This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/AVCw8DyKkNUiF_I561aHOaiB-yQ.roa File: AVCw8DyKkNUiF_I561aHOaiB-yQ.roa (raw, json) Hash identifier: 4jl/bGMpOoT3KaRQ6y+hEQZejpdNRUav6K6qbFOHgsk= Subject key identifier: 01:50:B0:F0:3C:8A:90:D5:22:17:F2:39:EB:56:87:39:A8:81:FB:24 Certificate issuer: /CN=3c1247624a3005c6fcf6612bac99cab04c60126a Certificate serial: 019B0C3440D8E843BC1DF923C13B4E7F02F9 Authority key identifier: 3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/AVCw8DyKkNUiF_I561aHOaiB-yQ.roa Signing time: Thu 11 Dec 2025 06:58:29 +0000 ROA not before: Thu 11 Dec 2025 06:58:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35819 IP address blocks: 195.242.196.0/24 maxlen: 24 195.242.197.0/24 maxlen: 24 195.242.198.0/24 maxlen: 24 195.242.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:34:40:d8:e8:43:bc:1d:f9:23:c1:3b:4e:7f:02:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1247624a3005c6fcf6612bac99cab04c60126a Validity Not Before: Dec 11 06:58:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0150b0f03c8a90d52217f239eb568739a881fb24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:92:89:3c:76:62:c2:45:df:78:ed:04:5f:01: 8b:de:a1:24:bd:8d:f6:e0:22:69:76:64:86:a7:0f: 00:55:39:a9:f8:d1:0a:3d:fb:1e:6d:0d:5d:61:7f: a3:db:11:bf:78:eb:3f:e6:b9:bd:af:fc:76:6b:4a: 43:8b:dc:ca:d0:84:2d:1f:26:71:03:20:0c:47:55: 97:bf:d3:08:b1:d7:a5:38:91:c2:6b:5b:ce:83:97: ca:a4:d7:26:c6:a8:e3:23:49:c3:2c:30:cd:65:95: 8c:b0:26:35:d6:5c:03:8a:87:3b:97:db:b2:fb:c7: 75:53:1f:8c:4f:8c:99:47:8e:e1:03:38:60:b7:fc: d4:cc:83:4b:3a:32:60:4c:98:8a:24:81:b8:24:ac: 0f:e4:94:74:86:86:56:00:3c:90:40:cf:cd:f8:27: fc:b7:d4:96:a7:16:f4:7a:f3:f6:ac:1a:fd:5a:06: 7e:3c:e9:96:9a:c8:f4:d6:45:36:27:14:ef:7f:d8: 60:c2:41:32:97:74:49:f4:66:b8:f3:78:6d:5b:8a: 5e:81:73:81:2d:c5:4f:65:ea:d8:13:48:e1:2a:9a: 2b:a8:fa:6d:83:3c:e1:3b:34:e4:f3:95:10:1d:c5: 04:17:f0:42:05:c7:7f:93:8a:fb:08:ac:6d:09:b9: 74:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:50:B0:F0:3C:8A:90:D5:22:17:F2:39:EB:56:87:39:A8:81:FB:24 X509v3 Authority Key Identifier: keyid:3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/AVCw8DyKkNUiF_I561aHOaiB-yQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.242.196.0/22 Signature Algorithm: sha256WithRSAEncryption 82:f3:c1:4c:8f:49:08:fe:3a:14:46:17:70:e4:30:de:5a:ed: 06:9d:30:7f:d4:37:0b:3a:28:16:c8:b3:0e:33:b4:a5:58:31: 15:06:39:46:26:4b:e0:84:22:d9:4f:74:04:62:6f:e7:3d:29: 07:a6:d1:ad:2f:89:f1:e1:0c:20:d0:18:30:f2:fe:41:91:2a: a2:6d:6a:8d:b5:a9:d6:fc:ff:1e:85:04:89:22:cc:f2:78:ef: 0b:e0:92:c5:a3:df:b7:00:7a:d5:24:7f:f4:2a:26:0b:e6:27: 29:f9:78:1e:ec:f6:f8:53:c3:ae:ed:6a:2a:85:e2:d2:f1:99: 04:f5:f5:df:6f:eb:d5:ec:1e:90:ad:09:55:9a:b3:99:ea:60: 9e:ab:6b:4c:2d:1d:e2:30:60:10:b4:93:15:b3:96:b7:5e:34: 0a:18:9e:a8:28:06:f8:30:80:27:37:18:be:72:ba:10:ee:49: b2:3c:d1:e5:3d:c2:19:71:03:79:5a:4d:56:05:76:16:9a:64: 0e:c8:59:26:5c:9c:cd:75:79:ef:54:c8:1d:be:63:e1:1e:ee: e9:b7:64:08:9c:96:48:0f:e3:e6:57:47:03:31:2f:b4:8b:80: fd:e8:e0:07:38:28:17:e7:e4:d7:22:63:fa:d1:d3:ee:ae:11: 08:bf:99:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsMNEDY6EO8HfkjwTtOfwL5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMTI0NzYyNGEzMDA1YzZmY2Y2NjEyYmFjOTljYWIwNGM2 MDEyNmEwHhcNMjUxMjExMDY1ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTUwYjBmMDNjOGE5MGQ1MjIxN2YyMzllYjU2ODczOWE4ODFmYjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZKJPHZiwkXfeO0EXwGL3qEkvY32 4CJpdmSGpw8AVTmp+NEKPfsebQ1dYX+j2xG/eOs/5rm9r/x2a0pDi9zK0IQtHyZx AyAMR1WXv9MIsdelOJHCa1vOg5fKpNcmxqjjI0nDLDDNZZWMsCY11lwDioc7l9uy +8d1Ux+MT4yZR47hAzhgt/zUzINLOjJgTJiKJIG4JKwP5JR0hoZWADyQQM/N+Cf8 t9SWpxb0evP2rBr9WgZ+POmWmsj01kU2JxTvf9hgwkEyl3RJ9Ga483htW4pegXOB LcVPZerYE0jhKporqPptgzzhOzTk85UQHcUEF/BCBcd/k4r7CKxtCbl0RwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAFQsPA8ipDVIhfyOetWhzmogfskMB8GA1UdIwQY MBaAFDwSR2JKMAXG/PZhK6yZyrBMYBJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEJKSFlrb3dCY2I4OW1FcnJKbktzRXhnRW1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wMzYzZjAtZWMwZC00OGE2LTljZWIt ZThiZDJkYmE5N2FiLzEvQVZDdzhEeUtrTlVpRl9JNTYxYUhPYWlCLXlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8wMzYzZjAtZWMwZC00OGE2LTljZWItZThiZDJkYmE5N2Fi LzEvUEJKSFlrb3dCY2I4OW1FcnJKbktzRXhnRW1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw/LEMA0G CSqGSIb3DQEBCwUAA4IBAQCC88FMj0kI/joURhdw5DDeWu0GnTB/1DcLOigWyLMO M7SlWDEVBjlGJkvghCLZT3QEYm/nPSkHptGtL4nx4Qwg0Bgw8v5BkSqibWqNtanW /P8ehQSJIszyeO8L4JLFo9+3AHrVJH/0KiYL5icp+Xge7Pb4U8Ou7WoqheLS8ZkE 9fXfb+vV7B6QrQlVmrOZ6mCeq2tMLR3iMGAQtJMVs5a3XjQKGJ6oKAb4MIAnNxi+ croQ7kmyPNHlPcIZcQN5Wk1WBXYWmmQOyFkmXJzNdXnvVMgdvmPhHu7pt2QInJZI D+PmV0cDMS+0i4D96OAHOCgX5+TXImP60dPurhEIv5lu -----END CERTIFICATE-----Generated at Sun Dec 14 11:44:40 2025 by rpki-client