This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/tM_s_jIVMpnC0oCPsOpDQSHNBDA.roa File: tM_s_jIVMpnC0oCPsOpDQSHNBDA.roa (raw, json) Hash identifier: RCUwziKQ5eXDF7JzLf4jnwhvMgGWmUVWGhkXx5liI4A= Subject key identifier: B4:CF:EC:FE:32:15:32:99:C2:D2:80:8F:B0:EA:43:41:21:CD:04:30 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019A58942FB2579443CFD7C034E0F8D51810 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/tM_s_jIVMpnC0oCPsOpDQSHNBDA.roa Signing time: Thu 06 Nov 2025 09:51:37 +0000 ROA not before: Thu 06 Nov 2025 09:51:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58061 IP address blocks: 192.124.191.0/24 maxlen: 24 193.124.5.0/24 maxlen: 24 194.87.12.0/24 maxlen: 24 194.87.22.0/24 maxlen: 24 194.87.40.0/24 maxlen: 24 194.87.124.0/24 maxlen: 24 194.87.142.0/24 maxlen: 24 194.87.150.0/24 maxlen: 24 194.87.169.0/24 maxlen: 24 194.87.185.0/24 maxlen: 24 195.133.6.0/24 maxlen: 24 195.133.42.0/24 maxlen: 24 195.133.43.0/24 maxlen: 24 195.133.72.0/24 maxlen: 24 195.133.85.0/24 maxlen: 24 212.193.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:40:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:58:94:2f:b2:57:94:43:cf:d7:c0:34:e0:f8:d5:18:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Nov 6 09:51:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b4cfecfe32153299c2d2808fb0ea434121cd0430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4b:19:62:d1:99:6e:75:a6:82:fa:3e:32:7b: cc:78:f1:ae:cd:47:d5:d9:b4:c7:ac:ae:03:86:49: b9:a2:e1:89:a6:d6:ec:bb:79:b1:62:f1:c7:5d:84: b5:2d:fb:81:e0:f3:16:5c:1c:0e:26:d4:be:7c:d1: 13:08:cd:dd:c1:04:7d:ed:51:05:87:28:76:fe:98: ec:ac:0d:bb:2c:ac:5c:6f:af:31:c0:cb:3d:1e:7c: d2:ff:77:e7:f2:3e:6a:eb:cc:5c:96:c7:44:f3:ff: 71:55:2f:e5:d3:ab:e9:4f:53:73:76:9e:fb:a9:11: 63:65:1f:c3:ed:28:b2:f1:df:f0:6e:1f:7d:30:2d: 0b:d3:76:9c:6e:8d:2b:71:26:93:b8:3e:89:95:f2: 64:08:df:3d:0c:48:61:cc:7e:2f:ec:d5:08:c1:89: 55:d2:28:a0:c4:40:05:2b:4e:88:82:c9:d2:20:38: 1b:65:cd:88:f7:d6:8b:00:32:ac:ea:e2:d8:fe:7f: 15:c1:d7:80:e6:45:d8:49:c7:91:27:8e:5e:d1:7f: 76:b8:fe:6b:44:5d:29:b1:00:bd:05:f9:f0:7b:a7: 9a:a9:c6:ad:35:68:a6:99:eb:44:df:b4:e1:79:39: cf:ff:de:42:1e:47:31:17:16:92:74:7a:a9:c7:45: 9a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:CF:EC:FE:32:15:32:99:C2:D2:80:8F:B0:EA:43:41:21:CD:04:30 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/tM_s_jIVMpnC0oCPsOpDQSHNBDA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.124.191.0/24 193.124.5.0/24 194.87.12.0/24 194.87.22.0/24 194.87.40.0/24 194.87.124.0/24 194.87.142.0/24 194.87.150.0/24 194.87.169.0/24 194.87.185.0/24 195.133.6.0/24 195.133.42.0/23 195.133.72.0/24 195.133.85.0/24 212.193.14.0/24 Signature Algorithm: sha256WithRSAEncryption 22:d5:fc:23:0e:06:b9:27:d0:f1:7c:b7:fe:6a:b1:a9:23:40: 25:7d:bd:9e:5e:a6:36:4f:37:e7:73:bc:f9:7f:f1:39:85:2d: 04:87:a5:17:9f:52:91:ed:59:d2:91:f6:b0:c0:02:10:6b:c2: cb:74:85:18:36:93:eb:47:e0:b5:ae:7b:f2:06:6a:85:d4:e4: 34:9f:14:46:21:f7:88:00:c9:4e:24:c5:51:28:ca:4e:15:1f: ae:4c:07:4e:a5:d6:23:bc:ce:58:6d:b2:5d:80:8d:a8:c5:73: 44:14:35:f9:bc:bb:0d:8c:e7:4a:f9:48:41:46:61:ac:5e:5e: 1c:f0:67:6c:59:db:4d:42:d7:27:6d:36:3f:89:6a:91:4c:46: 17:7b:d6:c2:b1:c0:d5:38:75:d8:ef:d1:c1:5d:96:ac:38:fb: bf:e9:45:9a:1a:10:05:7f:1e:a0:da:48:a6:6e:03:c3:91:69: 95:6a:64:6c:31:ce:44:fd:45:0c:24:39:9e:11:26:63:ea:93: 33:ef:e4:ba:f9:29:de:b8:5a:6e:71:c7:73:97:c8:87:02:f9: 5b:4e:03:7e:04:95:c0:e8:f9:13:e4:30:6f:c8:a7:3c:dd:0d: 08:55:ac:f4:5a:63:7d:2c:b5:8b:2d:ea:f2:77:ea:cb:a2:7f: 9d:9f:09:03 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZpYlC+yV5RDz9fANOD41RgQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjUxMTA2MDk1MTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGNmZWNmZTMyMTUzMjk5YzJkMjgwOGZiMGVhNDM0MTIxY2QwNDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0sZYtGZbnWmgvo+MnvMePGuzUfV 2bTHrK4Dhkm5ouGJptbsu3mxYvHHXYS1LfuB4PMWXBwOJtS+fNETCM3dwQR97VEF hyh2/pjsrA27LKxcb68xwMs9HnzS/3fn8j5q68xclsdE8/9xVS/l06vpT1Nzdp77 qRFjZR/D7Siy8d/wbh99MC0L03acbo0rcSaTuD6JlfJkCN89DEhhzH4v7NUIwYlV 0iigxEAFK06IgsnSIDgbZc2I99aLADKs6uLY/n8VwdeA5kXYSceRJ45e0X92uP5r RF0psQC9Bfnwe6eaqcatNWimmetE37TheTnP/95CHkcxFxaSdHqpx0WalwIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFLTP7P4yFTKZwtKAj7DqQ0EhzQQwMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvdE1fc19qSVZNcG5DMG9DUHNPcERRU0hOQkRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQAwHy/AwQA wXwFAwQAwlcMAwQAwlcWAwQAwlcoAwQAwld8AwQAwleOAwQAwleWAwQAwlepAwQA wle5AwQAw4UGAwQBw4UqAwQAw4VIAwQAw4VVAwQA1MEOMA0GCSqGSIb3DQEBCwUA A4IBAQAi1fwjDga5J9DxfLf+arGpI0Alfb2eXqY2Tzfnc7z5f/E5hS0Eh6UXn1KR 7VnSkfawwAIQa8LLdIUYNpPrR+C1rnvyBmqF1OQ0nxRGIfeIAMlOJMVRKMpOFR+u TAdOpdYjvM5YbbJdgI2oxXNEFDX5vLsNjOdK+UhBRmGsXl4c8GdsWdtNQtcnbTY/ iWqRTEYXe9bCscDVOHXY79HBXZasOPu/6UWaGhAFfx6g2kimbgPDkWmVamRsMc5E /UUMJDmeESZj6pMz7+S6+SneuFpuccdzl8iHAvlbTgN+BJXA6PkT5DBvyKc83Q0I Vaz0WmN9LLWLLeryd+rLon+dnwkD -----END CERTIFICATE-----Generated at Fri Dec 5 16:35:49 2025 by rpki-client