This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/4M-N5xlv2y6s1CK-eYBew9cPD5o.roa File: 4M-N5xlv2y6s1CK-eYBew9cPD5o.roa (raw, json) Hash identifier: HqqHwynkdmRe9dzstw9O0nGymglErcXW49QTo0giUNA= Subject key identifier: E0:CF:8D:E7:19:6F:DB:2E:AC:D4:22:BE:79:80:5E:C3:D7:0F:0F:9A Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b Certificate serial: 019A91E46CB376F5152DCF6BB8F276C0D7C8 Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/4M-N5xlv2y6s1CK-eYBew9cPD5o.roa Signing time: Mon 17 Nov 2025 12:57:37 +0000 ROA not before: Mon 17 Nov 2025 12:57:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 63199 IP address blocks: 194.31.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 02:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:e4:6c:b3:76:f5:15:2d:cf:6b:b8:f2:76:c0:d7:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b Validity Not Before: Nov 17 12:57:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e0cf8de7196fdb2eacd422be79805ec3d70f0f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a0:da:61:2c:77:4a:7c:5e:95:fb:a9:46:4e: bd:d6:49:d7:06:12:41:ea:c7:bd:a7:41:96:bc:c3: d2:e9:bc:1e:f6:91:de:88:81:58:59:8e:41:4c:3a: 60:7c:ef:19:39:01:58:d5:40:68:e3:fc:98:7c:7b: a1:e0:b2:4e:65:ee:70:b0:e2:7d:16:f7:76:9d:57: 75:2c:f2:e5:bb:3f:87:71:34:c7:dd:0f:d2:df:3a: ae:ec:04:0f:b4:12:8f:ca:5d:ae:86:bc:c5:27:c6: 68:65:a3:12:5d:4b:07:60:71:74:0e:3f:fb:5d:85: 8f:db:ce:af:ed:a5:d9:22:10:d3:53:e1:92:53:bc: 5d:e1:5f:8f:26:d6:3c:be:c9:12:e5:03:da:76:71: 8a:1e:5d:8b:a6:a7:46:d3:a5:ba:95:4a:2a:c6:24: 0c:ee:7a:e5:11:36:d7:e8:e0:9c:37:e3:8a:69:3e: 1e:8b:e9:58:22:7e:d5:dc:12:3c:99:19:c3:e3:24: b5:e4:67:81:52:56:ac:fd:15:1b:34:17:ca:79:b7: 04:2e:ef:76:3c:eb:65:ea:2f:3f:eb:27:d0:a5:62: bf:dc:52:fc:7d:cc:f3:6b:9b:8e:36:f2:59:5d:a4: d7:5d:76:ca:ec:cf:92:3d:35:de:5d:26:31:0e:b5: 42:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:CF:8D:E7:19:6F:DB:2E:AC:D4:22:BE:79:80:5E:C3:D7:0F:0F:9A X509v3 Authority Key Identifier: keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/4M-N5xlv2y6s1CK-eYBew9cPD5o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.167.0/24 Signature Algorithm: sha256WithRSAEncryption 83:e6:ff:49:a4:7d:0d:de:34:43:08:7e:e4:6f:af:6f:23:0f: 55:61:50:d0:d2:3f:ee:c1:01:5b:89:9d:f0:de:7e:8d:52:7d: 5b:d1:e5:ea:c4:9a:47:e5:3c:e8:84:17:c3:84:71:6d:a7:07: 7e:0c:fc:34:b2:5e:8f:8d:e3:81:2a:5e:be:4a:95:03:cf:7f: ea:37:53:61:9c:a2:9b:fb:63:13:d6:60:e9:e1:05:e2:96:ad: 65:9e:a1:7a:18:bc:63:40:0d:e5:70:f1:7d:be:4f:0f:0b:48: c8:b5:05:24:53:f7:b5:7e:16:d1:fa:f4:95:d5:ee:ed:90:9a: 59:22:8d:64:8f:93:4e:7e:5c:3e:cb:ad:d1:69:77:9e:2a:e0: 77:ac:a7:90:4c:7c:69:96:af:72:10:9e:93:89:af:7c:20:78: 18:bb:1b:1d:86:e2:b5:71:2f:45:98:11:94:64:c6:bc:aa:c6: d2:c7:cd:0c:9f:8c:23:48:ba:64:72:ec:ba:e7:54:45:2f:6c: 5a:8a:ad:c5:c4:c6:c4:82:35:a3:c0:f1:b7:31:f0:b3:59:66: d7:9f:26:23:f8:14:38:33:0a:17:c1:48:91:73:ec:6b:24:3c: 8f:1e:89:5c:e9:04:2b:14:8b:ad:6f:fe:1a:dd:32:0d:09:94: e4:f6:83:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqR5GyzdvUVLc9ruPJ2wNfIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh YTExMGIwHhcNMjUxMTE3MTI1NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGNmOGRlNzE5NmZkYjJlYWNkNDIyYmU3OTgwNWVjM2Q3MGYwZjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aDaYSx3SnxelfupRk691knXBhJB 6se9p0GWvMPS6bwe9pHeiIFYWY5BTDpgfO8ZOQFY1UBo4/yYfHuh4LJOZe5wsOJ9 Fvd2nVd1LPLluz+HcTTH3Q/S3zqu7AQPtBKPyl2uhrzFJ8ZoZaMSXUsHYHF0Dj/7 XYWP286v7aXZIhDTU+GSU7xd4V+PJtY8vskS5QPadnGKHl2LpqdG06W6lUoqxiQM 7nrlETbX6OCcN+OKaT4ei+lYIn7V3BI8mRnD4yS15GeBUlas/RUbNBfKebcELu92 POtl6i8/6yfQpWK/3FL8fczza5uONvJZXaTXXXbK7M+SPTXeXSYxDrVCDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFODPjecZb9surNQivnmAXsPXDw+aMB8GA1UdIwQY MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt NjI0ZjgzNjgyMTY5LzEvNE0tTjV4bHYyeTZzMUNLLWVZQmV3OWNQRDVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5 LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh+nMA0G CSqGSIb3DQEBCwUAA4IBAQCD5v9JpH0N3jRDCH7kb69vIw9VYVDQ0j/uwQFbiZ3w 3n6NUn1b0eXqxJpH5TzohBfDhHFtpwd+DPw0sl6PjeOBKl6+SpUDz3/qN1NhnKKb +2MT1mDp4QXilq1lnqF6GLxjQA3lcPF9vk8PC0jItQUkU/e1fhbR+vSV1e7tkJpZ Io1kj5NOflw+y63RaXeeKuB3rKeQTHxplq9yEJ6Tia98IHgYuxsdhuK1cS9FmBGU ZMa8qsbSx80Mn4wjSLpkcuy651RFL2xaiq3FxMbEgjWjwPG3MfCzWWbXnyYj+BQ4 MwoXwUiRc+xrJDyPHolc6QQrFIutb/4a3TINCZTk9oPE -----END CERTIFICATE-----Generated at Fri Dec 5 12:25:41 2025 by rpki-client