This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9obsiTC82886nwjR2v0coJ0FJc8.roa File: 9obsiTC82886nwjR2v0coJ0FJc8.roa (raw, json) Hash identifier: GL7zEfy8i4NgvtisalCtgVI3he/5tlRQMWIqaXQhq+E= Subject key identifier: F6:86:EC:89:30:BC:DB:CF:3A:9F:08:D1:DA:FD:1C:A0:9D:05:25:CF Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019A90FAF8FBC166EBE9CF35F9E128BD7F54 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9obsiTC82886nwjR2v0coJ0FJc8.roa Signing time: Mon 17 Nov 2025 08:42:37 +0000 ROA not before: Mon 17 Nov 2025 08:42:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214431 IP address blocks: 94.183.156.0/24 maxlen: 24 94.183.157.0/24 maxlen: 24 94.183.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 20 Nov 2025 07:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:90:fa:f8:fb:c1:66:eb:e9:cf:35:f9:e1:28:bd:7f:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 17 08:42:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f686ec8930bcdbcf3a9f08d1dafd1ca09d0525cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:59:ef:e8:b0:dd:c6:dd:4b:a8:e9:90:26:f2: 72:65:ef:4c:80:34:5d:fc:56:f0:4c:cb:5e:2c:12: 5b:7a:98:fc:53:71:02:3a:63:47:2c:74:ed:12:78: d0:46:8c:03:27:5f:32:b0:4c:6b:fd:6b:ca:3e:6f: ef:29:ee:06:92:02:cb:b7:91:02:49:e7:1c:ba:02: d0:0f:38:6d:dd:9e:47:22:9d:5d:93:fc:17:34:92: d7:cd:bd:4a:3a:c4:f0:ef:80:cb:d6:2d:18:51:b4: 38:a9:13:18:d6:73:d7:c5:f6:52:ec:26:5c:ae:43: f3:ce:82:54:59:b5:d9:ad:1f:50:61:39:43:d9:ca: e8:ce:8e:cd:47:be:96:74:40:3b:62:53:0e:4a:af: dc:de:08:5c:a9:d7:c4:33:08:a0:a6:6e:27:94:d3: 75:9f:5a:e9:27:d8:d6:90:7a:6b:55:36:c8:5f:c1: 4c:16:4c:24:91:aa:73:b8:9e:07:56:9a:39:8c:36: 1a:18:a2:7f:91:f3:4c:2f:33:29:70:89:ca:16:b8: d0:e7:6b:27:3d:bd:80:3e:2b:f5:05:90:21:29:ad: 58:d7:28:14:82:7c:81:0c:de:89:fc:05:f9:0a:af: 48:fd:94:19:f8:36:ec:6e:78:d1:80:ac:df:04:c0: 06:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:86:EC:89:30:BC:DB:CF:3A:9F:08:D1:DA:FD:1C:A0:9D:05:25:CF X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9obsiTC82886nwjR2v0coJ0FJc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.183.156.0/23 94.183.160.0/24 Signature Algorithm: sha256WithRSAEncryption 89:73:6a:dd:b5:67:27:2e:8c:4c:91:01:b4:c2:9f:0c:5d:bf: 14:d7:10:c0:5d:5e:c6:ba:88:fa:2e:b9:60:d1:2f:37:f0:5a: fa:ff:7a:1c:06:4b:00:ef:7a:33:d5:88:4c:bb:f8:84:61:a5: 16:a5:c5:9b:84:46:66:e8:3b:ea:fb:88:f5:1a:d3:2a:79:28: 87:0a:6b:69:16:3a:7a:e8:4b:f4:c8:76:01:8d:0b:6f:60:bf: d0:15:06:46:0f:9f:67:83:8d:12:fe:43:fc:19:35:e3:c3:77: 2e:d8:e8:b6:e4:fd:a6:5c:c6:3d:c6:5f:2e:30:06:cd:db:19: 02:11:12:94:ba:0c:25:10:9c:35:8b:c4:8e:3a:dc:d5:17:19: e6:40:d7:fb:a6:76:7e:33:be:42:9f:4c:5a:c6:e4:39:38:16: bd:75:e5:f7:f9:f4:86:9c:d6:5e:07:5b:1c:5f:2c:0c:7b:4e: 1a:4f:d1:63:89:0d:be:ce:24:6b:25:5a:3c:3b:d7:99:3a:71: a6:95:a5:0e:40:2b:f8:11:08:b8:6b:87:a0:e0:d4:40:0c:57: af:cb:a3:a7:07:79:3c:7f:65:40:b8:a4:fd:64:49:ff:7e:95: b7:b2:90:8e:42:c2:e4:a6:b6:14:01:aa:a6:75:21:5f:82:93: 6c:fb:f6:dc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqQ+vj7wWbr6c81+eEovX9UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTE3MDg0MjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjg2ZWM4OTMwYmNkYmNmM2E5ZjA4ZDFkYWZkMWNhMDlkMDUyNWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulnv6LDdxt1LqOmQJvJyZe9MgDRd /FbwTMteLBJbepj8U3ECOmNHLHTtEnjQRowDJ18ysExr/WvKPm/vKe4GkgLLt5EC SeccugLQDzht3Z5HIp1dk/wXNJLXzb1KOsTw74DL1i0YUbQ4qRMY1nPXxfZS7CZc rkPzzoJUWbXZrR9QYTlD2crozo7NR76WdEA7YlMOSq/c3ghcqdfEMwigpm4nlNN1 n1rpJ9jWkHprVTbIX8FMFkwkkapzuJ4HVpo5jDYaGKJ/kfNMLzMpcInKFrjQ52sn Pb2APiv1BZAhKa1Y1ygUgnyBDN6J/AX5Cq9I/ZQZ+DbsbnjRgKzfBMAGCQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPaG7IkwvNvPOp8I0dr9HKCdBSXPMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvOW9ic2lUQzgyODg2bndqUjJ2MGNvSjBGSmM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXrecAwQA XregMA0GCSqGSIb3DQEBCwUAA4IBAQCJc2rdtWcnLoxMkQG0wp8MXb8U1xDAXV7G uoj6Lrlg0S838Fr6/3ocBksA73oz1YhMu/iEYaUWpcWbhEZm6Dvq+4j1GtMqeSiH CmtpFjp66Ev0yHYBjQtvYL/QFQZGD59ng40S/kP8GTXjw3cu2Oi25P2mXMY9xl8u MAbN2xkCERKUugwlEJw1i8SOOtzVFxnmQNf7pnZ+M75Cn0xaxuQ5OBa9deX3+fSG nNZeB1scXywMe04aT9FjiQ2+ziRrJVo8O9eZOnGmlaUOQCv4EQi4a4eg4NRADFev y6OnB3k8f2VAuKT9ZEn/fpW3spCOQsLkprYUAaqmdSFfgpNs+/bc -----END CERTIFICATE-----Generated at Wed Nov 19 13:28:31 2025 by rpki-client