This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/T9JqdOCwNhjHEy72ZfNfRkVAito.roa File: T9JqdOCwNhjHEy72ZfNfRkVAito.roa (raw, json) Hash identifier: QrX7NzM9kSSnpfIRIBJUfwnvKzWfzdW6zC1sKAREjM8= Subject key identifier: 4F:D2:6A:74:E0:B0:36:18:C7:13:2E:F6:65:F3:5F:46:45:40:8A:DA Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019AB69BD1E5A87468EB02074C1FEB102051 Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/T9JqdOCwNhjHEy72ZfNfRkVAito.roa Signing time: Mon 24 Nov 2025 16:04:16 +0000 ROA not before: Mon 24 Nov 2025 16:04:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198412 IP address blocks: 176.124.112.0/24 maxlen: 24 176.124.113.0/24 maxlen: 24 185.187.152.0/24 maxlen: 24 185.187.153.0/24 maxlen: 24 2a05:b0c0::/48 maxlen: 48 2a05:b0c1::/48 maxlen: 48 2a05:b0c4:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 01:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:9b:d1:e5:a8:74:68:eb:02:07:4c:1f:eb:10:20:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Nov 24 16:04:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4fd26a74e0b03618c7132ef665f35f4645408ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0b:cb:fe:19:03:f2:d8:71:29:70:e6:a0:9a: 2b:65:cd:64:02:ca:ad:d1:4c:b0:0e:22:a2:c1:f8: 92:66:ef:e2:cd:f9:38:b2:8e:c0:b3:41:ac:f5:ba: 1b:ee:8d:74:f2:da:47:d6:b5:36:07:50:96:18:a9: 71:50:3f:fb:0e:64:63:e8:ee:36:d7:7c:24:23:02: 0e:6d:35:83:04:37:e1:bf:3e:94:35:0c:61:27:26: a0:67:6c:5c:c7:8b:55:4c:99:1a:96:09:f4:12:c8: d6:f3:2c:2d:ab:c4:a4:a4:c9:42:c4:dc:49:99:ff: 88:b0:b9:8d:c3:4a:26:ff:41:fb:bd:73:88:c7:3e: 0d:30:a2:d7:89:04:04:56:2b:7f:ad:87:5e:87:0f: 45:8b:c1:d7:af:58:27:0c:19:01:13:41:dc:a2:06: 35:56:47:8a:d4:d7:a0:28:8e:b2:09:fe:7d:de:a9: 7d:54:02:bb:e5:68:78:f9:98:8c:3c:7c:92:81:6f: 6c:7c:6d:01:80:0c:82:3a:a7:f3:9f:97:2a:3f:c8: c2:14:c1:01:6c:46:9e:2b:24:c8:9e:26:39:3c:5e: 95:63:ba:21:5f:2e:72:73:78:1b:bd:fd:50:78:58: 67:c8:df:9d:b3:27:87:25:16:5e:10:3a:22:63:cf: dc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D2:6A:74:E0:B0:36:18:C7:13:2E:F6:65:F3:5F:46:45:40:8A:DA X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/T9JqdOCwNhjHEy72ZfNfRkVAito.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.124.112.0/23 185.187.152.0/23 IPv6: 2a05:b0c0::/48 2a05:b0c1::/48 2a05:b0c4:1::/48 Signature Algorithm: sha256WithRSAEncryption 2f:32:3d:0a:13:8e:f5:8e:98:25:12:6d:68:7e:6c:78:6b:54: 1a:9e:52:35:db:76:72:c3:3e:58:3a:a7:7c:fa:90:43:22:80: 2b:34:58:0b:ee:41:28:5e:8f:15:cd:cb:a1:eb:10:de:75:e5: 7d:7d:bb:70:85:5b:06:c1:b9:56:e5:6d:0b:a4:56:84:06:0b: 38:50:96:b9:b6:71:ac:51:7b:2e:00:63:3c:9e:40:50:0a:c0: ee:f0:37:7b:27:ab:ed:72:56:01:c8:6e:2b:04:00:f4:8d:5a: 1a:b7:17:6a:6e:50:83:35:9a:56:48:4b:6f:71:61:04:18:d0: 0e:fc:4a:24:69:e3:ba:a7:ea:d6:74:40:92:9b:29:59:21:ad: ee:07:8f:a0:19:8b:3a:68:e4:8c:ae:d4:0a:b9:ad:44:b6:95: f7:48:90:37:2b:62:77:01:5c:5f:8f:2c:ec:73:6d:11:e7:ea: 11:a1:c6:1e:6a:4c:54:24:65:1e:90:4c:f0:be:71:2a:e3:d7: 85:2e:e8:ce:ca:cc:68:95:08:9e:84:88:ef:18:8c:04:b2:a5: 56:e4:62:4a:ba:ec:06:8f:c1:61:be:2f:b3:e0:01:97:94:28: 4b:6e:2f:25:77:0c:b4:ee:c6:e7:db:c4:40:c3:81:be:e5:11: 0e:1d:4a:53 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZq2m9HlqHRo6wIHTB/rECBRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjUxMTI0MTYwNDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmQyNmE3NGUwYjAzNjE4YzcxMzJlZjY2NWYzNWY0NjQ1NDA4YWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgvL/hkD8thxKXDmoJorZc1kAsqt 0UywDiKiwfiSZu/izfk4so7As0Gs9bob7o108tpH1rU2B1CWGKlxUD/7DmRj6O42 13wkIwIObTWDBDfhvz6UNQxhJyagZ2xcx4tVTJkalgn0EsjW8ywtq8SkpMlCxNxJ mf+IsLmNw0om/0H7vXOIxz4NMKLXiQQEVit/rYdehw9Fi8HXr1gnDBkBE0HcogY1 VkeK1NegKI6yCf593ql9VAK75Wh4+ZiMPHySgW9sfG0BgAyCOqfzn5cqP8jCFMEB bEaeKyTIniY5PF6VY7ohXy5yc3gbvf1QeFhnyN+dsyeHJRZeEDoiY8/c5wIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFE/SanTgsDYYxxMu9mXzX0ZFQIraMB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvVDlKcWRPQ3dOaGpIRXk3MlpmTmZSa1ZBaXRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzASBAIAATAMAwQBsHxwAwQB ubuYMCEEAgACMBsDBwAqBbDAAAADBwAqBbDBAAADBwAqBbDEAAEwDQYJKoZIhvcN AQELBQADggEBAC8yPQoTjvWOmCUSbWh+bHhrVBqeUjXbdnLDPlg6p3z6kEMigCs0 WAvuQShejxXNy6HrEN515X19u3CFWwbBuVblbQukVoQGCzhQlrm2caxRey4AYzye QFAKwO7wN3snq+1yVgHIbisEAPSNWhq3F2puUIM1mlZIS29xYQQY0A78SiRp47qn 6tZ0QJKbKVkhre4Hj6AZizpo5Iyu1Aq5rUS2lfdIkDcrYncBXF+PLOxzbRHn6hGh xh5qTFQkZR6QTPC+cSrj14Uu6M7KzGiVCJ6EiO8YjASypVbkYkq67AaPwWG+L7Pg AZeUKEtuLyV3DLTuxufbxEDDgb7lEQ4dSlM= -----END CERTIFICATE-----Generated at Fri Nov 28 08:34:39 2025 by rpki-client