This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/tJ6oFmHPDNKseUEyL7GH7vyhvz4.roa File: tJ6oFmHPDNKseUEyL7GH7vyhvz4.roa (raw, json) Hash identifier: DBrWjbsghHkZ5x5yFhux0SY16RKyxiS2uZ1W0pIOzNE= Subject key identifier: B4:9E:A8:16:61:CF:0C:D2:AC:79:41:32:2F:B1:87:EE:FC:A1:BF:3E Certificate issuer: /CN=53bf98d53522aa957081fdec28b172084394f112 Certificate serial: 019A7B49600648EC16E8A7ECEBBC51ED4B50 Authority key identifier: 53:BF:98:D5:35:22:AA:95:70:81:FD:EC:28:B1:72:08:43:94:F1:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/tJ6oFmHPDNKseUEyL7GH7vyhvz4.roa Signing time: Thu 13 Nov 2025 03:36:37 +0000 ROA not before: Thu 13 Nov 2025 03:36:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16524 IP address blocks: 194.5.135.0/24 maxlen: 24 195.64.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7b:49:60:06:48:ec:16:e8:a7:ec:eb:bc:51:ed:4b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53bf98d53522aa957081fdec28b172084394f112 Validity Not Before: Nov 13 03:36:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b49ea81661cf0cd2ac7941322fb187eefca1bf3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:42:97:26:8b:e9:ad:a0:7a:8c:d2:6c:f2:03: 0d:16:ed:f3:f5:19:14:1b:ee:97:bc:74:74:48:87: 03:03:ef:48:f2:72:88:fe:9c:8c:c6:02:8c:89:3b: 6f:dd:45:20:6a:89:a7:be:81:4f:d7:04:4d:10:cb: 4e:92:2c:10:06:f8:70:54:cf:60:c4:e4:6f:1b:dc: 49:6f:23:6b:7b:94:27:8d:54:fa:8f:9f:79:0d:87: 6a:7b:ec:6b:52:a0:75:72:1a:eb:e6:7f:e9:40:1d: b3:5f:cc:89:70:d0:a9:6c:e1:67:dc:0e:11:18:7d: fc:d9:53:8d:97:0e:29:ea:79:c9:23:68:a6:a0:16: 6f:ce:2b:39:d4:7d:ae:13:34:9b:15:a4:34:81:0b: 96:66:15:ab:b9:5b:77:2a:f5:71:ac:da:b4:e3:21: ef:25:0c:64:9f:ed:be:be:0b:f5:ec:12:44:54:3e: 97:75:0d:dc:98:e6:7a:be:d0:54:29:1c:20:46:61: 9c:de:fd:fd:9d:9b:05:c3:f7:72:d6:e4:2c:de:77: e5:83:37:85:3a:c6:97:a8:85:eb:c2:d3:0a:06:59: c0:c4:80:9b:9d:f1:be:57:3e:61:62:89:c2:ac:82: e3:0e:e0:26:2b:cd:70:5d:de:37:92:b7:6e:b2:51: e4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:9E:A8:16:61:CF:0C:D2:AC:79:41:32:2F:B1:87:EE:FC:A1:BF:3E X509v3 Authority Key Identifier: keyid:53:BF:98:D5:35:22:AA:95:70:81:FD:EC:28:B1:72:08:43:94:F1:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/tJ6oFmHPDNKseUEyL7GH7vyhvz4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.5.135.0/24 195.64.98.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:73:d9:d7:c5:16:2a:1d:41:29:f4:f6:08:51:25:96:28:a7: 90:3d:43:9d:74:d2:48:92:ed:98:32:b7:bd:f0:f2:19:b7:ab: 69:c1:d6:49:cc:ee:89:50:fe:0d:a2:0f:1e:7e:cc:10:a0:eb: 8d:3d:58:d2:8f:62:fd:db:7d:c2:69:9a:45:2f:4c:03:b8:2e: 65:a5:42:a5:b0:11:7d:e7:67:40:0b:29:59:fd:98:37:ea:93: ab:8c:40:00:ef:76:e9:8a:79:d4:eb:c4:15:f3:ec:53:1d:17: 41:25:37:f1:cc:39:df:59:ad:c9:d9:29:62:0d:9b:23:58:18: 0b:aa:9c:09:16:bc:f3:9f:9c:1c:1b:9d:55:04:bb:58:d4:5f: 14:d4:97:65:3a:48:12:c7:97:e8:80:07:a7:9c:1c:da:36:ff: f0:78:91:91:21:84:74:9f:a5:9c:0c:02:bf:17:03:b3:37:4d: 6a:cb:11:1c:2a:5d:fc:bd:93:58:7f:1a:16:51:ba:49:87:c6: 12:42:0a:b9:8b:13:44:52:14:58:be:bd:f6:33:ba:8c:eb:db: a7:a1:a5:55:d4:5c:f2:fd:57:f6:9a:6a:86:2e:4e:58:4a:50: aa:f1:0b:52:66:c1:9a:6f:74:7b:36:39:da:e2:9e:e1:e8:77: ff:47:28:5e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZp7SWAGSOwW6Kfs67xR7UtQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYmY5OGQ1MzUyMmFhOTU3MDgxZmRlYzI4YjE3MjA4NDM5 NGYxMTIwHhcNMjUxMTEzMDMzNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDllYTgxNjYxY2YwY2QyYWM3OTQxMzIyZmIxODdlZWZjYTFiZjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukKXJovpraB6jNJs8gMNFu3z9RkU G+6XvHR0SIcDA+9I8nKI/pyMxgKMiTtv3UUgaomnvoFP1wRNEMtOkiwQBvhwVM9g xORvG9xJbyNre5QnjVT6j595DYdqe+xrUqB1chrr5n/pQB2zX8yJcNCpbOFn3A4R GH382VONlw4p6nnJI2imoBZvzis51H2uEzSbFaQ0gQuWZhWruVt3KvVxrNq04yHv JQxkn+2+vgv17BJEVD6XdQ3cmOZ6vtBUKRwgRmGc3v39nZsFw/dy1uQs3nflgzeF OsaXqIXrwtMKBlnAxICbnfG+Vz5hYonCrILjDuAmK81wXd43krduslHkCwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLSeqBZhzwzSrHlBMi+xh+78ob8+MB8GA1UdIwQY MBaAFFO/mNU1IqqVcIH97CixcghDlPESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTctWTFUVWlxcFZ3Z2Yzc0tMRnlDRU9VOFJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wNjNiMWItN2JkZS00OGNjLWIxYWMt ZmFkNzA3ZDljNGY2LzEvdEo2b0ZtSFBETktzZVVFeUw3R0g3dnlodno0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wNjNiMWItN2JkZS00OGNjLWIxYWMtZmFkNzA3ZDljNGY2 LzEvVTctWTFUVWlxcFZ3Z2Yzc0tMRnlDRU9VOFJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwgWHAwQA w0BiMA0GCSqGSIb3DQEBCwUAA4IBAQB/c9nXxRYqHUEp9PYIUSWWKKeQPUOddNJI ku2YMre98PIZt6tpwdZJzO6JUP4Nog8efswQoOuNPVjSj2L9233CaZpFL0wDuC5l pUKlsBF952dACylZ/Zg36pOrjEAA73bpinnU68QV8+xTHRdBJTfxzDnfWa3J2Sli DZsjWBgLqpwJFrzzn5wcG51VBLtY1F8U1JdlOkgSx5fogAennBzaNv/weJGRIYR0 n6WcDAK/FwOzN01qyxEcKl38vZNYfxoWUbpJh8YSQgq5ixNEUhRYvr32M7qM69un oaVV1Fzy/Vf2mmqGLk5YSlCq8QtSZsGab3R7Njna4p7h6Hf/Ryhe -----END CERTIFICATE-----Generated at Sat Nov 22 21:29:45 2025 by rpki-client