnj5qm1kKYY.roa Signing time: Tue 11 Nov 2025 22:04:37 +0000 ROA not before: Tue 11 Nov 2025 22:04:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 1680 IP address blocks: 193.110.180.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:74:f3:0f:27:26:91:5a:7c:66:52:ef:13:d0:48:a8:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2 Validity Not Before: Nov 11 22:04:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a476bda4d4aa85e81797e1764678f9aa6d642986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4c:ed:ca:71:3d:db:dd:a9:77:ae:53:bf:dc: e2:41:c8:68:b8:45:67:4c:24:75:75:74:cf:d8:e1: 80:8c:b3:72:4b:bd:b3:42:85:2f:d6:58:cd:74:e1: 95:04:bf:b0:2d:49:13:75:6e:7f:92:49:cb:15:2c: f1:ba:2e:f2:03:56:90:d5:f7:14:63:b5:0a:3a:32: 94:06:83:8f:e2:49:fd:50:b4:99:44:cb:aa:97:10: 77:61:c4:40:ad:3e:99:16:cf:4a:e9:d5:a6:a8:dc: f4:2c:72:f7:48:fe:3b:b2:8c:fe:a4:92:53:26:dc: 26:e4:04:08:58:a0:71:db:d4:47:09:ab:ae:26:c7: 2c:13:55:f4:67:a5:f1:7b:32:90:b0:95:62:14:e9: 98:4b:cd:a4:0b:72:92:3a:ff:88:14:29:36:20:51: 5f:13:1b:fa:cc:1b:69:39:0f:8f:41:6a:8f:ba:f1: 33:d8:e6:7f:73:ec:bf:52:6a:ee:79:c8:ce:52:e5: 7a:be:65:85:06:e6:57:df:bd:67:a0:6d:4c:54:db: 8e:3e:59:fb:aa:7e:89:43:2d:e2:fd:f7:85:b0:d2: d3:e3:14:b9:fe:90:f2:b0:ea:07:bb:b0:64:ac:25: 30:19:c8:a3:ff:79:1d:0e:05:52:3c:4e:c5:6e:45: b5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:76:BD:A4:D4:AA:85:E8:17:97:E1:76:46:78:F9:AA:6D:64:29:86 X509v3 Authority Key Identifier: keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/pHa9pNSqhegXl-F2Rnj5qm1kKYY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.110.180.0/23 Signature Algorithm: sha256WithRSAEncryption 47:c3:a9:8e:f2:cf:1a:72:b1:5f:b2:84:89:5e:06:73:b2:94: c9:57:e8:cb:cb:8d:18:a2:ba:d1:62:71:6c:3a:6a:75:2b:6b: de:ce:6d:11:8c:25:29:60:3a:f4:d0:a2:c8:e3:16:e0:70:62: c7:69:40:db:fd:50:bd:03:d5:75:e7:2b:a0:7c:99:d0:e7:2c: f5:0f:77:b6:65:a9:d1:75:09:9b:aa:dd:08:90:e1:0d:60:96: 50:8e:a1:85:21:5d:aa:2a:2f:c2:85:c0:53:1a:92:e6:1d:09: 08:ff:7f:1b:0c:6d:2c:35:36:36:99:61:8d:5b:87:1a:d6:f3: 16:53:e0:8d:5f:6b:1f:09:34:84:e0:00:be:54:e4:01:16:7e: 86:42:f4:d7:c1:64:cc:bd:9b:39:17:ea:cc:a3:4d:ba:36:a5: e7:98:0f:e9:75:e9:4c:57:a3:05:de:09:25:e5:1e:68:aa:b8: b6:3a:77:a7:e5:e4:8f:44:7f:7c:ef:e7:d2:a6:55:d1:65:a4: 23:9f:7c:2e:09:3e:43:b6:03:08:01:2a:04:87:87:e6:70:2d: a3:c7:41:da:77:a9:c7:0f:5e:ac:c9:1c:e6:26:8f:a8:0c:7a: 99:f0:84:06:e4:d8:16:52:aa:ee:f1:c4:f4:63:fd:33:0b:71: 7f:96:e5:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp08w8nJpFafGZS7xPQSKhkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYTM0ZjlkMWRiZDIwYWE4N2ZiMGY2MmJkMmI2YzVlMzBj NjE0YTIwHhcNMjUxMTExMjIwNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDc2YmRhNGQ0YWE4NWU4MTc5N2UxNzY0Njc4ZjlhYTZkNjQyOTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkztynE9292pd65Tv9ziQchouEVn TCR1dXTP2OGAjLNyS72zQoUv1ljNdOGVBL+wLUkTdW5/kknLFSzxui7yA1aQ1fcU Y7UKOjKUBoOP4kn9ULSZRMuqlxB3YcRArT6ZFs9K6dWmqNz0LHL3SP47soz+pJJT Jtwm5AQIWKBx29RHCauuJscsE1X0Z6XxezKQsJViFOmYS82kC3KSOv+IFCk2IFFf Exv6zBtpOQ+PQWqPuvEz2OZ/c+y/UmruecjOUuV6vmWFBuZX371noG1MVNuOPln7 qn6JQy3i/feFsNLT4xS5/pDysOoHu7BkrCUwGcij/3kdDgVSPE7FbkW1AwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKR2vaTUqoXoF5fhdkZ4+aptZCmGMB8GA1UdIwQY MBaAFDCjT50dvSCqh/sPYr0rbF4wxhSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUtOUG5SMjlJS3FILXc5aXZTdHNYakRHRktJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lZTQ3MzItYzNiYS00MDg4LWE1ZmEt ZWI2NTNkMzYyMmJiLzEvcEhhOXBOU3FoZWdYbC1GMlJuajVxbTFrS1lZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9lZTQ3MzItYzNiYS00MDg4LWE1ZmEtZWI2NTNkMzYyMmJi LzEvTUtOUG5SMjlJS3FILXc5aXZTdHNYakRHRktJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwW60MA0G CSqGSIb3DQEBCwUAA4IBAQBHw6mO8s8acrFfsoSJXgZzspTJV+jLy40YorrRYnFs Omp1K2vezm0RjCUpYDr00KLI4xbgcGLHaUDb/VC9A9V15yugfJnQ5yz1D3e2ZanR dQmbqt0IkOENYJZQjqGFIV2qKi/ChcBTGpLmHQkI/38bDG0sNTY2mWGNW4ca1vMW U+CNX2sfCTSE4AC+VOQBFn6GQvTXwWTMvZs5F+rMo026NqXnmA/pdelMV6MF3gkl 5R5oqri2Onen5eSPRH987+fSplXRZaQjn3wuCT5DtgMIASoEh4fmcC2jx0Had6nH D16syRzmJo+oDHqZ8IQG5NgWUqru8cT0Y/0zC3F/luUl -----END CERTIFICATE-----Generated at Sat Dec 6 17:34:42 2025 by rpki-client