This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/Su3Ka1R7pjnRGDKZqEvX63VKxF4.roa File: Su3Ka1R7pjnRGDKZqEvX63VKxF4.roa (raw, json) Hash identifier: QbfTd/kjJdOYrA4Hvyf36D6w4D1v8xL290MIRPSar4I= Subject key identifier: 4A:ED:CA:6B:54:7B:A6:39:D1:18:32:99:A8:4B:D7:EB:75:4A:C4:5E Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4 Certificate serial: 019A91041E8146E320F3CD1A05731E21B9A9 Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/Su3Ka1R7pjnRGDKZqEvX63VKxF4.roa Signing time: Mon 17 Nov 2025 08:52:37 +0000 ROA not before: Mon 17 Nov 2025 08:52:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 396982 IP address blocks: 176.121.88.0/21 maxlen: 21 185.94.240.0/23 maxlen: 23 185.94.242.0/23 maxlen: 23 185.124.96.0/24 maxlen: 24 185.124.97.0/24 maxlen: 24 185.124.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:04:1e:81:46:e3:20:f3:cd:1a:05:73:1e:21:b9:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4 Validity Not Before: Nov 17 08:52:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4aedca6b547ba639d1183299a84bd7eb754ac45e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b1:a9:17:3a:b6:e6:fd:c5:a2:a1:01:75:87: 1c:87:17:69:4c:fa:ca:0b:bd:c9:ca:2a:eb:88:70: b0:82:fb:ae:52:21:04:dd:c1:72:db:74:eb:d9:d9: d2:b5:8b:92:76:7d:1f:96:9b:a6:a6:d2:68:f2:55: 6a:ed:39:b0:e8:16:da:28:d3:dc:9b:00:6c:e0:eb: 29:c0:6b:bb:62:d5:71:34:ab:f1:f6:36:bd:82:83: 27:1c:6d:54:c7:59:39:a7:60:7c:ff:e8:9c:7a:3f: 0d:5e:29:2e:bb:91:7f:07:81:bf:f9:10:04:35:d8: 31:d3:62:e9:a4:b9:b8:9f:3d:d5:dc:26:6b:41:b6: e6:68:c4:c9:90:ce:fe:f2:f3:0d:fe:d7:76:e2:6f: 9e:9c:a3:14:2f:1e:af:e0:49:c6:18:79:81:c6:24: 8f:60:c2:44:eb:fc:c2:ec:98:67:44:9d:c0:9f:71: 0a:fd:71:0e:fc:92:b8:fa:64:19:3b:95:9d:18:64: d4:89:92:0d:b3:47:fd:ee:63:4b:59:b4:71:6e:c6: 4c:81:3c:91:c2:0a:9e:21:d7:75:cf:6f:4d:4b:03: 8b:4a:16:ca:ca:ba:f7:0e:87:d6:a8:aa:3a:f2:25: 9d:4c:39:fb:e3:b7:7c:0d:e6:58:7f:b0:19:c2:35: b7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:ED:CA:6B:54:7B:A6:39:D1:18:32:99:A8:4B:D7:EB:75:4A:C4:5E X509v3 Authority Key Identifier: keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/Su3Ka1R7pjnRGDKZqEvX63VKxF4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.121.88.0/21 185.94.240.0/22 185.124.96.0/23 185.124.99.0/24 Signature Algorithm: sha256WithRSAEncryption 86:a6:b4:3f:b9:a9:4d:eb:86:9d:a0:2a:89:53:c9:bd:6d:af: 5f:c6:58:75:89:a6:99:2a:ff:34:7a:e6:50:26:20:ed:e6:54: 40:60:c3:7d:9a:09:0e:7b:23:05:9e:c8:59:b9:6c:70:d6:d9: 84:a9:12:9b:c8:4e:42:8f:6f:72:0c:64:5f:c7:49:1c:11:62: 82:fd:c9:a6:cf:cf:c8:16:44:26:d9:14:b3:8c:80:c0:e1:4f: 25:8b:2c:98:81:ea:a7:f5:d1:9d:0b:1f:cd:fc:56:a3:52:df: 24:0c:f8:35:9c:ee:78:ff:67:4f:7e:58:7d:f9:4c:82:9f:4f: 99:b2:fd:d0:ce:fa:75:ee:97:47:00:ab:0e:25:34:b2:74:c5: 1a:d5:05:8d:d2:2f:1c:c1:82:b9:69:0b:3b:6e:d0:17:3f:81: 6b:cd:24:3d:92:b6:7d:88:8f:40:7f:53:e3:25:32:6f:08:33: ce:84:71:57:ec:3b:bf:f6:d8:ee:3f:bc:b8:d7:26:ce:46:9f: c3:86:f7:ab:f3:08:5c:ff:53:ce:e7:c3:aa:03:03:76:02:98: 4b:26:17:84:46:d5:74:31:62:8c:d1:34:ac:5a:1f:61:e5:fa: 8f:f2:38:11:be:94:2b:bd:70:c3:a0:69:42:04:62:7d:90:54: b0:6b:af:be -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZqRBB6BRuMg880aBXMeIbmpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzODllNzAzNWIwOGUxODFhMzQxZjM3ZWRhNzM0M2QyM2Yx Y2FmYTQwHhcNMjUxMTE3MDg1MjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWVkY2E2YjU0N2JhNjM5ZDExODMyOTlhODRiZDdlYjc1NGFjNDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrGpFzq25v3FoqEBdYcchxdpTPrK C73JyirriHCwgvuuUiEE3cFy23Tr2dnStYuSdn0flpumptJo8lVq7Tmw6BbaKNPc mwBs4OspwGu7YtVxNKvx9ja9goMnHG1Ux1k5p2B8/+icej8NXikuu5F/B4G/+RAE Ndgx02LppLm4nz3V3CZrQbbmaMTJkM7+8vMN/td24m+enKMULx6v4EnGGHmBxiSP YMJE6/zC7JhnRJ3An3EK/XEO/JK4+mQZO5WdGGTUiZINs0f97mNLWbRxbsZMgTyR wgqeIdd1z29NSwOLShbKyrr3DofWqKo68iWdTDn747d8DeZYf7AZwjW3fwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFErtymtUe6Y50RgymahL1+t1SsReMB8GA1UdIwQY MBaAFKOJ5wNbCOGBo0HzftpzQ9I/HK+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWIt MGU3MjQxNmI0ZGM3LzEvU3UzS2ExUjdwam5SR0RLWnFFdlg2M1ZLeEY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWItMGU3MjQxNmI0ZGM3 LzEvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDsHlYAwQC uV7wAwQBuXxgAwQAuXxjMA0GCSqGSIb3DQEBCwUAA4IBAQCGprQ/ualN64adoCqJ U8m9ba9fxlh1iaaZKv80euZQJiDt5lRAYMN9mgkOeyMFnshZuWxw1tmEqRKbyE5C j29yDGRfx0kcEWKC/cmmz8/IFkQm2RSzjIDA4U8liyyYgeqn9dGdCx/N/FajUt8k DPg1nO54/2dPflh9+UyCn0+Zsv3Qzvp17pdHAKsOJTSydMUa1QWN0i8cwYK5aQs7 btAXP4FrzSQ9krZ9iI9Af1PjJTJvCDPOhHFX7Du/9tjuP7y41ybORp/Dhver8whc /1PO58OqAwN2AphLJheERtV0MWKM0TSsWh9h5fqP8jgRvpQrvXDDoGlCBGJ9kFSw a6++ -----END CERTIFICATE-----Generated at Fri Dec 12 06:57:49 2025 by rpki-client