This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/4UiXhtETLKTMkHz3S-uQaXznz_E.roa File: 4UiXhtETLKTMkHz3S-uQaXznz_E.roa (raw, json) Hash identifier: gnGy/YUjs4JsCA+d2xBhiOFhMv2kiG5pO4relezItQI= Subject key identifier: E1:48:97:86:D1:13:2C:A4:CC:90:7C:F7:4B:EB:90:69:7C:E7:CF:F1 Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019ADE2BDFC8565F65F9E3722B91FEABB18F Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/4UiXhtETLKTMkHz3S-uQaXznz_E.roa Signing time: Tue 02 Dec 2025 08:26:48 +0000 ROA not before: Tue 02 Dec 2025 08:26:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 83.137.153.0/24 maxlen: 24 88.209.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 20:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:2b:df:c8:56:5f:65:f9:e3:72:2b:91:fe:ab:b1:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Dec 2 08:26:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e1489786d1132ca4cc907cf74beb90697ce7cff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:16:38:6b:00:79:20:b6:10:43:3a:0b:41:89: 8c:9b:71:fb:9d:10:b6:4d:2f:be:ab:d1:8b:f4:ea: e9:5f:20:7d:1d:a5:03:97:55:7d:ec:49:97:34:ea: 9f:c9:28:a3:e9:b2:66:43:47:f3:1f:0b:50:43:9b: c6:d6:10:65:90:e3:05:a6:f2:51:f3:b6:a8:41:fd: f7:6e:0b:27:8a:16:10:a9:cc:06:00:7a:d6:b4:1f: a3:6e:f7:ca:45:6a:04:f4:fc:44:60:34:26:c8:93: 6f:cf:26:d9:f7:4d:0c:d0:60:da:e4:6d:87:3a:45: 4f:21:a3:1a:cb:bd:55:55:10:d5:f9:98:95:1a:c7: f4:a7:e0:5d:02:7c:95:d2:d2:47:4d:b9:dc:77:73: f5:86:1e:7e:7e:b6:63:1c:36:7e:d8:91:89:61:e0: d3:1c:fd:c0:6f:f3:52:fb:15:a5:ec:fd:98:fc:58: d2:63:df:ec:c5:56:b6:d8:82:d3:b3:e5:d1:d8:43: 36:9b:c8:dc:9a:94:7c:e4:a7:8f:e6:d4:e7:8a:96: 79:04:d6:e9:bf:34:9d:ae:68:ad:2a:8f:bf:4f:1d: fb:f5:66:c5:2a:b5:08:6f:9e:a2:ab:26:7f:29:3c: 8a:10:81:31:e0:c1:8f:a7:ce:34:05:75:07:37:f1: 75:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:48:97:86:D1:13:2C:A4:CC:90:7C:F7:4B:EB:90:69:7C:E7:CF:F1 X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/4UiXhtETLKTMkHz3S-uQaXznz_E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.137.153.0/24 88.209.209.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:3b:e9:d2:25:9e:17:4f:35:43:66:d1:64:d4:b6:9e:77:bc: 82:f8:91:84:ca:85:00:d0:eb:07:03:b6:17:0b:9f:7d:f2:ba: 48:36:b8:5a:73:f9:5b:fa:82:9c:a7:7f:5e:c1:30:56:64:3a: 15:f5:18:0a:90:fd:ca:d8:61:e7:2c:66:74:b1:5f:7a:b0:28: 29:be:23:d3:cc:ea:ff:1b:65:bb:ec:1b:22:34:e3:b9:3c:d4: 9e:b9:f8:28:a2:cb:7f:14:85:8b:89:ae:67:ca:fe:e0:b9:6b: fe:34:88:15:80:df:d4:56:55:ee:54:5a:35:79:61:b7:75:a4: 00:e8:06:7a:d9:14:8f:e5:1d:95:fe:9c:07:f6:df:e0:db:6b: 21:0f:5f:59:7a:15:66:80:b1:11:75:e1:74:48:7b:e5:2b:f5: 47:fb:7a:8a:b1:26:57:a3:c4:71:87:a3:b3:d4:a7:7e:b3:be: 1f:97:a3:c0:5d:56:9f:90:06:1e:91:02:b1:08:86:73:da:2c: 6f:34:35:cd:a1:38:01:c4:24:c4:00:21:80:e9:c2:ec:45:8b: 67:b1:a9:ae:d9:47:e5:2e:a1:43:ab:4e:b4:c9:56:14:5b:20: 60:6d:00:f3:49:7b:aa:09:a4:da:e2:3b:d6:95:21:da:ef:68: e6:d5:c8:77 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZreK9/IVl9l+eNyK5H+q7GPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjUxMjAyMDgyNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTQ4OTc4NmQxMTMyY2E0Y2M5MDdjZjc0YmViOTA2OTdjZTdjZmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxY4awB5ILYQQzoLQYmMm3H7nRC2 TS++q9GL9OrpXyB9HaUDl1V97EmXNOqfySij6bJmQ0fzHwtQQ5vG1hBlkOMFpvJR 87aoQf33bgsnihYQqcwGAHrWtB+jbvfKRWoE9PxEYDQmyJNvzybZ900M0GDa5G2H OkVPIaMay71VVRDV+ZiVGsf0p+BdAnyV0tJHTbncd3P1hh5+frZjHDZ+2JGJYeDT HP3Ab/NS+xWl7P2Y/FjSY9/sxVa22ILTs+XR2EM2m8jcmpR85KeP5tTnipZ5BNbp vzSdrmitKo+/Tx379WbFKrUIb56iqyZ/KTyKEIEx4MGPp840BXUHN/F1ZwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOFIl4bREyykzJB890vrkGl858/xMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvNFVpWGh0RVRMS1RNa0h6M1MtdVFhWHpuel9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAU4mZAwQA WNHRMA0GCSqGSIb3DQEBCwUAA4IBAQCOO+nSJZ4XTzVDZtFk1Laed7yC+JGEyoUA 0OsHA7YXC5998rpINrhac/lb+oKcp39ewTBWZDoV9RgKkP3K2GHnLGZ0sV96sCgp viPTzOr/G2W77BsiNOO5PNSeufgoost/FIWLia5nyv7guWv+NIgVgN/UVlXuVFo1 eWG3daQA6AZ62RSP5R2V/pwH9t/g22shD19ZehVmgLERdeF0SHvlK/VH+3qKsSZX o8Rxh6Oz1Kd+s74fl6PAXVafkAYekQKxCIZz2ixvNDXNoTgBxCTEACGA6cLsRYtn samu2UflLqFDq060yVYUWyBgbQDzSXuqCaTa4jvWlSHa72jm1ch3 -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:29 2025 by rpki-client