This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/SVFzdzAysgncimjsTM8ZPB01ik4.roa File: SVFzdzAysgncimjsTM8ZPB01ik4.roa (raw, json) Hash identifier: 4JCWCB2S361UZ2LToq4NVhBdfOkjLeEFo50YiBDwMdo= Subject key identifier: 49:51:73:77:30:32:B2:09:DC:8A:68:EC:4C:CF:19:3C:1D:35:8A:4E Certificate issuer: /CN=64d4e8723450d0a710c32d90ffea18529104e538 Certificate serial: 019AC9542CF280EB044AA06B17F53D63BBD9 Authority key identifier: 64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/SVFzdzAysgncimjsTM8ZPB01ik4.roa Signing time: Fri 28 Nov 2025 07:18:48 +0000 ROA not before: Fri 28 Nov 2025 07:18:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202656 IP address blocks: 91.216.155.0/24 maxlen: 24 91.217.90.0/24 maxlen: 24 91.226.212.0/24 maxlen: 24 91.226.213.0/24 maxlen: 24 176.111.44.0/24 maxlen: 24 193.203.50.0/23 maxlen: 23 193.203.50.0/24 maxlen: 24 193.203.51.0/24 maxlen: 24 195.211.40.0/23 maxlen: 23 2a13:f580::/48 maxlen: 48 2a13:f580:5::/48 maxlen: 48 2a13:f580:6::/48 maxlen: 48 2a13:f580:7::/48 maxlen: 48 2a13:f580:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 10:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:54:2c:f2:80:eb:04:4a:a0:6b:17:f5:3d:63:bb:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64d4e8723450d0a710c32d90ffea18529104e538 Validity Not Before: Nov 28 07:18:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=495173773032b209dc8a68ec4ccf193c1d358a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bf:14:f4:d7:ee:18:39:c6:1f:23:88:d2:12: e7:46:6d:cc:e3:3c:c9:7a:92:30:6c:b7:50:cc:59: 50:9c:7c:d1:36:b2:17:65:d4:bc:0b:38:47:f7:21: 0e:19:37:48:81:ee:81:41:be:9a:36:7b:e6:d2:c4: f6:98:9d:c5:46:01:7a:6f:6d:9d:ac:e7:44:f1:4a: 0b:82:08:90:49:6c:13:1d:5f:3f:dc:cc:0c:af:4a: 3b:ee:fd:0d:8b:79:37:b2:23:61:ea:e1:1e:11:8f: 1f:72:c8:da:c9:a5:4c:e5:7f:71:41:a7:e4:99:75: c9:b5:e7:e7:93:7d:2d:4a:17:66:08:90:92:44:7a: 56:a3:f1:bb:84:94:31:fd:23:3e:5b:93:0e:8a:4d: 59:d5:3c:24:e2:a7:0a:a4:bc:4a:89:b3:7f:21:f9: 68:3d:de:64:7f:8e:b5:dd:8e:e8:3c:c1:58:18:42: ff:e7:94:59:43:d9:42:54:25:e8:d1:32:c8:6b:e5: d2:1d:dc:e7:86:78:75:c6:7b:8e:df:54:e7:30:02: 69:20:b1:1a:a8:1d:06:c7:41:09:5d:be:66:d8:a3: 02:27:28:7b:0c:16:8a:4a:ca:96:a2:7b:5e:b3:a7: 2e:58:7a:50:ce:83:1c:fc:3a:41:31:6b:fe:08:e7: a2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:51:73:77:30:32:B2:09:DC:8A:68:EC:4C:CF:19:3C:1D:35:8A:4E X509v3 Authority Key Identifier: keyid:64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/SVFzdzAysgncimjsTM8ZPB01ik4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.155.0/24 91.217.90.0/24 91.226.212.0/23 176.111.44.0/24 193.203.50.0/23 195.211.40.0/23 IPv6: 2a13:f580::/48 2a13:f580:5::-2a13:f580:8:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 01:a0:d0:f7:c3:3b:4c:85:0e:8c:0d:19:c4:a0:5c:3e:32:a2: 3e:7c:b2:7e:42:9c:ed:d6:4e:76:87:c2:5d:58:15:c5:96:f2: 84:08:a9:2f:0e:c8:02:1d:30:c1:b6:01:fa:60:4b:0f:2d:a6: 03:2e:23:24:9c:41:93:69:a5:47:37:0e:fd:c2:3c:8b:98:78: 12:65:b1:2b:ff:d7:90:64:24:a4:8b:93:9c:ac:39:f7:11:5f: 65:e4:1d:f1:59:c7:bc:6c:dc:df:30:c4:c5:d6:2f:68:29:0a: 01:90:f0:8a:37:63:45:96:f5:67:06:1d:ab:d3:69:36:20:83: 7a:6c:3e:ef:90:62:23:a6:35:dd:49:b2:81:d4:85:7d:b0:17: 06:27:be:a8:36:9b:52:e3:d9:4b:b5:9c:37:b6:53:6c:f4:d1: c0:77:24:25:13:4b:5c:66:36:9d:b4:e7:47:ae:a0:73:bc:96: 2f:63:57:0f:61:15:4b:69:a2:59:2f:1b:cc:16:7c:a4:d8:70: 3d:e4:fa:17:c3:4b:21:53:c0:3a:3e:df:78:79:0b:d5:fa:42: 90:6c:b3:ee:59:5e:a9:56:77:8d:9f:1f:04:26:03:3b:47:7e: 64:e9:87:3e:d8:81:4a:19:40:a0:33:80:ba:1c:48:b2:c5:20: 49:97:b5:a2 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgISAZrJVCzygOsESqBrF/U9Y7vZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZDRlODcyMzQ1MGQwYTcxMGMzMmQ5MGZmZWExODUyOTEw NGU1MzgwHhcNMjUxMTI4MDcxODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTUxNzM3NzMwMzJiMjA5ZGM4YTY4ZWM0Y2NmMTkzYzFkMzU4YTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzr8U9NfuGDnGHyOI0hLnRm3M4zzJ epIwbLdQzFlQnHzRNrIXZdS8CzhH9yEOGTdIge6BQb6aNnvm0sT2mJ3FRgF6b22d rOdE8UoLggiQSWwTHV8/3MwMr0o77v0Ni3k3siNh6uEeEY8fcsjayaVM5X9xQafk mXXJtefnk30tShdmCJCSRHpWo/G7hJQx/SM+W5MOik1Z1Twk4qcKpLxKibN/Iflo Pd5kf4613Y7oPMFYGEL/55RZQ9lCVCXo0TLIa+XSHdznhnh1xnuO31TnMAJpILEa qB0Gx0EJXb5m2KMCJyh7DBaKSsqWontes6cuWHpQzoMc/DpBMWv+COei2QIDAQAB o4ICTDCCAkgwHQYDVR0OBBYEFElRc3cwMrIJ3Ipo7EzPGTwdNYpOMB8GA1UdIwQY MBaAFGTU6HI0UNCnEMMtkP/qGFKRBOU4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5Ub2NqUlEwS2NRd3kyUV8tb1lVcEVFNVRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yMzEwYjEtOTZhMS00OGU0LWFhNzIt NDIyYWVkM2E3NzAyLzEvU1ZGemR6QXlzZ25jaW1qc1RNOFpQQjAxaWs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8yMzEwYjEtOTZhMS00OGU0LWFhNzItNDIyYWVkM2E3NzAy LzEvWk5Ub2NqUlEwS2NRd3kyUV8tb1lVcEVFNVRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGIGCCsGAQUFBwEHAQH/BFMwUTAqBAIAATAkAwQAW9ibAwQA W9laAwQBW+LUAwQAsG8sAwQBwcsyAwQBw9MoMCMEAgACMB0DBwAqE/WAAAAwEgMH ACoT9YAABQMHACoT9YAACDANBgkqhkiG9w0BAQsFAAOCAQEAAaDQ98M7TIUOjA0Z xKBcPjKiPnyyfkKc7dZOdofCXVgVxZbyhAipLw7IAh0wwbYB+mBLDy2mAy4jJJxB k2mlRzcO/cI8i5h4EmWxK//XkGQkpIuTnKw59xFfZeQd8VnHvGzc3zDExdYvaCkK AZDwijdjRZb1ZwYdq9NpNiCDemw+75BiI6Y13UmygdSFfbAXBie+qDabUuPZS7Wc N7ZTbPTRwHckJRNLXGY2nbTnR66gc7yWL2NXD2EVS2miWS8bzBZ8pNhwPeT6F8NL IVPAOj7feHkL1fpCkGyz7lleqVZ3jZ8fBCYDO0d+ZOmHPtiBShlAoDOAuhxIssUg SZe1og== -----END CERTIFICATE-----Generated at Fri Dec 5 15:39:50 2025 by rpki-client