This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Sm6GHy1cLVbGh1P4m6U3nGB2lyA.roa File: Sm6GHy1cLVbGh1P4m6U3nGB2lyA.roa (raw, json) Hash identifier: QwO7fMLRMXItWAabX8Un1PgZbpk87z6NXn3kLsvDTxs= Subject key identifier: 4A:6E:86:1F:2D:5C:2D:56:C6:87:53:F8:9B:A5:37:9C:60:76:97:20 Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 019A5F7029AF45A4A1B0B2B02AA47D50CFEC Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Sm6GHy1cLVbGh1P4m6U3nGB2lyA.roa Signing time: Fri 07 Nov 2025 17:49:37 +0000 ROA not before: Fri 07 Nov 2025 17:49:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9009 IP address blocks: 93.152.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 07:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5f:70:29:af:45:a4:a1:b0:b2:b0:2a:a4:7d:50:cf:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Nov 7 17:49:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4a6e861f2d5c2d56c68753f89ba5379c60769720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5f:fa:b0:36:d8:bb:2a:46:85:47:0a:74:b1: 61:fd:4f:f6:ef:8b:9e:9e:8f:de:db:3d:6f:93:6d: 17:af:c9:db:81:3a:2a:d2:39:b2:53:c7:61:f4:c6: 8a:8d:f1:67:0a:44:a1:c2:58:c2:b8:1b:26:39:ce: 89:b8:ea:96:60:25:1b:d1:ca:e1:ca:5d:a6:c4:48: b5:56:c6:df:74:11:c2:39:0a:eb:6c:f3:b1:cd:99: 13:37:9c:a5:a8:ce:d2:14:f6:08:0c:0b:5b:44:21: a6:e7:6a:cc:22:b7:56:3d:51:17:4c:b4:c0:aa:24: 26:57:70:43:af:67:6d:8d:00:44:90:7c:22:7c:4f: 4a:7e:ad:03:a2:51:26:93:13:f9:ca:1d:51:d7:19: 61:ae:2a:6b:34:5d:57:e8:88:9e:f1:55:19:07:4c: 5b:ed:1f:b5:fb:9e:76:40:e6:8c:20:11:d5:bd:77: 7f:87:f8:a3:61:39:b4:cb:ea:d2:bf:15:ef:b7:99: 73:72:03:d8:a4:26:a9:7b:ec:42:f7:dc:95:29:84: 74:6f:f9:05:a5:d2:11:c2:3b:44:d8:88:94:cb:4f: f3:3f:3d:57:64:15:cf:59:2d:52:94:af:76:4f:22: 4c:e7:49:30:e1:c6:0a:33:29:4e:2e:20:0e:95:77: 71:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6E:86:1F:2D:5C:2D:56:C6:87:53:F8:9B:A5:37:9C:60:76:97:20 X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Sm6GHy1cLVbGh1P4m6U3nGB2lyA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.152.225.0/24 Signature Algorithm: sha256WithRSAEncryption 67:57:15:75:72:58:82:80:7d:96:f0:bd:74:ce:01:f6:59:5b: 5a:65:93:8b:fd:21:f7:c7:f6:96:77:a4:b4:5a:2d:48:8d:4a: 43:1d:0b:1e:41:d6:d1:34:49:a2:ad:3f:83:86:68:72:13:56: 27:3a:79:c1:c4:ff:0c:e0:2d:42:be:79:88:ac:57:91:b6:48: 57:8b:77:f3:10:0a:dd:af:ac:0c:e4:6b:5e:af:62:7d:56:e9: 4b:46:9a:6f:7a:47:ea:a7:75:f5:f3:49:fb:0c:6d:80:4a:29: dc:32:3b:30:b1:6a:c5:31:6a:84:66:34:56:e1:a6:76:06:9f: 5b:49:f2:e8:46:08:ae:f4:fe:a2:79:b2:a6:5b:58:76:62:3d: a7:1f:b6:13:70:bc:11:3b:07:24:31:e0:e5:a9:3e:41:9a:31: 01:19:0e:71:e8:c6:07:e2:ce:3f:c4:6f:67:53:fb:7e:06:b3: 46:6d:6a:35:6e:50:ac:77:4f:99:11:7d:79:7d:f8:20:3e:6a: af:f9:d2:7f:e1:77:34:05:c9:84:5e:cb:e5:cd:cd:8f:de:a0: 17:f8:eb:d0:35:2d:97:c9:08:ea:00:17:e5:83:e8:6b:a2:dc: c7:37:b3:a7:d6:1c:e9:0c:c8:ac:0d:2a:1a:ef:a5:81:9f:28: 84:93:b8:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpfcCmvRaShsLKwKqR9UM/sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjUxMTA3MTc0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTZlODYxZjJkNWMyZDU2YzY4NzUzZjg5YmE1Mzc5YzYwNzY5NzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF/6sDbYuypGhUcKdLFh/U/274ue no/e2z1vk20Xr8nbgToq0jmyU8dh9MaKjfFnCkShwljCuBsmOc6JuOqWYCUb0crh yl2mxEi1VsbfdBHCOQrrbPOxzZkTN5ylqM7SFPYIDAtbRCGm52rMIrdWPVEXTLTA qiQmV3BDr2dtjQBEkHwifE9Kfq0DolEmkxP5yh1R1xlhriprNF1X6Iie8VUZB0xb 7R+1+552QOaMIBHVvXd/h/ijYTm0y+rSvxXvt5lzcgPYpCape+xC99yVKYR0b/kF pdIRwjtE2IiUy0/zPz1XZBXPWS1SlK92TyJM50kw4cYKMylOLiAOlXdxowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEpuhh8tXC1WxodT+JulN5xgdpcgMB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvU202R0h5MWNMVmJHaDFQNG02VTNuR0IybHlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXZjhMA0G CSqGSIb3DQEBCwUAA4IBAQBnVxV1cliCgH2W8L10zgH2WVtaZZOL/SH3x/aWd6S0 Wi1IjUpDHQseQdbRNEmirT+DhmhyE1YnOnnBxP8M4C1CvnmIrFeRtkhXi3fzEArd r6wM5Gter2J9VulLRppvekfqp3X180n7DG2ASincMjswsWrFMWqEZjRW4aZ2Bp9b SfLoRgiu9P6iebKmW1h2Yj2nH7YTcLwROwckMeDlqT5BmjEBGQ5x6MYH4s4/xG9n U/t+BrNGbWo1blCsd0+ZEX15ffggPmqv+dJ/4Xc0BcmEXsvlzc2P3qAX+OvQNS2X yQjqABflg+hrotzHN7On1hzpDMisDSoa76WBnyiEk7gQ -----END CERTIFICATE-----Generated at Wed Dec 3 11:45:28 2025 by rpki-client