This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ifA7cuYuh0rM1rYrMmPYWYbrzw4.roa File: ifA7cuYuh0rM1rYrMmPYWYbrzw4.roa (raw, json) Hash identifier: XbJzruo0FlLT0NDBnA1VXwPbToEpthBRzYAHoDFbTtA= Subject key identifier: 89:F0:3B:72:E6:2E:87:4A:CC:D6:B6:2B:32:63:D8:59:86:EB:CF:0E Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019AD4059C6235E924D69C22E67C2B34734B Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ifA7cuYuh0rM1rYrMmPYWYbrzw4.roa Signing time: Sun 30 Nov 2025 09:08:48 +0000 ROA not before: Sun 30 Nov 2025 09:08:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 194.231.139.0/24 maxlen: 24 194.231.158.0/24 maxlen: 24 194.231.196.0/24 maxlen: 24 194.231.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d4:05:9c:62:35:e9:24:d6:9c:22:e6:7c:2b:34:73:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Nov 30 09:08:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=89f03b72e62e874accd6b62b3263d85986ebcf0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cf:76:36:66:13:74:4e:f1:f1:be:38:85:55: 6e:9a:8e:02:10:09:5e:d0:13:36:85:bb:e2:7f:1e: 3c:b3:2b:8a:5e:9b:2d:b5:cb:03:80:81:f8:2e:9f: 12:e9:70:e3:98:49:bc:96:cb:91:a3:58:3b:5f:da: 5b:55:a4:0c:53:9d:d6:de:15:09:0d:68:59:83:4c: 34:e7:7c:61:6c:91:f9:5b:e8:11:22:19:c6:b5:2e: b8:b6:f7:e0:c8:ff:6d:f0:ba:5b:bb:02:bc:91:8e: 99:6e:39:cf:c2:c0:4f:82:70:5e:dd:e6:07:ba:f9: b6:d0:68:94:6a:94:4a:28:cd:2a:2c:94:cb:c8:db: 12:22:c0:9d:5e:8a:fb:78:41:63:fc:56:17:1e:e9: a7:80:f9:cb:30:a9:65:2c:ae:5f:2d:04:82:94:c7: 70:76:45:ed:ec:5d:91:f2:ec:e2:74:9e:80:5b:e7: 88:43:d9:25:d0:ba:95:40:2a:ef:47:59:cd:d3:f0: 0a:af:a2:ac:d2:ae:ea:38:7b:57:c6:e1:63:bd:41: fd:3f:d7:a6:7b:23:82:93:d2:8b:76:6f:5c:2d:17: 6c:6f:9f:71:60:67:7f:a6:4a:c3:67:2b:59:7b:db: cc:0b:7f:d4:cd:5b:0b:46:65:30:82:d5:99:d2:cf: 1d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F0:3B:72:E6:2E:87:4A:CC:D6:B6:2B:32:63:D8:59:86:EB:CF:0E X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ifA7cuYuh0rM1rYrMmPYWYbrzw4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.231.139.0/24 194.231.158.0/24 194.231.196.0/24 194.231.204.0/24 Signature Algorithm: sha256WithRSAEncryption 49:0b:97:24:21:05:b6:c8:2e:76:56:ef:58:89:d1:50:90:3e: ba:43:0e:ac:3b:d7:c6:0e:31:27:ba:16:ce:93:c9:47:f0:35: 5a:69:90:8b:75:ec:db:67:4e:ea:21:3e:19:51:dd:8c:39:25: 5d:20:70:e4:f9:3b:31:fc:8f:f8:a4:05:17:30:83:21:8b:75: c3:1b:41:8b:72:89:8e:c0:11:5c:9f:99:ed:98:89:5e:97:77: 3a:60:a8:22:fb:f3:5f:fb:2c:b6:f1:9b:c6:43:1a:90:eb:58: 5d:2d:a2:94:69:ed:36:e7:ad:06:79:05:d5:f6:ab:d6:d2:94: 1b:51:0e:26:5f:5e:d3:85:06:34:b2:dc:e1:86:62:68:af:03: 01:1d:e7:e1:53:4b:16:81:e0:98:92:fa:d9:f8:d8:ce:3d:de: 0a:ff:6f:96:b9:b9:91:ca:7b:b7:29:e2:62:1f:95:d1:d2:83: 81:15:17:cd:01:14:54:29:c5:3d:c8:9f:1f:4c:aa:f0:d1:7e: 8b:3a:2c:a4:0d:54:61:43:eb:d8:ca:f1:d4:bf:1e:e6:ef:af: 73:4d:85:d1:19:72:8c:d9:2b:cf:af:2e:64:83:4d:4b:c5:07: b5:8e:3d:e8:11:73:2f:7c:0f:7c:52:a3:6d:27:c0:fd:a2:59: 1d:04:cb:d7 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZrUBZxiNekk1pwi5nwrNHNLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjUxMTMwMDkwODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWYwM2I3MmU2MmU4NzRhY2NkNmI2MmIzMjYzZDg1OTg2ZWJjZjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2892NmYTdE7x8b44hVVumo4CEAle 0BM2hbvifx48syuKXpsttcsDgIH4Lp8S6XDjmEm8lsuRo1g7X9pbVaQMU53W3hUJ DWhZg0w053xhbJH5W+gRIhnGtS64tvfgyP9t8LpbuwK8kY6ZbjnPwsBPgnBe3eYH uvm20GiUapRKKM0qLJTLyNsSIsCdXor7eEFj/FYXHumngPnLMKllLK5fLQSClMdw dkXt7F2R8uzidJ6AW+eIQ9kl0LqVQCrvR1nN0/AKr6Ks0q7qOHtXxuFjvUH9P9em eyOCk9KLdm9cLRdsb59xYGd/pkrDZytZe9vMC3/UzVsLRmUwgtWZ0s8dCwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFInwO3LmLodKzNa2KzJj2FmG688OMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvaWZBN2N1WXVoMHJNMXJZck1tUFlXWWJyenc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwueLAwQA wueeAwQAwufEAwQAwufMMA0GCSqGSIb3DQEBCwUAA4IBAQBJC5ckIQW2yC52Vu9Y idFQkD66Qw6sO9fGDjEnuhbOk8lH8DVaaZCLdezbZ07qIT4ZUd2MOSVdIHDk+Tsx /I/4pAUXMIMhi3XDG0GLcomOwBFcn5ntmIlel3c6YKgi+/Nf+yy28ZvGQxqQ61hd LaKUae02560GeQXV9qvW0pQbUQ4mX17ThQY0stzhhmJorwMBHefhU0sWgeCYkvrZ +NjOPd4K/2+WubmRynu3KeJiH5XR0oOBFRfNARRUKcU9yJ8fTKrw0X6LOiykDVRh Q+vYyvHUvx7m769zTYXRGXKM2SvPry5kg01LxQe1jj3oEXMvfA98UqNtJ8D9olkd BMvX -----END CERTIFICATE-----Generated at Fri Dec 5 09:28:54 2025 by rpki-client