This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/C4-OG5ts507hMSQ7Yy_vTSGiUPo.roa File: C4-OG5ts507hMSQ7Yy_vTSGiUPo.roa (raw, json) Hash identifier: EtEUn9b6/+4ihLNubDgNzTtlMJUEM86BPuWkPV/rMLk= Subject key identifier: 0B:8F:8E:1B:9B:6C:E7:4E:E1:31:24:3B:63:2F:EF:4D:21:A2:50:FA Certificate issuer: /CN=c375113fd4bfbd38b1043843c30926a110cc0f51 Certificate serial: 019B07C6D42FA2A9DB1107348D391B4CB35D Authority key identifier: C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/C4-OG5ts507hMSQ7Yy_vTSGiUPo.roa Signing time: Wed 10 Dec 2025 10:20:29 +0000 ROA not before: Wed 10 Dec 2025 10:20:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42417 IP address blocks: 193.239.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:c6:d4:2f:a2:a9:db:11:07:34:8d:39:1b:4c:b3:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c375113fd4bfbd38b1043843c30926a110cc0f51 Validity Not Before: Dec 10 10:20:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0b8f8e1b9b6ce74ee131243b632fef4d21a250fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f6:56:8d:5e:de:5d:8b:91:9d:44:f8:7b:80: 37:8e:ba:a9:60:7f:e5:f4:50:55:4e:a8:13:04:20: 29:fd:ca:e3:17:32:1d:bb:74:14:6d:03:cd:c4:94: b7:b4:22:2f:74:f0:82:89:fa:5b:c6:4a:ec:6e:36: ae:2a:2c:6e:79:97:dd:c9:a9:27:da:a2:6b:ef:b1: 5f:87:52:c3:f6:34:80:f8:f9:40:ac:88:d6:af:19: e6:0c:a4:a3:f3:78:3f:73:8f:70:b2:fa:bf:4d:ee: dc:78:22:5d:da:36:27:3b:a5:2b:a7:60:64:52:b1: b0:e5:a7:49:81:92:a2:97:30:ff:7c:7d:81:92:b8: a7:5e:f6:07:86:5b:30:36:38:d3:1d:54:5c:53:39: 2b:93:05:f7:3a:01:bc:70:1d:d1:00:b9:8f:dd:cb: 9a:b4:49:b2:93:a9:33:a6:3b:b1:c9:4b:49:5c:8e: 35:d1:00:2b:bd:78:af:9e:c0:4b:7a:2c:e4:e1:47: e0:61:93:5c:dd:97:3c:95:aa:c8:c4:40:52:54:5a: 74:63:08:bc:c1:09:56:8c:df:8e:1d:2b:2f:6d:ff: 77:e4:ea:79:69:55:30:c8:6f:e6:5c:2f:3b:64:77: 92:ad:05:2e:2e:ba:3f:4b:36:3d:3f:f8:f3:43:76: 04:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8F:8E:1B:9B:6C:E7:4E:E1:31:24:3B:63:2F:EF:4D:21:A2:50:FA X509v3 Authority Key Identifier: keyid:C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/C4-OG5ts507hMSQ7Yy_vTSGiUPo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.239.218.0/23 Signature Algorithm: sha256WithRSAEncryption 02:14:ee:18:bc:5a:16:b4:f0:3f:08:f9:0a:04:db:6a:29:cb: ac:ce:e1:13:60:a5:cd:f4:3a:5e:ca:7e:0a:80:11:f6:47:ce: 44:e1:fb:e3:dd:dc:f0:cf:8f:bb:67:47:d8:b7:06:b5:fd:71: b3:50:f5:ea:19:58:c6:05:a3:b9:ef:b0:37:8c:4a:b2:7d:d1: 08:9a:83:a6:30:14:40:8b:34:60:60:7b:c5:a7:50:ba:e8:5b: 9c:4c:d4:71:e9:63:17:98:60:97:05:91:a5:6f:04:93:11:7a: ee:3e:e5:3a:fb:f0:c2:e0:33:d8:90:be:95:f1:c2:5e:26:94: b5:6c:c4:1c:e6:80:74:29:34:d2:9d:6b:7c:95:1d:88:10:43: 87:8e:da:ff:20:4f:69:f8:68:29:6c:d6:f8:32:c7:a4:23:e6: c6:70:5d:ce:67:a8:1e:7c:5b:c7:bf:1b:92:2a:85:4d:b1:60: 6e:d4:25:b9:3c:fe:d3:5c:ac:4d:19:9f:16:33:8a:56:06:ca: 5e:ee:24:b8:5d:f5:55:7d:6c:fb:f8:ad:f8:db:35:1c:cd:45: 1d:e2:2b:90:f9:1a:07:6a:be:d7:4b:1d:78:89:31:4a:c4:5d: ce:71:97:96:65:d2:db:81:12:2e:1f:d6:56:62:d4:72:d7:b0: 8d:14:a3:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsHxtQvoqnbEQc0jTkbTLNdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNzUxMTNmZDRiZmJkMzhiMTA0Mzg0M2MzMDkyNmExMTBj YzBmNTEwHhcNMjUxMjEwMTAyMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjhmOGUxYjliNmNlNzRlZTEzMTI0M2I2MzJmZWY0ZDIxYTI1MGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPZWjV7eXYuRnUT4e4A3jrqpYH/l 9FBVTqgTBCAp/crjFzIdu3QUbQPNxJS3tCIvdPCCifpbxkrsbjauKixueZfdyakn 2qJr77Ffh1LD9jSA+PlArIjWrxnmDKSj83g/c49wsvq/Te7ceCJd2jYnO6Urp2Bk UrGw5adJgZKilzD/fH2BkrinXvYHhlswNjjTHVRcUzkrkwX3OgG8cB3RALmP3cua tEmyk6kzpjuxyUtJXI410QArvXivnsBLeizk4UfgYZNc3Zc8larIxEBSVFp0Ywi8 wQlWjN+OHSsvbf935Op5aVUwyG/mXC87ZHeSrQUuLro/SzY9P/jzQ3YE0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAuPjhubbOdO4TEkO2Mv700holD6MB8GA1UdIwQY MBaAFMN1ET/Uv704sQQ4Q8MJJqEQzA9RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzNVUlA5U192VGl4QkRoRHd3a21vUkRNRDFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZjljNzgtNmVkZS00MGRmLTg5YzEt Nzk3MjVmYTJlMTMzLzEvQzQtT0c1dHM1MDdoTVNRN1l5X3ZUU0dpVVBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9hZjljNzgtNmVkZS00MGRmLTg5YzEtNzk3MjVmYTJlMTMz LzEvdzNVUlA5U192VGl4QkRoRHd3a21vUkRNRDFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwe/aMA0G CSqGSIb3DQEBCwUAA4IBAQACFO4YvFoWtPA/CPkKBNtqKcuszuETYKXN9Dpeyn4K gBH2R85E4fvj3dzwz4+7Z0fYtwa1/XGzUPXqGVjGBaO577A3jEqyfdEImoOmMBRA izRgYHvFp1C66FucTNRx6WMXmGCXBZGlbwSTEXruPuU6+/DC4DPYkL6V8cJeJpS1 bMQc5oB0KTTSnWt8lR2IEEOHjtr/IE9p+GgpbNb4MsekI+bGcF3OZ6gefFvHvxuS KoVNsWBu1CW5PP7TXKxNGZ8WM4pWBspe7iS4XfVVfWz7+K342zUczUUd4iuQ+RoH ar7XSx14iTFKxF3OcZeWZdLbgRIuH9ZWYtRy17CNFKNt -----END CERTIFICATE-----Generated at Tue Dec 16 14:17:15 2025 by rpki-client