This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1r8xKzDT0eR_ix5Q-4n14ACIpTw.roa File: 1r8xKzDT0eR_ix5Q-4n14ACIpTw.roa (raw, json) Hash identifier: o9mCW7swJuvq7q1esfrvFlmZ/s0Tygc5H1Nx3yxm+eQ= Subject key identifier: D6:BF:31:2B:30:D3:D1:E4:7F:8B:1E:50:FB:89:F5:E0:00:88:A5:3C Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019A595D9A61194B4C821106FB61F6693219 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1r8xKzDT0eR_ix5Q-4n14ACIpTw.roa Signing time: Thu 06 Nov 2025 13:31:37 +0000 ROA not before: Thu 06 Nov 2025 13:31:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212353 IP address blocks: 94.103.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:59:5d:9a:61:19:4b:4c:82:11:06:fb:61:f6:69:32:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 6 13:31:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d6bf312b30d3d1e47f8b1e50fb89f5e00088a53c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7b:7d:77:df:89:2f:c9:71:51:4a:e2:f0:41: cf:7e:18:8a:1d:d2:73:42:b7:b1:dd:23:da:14:12: ae:c7:cc:ea:4d:85:1c:d0:f3:47:b3:fe:c5:73:d7: ad:74:d8:9b:40:68:e6:38:36:a2:96:db:59:b9:82: 1a:07:22:eb:21:18:59:2b:7b:8e:2a:85:33:4d:65: 17:92:6b:5f:fe:5b:b9:83:68:09:b5:7b:9f:e5:e2: 87:b4:fe:e1:b5:ef:a8:d3:13:63:d7:15:80:b8:9d: 9e:fb:95:9e:92:34:f0:0f:08:76:98:4e:a8:ee:88: 80:da:8a:89:61:51:af:b4:02:71:a1:7b:11:4c:f7: c6:7e:35:51:68:67:46:63:bd:aa:e8:de:23:b1:fd: 66:b0:80:72:fe:d5:5b:b0:e2:4c:85:23:8d:df:72: ff:d8:c1:30:85:c9:3b:f9:c4:62:f8:30:f4:d6:18: 95:9f:62:16:99:19:f8:c8:a8:45:d5:cc:90:29:8d: d2:19:e6:dd:04:5d:85:51:19:16:a0:16:d3:96:ab: ec:50:b4:3f:7c:d6:6d:0a:33:44:ce:88:49:c5:6c: c7:55:b0:72:06:ad:cb:19:9f:ea:a7:ad:7a:15:b8: 0a:34:82:63:52:25:fd:ca:8d:f1:88:8c:fa:85:f8: 06:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BF:31:2B:30:D3:D1:E4:7F:8B:1E:50:FB:89:F5:E0:00:88:A5:3C X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1r8xKzDT0eR_ix5Q-4n14ACIpTw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.103.166.0/24 Signature Algorithm: sha256WithRSAEncryption ec:21:84:79:b3:28:fd:f5:79:59:67:63:04:50:3d:2a:9c:f2: f8:22:4f:52:fe:47:42:c2:9b:2d:af:7f:d1:40:69:5d:12:ba: 20:67:e1:3a:f0:63:f2:25:c2:20:c8:cd:68:7b:0d:7d:61:ec: 75:25:b4:98:bf:50:4a:6d:27:51:91:7e:45:d5:18:d4:fb:83: 2a:0e:1a:86:1d:5e:9d:76:3e:4f:3e:61:57:4e:16:63:26:68: 0a:c8:e8:ac:05:54:48:8d:02:be:4c:7e:97:30:2d:d1:95:5d: ef:54:6c:36:07:4e:6e:75:ab:0b:dc:74:99:13:47:91:7f:7d: 79:99:5f:c0:be:e3:4f:2c:19:fd:99:af:9c:06:31:eb:35:70: 29:46:ac:5b:97:6d:cc:18:f8:88:65:1f:75:13:db:b8:a3:2f: ee:4c:4d:ac:67:58:98:54:a9:50:c6:b3:9f:73:d0:02:07:ed: 6a:09:c7:2d:2c:24:48:0c:8c:69:88:76:f4:31:27:08:7f:d0: 73:aa:e0:01:77:f5:f5:c1:74:3f:29:8d:74:40:f4:73:88:11: 92:03:11:53:f4:d9:2a:74:80:36:74:f9:35:a2:f5:b1:c0:27: 05:7b:18:f5:36:80:45:7e:51:0a:3c:29:5b:3e:4a:fb:91:94: 88:ec:f5:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpZXZphGUtMghEG+2H2aTIZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTA2MTMzMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmJmMzEyYjMwZDNkMWU0N2Y4YjFlNTBmYjg5ZjVlMDAwODhhNTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXt9d9+JL8lxUUri8EHPfhiKHdJz Qrex3SPaFBKux8zqTYUc0PNHs/7Fc9etdNibQGjmODailttZuYIaByLrIRhZK3uO KoUzTWUXkmtf/lu5g2gJtXuf5eKHtP7hte+o0xNj1xWAuJ2e+5WekjTwDwh2mE6o 7oiA2oqJYVGvtAJxoXsRTPfGfjVRaGdGY72q6N4jsf1msIBy/tVbsOJMhSON33L/ 2MEwhck7+cRi+DD01hiVn2IWmRn4yKhF1cyQKY3SGebdBF2FURkWoBbTlqvsULQ/ fNZtCjNEzohJxWzHVbByBq3LGZ/qp616FbgKNIJjUiX9yo3xiIz6hfgGowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNa/MSsw09Hkf4seUPuJ9eAAiKU8MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvMXI4eEt6RFQwZVJfaXg1US00bjE0QUNJcFR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXmemMA0G CSqGSIb3DQEBCwUAA4IBAQDsIYR5syj99XlZZ2MEUD0qnPL4Ik9S/kdCwpstr3/R QGldErogZ+E68GPyJcIgyM1oew19Yex1JbSYv1BKbSdRkX5F1RjU+4MqDhqGHV6d dj5PPmFXThZjJmgKyOisBVRIjQK+TH6XMC3RlV3vVGw2B05udasL3HSZE0eRf315 mV/AvuNPLBn9ma+cBjHrNXApRqxbl23MGPiIZR91E9u4oy/uTE2sZ1iYVKlQxrOf c9ACB+1qCcctLCRIDIxpiHb0MScIf9BzquABd/X1wXQ/KY10QPRziBGSAxFT9Nkq dIA2dPk1ovWxwCcFexj1NoBFflEKPClbPkr7kZSI7PUL -----END CERTIFICATE-----Generated at Fri Dec 5 17:04:44 2025 by rpki-client