This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/StnpDh7Q70g-LhXiSlUlAp6MPm4.roa File: StnpDh7Q70g-LhXiSlUlAp6MPm4.roa (raw, json) Hash identifier: HSQmuk9zRrS2R4niYo07heh1SjfTzoUwtNeyxw5xGdg= Subject key identifier: 4A:D9:E9:0E:1E:D0:EF:48:3E:2E:15:E2:4A:55:25:02:9E:8C:3E:6E Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B0CED32B5317516B59E0D6D7FF0C15AA7 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/StnpDh7Q70g-LhXiSlUlAp6MPm4.roa Signing time: Thu 11 Dec 2025 10:20:30 +0000 ROA not before: Thu 11 Dec 2025 10:20:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55201 IP address blocks: 194.5.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 04:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:ed:32:b5:31:75:16:b5:9e:0d:6d:7f:f0:c1:5a:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Dec 11 10:20:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4ad9e90e1ed0ef483e2e15e24a5525029e8c3e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ee:9e:f8:74:70:bb:59:df:7e:bf:2e:16:c8: 4d:9f:b2:63:cf:5d:63:1f:22:5d:dc:fa:c8:85:99: d4:ab:bd:a5:dd:08:2c:0a:5e:3c:31:10:93:8f:73: 42:a0:d4:f0:94:a1:60:26:ad:d7:a5:25:6f:3e:c7: eb:3d:3b:f5:0a:86:65:c8:40:e7:59:72:63:2f:c9: d9:96:9c:79:1c:83:a7:37:51:86:83:3e:6f:9d:00: c9:db:e8:3e:f1:7b:42:57:f0:28:44:b0:ff:20:9c: 5b:bb:00:e0:b5:86:8f:3d:5b:a7:16:15:7f:23:54: b5:9d:a8:9b:81:59:eb:0f:8a:e7:6e:f2:09:22:4f: ef:e2:ca:b4:1a:67:9a:db:73:21:2a:df:20:c5:2a: d9:71:18:ab:1a:1b:0c:e9:12:e9:1f:6e:34:43:c6: 9b:25:bb:6d:2a:9b:14:df:fc:1a:37:30:6a:be:1c: 5f:f6:19:a5:64:50:4c:0a:b6:42:86:c9:48:5b:fb: c5:28:72:4e:dd:77:37:57:4b:b5:08:b4:39:e6:a7: a2:63:a6:3a:a0:97:97:24:5e:66:cf:58:48:77:bd: 3a:a3:40:ac:e0:7a:9d:35:0c:b7:1d:9a:ad:05:a4: 3a:30:ee:7e:f5:9e:1d:b6:1d:2d:32:5b:49:83:72: 80:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D9:E9:0E:1E:D0:EF:48:3E:2E:15:E2:4A:55:25:02:9E:8C:3E:6E X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/StnpDh7Q70g-LhXiSlUlAp6MPm4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.5.64.0/24 Signature Algorithm: sha256WithRSAEncryption 62:ae:4e:c1:ab:fd:a1:92:45:7c:15:15:bf:29:5e:a1:15:7a: 3a:4d:dd:2c:97:ba:e2:4a:a4:2e:93:56:6d:85:ab:cf:94:36: 69:61:42:3d:9f:8b:f1:46:12:5e:47:7a:f2:b6:fd:c1:0d:56: 41:28:ed:56:03:b3:2d:7a:31:a9:23:ba:ed:d9:12:93:74:71: 14:6c:84:0a:d1:46:b1:ee:fc:39:09:f2:67:63:33:30:c5:73: 2e:fd:27:e7:2d:35:3e:09:5e:b7:1d:24:5c:e8:86:6d:e9:88: 99:8c:b8:36:ad:63:7f:4e:a4:97:1b:cd:77:f9:80:08:33:28: 59:29:39:27:71:34:f1:ca:93:a5:c5:7f:ea:87:e1:0f:f1:16: c2:0f:3e:b0:4a:0d:ca:09:2d:13:50:b8:f6:15:07:25:6f:8a: 9f:21:4a:48:8a:76:d0:5a:6e:a5:9b:3e:49:06:ec:fd:1f:c8: de:92:be:d6:c9:5e:d9:bc:53:53:bf:00:59:a8:eb:5c:26:b0: fc:02:e5:b8:d2:4f:eb:ae:57:d7:6e:0f:84:c1:b8:d0:6c:b3: 40:f4:37:96:4b:34:7b:68:71:53:8f:b3:03:a3:a3:69:4e:f4: 91:24:72:49:18:1d:4c:5c:bf:5c:5b:23:57:f5:fa:6b:00:43: e9:3b:c9:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsM7TK1MXUWtZ4NbX/wwVqnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjUxMjExMTAyMDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWQ5ZTkwZTFlZDBlZjQ4M2UyZTE1ZTI0YTU1MjUwMjllOGMzZTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye6e+HRwu1nffr8uFshNn7Jjz11j HyJd3PrIhZnUq72l3QgsCl48MRCTj3NCoNTwlKFgJq3XpSVvPsfrPTv1CoZlyEDn WXJjL8nZlpx5HIOnN1GGgz5vnQDJ2+g+8XtCV/AoRLD/IJxbuwDgtYaPPVunFhV/ I1S1naibgVnrD4rnbvIJIk/v4sq0Gmea23MhKt8gxSrZcRirGhsM6RLpH240Q8ab JbttKpsU3/waNzBqvhxf9hmlZFBMCrZChslIW/vFKHJO3Xc3V0u1CLQ55qeiY6Y6 oJeXJF5mz1hId706o0Cs4HqdNQy3HZqtBaQ6MO5+9Z4dth0tMltJg3KARQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFErZ6Q4e0O9IPi4V4kpVJQKejD5uMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvU3RucERoN1E3MGctTGhYaVNsVWxBcDZNUG00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgVAMA0G CSqGSIb3DQEBCwUAA4IBAQBirk7Bq/2hkkV8FRW/KV6hFXo6Td0sl7riSqQuk1Zt havPlDZpYUI9n4vxRhJeR3rytv3BDVZBKO1WA7MtejGpI7rt2RKTdHEUbIQK0Uax 7vw5CfJnYzMwxXMu/SfnLTU+CV63HSRc6IZt6YiZjLg2rWN/TqSXG813+YAIMyhZ KTkncTTxypOlxX/qh+EP8RbCDz6wSg3KCS0TULj2FQclb4qfIUpIinbQWm6lmz5J Buz9H8jekr7WyV7ZvFNTvwBZqOtcJrD8AuW40k/rrlfXbg+EwbjQbLNA9DeWSzR7 aHFTj7MDo6NpTvSRJHJJGB1MXL9cWyNX9fprAEPpO8kt -----END CERTIFICATE-----Generated at Fri Dec 12 09:46:19 2025 by rpki-client