This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/r9qWmUyirzSoIMx5xp_y-7AIxWk.roa File: r9qWmUyirzSoIMx5xp_y-7AIxWk.roa (raw, json) Hash identifier: ZemXpLqp/9c9SIDUxkmjPuxL9iotKu/FfXs2x9gaAl0= Subject key identifier: AF:DA:96:99:4C:A2:AF:34:A8:20:CC:79:C6:9F:F2:FB:B0:08:C5:69 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019AF54E227464D015235EDC4A38BF6FC178 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/r9qWmUyirzSoIMx5xp_y-7AIxWk.roa Signing time: Sat 06 Dec 2025 20:15:29 +0000 ROA not before: Sat 06 Dec 2025 20:15:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13335 IP address blocks: 146.19.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 21:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:4e:22:74:64:d0:15:23:5e:dc:4a:38:bf:6f:c1:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Dec 6 20:15:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=afda96994ca2af34a820cc79c69ff2fbb008c569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1e:e8:36:c2:d0:97:d5:6f:23:f6:55:1e:c8: ce:cf:21:e5:af:6a:3c:5b:9c:2b:ee:0f:f6:ef:33: 0c:18:93:a6:33:0b:ec:ed:0c:8c:6b:b8:e4:9f:5a: 5b:03:ed:3f:73:81:24:2b:bd:4f:b4:f9:f6:b3:63: 29:e1:7c:d7:ba:42:e9:db:11:a2:c8:8e:ac:d4:66: 33:41:ae:ec:22:76:4a:85:a3:bd:6f:4a:1d:3d:9f: da:98:93:5c:6e:7a:c3:86:f3:4f:4e:36:90:0c:eb: 5f:f7:c9:f7:8b:44:22:d1:4f:53:c4:42:0b:58:5b: 02:a5:e9:eb:e5:f1:cd:3f:0f:da:5b:36:8a:f4:59: 16:41:a7:d9:22:1f:88:83:8d:72:94:dc:72:6a:a7: c3:86:45:dc:f1:57:36:13:8d:54:d0:b8:61:69:72: 35:c0:10:99:de:37:13:52:ff:db:40:90:74:b6:23: d3:3c:31:1f:91:63:32:8c:15:64:1c:cf:01:53:5e: bf:c5:9c:44:f8:fa:b8:25:fc:37:07:8a:11:50:cd: 46:01:34:99:45:50:50:09:d4:97:3d:49:26:79:9b: a5:b2:c4:bb:5d:a9:93:48:0a:8c:8c:f3:db:56:74: 86:5d:14:b8:e6:95:10:c3:68:2e:73:7f:6a:8e:3c: 32:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:DA:96:99:4C:A2:AF:34:A8:20:CC:79:C6:9F:F2:FB:B0:08:C5:69 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/r9qWmUyirzSoIMx5xp_y-7AIxWk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.21.0/24 Signature Algorithm: sha256WithRSAEncryption 94:08:08:88:06:ad:d7:8f:54:37:d0:83:10:28:17:97:6f:38: dd:ad:2f:17:90:c2:57:26:a1:ab:a9:74:06:77:da:2e:02:d4: 5d:73:d3:8b:1c:14:7e:63:ad:c2:44:57:24:ac:16:9e:76:33: a4:e1:de:06:10:7a:65:bf:3d:2f:03:01:b6:48:30:5e:b3:ad: 69:d7:2a:80:9b:5f:c6:39:bb:9e:75:78:6d:72:2a:4a:df:09: 95:28:9b:2d:46:0b:97:4c:7b:8b:6b:94:4d:ea:e7:1e:4e:79: 97:30:98:53:d8:d6:2b:24:e1:aa:1b:0a:9a:cd:eb:b0:d4:fd: e3:83:f2:68:0e:c3:2b:9d:d6:6d:5c:9a:31:ca:22:58:a4:09: e5:79:1d:5e:fa:ee:82:6d:d1:0a:d3:f6:29:e1:3b:a9:d0:c1: 65:b7:f4:c4:e6:d7:8e:8e:b3:e9:e3:69:f9:dd:08:ab:d8:17: d4:1b:bb:5f:b4:00:e7:00:1b:65:a8:e7:39:2a:67:2e:87:5a: a2:c4:5b:77:c0:00:4f:18:df:60:26:c4:ae:3b:e3:f8:9d:69: 63:d1:0b:37:91:da:21:eb:24:a9:1a:07:d0:07:02:80:9d:d6: 9a:74:f1:f4:cf:20:c6:95:51:15:87:e5:ad:49:a7:b6:23:d0: 7a:4c:e2:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr1TiJ0ZNAVI17cSji/b8F4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjUxMjA2MjAxNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmRhOTY5OTRjYTJhZjM0YTgyMGNjNzljNjlmZjJmYmIwMDhjNTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR7oNsLQl9VvI/ZVHsjOzyHlr2o8 W5wr7g/27zMMGJOmMwvs7QyMa7jkn1pbA+0/c4EkK71PtPn2s2Mp4XzXukLp2xGi yI6s1GYzQa7sInZKhaO9b0odPZ/amJNcbnrDhvNPTjaQDOtf98n3i0Qi0U9TxEIL WFsCpenr5fHNPw/aWzaK9FkWQafZIh+Ig41ylNxyaqfDhkXc8Vc2E41U0LhhaXI1 wBCZ3jcTUv/bQJB0tiPTPDEfkWMyjBVkHM8BU16/xZxE+Pq4Jfw3B4oRUM1GATSZ RVBQCdSXPUkmeZulssS7XamTSAqMjPPbVnSGXRS45pUQw2guc39qjjwyvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK/alplMoq80qCDMecaf8vuwCMVpMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvcjlxV21VeWlyelNvSU14NXhwX3ktN0FJeFdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhMVMA0G CSqGSIb3DQEBCwUAA4IBAQCUCAiIBq3Xj1Q30IMQKBeXbzjdrS8XkMJXJqGrqXQG d9ouAtRdc9OLHBR+Y63CRFckrBaedjOk4d4GEHplvz0vAwG2SDBes61p1yqAm1/G ObuedXhtcipK3wmVKJstRguXTHuLa5RN6uceTnmXMJhT2NYrJOGqGwqazeuw1P3j g/JoDsMrndZtXJoxyiJYpAnleR1e+u6CbdEK0/Yp4Tup0MFlt/TE5teOjrPp42n5 3Qir2BfUG7tftADnABtlqOc5Kmcuh1qixFt3wABPGN9gJsSuO+P4nWlj0Qs3kdoh 6ySpGgfQBwKAndaadPH0zyDGlVEVh+WtSae2I9B6TOJ5 -----END CERTIFICATE-----Generated at Tue Dec 16 03:42:48 2025 by rpki-client