This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/idnqncBQzXKS-jFCDhKsCg1spaM.roa File: idnqncBQzXKS-jFCDhKsCg1spaM.roa (raw, json) Hash identifier: daEtggwi20xAw5fH9obIb/BYbhesluAPY4p/Rci2Fyc= Subject key identifier: 89:D9:EA:9D:C0:50:CD:72:92:FA:31:42:0E:12:AC:0A:0D:6C:A5:A3 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019ADA3A0BAD932639F66F3BBF6809F11934 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/idnqncBQzXKS-jFCDhKsCg1spaM.roa Signing time: Mon 01 Dec 2025 14:03:48 +0000 ROA not before: Mon 01 Dec 2025 14:03:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62300 IP address blocks: 213.166.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:3a:0b:ad:93:26:39:f6:6f:3b:bf:68:09:f1:19:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Dec 1 14:03:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=89d9ea9dc050cd7292fa31420e12ac0a0d6ca5a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0f:f9:2a:fa:e0:da:71:5e:21:d0:fb:ae:95: cf:95:c1:91:de:24:70:cb:c8:26:63:cd:5d:ae:85: 8c:72:c4:45:2c:85:be:e9:2f:d4:9b:3e:22:27:19: 6b:96:4a:f3:98:d5:a5:0e:b6:fe:75:56:d3:91:72: 1a:86:a7:d5:04:61:fb:b3:4c:b8:d8:5b:47:13:47: 9f:ae:7b:18:ae:7a:39:fe:de:02:96:7b:ed:ac:9d: d7:15:83:11:eb:88:44:8f:f1:a9:f0:ec:f5:ca:da: 1d:09:b7:9e:b7:f6:e9:aa:e9:ff:54:5b:4e:17:34: 90:9c:3c:2d:ff:d4:b4:94:91:a5:26:9e:7c:01:46: 63:2d:14:ce:57:15:d9:6f:cc:54:18:40:04:b4:3c: 3e:7c:21:51:e6:06:83:e7:db:be:16:7b:7b:e4:37: 20:07:30:91:7f:80:2e:b5:d4:d5:86:0e:08:2b:ea: a4:4c:e3:35:3d:7c:98:20:48:dc:ad:7d:aa:d9:91: f4:64:b4:00:cd:68:10:14:76:c7:07:ab:29:e3:4e: 6d:ce:38:06:bf:5a:e2:4d:29:db:0f:b0:df:46:5b: ea:e9:6a:62:c1:fe:86:02:2c:94:3b:69:eb:81:05: 6b:7d:34:ae:1d:bf:e5:42:eb:ea:2b:48:fc:28:48: 63:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D9:EA:9D:C0:50:CD:72:92:FA:31:42:0E:12:AC:0A:0D:6C:A5:A3 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/idnqncBQzXKS-jFCDhKsCg1spaM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.166.93.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:c3:cb:24:f3:7f:a8:63:a1:5a:84:06:f5:b8:a6:d3:cf:d0: 89:f6:1a:dd:1e:54:c0:c8:26:d2:85:f6:c9:13:53:6c:8b:6d: 85:37:ec:95:f6:06:16:b7:f1:a6:08:27:11:84:d0:71:7f:62: cc:98:e8:17:62:d6:fb:3c:d1:d0:4d:38:e6:0c:e5:e3:5d:ff: 68:e1:76:7b:3f:ab:33:75:0b:68:bc:01:c3:89:d6:f7:92:a7: d4:54:11:81:c7:af:97:61:04:03:a5:73:bf:d3:dc:60:b8:12: 66:42:1f:7b:36:5f:ea:be:8d:a2:63:0c:db:eb:5d:4a:12:77: 40:ac:b3:39:25:41:c8:e5:45:3f:e5:af:8d:97:56:9f:b0:8a: b5:0f:2c:e1:2a:13:45:bd:a9:74:f6:6f:25:ea:c7:b6:2c:9d: 37:9f:0c:50:26:f2:e6:07:0c:38:3d:12:0c:12:2e:c6:c5:c3: d0:70:a3:10:69:3e:e1:a6:5e:f6:95:f0:65:d8:81:8e:48:fe: 42:e8:d2:0f:dd:32:89:13:7f:13:00:9f:14:d9:fe:4e:c4:54: 55:e9:1f:cb:44:9d:1a:76:41:b9:19:9a:98:85:f9:45:fa:eb: 20:25:29:3d:27:29:a0:7b:63:aa:04:69:42:16:14:22:e7:cc: 95:36:6e:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZraOgutkyY59m87v2gJ8Rk0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjUxMjAxMTQwMzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWQ5ZWE5ZGMwNTBjZDcyOTJmYTMxNDIwZTEyYWMwYTBkNmNhNWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQ/5Kvrg2nFeIdD7rpXPlcGR3iRw y8gmY81droWMcsRFLIW+6S/Umz4iJxlrlkrzmNWlDrb+dVbTkXIahqfVBGH7s0y4 2FtHE0efrnsYrno5/t4ClnvtrJ3XFYMR64hEj/Gp8Oz1ytodCbeet/bpqun/VFtO FzSQnDwt/9S0lJGlJp58AUZjLRTOVxXZb8xUGEAEtDw+fCFR5gaD59u+Fnt75Dcg BzCRf4AutdTVhg4IK+qkTOM1PXyYIEjcrX2q2ZH0ZLQAzWgQFHbHB6sp405tzjgG v1riTSnbD7DfRlvq6Wpiwf6GAiyUO2nrgQVrfTSuHb/lQuvqK0j8KEhjZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFInZ6p3AUM1ykvoxQg4SrAoNbKWjMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvaWRucW5jQlF6WEtTLWpGQ0RoS3NDZzFzcGFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1aZdMA0G CSqGSIb3DQEBCwUAA4IBAQCfw8sk83+oY6FahAb1uKbTz9CJ9hrdHlTAyCbShfbJ E1Nsi22FN+yV9gYWt/GmCCcRhNBxf2LMmOgXYtb7PNHQTTjmDOXjXf9o4XZ7P6sz dQtovAHDidb3kqfUVBGBx6+XYQQDpXO/09xguBJmQh97Nl/qvo2iYwzb611KEndA rLM5JUHI5UU/5a+Nl1afsIq1DyzhKhNFval09m8l6se2LJ03nwxQJvLmBww4PRIM Ei7GxcPQcKMQaT7hpl72lfBl2IGOSP5C6NIP3TKJE38TAJ8U2f5OxFRV6R/LRJ0a dkG5GZqYhflF+usgJSk9Jymge2OqBGlCFhQi58yVNm58 -----END CERTIFICATE-----Generated at Fri Dec 5 13:23:16 2025 by rpki-client