This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/SzpKhTo6tnBhpcikMK9o1GGHtas.roa File: SzpKhTo6tnBhpcikMK9o1GGHtas.roa (raw, json) Hash identifier: RiA2Um2oFUlmkSaB0+uB5T0wiBpmXC9LVOdsy69y30U= Subject key identifier: 4B:3A:4A:85:3A:3A:B6:70:61:A5:C8:A4:30:AF:68:D4:61:87:B5:AB Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Certificate serial: 019A91A45711B6D8A7A9C2E3482F4B8809A6 Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/SzpKhTo6tnBhpcikMK9o1GGHtas.roa Signing time: Mon 17 Nov 2025 11:47:37 +0000 ROA not before: Mon 17 Nov 2025 11:47:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210312 IP address blocks: 147.189.216.0/24 maxlen: 24 147.189.217.0/24 maxlen: 24 147.189.218.0/24 maxlen: 24 147.189.219.0/24 maxlen: 24 147.189.220.0/24 maxlen: 24 147.189.221.0/24 maxlen: 24 147.189.222.0/24 maxlen: 24 147.189.223.0/24 maxlen: 24 2a0d:3dc1::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:a4:57:11:b6:d8:a7:a9:c2:e3:48:2f:4b:88:09:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Validity Not Before: Nov 17 11:47:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4b3a4a853a3ab67061a5c8a430af68d46187b5ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:28:ae:38:8c:83:64:e2:60:ee:d0:5a:6c:63: 14:88:dd:4d:7a:57:e6:2f:48:39:23:d9:e1:93:a4: 91:9f:5f:0f:89:ec:f2:40:ae:49:f2:74:8b:7f:0e: d4:9c:03:98:3b:c3:05:d2:5e:8d:09:57:d7:26:6f: 5e:56:27:79:88:3e:1d:9d:29:15:25:87:63:69:f0: aa:7a:2b:de:91:d2:7c:2f:00:30:93:82:88:ac:f4: b7:9c:94:f5:4f:60:e3:4e:1f:5e:97:01:8a:b9:12: 3d:e3:95:2a:65:ff:72:a0:4f:84:db:b0:43:d4:bb: e3:6a:65:74:ef:41:9c:e6:c7:18:c4:71:84:7b:aa: ea:69:72:9e:42:ca:19:98:f7:9a:4e:7a:9b:8b:a9: b1:94:7b:f7:aa:61:c0:ae:b7:2d:19:e6:28:06:7b: 93:2a:42:50:3a:21:0e:50:77:bf:ca:d7:54:df:c5: 4e:32:11:ff:f2:01:d0:28:e0:e0:44:a5:0b:2f:3a: b0:69:6a:c7:f9:90:98:b6:54:7b:fa:52:ed:2a:fb: 32:d9:55:97:9f:44:68:97:19:f5:41:d5:f8:4a:0f: ea:5f:76:a0:08:1c:51:fc:09:10:04:20:c3:c2:f6: d6:4d:3a:ba:53:17:c5:f5:42:40:34:fa:d8:c7:fa: 5c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:3A:4A:85:3A:3A:B6:70:61:A5:C8:A4:30:AF:68:D4:61:87:B5:AB X509v3 Authority Key Identifier: keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/SzpKhTo6tnBhpcikMK9o1GGHtas.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.189.216.0/21 IPv6: 2a0d:3dc1::/32 Signature Algorithm: sha256WithRSAEncryption 3c:1d:ae:de:cb:e6:69:8a:e1:c7:16:c9:f4:e3:1d:25:c7:f6: 29:00:5e:b7:04:c2:4f:52:2a:44:bc:15:e4:30:7a:22:bc:e0: 5f:63:fa:c8:ba:73:9c:ac:ae:3e:96:7b:1d:1a:8c:8a:62:69: 07:c6:b4:fc:4a:6c:2a:73:60:55:6a:71:72:99:31:f5:d7:c0: d9:17:e2:be:d1:00:ed:69:02:e7:17:58:96:64:df:c9:15:42: ef:7b:5f:1e:92:87:12:92:80:ad:52:05:36:f0:a1:fa:bd:35: 1a:d4:c9:c8:f0:35:56:a0:a4:43:1f:5e:80:8e:66:7d:0c:6c: 81:ae:55:84:81:ba:cb:46:51:53:04:c9:3b:97:66:d7:c6:b1: 44:2f:0e:b9:61:61:75:2c:e9:0f:25:c4:ca:28:d9:85:ce:4e: 29:fc:7d:ad:ac:c3:47:31:bf:31:6b:ba:b3:df:88:06:bb:ce: 47:c1:08:b0:7b:45:be:66:8e:98:d2:e3:35:ce:c8:48:28:c6: a1:bb:be:dc:57:63:ed:61:57:af:b5:c9:5d:2a:c6:d6:63:a4: 6e:52:2b:77:7e:54:b4:20:62:72:ad:ab:62:3c:b4:b5:39:9a: 56:45:35:54:94:34:65:9f:5d:c4:2f:67:9b:b9:96:75:00:c7: 91:10:c2:15 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZqRpFcRttinqcLjSC9LiAmmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODNhNTQ4N2IzNWMxZDFlMWYxNTdjMTkxMzEyYjNkZjRi YzE3YWIwHhcNMjUxMTE3MTE0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjNhNGE4NTNhM2FiNjcwNjFhNWM4YTQzMGFmNjhkNDYxODdiNWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSiuOIyDZOJg7tBabGMUiN1Nelfm L0g5I9nhk6SRn18PiezyQK5J8nSLfw7UnAOYO8MF0l6NCVfXJm9eVid5iD4dnSkV JYdjafCqeivekdJ8LwAwk4KIrPS3nJT1T2DjTh9elwGKuRI945UqZf9yoE+E27BD 1LvjamV070Gc5scYxHGEe6rqaXKeQsoZmPeaTnqbi6mxlHv3qmHArrctGeYoBnuT KkJQOiEOUHe/ytdU38VOMhH/8gHQKODgRKULLzqwaWrH+ZCYtlR7+lLtKvsy2VWX n0Rolxn1QdX4Sg/qX3agCBxR/AkQBCDDwvbWTTq6UxfF9UJANPrYx/pc4wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEs6SoU6OrZwYaXIpDCvaNRhh7WrMB8GA1UdIwQY MBaAFJeDpUh7NcHR4fFXwZExKz30vBerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEt NjkxNTJlOWEwOGMzLzEvU3pwS2hUbzZ0bkJocGNpa01LOW8xR0dIdGFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEtNjkxNTJlOWEwOGMz LzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDk73YMA0E AgACMAcDBQAqDT3BMA0GCSqGSIb3DQEBCwUAA4IBAQA8Ha7ey+ZpiuHHFsn04x0l x/YpAF63BMJPUipEvBXkMHoivOBfY/rIunOcrK4+lnsdGoyKYmkHxrT8Smwqc2BV anFymTH118DZF+K+0QDtaQLnF1iWZN/JFULve18ekocSkoCtUgU28KH6vTUa1MnI 8DVWoKRDH16AjmZ9DGyBrlWEgbrLRlFTBMk7l2bXxrFELw65YWF1LOkPJcTKKNmF zk4p/H2trMNHMb8xa7qz34gGu85HwQiwe0W+Zo6Y0uM1zshIKMahu77cV2PtYVev tcldKsbWY6RuUit3flS0IGJyratiPLS1OZpWRTVUlDRln13EL2ebuZZ1AMeREMIV -----END CERTIFICATE-----Generated at Sun Dec 7 17:16:02 2025 by rpki-client