This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/tPS3TkaVk2BStoEww4iOwiqzvGs.roa File: tPS3TkaVk2BStoEww4iOwiqzvGs.roa (raw, json) Hash identifier: JUtgyp6Bsfa8Bb6KD/BWJKgb5LK0ORypV+kDz6Dnt3A= Subject key identifier: B4:F4:B7:4E:46:95:93:60:52:B6:81:30:C3:88:8E:C2:2A:B3:BC:6B Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019AA6A6B9C46B9B4DAD6097A171DBBF639E Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/tPS3TkaVk2BStoEww4iOwiqzvGs.roa Signing time: Fri 21 Nov 2025 13:42:15 +0000 ROA not before: Fri 21 Nov 2025 13:42:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209847 IP address blocks: 45.153.230.0/24 maxlen: 24 193.38.54.0/24 maxlen: 24 193.38.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:a6:b9:c4:6b:9b:4d:ad:60:97:a1:71:db:bf:63:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Nov 21 13:42:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b4f4b74e4695936052b68130c3888ec22ab3bc6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a9:dc:e7:f2:66:c6:56:61:9d:38:4a:b2:e9: 5b:ce:d1:4e:d9:2d:06:52:7a:b9:10:63:ac:cc:e1: fc:a5:57:7e:f7:7b:2e:07:cd:ce:f3:69:07:3b:83: fa:fa:66:2e:01:2c:b7:af:c6:1a:19:8d:52:07:51: 8b:c2:ae:d5:ec:4a:93:5a:9f:96:ab:5f:4c:2f:d3: 21:2f:59:45:39:5f:cf:81:69:2b:f8:63:42:e4:ca: 52:78:d1:5f:53:b9:3c:de:66:1a:1b:8a:3b:88:99: bc:a1:9a:56:f4:6f:6b:85:32:89:c9:d1:18:36:bf: a4:4d:35:f3:3b:b7:02:c3:4b:21:a9:67:0e:4d:4e: 38:df:13:a3:e6:a3:6f:17:5f:b1:04:8d:73:21:45: f1:d9:c4:d8:03:ea:34:ca:f2:42:4b:e8:dc:12:74: 94:09:e8:cb:94:b6:87:25:60:59:f7:6d:71:03:33: 5b:71:cb:41:6f:10:6d:33:b5:95:bb:66:c6:4a:54: ab:d7:7b:c9:59:49:c1:fb:d4:23:93:ed:59:eb:06: 0f:62:fd:d7:a4:17:d6:15:81:0c:af:2e:cb:66:2e: 1d:68:67:38:1f:32:73:b2:76:15:6a:a8:8b:b9:98: d3:ca:99:e4:5d:c4:61:d7:b7:d2:76:a3:d8:e6:74: 79:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F4:B7:4E:46:95:93:60:52:B6:81:30:C3:88:8E:C2:2A:B3:BC:6B X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/tPS3TkaVk2BStoEww4iOwiqzvGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.230.0/24 193.38.54.0/23 Signature Algorithm: sha256WithRSAEncryption 24:90:3b:57:fd:32:10:e9:bf:ec:06:b1:73:98:8b:ba:cc:ab: d7:d4:b0:e5:11:23:2f:f1:ab:8e:01:e8:e6:08:38:5b:b9:66: ff:f5:c9:00:56:75:d2:f9:a2:19:e8:40:a1:6a:0e:a7:41:ea: d2:8f:66:6f:85:10:e5:d7:8d:cd:82:f3:2f:64:e5:49:2f:29: 16:88:a1:af:72:76:14:6b:40:8c:cb:45:b9:ed:56:39:e9:85: fc:23:1b:a1:24:dc:28:66:79:3f:d9:74:57:ba:b3:07:ba:40: 37:72:59:f5:ef:fc:80:7e:1b:f0:8c:80:28:2e:c6:e9:75:f8: 88:bc:76:72:68:71:53:f0:bd:8f:8e:a7:5d:39:d2:61:c2:5b: ac:a3:95:82:2e:11:97:bd:53:37:36:7e:c6:31:6b:ce:e4:f2: 3f:7f:95:11:71:5f:6d:7a:fe:dd:d3:b3:4c:ca:fc:32:fb:dc: 3b:e6:68:08:7e:eb:05:79:8a:8e:4b:4d:f9:82:e3:d1:7f:95: aa:30:52:12:a5:74:27:70:67:fb:ee:0f:c4:b2:b4:81:b0:6e: a9:9c:ea:80:a8:2f:1e:a7:df:4c:04:5b:4e:51:05:15:09:ac: ea:1d:7b:9d:e1:77:8c:04:d3:7a:56:04:85:a2:5a:4a:d3:99: fb:bd:59:2d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqmprnEa5tNrWCXoXHbv2OeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjUxMTIxMTM0MjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGY0Yjc0ZTQ2OTU5MzYwNTJiNjgxMzBjMzg4OGVjMjJhYjNiYzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqnc5/JmxlZhnThKsulbztFO2S0G Unq5EGOszOH8pVd+93suB83O82kHO4P6+mYuASy3r8YaGY1SB1GLwq7V7EqTWp+W q19ML9MhL1lFOV/PgWkr+GNC5MpSeNFfU7k83mYaG4o7iJm8oZpW9G9rhTKJydEY Nr+kTTXzO7cCw0shqWcOTU443xOj5qNvF1+xBI1zIUXx2cTYA+o0yvJCS+jcEnSU CejLlLaHJWBZ921xAzNbcctBbxBtM7WVu2bGSlSr13vJWUnB+9Qjk+1Z6wYPYv3X pBfWFYEMry7LZi4daGc4HzJzsnYVaqiLuZjTypnkXcRh17fSdqPY5nR5hwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLT0t05GlZNgUraBMMOIjsIqs7xrMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvdFBTM1RrYVZrMkJTdG9Fd3c0aU93aXF6dkdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZnmAwQB wSY2MA0GCSqGSIb3DQEBCwUAA4IBAQAkkDtX/TIQ6b/sBrFzmIu6zKvX1LDlESMv 8auOAejmCDhbuWb/9ckAVnXS+aIZ6EChag6nQerSj2ZvhRDl143NgvMvZOVJLykW iKGvcnYUa0CMy0W57VY56YX8IxuhJNwoZnk/2XRXurMHukA3cln17/yAfhvwjIAo LsbpdfiIvHZyaHFT8L2PjqddOdJhwluso5WCLhGXvVM3Nn7GMWvO5PI/f5URcV9t ev7d07NMyvwy+9w75mgIfusFeYqOS035guPRf5WqMFISpXQncGf77g/EsrSBsG6p nOqAqC8ep99MBFtOUQUVCazqHXud4XeMBNN6VgSFolpK05n7vVkt -----END CERTIFICATE-----Generated at Fri Dec 5 16:41:11 2025 by rpki-client