This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/X-vr6VJDYrS7V_AEQe-X1SxHPjI.roa File: X-vr6VJDYrS7V_AEQe-X1SxHPjI.roa (raw, json) Hash identifier: kvS9vh6mgtsHB9vFeq8m3TzjFP++U05E594tUA8kMi8= Subject key identifier: 5F:EB:EB:E9:52:43:62:B4:BB:57:F0:04:41:EF:97:D5:2C:47:3E:32 Certificate issuer: /CN=f5cf73b3e45f772fae1b915690b317344c3f442b Certificate serial: 019A7DF19C6FDDC10486228B04EAA04DA7A7 Authority key identifier: F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/X-vr6VJDYrS7V_AEQe-X1SxHPjI.roa Signing time: Thu 13 Nov 2025 15:59:37 +0000 ROA not before: Thu 13 Nov 2025 15:59:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 396362 IP address blocks: 92.243.84.0/24 maxlen: 24 176.223.109.0/24 maxlen: 24 2a0f:ea82::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:f1:9c:6f:dd:c1:04:86:22:8b:04:ea:a0:4d:a7:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5cf73b3e45f772fae1b915690b317344c3f442b Validity Not Before: Nov 13 15:59:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5febebe9524362b4bb57f00441ef97d52c473e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b9:ef:f4:c1:6f:3d:61:0e:fa:c3:5b:ed:62: c4:7f:0c:1e:b0:8b:cb:a6:fd:46:5f:cd:76:42:7c: e2:43:16:26:8b:c3:c1:b0:cb:dd:a6:75:70:5d:e6: 0d:f3:84:ba:3c:66:82:2e:a1:d0:da:a7:68:20:d1: d8:24:98:5d:29:4a:ac:0c:6f:6b:82:72:ed:dd:15: ab:c6:4f:08:32:97:a6:c2:95:ea:e4:80:d1:3a:96: 4b:8f:2a:d4:c5:36:95:3f:a7:7e:4a:75:2b:f2:6b: b0:d9:76:ec:48:39:e1:f7:32:48:c9:c7:76:59:fb: 42:22:68:56:e8:dc:8a:95:c3:d3:1b:22:18:e8:e6: c0:82:d0:2c:c8:85:c2:67:23:86:87:b8:7c:c6:9d: ab:c2:9f:00:79:4a:c3:23:eb:38:0d:9f:a0:5e:da: ac:6f:50:77:cc:67:f1:0e:0a:c3:b8:9e:3c:f4:aa: a1:43:0d:01:db:af:41:44:96:bf:2b:74:ee:44:80: 3e:6b:48:51:08:56:78:1a:7a:f5:f9:88:68:67:50: d5:1e:e7:f9:19:93:e5:7f:53:65:9e:d7:56:a1:f9: ab:3f:78:1d:53:e4:1b:33:4a:4e:98:58:41:93:f9: f7:fa:d1:d5:3f:fd:5c:5c:b8:13:e3:8e:bb:cd:c5: 5a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EB:EB:E9:52:43:62:B4:BB:57:F0:04:41:EF:97:D5:2C:47:3E:32 X509v3 Authority Key Identifier: keyid:F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/X-vr6VJDYrS7V_AEQe-X1SxHPjI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.243.84.0/24 176.223.109.0/24 IPv6: 2a0f:ea82::/32 Signature Algorithm: sha256WithRSAEncryption 6e:26:4d:67:a3:38:3b:54:e8:8c:de:5c:96:f3:bc:8e:35:f3: fc:39:92:ed:27:d1:2f:61:c9:6b:a7:cb:4e:99:e0:52:d7:30: ea:0f:87:c8:b2:3f:31:dc:01:27:ec:0c:fc:80:62:e5:ca:0c: d6:e6:12:b2:1b:c4:c4:90:29:70:ea:55:a3:15:b4:f2:a7:c4: bb:95:f3:e0:52:a3:2a:50:57:1d:7b:2e:7d:45:d3:05:6f:40: 49:4c:5b:5d:be:6a:d2:c0:ce:80:d1:aa:54:24:c0:69:c2:b2: 5d:e4:9c:87:4a:b3:e8:95:59:71:d0:ae:42:c7:74:2a:d9:57: bb:92:96:66:13:f3:87:f3:77:33:15:27:6f:9b:39:32:85:33: 73:e4:2a:79:6e:f0:41:54:1e:b1:e3:fa:6e:0c:d1:c3:7b:33: 7c:04:a8:30:68:7a:da:0b:d4:97:0a:2d:44:30:e8:65:cc:2f: 39:e7:8a:58:bf:37:04:cf:ac:97:78:41:d5:a0:12:7f:07:73: 6a:8c:04:0b:dd:78:8e:28:39:18:89:5f:da:4b:0a:1e:5f:83: e4:f2:60:2b:c6:ca:c5:d9:c7:02:92:a2:5b:2d:3a:80:b8:87: e0:97:4e:46:a1:93:d1:64:aa:f0:aa:a7:82:25:89:72:1b:19: ab:96:ee:67 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZp98Zxv3cEEhiKLBOqgTaenMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1Y2Y3M2IzZTQ1Zjc3MmZhZTFiOTE1NjkwYjMxNzM0NGMz ZjQ0MmIwHhcNMjUxMTEzMTU1OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmViZWJlOTUyNDM2MmI0YmI1N2YwMDQ0MWVmOTdkNTJjNDczZTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLnv9MFvPWEO+sNb7WLEfwwesIvL pv1GX812QnziQxYmi8PBsMvdpnVwXeYN84S6PGaCLqHQ2qdoINHYJJhdKUqsDG9r gnLt3RWrxk8IMpemwpXq5IDROpZLjyrUxTaVP6d+SnUr8muw2XbsSDnh9zJIycd2 WftCImhW6NyKlcPTGyIY6ObAgtAsyIXCZyOGh7h8xp2rwp8AeUrDI+s4DZ+gXtqs b1B3zGfxDgrDuJ489KqhQw0B269BRJa/K3TuRIA+a0hRCFZ4Gnr1+YhoZ1DVHuf5 GZPlf1NlntdWofmrP3gdU+QbM0pOmFhBk/n3+tHVP/1cXLgT4467zcVaBwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFF/r6+lSQ2K0u1fwBEHvl9UsRz4yMB8GA1UdIwQY MBaAFPXPc7PkX3cvrhuRVpCzFzRMP0QrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWM5enMtUmZkeS11RzVGV2tMTVhORXdfUkNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zYmU4NjUtNWM3OS00N2MwLWFhNGQt MWM2NTRlMDJkNzVkLzEvWC12cjZWSkRZclM3Vl9BRVFlLVgxU3hIUGpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8zYmU4NjUtNWM3OS00N2MwLWFhNGQtMWM2NTRlMDJkNzVk LzEvOWM5enMtUmZkeS11RzVGV2tMTVhORXdfUkNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAXPNUAwQA sN9tMA0EAgACMAcDBQAqD+qCMA0GCSqGSIb3DQEBCwUAA4IBAQBuJk1nozg7VOiM 3lyW87yONfP8OZLtJ9EvYclrp8tOmeBS1zDqD4fIsj8x3AEn7Az8gGLlygzW5hKy G8TEkClw6lWjFbTyp8S7lfPgUqMqUFcdey59RdMFb0BJTFtdvmrSwM6A0apUJMBp wrJd5JyHSrPolVlx0K5Cx3Qq2Ve7kpZmE/OH83czFSdvmzkyhTNz5Cp5bvBBVB6x 4/puDNHDezN8BKgwaHraC9SXCi1EMOhlzC8554pYvzcEz6yXeEHVoBJ/B3NqjAQL 3XiOKDkYiV/aSwoeX4Pk8mArxsrF2ccCkqJbLTqAuIfgl05GoZPRZKrwqqeCJYly Gxmrlu5n -----END CERTIFICATE-----Generated at Sat Dec 6 16:51:47 2025 by rpki-client