This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/S3ABuUgqWMHNoAaGfcnGWxz_7v0.roa File: S3ABuUgqWMHNoAaGfcnGWxz_7v0.roa (raw, json) Hash identifier: Pzs781wrJXrTNIe8JaW1VPS8XNPubaxVa/yIkxpTd0A= Subject key identifier: 4B:70:01:B9:48:2A:58:C1:CD:A0:06:86:7D:C9:C6:5B:1C:FF:EE:FD Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Certificate serial: 019A78D9E7DD494DB28663EAACE255E65A44 Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/S3ABuUgqWMHNoAaGfcnGWxz_7v0.roa Signing time: Wed 12 Nov 2025 16:15:37 +0000 ROA not before: Wed 12 Nov 2025 16:15:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41745 IP address blocks: 130.49.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:d9:e7:dd:49:4d:b2:86:63:ea:ac:e2:55:e6:5a:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Validity Not Before: Nov 12 16:15:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4b7001b9482a58c1cda006867dc9c65b1cffeefd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f8:44:c2:b7:e8:69:b2:2a:d6:2f:cc:fe:ab: 35:ef:8f:3f:e6:3f:5e:d3:3b:11:63:60:38:28:a1: 6f:76:4e:f8:25:f0:fb:67:cb:da:69:05:3b:d0:93: 77:cd:ac:63:0a:4e:2b:16:f8:ab:a0:10:ba:8b:5a: bf:14:65:6d:56:74:c5:2b:02:60:0a:73:79:ae:1e: f8:63:60:5e:ff:52:ce:b6:de:c7:e3:5c:e4:38:54: fb:96:bd:57:02:70:9b:5f:8e:5f:f0:94:a6:35:19: 14:44:fc:72:0b:09:7d:bc:fd:f1:04:03:3c:8c:b4: fc:ae:ad:f1:b6:52:24:82:22:03:ef:59:c8:99:ec: 08:31:9a:11:f2:b9:cc:1a:d6:4f:38:bc:7b:cf:70: 57:cb:cd:26:d0:bd:93:a8:03:eb:9c:60:0a:da:a3: 59:5e:d7:28:18:15:ea:a4:bd:97:e7:a9:fa:5c:b5: c4:c2:43:1a:06:5c:6b:9e:93:36:2a:f7:89:a9:eb: 1a:81:7c:2c:a6:ed:d0:2a:d3:a6:40:35:63:7d:0e: 6d:35:84:51:e1:7f:28:af:53:5c:51:02:8a:fd:8a: 6d:b9:1e:1e:2b:cd:ae:a5:da:48:79:73:85:06:81: ea:c3:7f:c5:f9:d5:1a:c2:03:8d:06:75:7d:8d:a6: 70:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:70:01:B9:48:2A:58:C1:CD:A0:06:86:7D:C9:C6:5B:1C:FF:EE:FD X509v3 Authority Key Identifier: keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/S3ABuUgqWMHNoAaGfcnGWxz_7v0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.49.176.0/22 Signature Algorithm: sha256WithRSAEncryption 74:0e:56:be:ff:41:62:10:f5:55:87:cd:fa:39:f7:75:0d:34: 58:99:92:9a:99:4a:bc:ac:2a:ce:dd:fe:59:8f:c1:41:60:49: 9b:cb:8f:15:2a:84:16:ae:73:bb:fd:50:7c:74:d3:a6:c1:a7: d5:20:bf:cb:53:34:16:3d:3a:bf:2b:ff:de:b9:d4:6b:65:ee: a6:31:08:ab:a8:5b:87:00:0f:d5:63:a7:3a:10:df:a9:c4:a5: 12:59:ad:e5:f6:91:02:ce:85:f3:80:de:fe:c4:a1:d7:dd:e6: ab:b4:c1:6a:10:1d:17:73:33:77:09:18:34:11:2d:21:0b:51: a8:0c:d6:d5:34:a7:15:5a:dd:cd:27:8a:a1:36:08:fc:0d:c7: 95:96:5a:b9:2d:de:d2:b1:6c:4b:ee:26:9c:8d:f7:46:b5:00: 02:2c:37:0d:70:00:2f:39:02:ae:dc:9b:9d:7a:58:32:a7:88: 32:0e:a6:4c:48:5a:be:e4:32:0e:7d:99:1d:64:4c:b3:73:6e: 5a:ed:72:86:5b:ba:21:33:51:6d:5b:04:3c:d1:78:d6:9d:72: 08:3b:f5:f5:b8:da:4b:86:bf:17:82:4e:e5:b4:97:df:72:78: a3:3b:12:10:cd:36:5e:4c:94:80:a0:c4:c2:5f:a0:08:8b:8f: 0e:76:cb:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp42efdSU2yhmPqrOJV5lpEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3 NzliYjEwHhcNMjUxMTEyMTYxNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjcwMDFiOTQ4MmE1OGMxY2RhMDA2ODY3ZGM5YzY1YjFjZmZlZWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvhEwrfoabIq1i/M/qs1748/5j9e 0zsRY2A4KKFvdk74JfD7Z8vaaQU70JN3zaxjCk4rFviroBC6i1q/FGVtVnTFKwJg CnN5rh74Y2Be/1LOtt7H41zkOFT7lr1XAnCbX45f8JSmNRkURPxyCwl9vP3xBAM8 jLT8rq3xtlIkgiID71nImewIMZoR8rnMGtZPOLx7z3BXy80m0L2TqAPrnGAK2qNZ XtcoGBXqpL2X56n6XLXEwkMaBlxrnpM2KveJqesagXwspu3QKtOmQDVjfQ5tNYRR 4X8or1NcUQKK/YptuR4eK82updpIeXOFBoHqw3/F+dUawgONBnV9jaZw1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEtwAblIKljBzaAGhn3Jxlsc/+79MB8GA1UdIwQY MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt NmI0MzcyNjAyMDk2LzEvUzNBQnVVZ3FXTUhOb0FhR2ZjbkdXeHpfN3YwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2 LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgjGwMA0G CSqGSIb3DQEBCwUAA4IBAQB0Dla+/0FiEPVVh836Ofd1DTRYmZKamUq8rCrO3f5Z j8FBYEmby48VKoQWrnO7/VB8dNOmwafVIL/LUzQWPTq/K//eudRrZe6mMQirqFuH AA/VY6c6EN+pxKUSWa3l9pECzoXzgN7+xKHX3eartMFqEB0XczN3CRg0ES0hC1Go DNbVNKcVWt3NJ4qhNgj8DceVllq5Ld7SsWxL7iacjfdGtQACLDcNcAAvOQKu3Jud elgyp4gyDqZMSFq+5DIOfZkdZEyzc25a7XKGW7ohM1FtWwQ80XjWnXIIO/X1uNpL hr8Xgk7ltJffcnijOxIQzTZeTJSAoMTCX6AIi48Odsu1 -----END CERTIFICATE-----Generated at Sat Dec 6 15:42:25 2025 by rpki-client