This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/irItIVR6u-ZjJg2ky_t330Puetw.roa File: irItIVR6u-ZjJg2ky_t330Puetw.roa (raw, json) Hash identifier: jdzhDlqJouvAYoBby6ytKGVftFOiZZckZb8p5RQravo= Subject key identifier: 8A:B2:2D:21:54:7A:BB:E6:63:26:0D:A4:CB:FB:77:DF:43:EE:7A:DC Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019ACA3DA2D6F55C33734AFA1FCE984D721D Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/irItIVR6u-ZjJg2ky_t330Puetw.roa Signing time: Fri 28 Nov 2025 11:33:48 +0000 ROA not before: Fri 28 Nov 2025 11:33:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203859 IP address blocks: 213.137.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ca:3d:a2:d6:f5:5c:33:73:4a:fa:1f:ce:98:4d:72:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Nov 28 11:33:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8ab22d21547abbe663260da4cbfb77df43ee7adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2c:2c:e1:f6:3d:e7:9d:ae:f5:7b:dc:f4:1c: bc:c5:9f:b3:f7:6c:02:9e:70:6b:0c:ac:85:15:04: 34:ef:f4:66:30:09:97:54:d4:33:60:3a:ce:ff:76: 9f:b3:4c:7d:b7:ba:b9:5d:4c:3b:be:10:d2:e8:1b: b7:ee:64:0f:44:3a:b3:94:87:0a:5c:ee:c5:db:89: 20:f9:94:bc:6d:b5:b2:f9:fc:fb:44:75:fb:98:26: 34:82:db:2c:53:6a:aa:3b:77:e5:71:0d:ae:f6:f4: 60:2a:83:44:a1:47:77:11:ac:29:e9:64:c2:17:fa: 66:e9:86:52:42:64:45:b8:5b:42:b4:a9:93:05:da: 32:4a:ec:75:90:57:ea:98:6a:62:1d:69:bd:69:ef: 43:fe:ce:10:db:74:13:fb:12:fe:f0:b2:b3:02:1a: 44:0f:40:0c:35:92:47:de:0d:eb:b1:da:f4:5f:90: c2:dd:4e:b6:cb:81:42:5b:14:48:98:73:11:60:54: cc:1c:1b:ea:95:6a:5e:0e:f8:43:f8:cc:52:9e:4e: 96:e8:65:18:ba:69:81:20:50:e0:6b:2e:b6:d2:f3: e6:c0:ff:c3:7c:94:6d:5c:97:f2:ba:8e:42:51:8f: a3:84:76:b1:99:c0:34:ed:be:06:f1:18:4f:39:20: b2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B2:2D:21:54:7A:BB:E6:63:26:0D:A4:CB:FB:77:DF:43:EE:7A:DC X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/irItIVR6u-ZjJg2ky_t330Puetw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.137.93.0/24 Signature Algorithm: sha256WithRSAEncryption 94:bf:e8:f3:7d:cb:30:5b:4e:7e:05:c4:a9:b6:bd:eb:8b:ea: 61:8b:14:61:94:80:56:94:dd:d2:9d:5c:e2:52:d5:b6:c6:5e: b4:48:a1:cf:87:92:c9:66:b4:4c:81:9c:d6:9c:92:ec:92:6a: e9:a6:f9:6c:8a:7d:54:bb:92:4e:7c:bc:42:4e:a1:54:d9:b0: 12:ef:3e:7e:5e:d1:d9:d3:4b:c5:58:c3:cf:25:f5:82:45:6d: 07:8f:25:80:11:36:d8:2d:29:15:46:7e:3a:1a:48:a2:c2:ed: 24:90:a3:85:88:49:25:0b:cd:0a:80:56:2d:b1:6f:57:07:37: 21:e9:98:f7:ac:e6:9d:f3:b5:21:5d:c0:f3:4d:c5:0b:66:3d: 58:68:d8:14:a7:c4:cb:38:26:91:63:69:ad:32:82:d7:a2:bb: a2:64:cf:91:5e:87:fd:9f:6d:1f:67:a2:76:eb:62:59:4e:8f: c7:0a:17:59:dc:fc:46:87:18:81:fd:a2:c0:2d:1b:de:58:5e: b1:3a:42:9a:ec:a2:a8:87:06:26:fc:a4:a1:a6:8a:5a:2c:a3: 6f:6b:c0:05:40:16:77:67:89:0e:68:34:38:5e:c6:25:cd:d1: 1d:c7:18:f0:1e:e1:d9:c1:f0:04:51:aa:e7:d3:9f:bb:fb:81: 53:4b:ca:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrKPaLW9Vwzc0r6H86YTXIdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjUxMTI4MTEzMzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWIyMmQyMTU0N2FiYmU2NjMyNjBkYTRjYmZiNzdkZjQzZWU3YWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiws4fY9552u9Xvc9By8xZ+z92wC nnBrDKyFFQQ07/RmMAmXVNQzYDrO/3afs0x9t7q5XUw7vhDS6Bu37mQPRDqzlIcK XO7F24kg+ZS8bbWy+fz7RHX7mCY0gtssU2qqO3flcQ2u9vRgKoNEoUd3Eawp6WTC F/pm6YZSQmRFuFtCtKmTBdoySux1kFfqmGpiHWm9ae9D/s4Q23QT+xL+8LKzAhpE D0AMNZJH3g3rsdr0X5DC3U62y4FCWxRImHMRYFTMHBvqlWpeDvhD+MxSnk6W6GUY ummBIFDgay620vPmwP/DfJRtXJfyuo5CUY+jhHaxmcA07b4G8RhPOSCy4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIqyLSFUervmYyYNpMv7d99D7nrcMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvaXJJdElWUjZ1LVpqSmcya3lfdDMzMFB1ZXR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YldMA0G CSqGSIb3DQEBCwUAA4IBAQCUv+jzfcswW05+BcSptr3ri+phixRhlIBWlN3SnVzi UtW2xl60SKHPh5LJZrRMgZzWnJLskmrppvlsin1Uu5JOfLxCTqFU2bAS7z5+XtHZ 00vFWMPPJfWCRW0HjyWAETbYLSkVRn46Gkiiwu0kkKOFiEklC80KgFYtsW9XBzch 6Zj3rOad87UhXcDzTcULZj1YaNgUp8TLOCaRY2mtMoLXoruiZM+RXof9n20fZ6J2 62JZTo/HChdZ3PxGhxiB/aLALRveWF6xOkKa7KKohwYm/KShpopaLKNva8AFQBZ3 Z4kOaDQ4XsYlzdEdxxjwHuHZwfAEUarn05+7+4FTS8p3 -----END CERTIFICATE-----Generated at Fri Dec 5 17:19:33 2025 by rpki-client