This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/EtxviVbWxZHW3GY9Eg3DxIPxZlE.roa File: EtxviVbWxZHW3GY9Eg3DxIPxZlE.roa (raw, json) Hash identifier: bRg6rAX6ozY/cxX9qEAqt3CoEJd6d0wIKRkDLAOHV4s= Subject key identifier: 12:DC:6F:89:56:D6:C5:91:D6:DC:66:3D:12:0D:C3:C4:83:F1:66:51 Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Certificate serial: 019B42217EBC49299E6989403496AE54026A Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/EtxviVbWxZHW3GY9Eg3DxIPxZlE.roa Signing time: Sun 21 Dec 2025 18:17:29 +0000 ROA not before: Sun 21 Dec 2025 18:17:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 193.36.162.0/24 maxlen: 24 193.168.186.0/24 maxlen: 24 193.168.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:21:7e:bc:49:29:9e:69:89:40:34:96:ae:54:02:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Validity Not Before: Dec 21 18:17:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=12dc6f8956d6c591d6dc663d120dc3c483f16651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b0:39:de:fb:f4:d7:8f:1e:b0:65:bc:1f:6c: 17:04:1a:6f:b2:e3:21:16:21:a4:2c:6a:a0:7b:bc: c5:53:09:0b:b7:83:00:c6:38:ab:9a:9f:45:a6:2d: 32:d4:1e:1d:e6:0c:7e:d3:08:a0:ad:72:89:8e:75: d8:f6:e3:07:db:b0:fc:f8:fc:40:5f:1b:60:33:e5: 79:92:18:a9:e0:92:66:b1:64:ec:50:f2:aa:4b:7f: 1a:59:77:b3:82:a2:9d:2b:a8:b3:24:cd:d7:38:e8: b4:a9:09:42:8f:b6:85:40:99:65:0f:e2:03:ad:9e: 2e:88:14:d9:77:de:de:e4:ff:43:f7:24:0d:81:57: ae:24:20:cb:b2:34:b1:3c:33:f2:fa:60:b4:b0:2e: dc:ab:15:8f:d4:de:2b:57:a6:49:e5:ae:58:a1:cc: ef:59:02:fd:5a:07:a9:ff:92:e4:03:07:18:12:93: 6a:1f:ca:7a:76:f5:4f:00:d9:15:a5:5e:7f:9d:10: f2:cf:8e:e3:32:4b:ed:fd:36:b9:6f:7e:4b:12:ac: 5c:84:c5:8c:71:bf:10:6f:bb:ed:b4:c3:c4:a6:af: 53:d5:7c:de:bf:aa:ef:67:47:6f:e3:92:f4:bd:1f: 02:f0:a7:f6:4f:0b:d4:70:98:4e:00:b0:30:89:9d: 54:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DC:6F:89:56:D6:C5:91:D6:DC:66:3D:12:0D:C3:C4:83:F1:66:51 X509v3 Authority Key Identifier: keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/EtxviVbWxZHW3GY9Eg3DxIPxZlE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.36.162.0/24 193.168.186.0/23 Signature Algorithm: sha256WithRSAEncryption 86:91:e8:41:d9:e2:8e:a6:21:7c:64:3e:39:77:1f:92:4e:5c: 48:ec:d6:8f:82:c2:fa:44:52:e4:1d:a0:b3:0f:13:3a:74:76: 19:1d:fc:09:64:10:bc:8d:08:77:b3:0b:10:c4:a1:2d:c1:0c: 33:a2:90:f8:dc:aa:60:4b:b1:bf:93:29:1b:49:7f:43:a5:62: 21:cd:ae:31:1b:1a:4a:bd:d4:4d:90:26:23:5c:4d:80:a8:04: c7:47:b1:54:e7:03:ac:eb:f8:34:fd:8c:84:93:dd:3c:6d:4b: 42:65:57:36:55:97:c6:66:25:98:69:16:cf:69:8c:9e:3a:43: d5:f1:54:ec:b9:d4:9b:29:4a:97:1c:c5:88:2d:6f:b4:4e:a9: 7c:f8:40:6c:27:74:0d:92:6c:5d:ab:45:a1:27:b7:92:03:78: 4c:98:fa:45:d2:84:9d:65:97:7e:76:75:35:3b:4c:51:90:89: 8b:a6:ba:0e:1e:b6:83:5a:fb:3b:1c:72:3f:a0:3a:6d:69:16: d5:c5:0d:c4:12:e2:7e:85:c9:aa:09:16:0f:5d:75:28:fe:62: c7:6a:f4:cd:a6:94:be:72:d8:04:b6:58:38:a2:f5:5b:32:31: 63:e1:62:4b:21:99:bf:e8:33:2a:73:8b:c5:9d:de:92:f1:7a: a3:b1:a5:bc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZtCIX68SSmeaYlANJauVAJqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw YmQ5ODYwHhcNMjUxMjIxMTgxNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmRjNmY4OTU2ZDZjNTkxZDZkYzY2M2QxMjBkYzNjNDgzZjE2NjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbA53vv0148esGW8H2wXBBpvsuMh FiGkLGqge7zFUwkLt4MAxjirmp9Fpi0y1B4d5gx+0wigrXKJjnXY9uMH27D8+PxA XxtgM+V5khip4JJmsWTsUPKqS38aWXezgqKdK6izJM3XOOi0qQlCj7aFQJllD+ID rZ4uiBTZd97e5P9D9yQNgVeuJCDLsjSxPDPy+mC0sC7cqxWP1N4rV6ZJ5a5Yoczv WQL9Wgep/5LkAwcYEpNqH8p6dvVPANkVpV5/nRDyz47jMkvt/Ta5b35LEqxchMWM cb8Qb7vttMPEpq9T1Xzev6rvZ0dv45L0vR8C8Kf2TwvUcJhOALAwiZ1UOwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBLcb4lW1sWR1txmPRINw8SD8WZRMB8GA1UdIwQY MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt ZjUyNTgxNjQwMmJkLzEvRXR4dmlWYld4WkhXM0dZOUVnM0R4SVB4WmxFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwSSiAwQB wai6MA0GCSqGSIb3DQEBCwUAA4IBAQCGkehB2eKOpiF8ZD45dx+STlxI7NaPgsL6 RFLkHaCzDxM6dHYZHfwJZBC8jQh3swsQxKEtwQwzopD43KpgS7G/kykbSX9DpWIh za4xGxpKvdRNkCYjXE2AqATHR7FU5wOs6/g0/YyEk908bUtCZVc2VZfGZiWYaRbP aYyeOkPV8VTsudSbKUqXHMWILW+0Tql8+EBsJ3QNkmxdq0WhJ7eSA3hMmPpF0oSd ZZd+dnU1O0xRkImLproOHraDWvs7HHI/oDptaRbVxQ3EEuJ+hcmqCRYPXXUo/mLH avTNppS+ctgEtlg4ovVbMjFj4WJLIZm/6DMqc4vFnd6S8XqjsaW8 -----END CERTIFICATE-----Generated at Tue Dec 30 21:08:28 2025 by rpki-client