This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/D7E8-V_NhqNcLw4C0IXh5yVDWzI.roa File: D7E8-V_NhqNcLw4C0IXh5yVDWzI.roa (raw, json) Hash identifier: 6NJEceYzZIckxR/QluWLNHn9Z1CWXM+u1ednoRQ60/Y= Subject key identifier: 0F:B1:3C:F9:5F:CD:86:A3:5C:2F:0E:02:D0:85:E1:E7:25:43:5B:32 Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 019A693AE241B3DB0499F97613F7284772A5 Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/D7E8-V_NhqNcLw4C0IXh5yVDWzI.roa Signing time: Sun 09 Nov 2025 15:27:37 +0000 ROA not before: Sun 09 Nov 2025 15:27:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210006 IP address blocks: 93.152.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:69:3a:e2:41:b3:db:04:99:f9:76:13:f7:28:47:72:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Nov 9 15:27:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0fb13cf95fcd86a35c2f0e02d085e1e725435b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:9d:e1:25:07:b6:cd:3b:5c:52:4e:ac:81:41: d4:de:71:b7:3f:fc:bb:38:0b:72:ac:06:11:0d:5d: b5:c4:f4:80:64:38:43:c0:38:48:79:23:b2:8e:10: ba:ff:47:69:8a:61:90:dd:53:1d:4f:01:67:b9:df: e0:c5:a5:a4:5a:6c:aa:ab:d5:41:c8:78:34:ba:e9: aa:56:10:c7:18:40:dd:7f:81:39:4f:91:98:4e:e6: 63:38:dd:44:63:ee:a3:cb:3e:87:35:71:e6:30:5c: 10:93:40:21:ea:90:53:dc:1f:de:b4:44:c2:0a:10: 22:f8:4c:8d:6a:79:3e:39:f8:c2:38:3c:bb:c7:04: 33:32:68:9a:5b:a3:c7:d0:4a:fb:b3:1d:fa:8f:28: 93:a0:c2:0a:85:13:69:96:31:bc:7d:92:fc:87:a3: 71:63:0e:56:54:69:70:18:58:9f:ff:53:e4:96:d9: b3:83:ae:0f:47:00:36:3e:3d:1c:a5:e6:6e:79:65: bc:31:fc:74:8f:d0:75:71:ff:3b:e4:a8:c6:8d:75: 0d:80:d0:b8:5e:2e:7d:07:83:83:90:7f:27:6e:62: 5a:0a:78:2d:0e:3b:78:4d:3c:85:1e:6f:4d:f9:6b: 84:ea:51:b9:3b:ec:6c:f1:1a:d9:89:5a:3a:a9:6f: 74:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B1:3C:F9:5F:CD:86:A3:5C:2F:0E:02:D0:85:E1:E7:25:43:5B:32 X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/D7E8-V_NhqNcLw4C0IXh5yVDWzI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.152.230.0/24 Signature Algorithm: sha256WithRSAEncryption 17:97:5b:81:1c:78:e6:1e:fc:e2:ca:11:90:2c:d8:4b:ac:a0: 30:52:17:2d:53:48:87:23:9e:cc:14:49:e2:6d:9d:59:07:5a: cc:12:d8:b8:fc:f7:56:8a:35:ea:de:3a:c1:e1:41:14:9f:71: fc:ef:aa:4b:11:50:a8:27:5c:d3:18:f8:ac:58:d3:ea:9e:12: 14:d1:52:60:e3:0c:fa:eb:c8:9e:4b:b8:75:a3:31:dd:bf:f9: 09:c9:c4:32:db:b1:60:53:cb:ab:d7:28:96:f6:1f:46:84:a5: 32:52:9f:f7:8f:79:54:fa:8c:e7:a0:67:11:8a:6c:94:18:50: db:97:8d:70:49:2e:5e:70:62:ca:0c:3d:96:3b:49:29:6a:70: b7:a5:60:00:fe:5c:82:ae:84:3b:de:ab:5b:ec:2d:75:6b:63: fb:3b:a5:c4:13:9c:5b:ab:21:d8:63:b5:c9:2e:ed:04:26:ff: 92:f3:df:c9:d7:e6:93:4f:c5:c9:59:1c:45:3d:2c:4a:2e:42: 86:51:95:77:18:7f:d4:c9:46:29:fe:80:30:02:ac:68:68:62: 88:38:a0:8c:9f:80:f4:00:d4:25:e9:f5:8e:72:6f:30:b0:6d: d8:e1:d2:ec:d5:d6:6c:13:41:6a:e3:a3:14:ae:a5:92:05:3c: e1:38:09:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZppOuJBs9sEmfl2E/coR3KlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjUxMTA5MTUyNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmIxM2NmOTVmY2Q4NmEzNWMyZjBlMDJkMDg1ZTFlNzI1NDM1YjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+53hJQe2zTtcUk6sgUHU3nG3P/y7 OAtyrAYRDV21xPSAZDhDwDhIeSOyjhC6/0dpimGQ3VMdTwFnud/gxaWkWmyqq9VB yHg0uumqVhDHGEDdf4E5T5GYTuZjON1EY+6jyz6HNXHmMFwQk0Ah6pBT3B/etETC ChAi+EyNank+OfjCODy7xwQzMmiaW6PH0Er7sx36jyiToMIKhRNpljG8fZL8h6Nx Yw5WVGlwGFif/1Pkltmzg64PRwA2Pj0cpeZueWW8Mfx0j9B1cf875KjGjXUNgNC4 Xi59B4ODkH8nbmJaCngtDjt4TTyFHm9N+WuE6lG5O+xs8RrZiVo6qW90kwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA+xPPlfzYajXC8OAtCF4eclQ1syMB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvRDdFOC1WX05ocU5jTHc0QzBJWGg1eVZEV3pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXZjmMA0G CSqGSIb3DQEBCwUAA4IBAQAXl1uBHHjmHvziyhGQLNhLrKAwUhctU0iHI57MFEni bZ1ZB1rMEti4/PdWijXq3jrB4UEUn3H876pLEVCoJ1zTGPisWNPqnhIU0VJg4wz6 68ieS7h1ozHdv/kJycQy27FgU8ur1yiW9h9GhKUyUp/3j3lU+oznoGcRimyUGFDb l41wSS5ecGLKDD2WO0kpanC3pWAA/lyCroQ73qtb7C11a2P7O6XEE5xbqyHYY7XJ Lu0EJv+S89/J1+aTT8XJWRxFPSxKLkKGUZV3GH/UyUYp/oAwAqxoaGKIOKCMn4D0 ANQl6fWOcm8wsG3Y4dLs1dZsE0Fq46MUrqWSBTzhOAmS -----END CERTIFICATE-----Generated at Sat Dec 6 20:12:24 2025 by rpki-client