This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/sAL7HV5u2GX7kRj70Q8iPk9F6Hc.roa File: sAL7HV5u2GX7kRj70Q8iPk9F6Hc.roa (raw, json) Hash identifier: PqlT19J8VExmo6WWORuzOl0PCbV635XVo/nu7AQxx1w= Subject key identifier: B0:02:FB:1D:5E:6E:D8:65:FB:91:18:FB:D1:0F:22:3E:4F:45:E8:77 Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f Certificate serial: 019AFDE191A4F800FAEDBB9E4C54DE639E43 Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/sAL7HV5u2GX7kRj70Q8iPk9F6Hc.roa Signing time: Mon 08 Dec 2025 12:13:29 +0000 ROA not before: Mon 08 Dec 2025 12:13:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212422 IP address blocks: 193.59.94.0/24 maxlen: 24 193.59.95.0/24 maxlen: 24 193.59.98.0/24 maxlen: 24 193.59.102.0/24 maxlen: 24 193.59.103.0/24 maxlen: 24 194.181.181.0/24 maxlen: 24 194.181.250.0/24 maxlen: 24 195.187.35.0/24 maxlen: 24 195.187.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:e1:91:a4:f8:00:fa:ed:bb:9e:4c:54:de:63:9e:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f Validity Not Before: Dec 8 12:13:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b002fb1d5e6ed865fb9118fbd10f223e4f45e877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:82:f1:42:cd:67:42:09:c8:8f:59:93:1a:ad: 71:2b:18:36:4a:57:f6:c7:03:73:c0:f3:37:a0:ca: fe:75:d4:99:a4:82:8b:34:1d:7b:64:46:e9:b2:32: 13:d9:8f:c2:2a:8b:a4:b1:71:a7:38:4f:b1:f2:7c: 8a:bb:1e:3b:74:ab:74:45:a0:03:97:ff:49:72:bd: 99:e1:15:16:02:ba:06:06:49:92:a1:e2:9e:b4:13: 02:08:4f:87:c0:6e:07:d2:05:72:39:f3:22:a8:51: 2a:28:b8:94:a7:f9:31:35:56:b9:c4:f4:f3:a9:26: 6d:4d:0b:b1:40:0c:a7:29:f6:6f:8b:f5:92:b2:9b: 42:e1:ee:ca:b9:a8:30:38:dc:63:d5:c5:06:c6:25: f4:ef:5b:00:83:54:77:e8:18:f0:cf:8c:55:ea:1e: 77:0f:4d:03:bc:64:95:c9:af:79:5d:c5:a7:36:bb: f2:e7:60:4c:6a:82:91:ce:bd:2b:8c:c9:0d:10:d3: 11:c8:a1:13:0d:83:fb:c1:11:2b:14:c9:00:a2:86: f7:e0:1f:0f:4e:2c:f7:e8:f6:d9:fa:76:0f:ca:f7: 63:ce:6c:39:35:2d:16:85:9e:d2:06:99:3b:7d:c4: 41:b4:59:57:54:c0:4c:ac:0c:6b:f8:16:06:bc:ac: 21:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:02:FB:1D:5E:6E:D8:65:FB:91:18:FB:D1:0F:22:3E:4F:45:E8:77 X509v3 Authority Key Identifier: keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/sAL7HV5u2GX7kRj70Q8iPk9F6Hc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.59.94.0/23 193.59.98.0/24 193.59.102.0/23 194.181.181.0/24 194.181.250.0/24 195.187.35.0/24 195.187.53.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:91:97:93:13:47:29:00:1c:b1:61:75:81:73:ec:7f:a3:09: 8c:35:09:25:53:ad:75:3c:a9:5e:e0:4f:a0:03:8d:b5:51:eb: 82:52:52:d3:14:49:2a:58:2c:d8:e6:80:e5:be:44:1c:fa:42: ae:50:5a:f8:da:b0:49:63:ad:a1:8b:45:0d:53:a9:cf:af:54: 63:ce:8e:76:04:7c:ee:d7:3f:82:43:e0:f1:cd:05:d5:01:99: e4:f5:9e:57:73:c7:c4:ba:92:67:a4:0f:b6:7d:aa:b6:9f:d6: 95:72:87:fc:44:55:9f:c2:04:f6:85:57:6e:05:8a:8b:0a:3e: f8:89:51:f9:75:09:cc:fb:01:7e:e5:5c:25:ac:76:cd:85:da: 4b:14:5b:8d:e0:56:dd:e3:a7:4d:df:a9:d3:61:2e:84:08:05: 5f:38:94:7d:bc:7d:54:a2:6e:17:07:e6:e6:40:e6:b0:37:7b: ea:1b:dc:b6:f1:66:99:68:9c:d7:39:5a:53:ce:eb:23:de:b0: 6f:f8:fd:9a:3b:9e:42:b7:af:96:6c:a8:7a:02:93:37:a1:f5: 64:6b:09:ba:9a:1c:f8:d7:34:ed:58:7e:ba:14:a9:a0:3e:de: 25:31:77:0c:01:0b:be:b3:f0:31:bc:f9:5a:7b:4f:c2:d2:c3: 8c:64:1f:6a -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZr94ZGk+AD67bueTFTeY55DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw MTE4OGYwHhcNMjUxMjA4MTIxMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDAyZmIxZDVlNmVkODY1ZmI5MTE4ZmJkMTBmMjIzZTRmNDVlODc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoLxQs1nQgnIj1mTGq1xKxg2Slf2 xwNzwPM3oMr+ddSZpIKLNB17ZEbpsjIT2Y/CKouksXGnOE+x8nyKux47dKt0RaAD l/9Jcr2Z4RUWAroGBkmSoeKetBMCCE+HwG4H0gVyOfMiqFEqKLiUp/kxNVa5xPTz qSZtTQuxQAynKfZvi/WSsptC4e7KuagwONxj1cUGxiX071sAg1R36Bjwz4xV6h53 D00DvGSVya95XcWnNrvy52BMaoKRzr0rjMkNENMRyKETDYP7wRErFMkAoob34B8P Tiz36PbZ+nYPyvdjzmw5NS0WhZ7SBpk7fcRBtFlXVMBMrAxr+BYGvKwhAwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFLAC+x1ebthl+5EY+9EPIj5PReh3MB8GA1UdIwQY MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt YzA2NzFiZjRjZjNlLzEvc0FMN0hWNXUyR1g3a1JqNzBROGlQazlGNkhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBwTteAwQA wTtiAwQBwTtmAwQAwrW1AwQAwrX6AwQAw7sjAwQAw7s1MA0GCSqGSIb3DQEBCwUA A4IBAQBakZeTE0cpAByxYXWBc+x/owmMNQklU611PKle4E+gA421UeuCUlLTFEkq WCzY5oDlvkQc+kKuUFr42rBJY62hi0UNU6nPr1Rjzo52BHzu1z+CQ+DxzQXVAZnk 9Z5Xc8fEupJnpA+2faq2n9aVcof8RFWfwgT2hVduBYqLCj74iVH5dQnM+wF+5Vwl rHbNhdpLFFuN4Fbd46dN36nTYS6ECAVfOJR9vH1Uom4XB+bmQOawN3vqG9y28WaZ aJzXOVpTzusj3rBv+P2aO55Ct6+WbKh6ApM3ofVkawm6mhz41zTtWH66FKmgPt4l MXcMAQu+s/AxvPlae0/C0sOMZB9q -----END CERTIFICATE-----Generated at Sun Dec 14 01:01:38 2025 by rpki-client