This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/CbTPRkcc3r0qSjO41xM83aDt7-I.roa File: CbTPRkcc3r0qSjO41xM83aDt7-I.roa (raw, json) Hash identifier: dc4sEzSN7wRrqPjwqa6F0da+syMhjlMZ9JmI+qEywSg= Subject key identifier: 09:B4:CF:46:47:1C:DE:BD:2A:4A:33:B8:D7:13:3C:DD:A0:ED:EF:E2 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019A975407378FFA0C979CBB64EC1EED4A3C Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/CbTPRkcc3r0qSjO41xM83aDt7-I.roa Signing time: Tue 18 Nov 2025 14:17:37 +0000 ROA not before: Tue 18 Nov 2025 14:17:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206766 IP address blocks: 188.255.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:54:07:37:8f:fa:0c:97:9c:bb:64:ec:1e:ed:4a:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Nov 18 14:17:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=09b4cf46471cdebd2a4a33b8d7133cdda0edefe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:94:72:23:da:cb:88:c5:5a:6c:7b:31:4f:30: 8f:49:f9:44:77:64:40:0b:6c:f7:b4:70:a6:ab:67: e0:2e:05:2c:aa:67:c5:73:c3:0b:4a:f8:70:47:44: 0d:5f:ad:ca:1e:e0:d5:0c:a2:c2:f5:f5:5a:cb:99: dc:81:10:31:56:23:eb:e8:3c:a3:19:ff:90:d0:b0: d7:7b:4e:c2:d9:c3:a4:32:f0:f0:d3:ec:d4:74:82: 5d:d1:eb:c8:37:2d:5d:42:e5:24:29:39:81:ce:ef: d8:4f:fd:5c:2a:0e:43:3e:ec:55:1d:5a:16:5b:10: 6b:de:4c:d7:6d:6a:33:b0:42:71:75:75:97:75:a4: 63:80:82:f9:aa:aa:e4:4d:f2:fe:c8:c7:e7:16:a8: 9f:c3:d2:3b:40:83:bb:73:98:c8:08:c8:44:d4:a0: a5:91:a9:d3:fc:57:e4:5e:6e:4b:9a:3e:b1:87:3f: 50:a4:4e:2f:39:7e:d4:da:9d:2d:fb:c9:4f:f6:1d: 7a:c9:38:a5:c0:b8:82:40:ac:cc:61:99:b8:b8:2b: b8:ef:20:a2:57:a4:05:e1:c7:0c:de:ee:b3:8a:d3: 51:fd:02:c3:bf:74:6b:b5:bb:71:93:c0:29:04:21: e8:0b:08:06:23:b2:5d:03:e1:4b:a7:66:af:98:6a: 00:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B4:CF:46:47:1C:DE:BD:2A:4A:33:B8:D7:13:3C:DD:A0:ED:EF:E2 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/CbTPRkcc3r0qSjO41xM83aDt7-I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.255.198.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:83:cb:ab:3d:fe:ea:9b:a2:45:63:61:72:9f:cf:e7:ba:83: bf:44:7c:04:73:a6:1c:9c:b4:88:cc:41:f6:27:5e:19:74:66: e2:2e:88:1e:af:b7:47:fc:5b:13:34:15:fe:51:b5:eb:3a:cd: a7:72:44:8a:47:3a:1d:59:63:64:e3:b2:e6:4c:bc:8e:1f:66: ec:60:8d:c3:e7:96:de:a4:cd:64:41:bf:21:b6:d1:a0:ca:fb: 99:47:fb:1b:73:fc:9c:99:8f:7d:92:83:a6:e5:c4:50:1b:3f: 03:0e:3c:2b:b2:5f:62:63:2c:a4:4a:5c:91:e0:5b:eb:83:d1: de:25:6d:84:48:01:6d:9d:28:0d:46:18:36:c4:14:7e:65:5e: e4:73:c9:bb:f1:51:ac:28:7f:73:8c:52:80:71:08:bb:39:bc: 19:0c:1c:9c:c8:fb:33:26:20:d8:dc:68:46:50:b3:d8:97:21: 4d:f8:40:73:0b:36:38:8d:96:65:21:4a:5f:39:48:8d:17:9e: e4:24:d5:00:1d:35:d2:ce:8e:06:8f:e8:0d:f1:15:b8:1a:cd: 73:56:1c:b7:b4:bf:2f:3e:33:30:06:45:51:d0:f6:d1:7f:0c: b7:44:bc:82:8a:62:6e:57:63:57:54:d2:35:c2:29:48:d6:5d: 64:ff:11:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqXVAc3j/oMl5y7ZOwe7Uo8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMTE4MTQxNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWI0Y2Y0NjQ3MWNkZWJkMmE0YTMzYjhkNzEzM2NkZGEwZWRlZmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJRyI9rLiMVabHsxTzCPSflEd2RA C2z3tHCmq2fgLgUsqmfFc8MLSvhwR0QNX63KHuDVDKLC9fVay5ncgRAxViPr6Dyj Gf+Q0LDXe07C2cOkMvDw0+zUdIJd0evINy1dQuUkKTmBzu/YT/1cKg5DPuxVHVoW WxBr3kzXbWozsEJxdXWXdaRjgIL5qqrkTfL+yMfnFqifw9I7QIO7c5jICMhE1KCl kanT/FfkXm5Lmj6xhz9QpE4vOX7U2p0t+8lP9h16yTilwLiCQKzMYZm4uCu47yCi V6QF4ccM3u6zitNR/QLDv3Rrtbtxk8ApBCHoCwgGI7JdA+FLp2avmGoAxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAm0z0ZHHN69KkozuNcTPN2g7e/iMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvQ2JUUFJrY2MzcjBxU2pPNDF4TTgzYUR0Ny1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvP/GMA0G CSqGSIb3DQEBCwUAA4IBAQCLg8urPf7qm6JFY2Fyn8/nuoO/RHwEc6YcnLSIzEH2 J14ZdGbiLoger7dH/FsTNBX+UbXrOs2nckSKRzodWWNk47LmTLyOH2bsYI3D55be pM1kQb8httGgyvuZR/sbc/ycmY99koOm5cRQGz8DDjwrsl9iYyykSlyR4Fvrg9He JW2ESAFtnSgNRhg2xBR+ZV7kc8m78VGsKH9zjFKAcQi7ObwZDBycyPszJiDY3GhG ULPYlyFN+EBzCzY4jZZlIUpfOUiNF57kJNUAHTXSzo4Gj+gN8RW4Gs1zVhy3tL8v PjMwBkVR0PbRfwy3RLyCimJuV2NXVNI1wilI1l1k/xF8 -----END CERTIFICATE-----Generated at Fri Dec 5 19:29:37 2025 by rpki-client