This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/trE3HDwgv75sYp4davDB0tR_GuY.roa File: trE3HDwgv75sYp4davDB0tR_GuY.roa (raw, json) Hash identifier: ylD0oJpzQM0R22A4r+oD7459S8+/jdhGAs9Fm5gKxTU= Subject key identifier: B6:B1:37:1C:3C:20:BF:BE:6C:62:9E:1D:6A:F0:C1:D2:D4:7F:1A:E6 Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B06BB800DA2E1D7BF7CE16584BF4CD89F Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/trE3HDwgv75sYp4davDB0tR_GuY.roa Signing time: Wed 10 Dec 2025 05:28:29 +0000 ROA not before: Wed 10 Dec 2025 05:28:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8300 IP address blocks: 193.5.20.0/23 maxlen: 23 193.5.30.0/24 maxlen: 24 193.5.158.0/23 maxlen: 24 193.134.248.0/23 maxlen: 23 194.209.74.0/24 maxlen: 24 194.209.218.0/24 maxlen: 24 212.243.101.0/24 maxlen: 24 2001:918:1ab::/48 maxlen: 48 2001:918:f00::/40 maxlen: 40 2001:918:ff70::/44 maxlen: 48 2001:918:ffb7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:bb:80:0d:a2:e1:d7:bf:7c:e1:65:84:bf:4c:d8:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Dec 10 05:28:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b6b1371c3c20bfbe6c629e1d6af0c1d2d47f1ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bf:1d:b0:8c:37:7e:37:7f:b6:3e:0a:f7:58: 2a:a9:6a:5f:5d:1c:3d:9f:9e:05:b1:cd:cb:c8:90: c2:c2:2d:ef:74:e2:46:cf:da:37:91:f4:6f:8e:39: 1e:8e:5f:00:90:26:14:09:ae:1f:3f:87:95:f8:3c: ac:6d:fb:89:1d:68:52:31:a3:e2:79:ac:8e:58:d5: db:e0:75:51:45:2f:3f:29:ed:d0:3a:16:09:88:7e: 0d:15:6a:2b:f5:ab:78:2e:92:eb:fd:2c:9a:2c:47: c4:f3:1c:71:61:07:4c:a2:81:09:45:95:88:3a:75: 5a:ec:78:d3:a6:91:76:9d:ff:f6:7a:55:fc:ff:0b: c1:2c:c6:47:ca:8e:15:ba:a8:be:62:e7:b1:af:d1: 9d:13:30:74:e8:7a:eb:19:15:d5:ed:01:c4:5d:7c: 98:d2:9c:17:9f:6e:40:6a:88:5e:80:fe:37:e9:43: ec:17:05:52:ad:c1:78:cb:55:d1:33:a1:59:c3:b0: 2f:41:e4:be:76:0e:c8:36:16:9e:a1:15:ca:7e:bb: de:3f:c8:52:60:93:21:bd:b3:f0:46:52:be:b1:bb: c9:e9:2c:45:3c:63:b0:67:e0:a5:0e:16:57:44:6a: 3a:6b:76:2b:43:8e:6f:6a:1f:b7:61:1a:0a:66:af: f5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B1:37:1C:3C:20:BF:BE:6C:62:9E:1D:6A:F0:C1:D2:D4:7F:1A:E6 X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/trE3HDwgv75sYp4davDB0tR_GuY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.20.0/23 193.5.30.0/24 193.5.158.0/23 193.134.248.0/23 194.209.74.0/24 194.209.218.0/24 212.243.101.0/24 IPv6: 2001:918:1ab::/48 2001:918:f00::/40 2001:918:ff70::/44 2001:918:ffb7::/48 Signature Algorithm: sha256WithRSAEncryption 2a:91:3b:c6:a7:30:4c:f3:b2:f9:3f:0c:9c:d8:25:3a:c7:79: 33:7f:3c:07:bb:b4:7c:44:5c:0e:66:0e:60:a2:12:2b:a0:7c: b9:bd:5b:88:f3:3f:42:27:d6:3b:50:53:28:af:c6:02:cb:04: 04:e3:0d:39:5c:72:39:9c:2d:ae:fd:f7:32:3d:16:dd:1a:72: c3:8d:c7:39:56:93:43:00:7d:92:b4:9a:bb:c6:43:d9:de:2a: 7d:c6:9c:2f:99:8c:34:8a:de:f0:3f:45:3a:16:2c:cb:86:54: a5:31:45:23:cb:6b:d5:ec:cc:a0:c4:68:68:a9:59:3d:c6:33: 47:dc:30:dc:78:33:b9:b5:29:cf:24:f5:d3:17:31:53:fd:e0: ee:88:a3:b8:72:31:ac:30:fe:fb:c5:ba:3f:2e:5a:38:68:0a: 3d:da:a0:d6:9f:e9:41:25:31:8d:3c:b8:cb:28:3c:e1:83:b4: 36:73:e0:94:37:3a:11:22:f9:bc:37:2c:ee:75:c4:d9:7f:5a: e7:56:6f:3e:79:87:83:5c:b2:60:5d:c9:a3:39:92:35:aa:82: 5b:67:18:8c:f5:4c:24:67:c8:49:4b:30:dd:a7:64:e5:21:fd: 0c:00:03:8d:7c:81:ef:da:40:63:8a:71:10:aa:8b:46:1b:f9: 8a:0a:fc:27 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgISAZsGu4ANouHXv3zhZYS/TNifMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjUxMjEwMDUyODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmIxMzcxYzNjMjBiZmJlNmM2MjllMWQ2YWYwYzFkMmQ0N2YxYWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb8dsIw3fjd/tj4K91gqqWpfXRw9 n54Fsc3LyJDCwi3vdOJGz9o3kfRvjjkejl8AkCYUCa4fP4eV+DysbfuJHWhSMaPi eayOWNXb4HVRRS8/Ke3QOhYJiH4NFWor9at4LpLr/SyaLEfE8xxxYQdMooEJRZWI OnVa7HjTppF2nf/2elX8/wvBLMZHyo4Vuqi+Yuexr9GdEzB06HrrGRXV7QHEXXyY 0pwXn25AaohegP436UPsFwVSrcF4y1XRM6FZw7AvQeS+dg7INhaeoRXKfrveP8hS YJMhvbPwRlK+sbvJ6SxFPGOwZ+ClDhZXRGo6a3YrQ45vah+3YRoKZq/1gQIDAQAB o4ICWDCCAlQwHQYDVR0OBBYEFLaxNxw8IL++bGKeHWrwwdLUfxrmMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvdHJFM0hEd2d2NzVzWXA0ZGF2REIwdFJfR3VZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG4GCCsGAQUFBwEHAQH/BF8wXTAwBAIAATAqAwQBwQUUAwQA wQUeAwQBwQWeAwQBwYb4AwQAwtFKAwQAwtHaAwQA1PNlMCkEAgACMCMDBwAgAQkY AasDBgAgAQkYDwMHBCABCRj/cAMHACABCRj/tzANBgkqhkiG9w0BAQsFAAOCAQEA KpE7xqcwTPOy+T8MnNglOsd5M388B7u0fERcDmYOYKISK6B8ub1biPM/QifWO1BT KK/GAssEBOMNOVxyOZwtrv33Mj0W3Rpyw43HOVaTQwB9krSau8ZD2d4qfcacL5mM NIre8D9FOhYsy4ZUpTFFI8tr1ezMoMRoaKlZPcYzR9ww3HgzubUpzyT10xcxU/3g 7oijuHIxrDD++8W6Py5aOGgKPdqg1p/pQSUxjTy4yyg84YO0NnPglDc6ESL5vDcs 7nXE2X9a51ZvPnmHg1yyYF3JozmSNaqCW2cYjPVMJGfISUsw3adk5SH9DAADjXyB 79pAY4pxEKqLRhv5igr8Jw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:34:57 2025 by rpki-client