This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/3NfU7mC4iQvU5R9bXdfX2sEvs8c.roa File: 3NfU7mC4iQvU5R9bXdfX2sEvs8c.roa (raw, json) Hash identifier: TG1MP6wYt9t2MftQG66JPCVdEsPTci5w7P6XLoTCJqw= Subject key identifier: DC:D7:D4:EE:60:B8:89:0B:D4:E5:1F:5B:5D:D7:D7:DA:C1:2F:B3:C7 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 019A4A8EC9D5CB6F51C9F7F24A66F6207A10 Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/3NfU7mC4iQvU5R9bXdfX2sEvs8c.roa Signing time: Mon 03 Nov 2025 16:31:03 +0000 ROA not before: Mon 03 Nov 2025 16:31:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135402 IP address blocks: 93.88.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4a:8e:c9:d5:cb:6f:51:c9:f7:f2:4a:66:f6:20:7a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Nov 3 16:31:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dcd7d4ee60b8890bd4e51f5b5dd7d7dac12fb3c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7f:dc:4a:98:23:10:1c:df:32:f9:2d:f0:be: 1b:5c:3f:3b:2b:91:1a:0f:b3:10:f0:b7:c0:06:fa: ef:9b:2d:ff:3e:39:0c:59:5a:ba:fe:d0:26:87:72: 1b:ae:2b:12:25:c9:b9:a6:cd:51:b1:6d:07:2c:3c: 56:b7:7c:db:d7:18:3e:2a:06:87:b0:f7:d8:2e:d3: a2:50:32:0c:11:73:d3:8d:c7:7c:75:46:6a:b3:6a: 5f:bb:2e:4a:d2:e1:2d:8c:85:b1:1b:18:13:8b:de: 91:c3:b5:d2:90:87:83:6a:73:95:28:8c:ac:56:8f: c6:c0:41:25:26:62:bf:76:d2:87:23:ae:86:5b:5d: 65:ef:13:da:d0:4f:ad:13:a4:72:4c:37:3b:88:7a: a1:6a:74:93:4f:76:b9:26:2e:55:08:97:d1:72:61: 8d:99:45:0e:fd:60:69:59:00:33:ee:fc:96:75:f5: 28:7b:4b:01:64:94:5f:dd:03:5e:cc:a7:ba:e4:ce: a4:8f:f9:c6:b0:4c:a1:7e:eb:d9:1e:e9:24:62:77: 76:b3:ba:db:89:bc:8e:36:35:f6:7d:68:af:4b:30: c9:e9:ed:3f:1f:7f:06:62:ff:b8:e6:d5:ff:5a:31: 20:94:69:53:a2:58:92:6b:44:7d:68:ee:ca:0e:c7: bf:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D7:D4:EE:60:B8:89:0B:D4:E5:1F:5B:5D:D7:D7:DA:C1:2F:B3:C7 X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/3NfU7mC4iQvU5R9bXdfX2sEvs8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.88.155.0/24 Signature Algorithm: sha256WithRSAEncryption 31:94:18:39:bd:8f:3b:84:1d:9d:43:b8:32:2e:67:95:0a:4b: ed:84:3f:67:1f:11:8b:82:19:c5:c1:22:5e:b8:bf:25:7c:43: 2f:2e:aa:fa:63:e3:84:3d:84:1c:25:3b:c4:af:42:13:a9:bd: f2:1e:33:df:57:11:42:bf:a4:f5:74:5c:e5:13:5a:a0:07:0f: 39:08:c9:81:9f:dd:6b:68:6b:9f:2c:b0:6b:cc:55:7b:9a:96: 82:ea:be:b5:1a:3b:92:d3:d6:43:2a:8c:e6:3b:e6:2d:c0:31: 6a:98:60:aa:f9:ac:11:f4:23:50:cd:e9:37:4c:95:b7:b7:e2: 9c:2e:bd:d1:4c:cd:12:9c:61:bc:ca:f1:27:57:5c:84:40:2b: df:07:59:97:a0:3c:b9:e7:6d:5d:51:cd:5d:be:d3:50:8d:56: 30:42:fa:db:94:a7:9a:37:44:df:08:e6:1d:a0:de:b2:a4:e2: c7:dc:48:84:12:13:d3:85:07:81:b9:c5:e8:2d:be:0b:f1:ee: 04:4c:f9:9b:7f:f7:56:53:3a:03:fc:28:f4:1c:97:4b:e3:be: 59:a4:14:5a:25:b4:70:71:fe:8d:1f:15:f3:41:e0:72:7b:0a: 55:a2:3e:2b:84:e5:e4:39:85:34:5f:99:4e:76:c2:9a:3f:49: 0c:24:88:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpKjsnVy29RyffySmb2IHoQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjUxMTAzMTYzMTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2Q3ZDRlZTYwYjg4OTBiZDRlNTFmNWI1ZGQ3ZDdkYWMxMmZiM2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3/cSpgjEBzfMvkt8L4bXD87K5Ea D7MQ8LfABvrvmy3/PjkMWVq6/tAmh3IbrisSJcm5ps1RsW0HLDxWt3zb1xg+KgaH sPfYLtOiUDIMEXPTjcd8dUZqs2pfuy5K0uEtjIWxGxgTi96Rw7XSkIeDanOVKIys Vo/GwEElJmK/dtKHI66GW11l7xPa0E+tE6RyTDc7iHqhanSTT3a5Ji5VCJfRcmGN mUUO/WBpWQAz7vyWdfUoe0sBZJRf3QNezKe65M6kj/nGsEyhfuvZHukkYnd2s7rb ibyONjX2fWivSzDJ6e0/H38GYv+45tX/WjEglGlToliSa0R9aO7KDse/wQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNzX1O5guIkL1OUfW13X19rBL7PHMB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEvM05mVTdtQzRpUXZVNVI5YlhkZlgyc0V2czhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXVibMA0G CSqGSIb3DQEBCwUAA4IBAQAxlBg5vY87hB2dQ7gyLmeVCkvthD9nHxGLghnFwSJe uL8lfEMvLqr6Y+OEPYQcJTvEr0ITqb3yHjPfVxFCv6T1dFzlE1qgBw85CMmBn91r aGufLLBrzFV7mpaC6r61GjuS09ZDKozmO+YtwDFqmGCq+awR9CNQzek3TJW3t+Kc Lr3RTM0SnGG8yvEnV1yEQCvfB1mXoDy5521dUc1dvtNQjVYwQvrblKeaN0TfCOYd oN6ypOLH3EiEEhPThQeBucXoLb4L8e4ETPmbf/dWUzoD/Cj0HJdL475ZpBRaJbRw cf6NHxXzQeByewpVoj4rhOXkOYU0X5lOdsKaP0kMJIjB -----END CERTIFICATE-----Generated at Fri Dec 5 15:47:47 2025 by rpki-client