This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/_Nm6r2Yv3Zkc3c0OIBU3ldpJJkw.roa File: _Nm6r2Yv3Zkc3c0OIBU3ldpJJkw.roa (raw, json) Hash identifier: 3ALoIGbxmP+kByubWHulq2NFwTA/LOztSuk+rMQPM34= Subject key identifier: FC:D9:BA:AF:66:2F:DD:99:1C:DD:CD:0E:20:15:37:95:DA:49:26:4C Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921 Certificate serial: 019AB4C53A1BE1ACA492277155DD7BB4293B Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/_Nm6r2Yv3Zkc3c0OIBU3ldpJJkw.roa Signing time: Mon 24 Nov 2025 07:30:15 +0000 ROA not before: Mon 24 Nov 2025 07:30:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 63199 IP address blocks: 95.128.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 04:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b4:c5:3a:1b:e1:ac:a4:92:27:71:55:dd:7b:b4:29:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921 Validity Not Before: Nov 24 07:30:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fcd9baaf662fdd991cddcd0e20153795da49264c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:49:92:7e:ab:7b:0c:80:fb:ec:c9:44:0d:b3: d2:26:99:17:92:c1:6d:d3:60:1b:4a:8a:87:37:f4: 52:02:4e:e0:37:5c:c1:a2:28:f2:b8:f8:50:2c:86: 16:3a:7d:58:92:c7:82:22:f6:93:07:7a:22:e3:e6: 59:f2:76:ca:27:2d:d8:a0:cb:d2:3d:d2:9a:ff:8a: ce:e9:91:ca:75:ca:3d:fc:82:3e:ea:a9:1c:c5:f0: 42:cc:b7:27:45:e5:d5:cf:8d:21:8b:ed:58:61:3b: cd:16:9e:2c:8b:17:c1:6e:1a:00:6d:d3:48:a4:2a: 3f:fa:d4:49:64:61:e1:32:d9:22:13:ec:f6:53:54: 6d:83:16:06:17:94:66:ca:70:a1:49:f0:9f:2c:59: 9f:7b:06:f6:21:1e:68:69:3c:83:ef:43:78:96:55: 22:66:e8:78:e5:f5:df:fb:3d:91:d1:f7:5a:39:3a: c1:18:82:55:15:50:ad:c5:9c:3e:e0:9d:29:7c:5d: 38:a5:83:fa:b7:57:eb:eb:ce:69:53:56:63:3d:f4: d7:79:b5:8a:9c:5f:a2:40:15:cd:35:2f:2a:b5:21: c1:f1:67:c2:a9:02:83:fd:1a:43:3d:dc:7e:31:c4: d5:26:94:c6:90:14:a8:f4:7b:74:62:e7:f8:2b:e6: c0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D9:BA:AF:66:2F:DD:99:1C:DD:CD:0E:20:15:37:95:DA:49:26:4C X509v3 Authority Key Identifier: keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/_Nm6r2Yv3Zkc3c0OIBU3ldpJJkw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.128.195.0/24 Signature Algorithm: sha256WithRSAEncryption 71:f3:61:95:be:94:b7:ad:4a:91:b8:f2:2a:11:cf:e6:36:f6: 32:4b:aa:2c:18:e3:52:f8:51:8a:18:d6:07:56:d0:5f:e6:d1: c8:d8:9e:56:f6:7d:30:d4:e8:9a:bb:65:11:de:6f:7d:02:27: cd:96:57:7c:11:3d:17:13:fe:96:38:23:a1:fd:14:79:da:c7: d4:36:c4:5f:25:ad:dc:cb:5b:6b:56:1f:44:74:31:56:3f:4c: 7f:d4:af:33:d9:93:d5:2e:7e:c7:04:8e:f0:ca:ae:f2:f6:c1: ba:87:67:52:c9:ea:e4:27:ff:14:a6:ec:9c:37:93:ba:f8:75: 80:b5:3b:53:88:11:62:e1:2e:d8:4a:5c:54:ac:87:dd:33:d0: fb:42:28:d6:22:8c:f6:6a:ff:0e:51:c2:12:85:5c:93:4c:7e: d2:fc:f2:48:e1:43:c9:d7:1f:d0:21:35:21:34:50:96:84:b6: 40:c3:6f:60:eb:2f:33:02:cb:cf:0b:a8:dd:ab:54:97:9b:db: 4a:71:ec:5a:23:74:54:b9:59:6a:05:1e:20:57:b0:26:94:d7: 8f:95:1b:be:84:fc:a7:e8:98:db:19:d0:56:8f:b9:0a:dc:28: e5:0a:c4:62:e0:33:a5:0e:05:5c:55:9c:58:ca:70:eb:72:85: d2:40:91:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq0xTob4aykkidxVd17tCk7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOTJjOGM3NzliNmVkNmVkZTcyYThjZjExNDkwZWY2ZDdh OWU5MjEwHhcNMjUxMTI0MDczMDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2Q5YmFhZjY2MmZkZDk5MWNkZGNkMGUyMDE1Mzc5NWRhNDkyNjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0mSfqt7DID77MlEDbPSJpkXksFt 02AbSoqHN/RSAk7gN1zBoijyuPhQLIYWOn1YkseCIvaTB3oi4+ZZ8nbKJy3YoMvS PdKa/4rO6ZHKdco9/II+6qkcxfBCzLcnReXVz40hi+1YYTvNFp4sixfBbhoAbdNI pCo/+tRJZGHhMtkiE+z2U1RtgxYGF5RmynChSfCfLFmfewb2IR5oaTyD70N4llUi Zuh45fXf+z2R0fdaOTrBGIJVFVCtxZw+4J0pfF04pYP6t1fr685pU1ZjPfTXebWK nF+iQBXNNS8qtSHB8WfCqQKD/RpDPdx+McTVJpTGkBSo9Ht0Yuf4K+bAeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPzZuq9mL92ZHN3NDiAVN5XaSSZMMB8GA1UdIwQY MBaAFOKSyMd5tu1u3nKozxFJDvbXqekhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80YTJlOTctMjU3MC00NzhiLWI5YmMt NWViYjYzNzgwMDllLzEvX05tNnIyWXYzWmtjM2MwT0lCVTNsZHBKSmt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC80YTJlOTctMjU3MC00NzhiLWI5YmMtNWViYjYzNzgwMDll LzEvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4DDMA0G CSqGSIb3DQEBCwUAA4IBAQBx82GVvpS3rUqRuPIqEc/mNvYyS6osGONS+FGKGNYH VtBf5tHI2J5W9n0w1Oiau2UR3m99AifNlld8ET0XE/6WOCOh/RR52sfUNsRfJa3c y1trVh9EdDFWP0x/1K8z2ZPVLn7HBI7wyq7y9sG6h2dSyerkJ/8UpuycN5O6+HWA tTtTiBFi4S7YSlxUrIfdM9D7QijWIoz2av8OUcIShVyTTH7S/PJI4UPJ1x/QITUh NFCWhLZAw29g6y8zAsvPC6jdq1SXm9tKcexaI3RUuVlqBR4gV7AmlNePlRu+hPyn 6JjbGdBWj7kK3CjlCsRi4DOlDgVcVZxYynDrcoXSQJEq -----END CERTIFICATE-----Generated at Fri Dec 5 12:24:20 2025 by rpki-client