This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/n5XgGF0QABmUyoOQIOrUJsmd7XI.roa File: n5XgGF0QABmUyoOQIOrUJsmd7XI.roa (raw, json) Hash identifier: 4ZvkFvvFhalquvSw4fZG8bfQWR2v7HF+beZ3cnlKIAo= Subject key identifier: 9F:95:E0:18:5D:10:00:19:94:CA:83:90:20:EA:D4:26:C9:9D:ED:72 Certificate issuer: /CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f Certificate serial: 019B0757233A9F9628D43786366AB205A94B Authority key identifier: 6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/n5XgGF0QABmUyoOQIOrUJsmd7XI.roa Signing time: Wed 10 Dec 2025 08:18:29 +0000 ROA not before: Wed 10 Dec 2025 08:18:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 28928 IP address blocks: 194.11.172.0/22 maxlen: 22 194.11.176.0/21 maxlen: 21 194.11.179.0/24 maxlen: 24 194.11.181.0/24 maxlen: 24 194.11.184.0/23 maxlen: 23 194.11.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:57:23:3a:9f:96:28:d4:37:86:36:6a:b2:05:a9:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f Validity Not Before: Dec 10 08:18:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9f95e0185d10001994ca839020ead426c99ded72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6c:58:7a:63:fe:c2:03:26:1e:df:4e:ea:f2: 56:a1:94:05:f4:b0:12:86:2b:9b:3f:80:f4:25:b4: 95:39:3a:33:98:84:17:1f:bc:5a:73:95:d0:7c:c7: 3a:dd:6a:fb:78:0c:f0:c9:fc:d4:75:f9:ec:5c:5a: a9:39:0a:48:7c:f5:d1:4c:94:05:10:ad:bb:43:9a: cc:31:74:29:7c:82:c7:38:1d:d7:39:cf:2f:ce:b7: 81:94:00:a7:b6:4e:b1:b6:7b:d3:9d:c5:da:a1:0a: 71:e0:3e:ff:90:b5:20:fc:d6:3e:90:52:f0:47:28: 04:ee:2b:45:1f:8c:3f:4c:82:6b:d7:c6:2b:f8:81: 78:fa:d4:1c:5d:7c:9d:7d:43:c5:b9:f3:f7:69:2b: 31:59:d3:f3:c9:98:8b:61:13:7b:a0:89:aa:01:81: 1f:9d:2d:45:10:6f:58:3c:ef:ca:a3:17:27:fd:6a: fc:64:aa:4a:83:e0:46:77:e4:77:43:cb:67:59:1c: 7e:11:20:bf:66:f5:a3:97:40:81:7f:c4:b9:dd:36: e3:bd:5a:e3:cf:df:1f:a8:ca:65:12:76:c3:25:e8: bc:08:50:f4:00:be:1e:79:11:8c:9a:46:b4:39:50: 4a:de:8d:75:0b:71:1f:eb:a5:de:0f:a1:3f:80:9a: 03:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:95:E0:18:5D:10:00:19:94:CA:83:90:20:EA:D4:26:C9:9D:ED:72 X509v3 Authority Key Identifier: keyid:6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/n5XgGF0QABmUyoOQIOrUJsmd7XI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.11.172.0-194.11.186.255 Signature Algorithm: sha256WithRSAEncryption a4:35:0c:63:82:b3:db:f9:96:64:c6:27:54:56:1a:c6:83:61: 4a:63:34:80:6c:d1:e4:5f:bd:0c:c1:51:f4:3f:9e:39:57:a8: 2e:63:a9:59:7b:ce:da:5c:01:e8:e7:51:e5:63:04:52:af:e8: 2e:4f:65:62:27:ba:da:18:65:5c:03:24:eb:27:3f:5d:dc:52: 84:17:0a:89:c5:49:80:a4:d5:9c:f5:4d:98:93:d3:c3:bd:c4: 46:5f:30:24:f9:b0:05:05:57:20:59:f2:92:07:ec:e7:56:64: f9:7d:71:8e:bc:f2:5b:56:07:1b:d6:50:b1:a2:50:36:c7:5d: 62:d7:52:42:b8:5f:12:e9:ba:8b:98:01:58:49:81:2e:a2:7e: eb:1e:62:14:fc:cb:85:61:49:b2:96:d6:9c:89:9b:48:90:77: 36:db:ac:20:ec:0d:3d:1f:78:75:2c:3e:fd:ab:e1:02:0c:2b: 39:43:2d:51:ed:03:ad:98:03:f7:49:ef:64:5d:81:32:4f:74: a6:2f:ce:d4:57:a3:6a:e4:2c:e5:e6:dd:32:89:5c:2e:2c:65: 8e:41:c4:cf:41:c4:f1:3d:35:72:30:06:22:a6:5d:a1:75:29: e6:0e:71:0d:fc:bd:8f:dd:65:c5:29:d8:b1:a0:a6:48:45:fe: db:1b:26:67 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZsHVyM6n5Yo1DeGNmqyBalLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZWI2MDk0YmNhYjRiZDNiMWY2ZjU2YzUxODJiYTEyMjBl MjJiNmYwHhcNMjUxMjEwMDgxODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Zjk1ZTAxODVkMTAwMDE5OTRjYTgzOTAyMGVhZDQyNmM5OWRlZDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WxYemP+wgMmHt9O6vJWoZQF9LAS hiubP4D0JbSVOTozmIQXH7xac5XQfMc63Wr7eAzwyfzUdfnsXFqpOQpIfPXRTJQF EK27Q5rMMXQpfILHOB3XOc8vzreBlACntk6xtnvTncXaoQpx4D7/kLUg/NY+kFLw RygE7itFH4w/TIJr18Yr+IF4+tQcXXydfUPFufP3aSsxWdPzyZiLYRN7oImqAYEf nS1FEG9YPO/Koxcn/Wr8ZKpKg+BGd+R3Q8tnWRx+ESC/ZvWjl0CBf8S53TbjvVrj z98fqMplEnbDJei8CFD0AL4eeRGMmka0OVBK3o11C3Ef66XeD6E/gJoDeQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJ+V4BhdEAAZlMqDkCDq1CbJne1yMB8GA1UdIwQY MBaAFGvrYJS8q0vTsfb1bFGCuhIg4itvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYS10Z2xMeXJTOU94OXZWc1VZSzZFaURpSzI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iYTQ2NDAtMTYzZS00NjVmLTkwZjkt ZWE1ODdmZDY1OGIyLzEvbjVYZ0dGMFFBQm1VeW9PUUlPclVKc21kN1hJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9iYTQ2NDAtMTYzZS00NjVmLTkwZjktZWE1ODdmZDY1OGIy LzEvYS10Z2xMeXJTOU94OXZWc1VZSzZFaURpSzI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALCC6wD BADCC7owDQYJKoZIhvcNAQELBQADggEBAKQ1DGOCs9v5lmTGJ1RWGsaDYUpjNIBs 0eRfvQzBUfQ/njlXqC5jqVl7ztpcAejnUeVjBFKv6C5PZWInutoYZVwDJOsnP13c UoQXConFSYCk1Zz1TZiT08O9xEZfMCT5sAUFVyBZ8pIH7OdWZPl9cY688ltWBxvW ULGiUDbHXWLXUkK4XxLpuouYAVhJgS6ifuseYhT8y4VhSbKW1pyJm0iQdzbbrCDs DT0feHUsPv2r4QIMKzlDLVHtA62YA/dJ72RdgTJPdKYvztRXo2rkLOXm3TKJXC4s ZY5BxM9BxPE9NXIwBiKmXaF1KeYOcQ38vY/dZcUp2LGgpkhF/tsbJmc= -----END CERTIFICATE-----Generated at Sat Dec 20 21:44:05 2025 by rpki-client