This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/apvSU_zdjpgdJbA2JXvY1ZBMdMI.roa File: apvSU_zdjpgdJbA2JXvY1ZBMdMI.roa (raw, json) Hash identifier: BrDhwEmN4h7IfcZlrEBiMsc7FA/VSy4QaggJaanlXFs= Subject key identifier: 6A:9B:D2:53:FC:DD:8E:98:1D:25:B0:36:25:7B:D8:D5:90:4C:74:C2 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B30673A12ECFA43A5078887646F3786A2 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/apvSU_zdjpgdJbA2JXvY1ZBMdMI.roa Signing time: Thu 18 Dec 2025 07:40:29 +0000 ROA not before: Thu 18 Dec 2025 07:40:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 27860 IP address blocks: 194.31.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:67:3a:12:ec:fa:43:a5:07:88:87:64:6f:37:86:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Dec 18 07:40:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6a9bd253fcdd8e981d25b036257bd8d5904c74c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:66:cd:82:36:0c:9f:35:8f:68:9a:58:26:ca: e0:56:57:d9:02:33:a2:37:10:b2:20:6f:60:36:90: 1b:68:bb:73:00:86:f3:03:09:30:eb:8b:04:50:a2: 33:56:1c:a4:5f:a6:d4:4b:52:ee:5f:4f:40:03:25: f3:52:74:7f:a6:46:19:ed:50:85:3c:ba:e3:37:5a: fc:dc:e1:e1:9b:98:c7:db:f6:a0:8a:e6:c5:7e:fd: 97:36:07:6b:82:78:c2:06:41:89:72:45:bd:de:83: 99:b3:5d:e7:26:06:78:ef:88:46:73:41:f8:e2:36: 6c:91:af:29:38:21:0a:8f:d5:1e:02:5c:3e:0b:51: f7:59:c6:44:41:ee:b6:f1:8c:cc:d7:50:c5:55:3a: 6b:fb:19:fc:f2:f0:ae:12:b7:6c:6d:6d:53:c7:1e: c3:db:ce:85:a4:5c:9a:4d:86:5a:90:e8:08:b8:6b: 59:8d:1b:61:6b:85:1d:55:77:4c:02:b3:64:bf:77: 65:ac:1d:99:3e:86:ff:0f:0c:17:5a:49:07:b2:f6: 54:d7:c9:a2:7d:e9:a3:4f:18:7b:a8:b7:6f:09:bd: 8b:43:28:d6:26:07:40:d3:0e:6a:62:c2:b3:10:ef: c1:05:2c:ee:22:4c:f5:13:d3:62:d9:f1:17:b4:35: 75:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9B:D2:53:FC:DD:8E:98:1D:25:B0:36:25:7B:D8:D5:90:4C:74:C2 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/apvSU_zdjpgdJbA2JXvY1ZBMdMI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.104.0/24 Signature Algorithm: sha256WithRSAEncryption 89:97:0b:83:05:7d:ba:69:62:56:05:77:a9:92:16:ad:95:2c: 6c:ad:69:88:de:82:9d:bd:1b:fc:b5:de:c6:13:5f:17:07:a3: 8e:92:3c:27:fb:29:2f:75:20:58:80:13:3a:6b:01:ef:1b:ac: 70:0b:51:8d:55:07:07:46:4d:08:ff:af:09:a6:73:78:a0:49: 6a:fe:39:c7:b1:a0:b0:e3:a3:82:95:59:f7:c4:4a:dd:84:36: 55:2f:bd:e1:21:76:8d:97:58:92:b0:81:46:11:fb:2e:9d:17: 23:67:81:63:22:a5:1e:d5:38:2a:4e:5c:00:81:1f:f4:08:f9: 3b:70:d4:a6:46:88:e9:0f:71:56:c5:d3:9a:2f:c7:97:96:ef: 3c:c7:b0:c7:86:2e:44:03:0c:7d:63:20:d0:92:66:f6:18:6b: 6e:1f:dd:d4:54:d2:42:04:c8:fb:0b:ba:e6:29:a5:43:76:b0: 78:71:f1:da:30:3a:d5:e1:07:96:dc:b8:9d:0f:9a:fb:e1:bc: 47:94:ca:ae:b7:49:be:90:2b:66:fd:48:b7:df:17:b2:39:86: d8:8f:36:6d:ff:4f:21:23:92:73:38:44:72:bc:fb:fa:d8:2a: a6:ba:bf:ea:2b:e6:d5:40:80:7b:a8:fe:18:b9:61:af:00:37: ec:ce:a8:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZswZzoS7PpDpQeIh2RvN4aiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjUxMjE4MDc0MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTliZDI1M2ZjZGQ4ZTk4MWQyNWIwMzYyNTdiZDhkNTkwNGM3NGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWbNgjYMnzWPaJpYJsrgVlfZAjOi NxCyIG9gNpAbaLtzAIbzAwkw64sEUKIzVhykX6bUS1LuX09AAyXzUnR/pkYZ7VCF PLrjN1r83OHhm5jH2/agiubFfv2XNgdrgnjCBkGJckW93oOZs13nJgZ474hGc0H4 4jZska8pOCEKj9UeAlw+C1H3WcZEQe628YzM11DFVTpr+xn88vCuErdsbW1Txx7D 286FpFyaTYZakOgIuGtZjRtha4UdVXdMArNkv3dlrB2ZPob/DwwXWkkHsvZU18mi femjTxh7qLdvCb2LQyjWJgdA0w5qYsKzEO/BBSzuIkz1E9Ni2fEXtDV16wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGqb0lP83Y6YHSWwNiV72NWQTHTCMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvYXB2U1VfemRqcGdkSmJBMkpYdlkxWkJNZE1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh9oMA0G CSqGSIb3DQEBCwUAA4IBAQCJlwuDBX26aWJWBXepkhatlSxsrWmI3oKdvRv8td7G E18XB6OOkjwn+ykvdSBYgBM6awHvG6xwC1GNVQcHRk0I/68JpnN4oElq/jnHsaCw 46OClVn3xErdhDZVL73hIXaNl1iSsIFGEfsunRcjZ4FjIqUe1TgqTlwAgR/0CPk7 cNSmRojpD3FWxdOaL8eXlu88x7DHhi5EAwx9YyDQkmb2GGtuH93UVNJCBMj7C7rm KaVDdrB4cfHaMDrV4QeW3LidD5r74bxHlMqut0m+kCtm/Ui33xeyOYbYjzZt/08h I5JzOERyvPv62Cqmur/qK+bVQIB7qP4YuWGvADfszqhH -----END CERTIFICATE-----Generated at Fri Dec 19 07:14:08 2025 by rpki-client