This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/94D-aFdJ0lxGvd8Ck0_HXNvsj1U.roa File: 94D-aFdJ0lxGvd8Ck0_HXNvsj1U.roa (raw, json) Hash identifier: W3CoH4BXO1CIOV0ARapVvpD7ATmyPu3rPtRmoNOdHFw= Subject key identifier: F7:80:FE:68:57:49:D2:5C:46:BD:DF:02:93:4F:C7:5C:DB:EC:8F:55 Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 019AE3AF39C7E14ECC3D11B08846BB893928 Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/94D-aFdJ0lxGvd8Ck0_HXNvsj1U.roa Signing time: Wed 03 Dec 2025 10:08:22 +0000 ROA not before: Wed 03 Dec 2025 10:08:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211439 IP address blocks: 139.28.173.0/24 maxlen: 24 139.28.175.0/24 maxlen: 24 185.169.228.0/22 maxlen: 22 193.37.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:af:39:c7:e1:4e:cc:3d:11:b0:88:46:bb:89:39:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: Dec 3 10:08:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f780fe685749d25c46bddf02934fc75cdbec8f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bc:d7:bb:82:f1:d1:43:eb:50:7c:c5:e6:06: 08:5e:9a:01:98:8a:81:da:3f:0d:4a:bb:65:7e:07: 0c:5a:82:d4:68:53:ff:a1:f5:b7:f1:b7:c9:72:a4: 0b:87:a6:7f:21:5f:07:4d:ed:2c:a3:12:89:86:ea: e4:cd:93:23:b9:fe:bf:70:70:00:00:da:e2:71:23: 2b:53:9c:64:0d:a2:10:1e:47:27:c5:88:14:36:f5: 1c:c7:49:a4:9f:4d:eb:98:8c:8c:f2:5e:39:78:78: d9:5b:95:b9:40:c9:a9:7d:bb:ce:31:eb:6b:f4:27: 8e:27:99:71:bc:f6:6c:46:d0:01:cc:de:70:0e:cc: f0:e6:5a:29:10:65:72:30:33:12:34:d7:e6:79:ae: 4b:dc:c0:1e:0b:a5:95:2d:dd:46:2c:d8:7d:74:c2: 50:c1:63:6c:db:6a:4e:de:da:fc:94:46:49:b3:7f: d2:d5:71:ab:4d:8d:86:c4:ae:72:68:a9:0c:ea:d1: 60:1b:d2:9b:d0:90:18:16:0a:0f:52:c9:0c:7f:9e: 6c:70:82:0b:b7:3b:15:a5:a4:96:d5:ac:56:29:ac: 54:c7:04:a0:58:cf:53:95:cd:49:e6:b3:aa:f0:3d: 23:36:98:97:89:4e:a0:01:5f:49:23:ca:99:bb:5b: bb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:80:FE:68:57:49:D2:5C:46:BD:DF:02:93:4F:C7:5C:DB:EC:8F:55 X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/94D-aFdJ0lxGvd8Ck0_HXNvsj1U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.28.173.0/24 139.28.175.0/24 185.169.228.0/22 193.37.220.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:88:04:db:11:6f:b2:86:24:f0:17:59:2d:2d:be:3c:42:bd: 64:a4:8b:81:13:3d:ba:31:9a:5b:e8:28:a5:14:78:89:36:f3: f0:6b:49:79:17:b1:5d:b3:54:54:15:a7:73:7b:ef:d5:0e:e9: e1:bb:f8:32:0f:65:9f:e0:3b:a5:a8:92:67:bb:eb:6a:fd:dc: 1c:f0:43:1b:84:8f:83:0a:e9:13:69:b5:c7:b8:9d:38:68:a9: 39:38:52:54:39:a3:8a:90:0f:5d:ca:57:53:5a:81:10:7d:0c: 6d:a4:e9:e6:c1:15:b3:95:8f:e0:93:ef:7d:04:75:63:de:8a: 48:9c:0e:39:b7:1a:09:57:f3:b2:85:42:fc:b9:47:e9:aa:73: a9:0b:2a:25:69:6d:3a:0e:78:7f:49:df:53:09:11:75:3f:cf: 62:04:2d:5e:2b:2d:d2:cc:b8:5b:67:a2:32:89:cc:d5:78:35: 2b:6d:75:ba:b9:c5:ac:1b:74:59:65:d1:84:ff:f6:6a:d9:1d: ef:40:d7:51:da:50:16:69:3c:da:31:fe:e1:27:67:94:b1:3f: f3:18:5d:16:63:49:31:81:97:91:a3:fb:85:e1:70:8e:92:cb: 38:7b:1d:4b:bc:ff:3b:3d:f7:97:55:7e:b5:fb:d1:37:fe:7f: ce:4f:d7:99 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZrjrznH4U7MPRGwiEa7iTkoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjUxMjAzMTAwODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzgwZmU2ODU3NDlkMjVjNDZiZGRmMDI5MzRmYzc1Y2RiZWM4ZjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubzXu4Lx0UPrUHzF5gYIXpoBmIqB 2j8NSrtlfgcMWoLUaFP/ofW38bfJcqQLh6Z/IV8HTe0soxKJhurkzZMjuf6/cHAA ANricSMrU5xkDaIQHkcnxYgUNvUcx0mkn03rmIyM8l45eHjZW5W5QMmpfbvOMetr 9CeOJ5lxvPZsRtABzN5wDszw5lopEGVyMDMSNNfmea5L3MAeC6WVLd1GLNh9dMJQ wWNs22pO3tr8lEZJs3/S1XGrTY2GxK5yaKkM6tFgG9Kb0JAYFgoPUskMf55scIIL tzsVpaSW1axWKaxUxwSgWM9Tlc1J5rOq8D0jNpiXiU6gAV9JI8qZu1u70wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPeA/mhXSdJcRr3fApNPx1zb7I9VMB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvOTRELWFGZEowbHhHdmQ4Q2swX0hYTnZzajFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAixytAwQA ixyvAwQCuankAwQCwSXcMA0GCSqGSIb3DQEBCwUAA4IBAQAqiATbEW+yhiTwF1kt Lb48Qr1kpIuBEz26MZpb6CilFHiJNvPwa0l5F7Fds1RUFadze+/VDunhu/gyD2Wf 4DulqJJnu+tq/dwc8EMbhI+DCukTabXHuJ04aKk5OFJUOaOKkA9dyldTWoEQfQxt pOnmwRWzlY/gk+99BHVj3opInA45txoJV/OyhUL8uUfpqnOpCyolaW06Dnh/Sd9T CRF1P89iBC1eKy3SzLhbZ6IyiczVeDUrbXW6ucWsG3RZZdGE//Zq2R3vQNdR2lAW aTzaMf7hJ2eUsT/zGF0WY0kxgZeRo/uF4XCOkss4ex1LvP87PfeXVX61+9E3/n/O T9eZ -----END CERTIFICATE-----Generated at Fri Dec 5 10:06:59 2025 by rpki-client