This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/S3Xg7QoYCUC07S3hR4Bx5R9JRo4.roa File: S3Xg7QoYCUC07S3hR4Bx5R9JRo4.roa (raw, json) Hash identifier: vxoxYbeFCQbgX/TU8Y4mFj1Y59bTFRY+JF3DT75ZxG4= Subject key identifier: 4B:75:E0:ED:0A:18:09:40:B4:ED:2D:E1:47:80:71:E5:1F:49:46:8E Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Certificate serial: 019A5FB214F9A63C76E7D6B2A7D51A42C485 Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/S3Xg7QoYCUC07S3hR4Bx5R9JRo4.roa Signing time: Fri 07 Nov 2025 19:01:37 +0000 ROA not before: Fri 07 Nov 2025 19:01:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 1097 IP address blocks: 109.205.193.0/24 maxlen: 24 158.94.220.0/24 maxlen: 24 158.94.221.0/24 maxlen: 24 2a01:fb01::/32 maxlen: 32 2a01:fb02:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5f:b2:14:f9:a6:3c:76:e7:d6:b2:a7:d5:1a:42:c4:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Validity Not Before: Nov 7 19:01:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4b75e0ed0a180940b4ed2de1478071e51f49468e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b5:5b:48:04:dc:a7:09:42:f9:43:b1:0d:97: 12:84:c6:ad:78:62:93:18:26:03:97:1c:d8:42:e5: 89:19:0c:ce:45:62:db:b6:b0:aa:9f:e1:93:3d:af: 3d:2a:cd:fb:99:a0:e8:7a:da:ff:4e:07:ca:b8:04: 1a:57:5a:41:2c:ae:6f:0d:75:e2:46:fc:08:20:10: 17:f8:8e:a2:2b:5a:94:9f:3b:b8:7a:94:43:4d:bb: a0:dc:e0:c9:e0:7b:c2:04:2e:09:5e:ca:99:1b:03: 11:7a:ba:7c:e7:af:4b:ab:48:39:86:0c:c3:2e:20: bf:06:e5:1f:ba:47:c5:d6:02:cd:39:23:4d:5c:fc: 4e:de:28:4d:38:82:96:99:a6:48:2c:c2:ea:20:ed: 7e:ca:33:70:f8:6b:88:f0:e7:7d:15:27:5d:71:68: 8e:b0:1b:e9:1a:01:5c:ae:46:45:f9:be:ef:84:40: b6:d4:0b:08:90:c2:29:b3:41:31:a3:b2:0b:d3:95: 6b:11:27:8e:5b:1b:65:c0:cc:a3:cb:ee:bb:da:d0: f8:7e:4c:dd:ec:15:db:10:be:5e:0f:c7:16:dc:06: ba:0b:b0:dc:ee:85:1c:88:52:3b:d3:64:f4:71:64: 42:80:c6:aa:40:09:cf:f6:77:70:f3:ae:21:1c:98: 4d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:75:E0:ED:0A:18:09:40:B4:ED:2D:E1:47:80:71:E5:1F:49:46:8E X509v3 Authority Key Identifier: keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/S3Xg7QoYCUC07S3hR4Bx5R9JRo4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.193.0/24 158.94.220.0/23 IPv6: 2a01:fb01::/32 2a01:fb02:c000::/34 Signature Algorithm: sha256WithRSAEncryption 55:aa:21:44:ef:44:1f:ee:6a:0a:05:32:6e:bd:46:a1:e7:54: 62:13:47:45:f7:07:73:3c:1e:41:d8:e0:c6:a7:5f:dd:2b:c8: 06:f4:a5:33:58:91:be:c7:43:f9:27:dc:3a:74:5a:c9:53:0f: a1:21:55:67:49:ad:29:c7:23:8c:0f:10:c2:cd:8d:0e:03:5a: 48:41:ca:80:80:86:ff:84:49:be:f2:ce:65:26:6b:9d:b5:4a: fa:2e:9d:24:9f:84:e6:dc:34:62:ac:16:96:fb:69:96:32:93: 6f:d1:c1:5a:e0:15:46:d1:72:f6:24:78:55:89:2c:21:73:d7: eb:20:ee:f5:be:00:dc:24:4e:eb:9a:57:ba:29:8f:1f:9d:c8: 92:bd:a3:24:e0:b9:99:b4:8b:13:cf:2a:f1:19:06:25:ff:63: 1b:bf:9f:72:68:3c:1a:7d:18:a5:bc:df:ec:7b:da:0b:0a:1a: 03:fb:72:e3:f5:70:30:92:57:6d:f2:78:ca:50:4c:ce:85:1e: 2c:db:3e:db:33:0a:58:87:0d:d1:4e:7c:f8:f4:32:37:33:53: 62:1f:54:85:d8:5b:db:30:fe:53:75:b8:73:52:25:11:3e:88: 20:25:c1:92:d3:2c:af:26:f6:cb:c5:03:f5:fa:03:e6:41:f2: 41:64:c7:ff -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZpfshT5pjx259ayp9UaQsSFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjQ1ODFlNDM2ODgyNWQ1ZTEzZjRmMmEwZDZmZjhlNDg0 Yzk1ZTYwHhcNMjUxMTA3MTkwMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Yjc1ZTBlZDBhMTgwOTQwYjRlZDJkZTE0NzgwNzFlNTFmNDk0NjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7VbSATcpwlC+UOxDZcShMateGKT GCYDlxzYQuWJGQzORWLbtrCqn+GTPa89Ks37maDoetr/TgfKuAQaV1pBLK5vDXXi RvwIIBAX+I6iK1qUnzu4epRDTbug3ODJ4HvCBC4JXsqZGwMRerp8569Lq0g5hgzD LiC/BuUfukfF1gLNOSNNXPxO3ihNOIKWmaZILMLqIO1+yjNw+GuI8Od9FSddcWiO sBvpGgFcrkZF+b7vhEC21AsIkMIps0Exo7IL05VrESeOWxtlwMyjy+672tD4fkzd 7BXbEL5eD8cW3Aa6C7Dc7oUciFI702T0cWRCgMaqQAnP9ndw864hHJhNHwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFEt14O0KGAlAtO0t4UeAceUfSUaOMB8GA1UdIwQY MBaAFPMkWB5DaIJdXhP08qDW/45ITJXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMt NmUyZDk3Y2ExNWZmLzEvUzNYZzdRb1lDVUMwN1MzaFI0Qng1UjlKUm80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMtNmUyZDk3Y2ExNWZm LzEvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzASBAIAATAMAwQAbc3BAwQB nl7cMBUEAgACMA8DBQAqAfsBAwYGKgH7AsAwDQYJKoZIhvcNAQELBQADggEBAFWq IUTvRB/uagoFMm69RqHnVGITR0X3B3M8HkHY4ManX90ryAb0pTNYkb7HQ/kn3Dp0 WslTD6EhVWdJrSnHI4wPEMLNjQ4DWkhByoCAhv+ESb7yzmUma521SvounSSfhObc NGKsFpb7aZYyk2/RwVrgFUbRcvYkeFWJLCFz1+sg7vW+ANwkTuuaV7opjx+dyJK9 oyTguZm0ixPPKvEZBiX/Yxu/n3JoPBp9GKW83+x72gsKGgP7cuP1cDCSV23yeMpQ TM6FHizbPtszCliHDdFOfPj0MjczU2IfVIXYW9sw/lN1uHNSJRE+iCAlwZLTLK8m 9svFA/X6A+ZB8kFkx/8= -----END CERTIFICATE-----Generated at Sat Dec 6 04:12:31 2025 by rpki-client