This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/f4TDmx_flyjfpVf4Ghifq6XDFWs.roa File: f4TDmx_flyjfpVf4Ghifq6XDFWs.roa (raw, json) Hash identifier: TpnH+mQThHNoquxX7BL/RNq1GCNLAc5wm8Pm+kUKMQ8= Subject key identifier: 7F:84:C3:9B:1F:DF:97:28:DF:A5:57:F8:1A:18:9F:AB:A5:C3:15:6B Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173 Certificate serial: 019AA02560EC811A7774087FACC4742933A0 Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/f4TDmx_flyjfpVf4Ghifq6XDFWs.roa Signing time: Thu 20 Nov 2025 07:23:15 +0000 ROA not before: Thu 20 Nov 2025 07:23:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 185.81.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 19:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:25:60:ec:81:1a:77:74:08:7f:ac:c4:74:29:33:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18101772248996b87d90840c2d27d62549458173 Validity Not Before: Nov 20 07:23:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7f84c39b1fdf9728dfa557f81a189faba5c3156b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bd:11:9e:bf:08:1b:87:de:9f:37:10:d2:58: 19:f3:9d:37:07:2d:ae:d4:93:49:62:23:d2:eb:ed: 99:30:b0:f6:8d:00:26:81:1f:02:c9:84:3d:34:a4: fb:65:2f:e5:26:f6:ef:45:9b:a9:a7:83:b0:a4:1a: d8:a8:3f:97:be:88:79:a1:74:35:7c:5a:85:6d:23: 2a:21:68:64:23:13:5c:f1:dd:16:41:32:fc:26:7b: 71:94:56:cc:4b:6e:ae:ca:c3:ae:0a:a2:b5:bb:81: 41:a1:1c:ab:f8:4e:aa:75:01:3a:d5:c1:d4:d3:2a: 92:65:71:cf:f3:5d:48:ee:7e:a5:d6:6d:0b:7e:a2: db:28:0b:e8:20:fd:85:22:fc:65:9a:8c:0f:64:3c: 04:20:5d:e7:36:9b:c0:09:27:92:04:f1:a1:61:d0: 72:37:05:d7:a3:cf:16:db:1f:ed:c5:5f:38:ff:14: 3b:63:84:b2:d2:89:c9:8c:3a:b4:6b:5f:aa:36:03: 21:b1:1d:01:f5:26:84:b3:f8:69:0f:12:0b:05:75: 7e:44:d5:af:a3:b7:e0:eb:a7:b4:86:b5:9e:a7:23: c1:9c:4d:bb:21:3f:9b:ae:6c:d3:5e:b6:45:87:24: a2:17:57:74:8c:9f:da:40:5c:cd:6e:a9:05:6c:2f: d0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:84:C3:9B:1F:DF:97:28:DF:A5:57:F8:1A:18:9F:AB:A5:C3:15:6B X509v3 Authority Key Identifier: keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/f4TDmx_flyjfpVf4Ghifq6XDFWs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.81.30.0/23 Signature Algorithm: sha256WithRSAEncryption 25:9f:17:fb:4b:b8:4c:20:68:fd:48:31:4c:8d:93:90:49:f7: 37:e8:fc:d3:a2:f8:0b:dd:92:90:24:86:49:27:28:ed:fa:60: 4a:42:7c:69:f2:be:1a:4a:52:56:e9:b1:d3:80:d7:64:6d:1d: 34:03:ab:61:5f:ba:d0:a8:0f:5e:c6:96:65:77:f9:51:5a:24: e5:46:b8:99:9c:fd:65:27:9a:6e:be:6f:c2:77:a6:a9:7b:26: 17:62:03:02:86:45:7f:16:b2:94:ab:36:4a:cf:72:03:e5:af: 2c:ef:07:4b:07:ae:72:73:01:0a:20:80:22:a1:59:a6:9e:bf: 04:27:2a:37:d7:a0:97:1f:92:c5:57:53:9c:ad:f7:c8:d4:61: 14:49:ac:e2:e3:86:b6:72:17:7d:c7:5c:e3:e9:67:76:b7:c9: 55:75:e5:1a:ea:39:2f:df:0f:5d:21:a6:92:f1:bf:5c:b3:e9: 19:6b:12:3c:d7:13:84:51:b1:c5:b6:0b:21:b6:63:c5:3b:da: bb:fd:aa:a6:5b:35:4e:16:8a:d2:92:e9:56:05:5a:34:96:c2: c6:76:17:dd:4f:99:15:a9:45:f0:f4:71:6c:76:ac:69:0d:54: 05:14:37:18:83:01:97:fb:01:78:fe:0d:aa:4a:dc:16:06:ab: e2:ce:a2:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqgJWDsgRp3dAh/rMR0KTOgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0 NTgxNzMwHhcNMjUxMTIwMDcyMzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Zjg0YzM5YjFmZGY5NzI4ZGZhNTU3ZjgxYTE4OWZhYmE1YzMxNTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv70Rnr8IG4fenzcQ0lgZ8503By2u 1JNJYiPS6+2ZMLD2jQAmgR8CyYQ9NKT7ZS/lJvbvRZupp4OwpBrYqD+Xvoh5oXQ1 fFqFbSMqIWhkIxNc8d0WQTL8JntxlFbMS26uysOuCqK1u4FBoRyr+E6qdQE61cHU 0yqSZXHP811I7n6l1m0LfqLbKAvoIP2FIvxlmowPZDwEIF3nNpvACSeSBPGhYdBy NwXXo88W2x/txV84/xQ7Y4Sy0onJjDq0a1+qNgMhsR0B9SaEs/hpDxILBXV+RNWv o7fg66e0hrWepyPBnE27IT+brmzTXrZFhySiF1d0jJ/aQFzNbqkFbC/QfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH+Ew5sf35co36VX+BoYn6ulwxVrMB8GA1UdIwQY MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt M2NjODVhZDNjMTkwLzEvZjRURG14X2ZseWpmcFZmNEdoaWZxNlhERldzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuVEeMA0G CSqGSIb3DQEBCwUAA4IBAQAlnxf7S7hMIGj9SDFMjZOQSfc36PzTovgL3ZKQJIZJ Jyjt+mBKQnxp8r4aSlJW6bHTgNdkbR00A6thX7rQqA9expZld/lRWiTlRriZnP1l J5puvm/Cd6apeyYXYgMChkV/FrKUqzZKz3ID5a8s7wdLB65ycwEKIIAioVmmnr8E Jyo316CXH5LFV1OcrffI1GEUSazi44a2chd9x1zj6Wd2t8lVdeUa6jkv3w9dIaaS 8b9cs+kZaxI81xOEUbHFtgshtmPFO9q7/aqmWzVOForSkulWBVo0lsLGdhfdT5kV qUXw9HFsdqxpDVQFFDcYgwGX+wF4/g2qStwWBqvizqIm -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:36 2025 by rpki-client