This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/B3fwM4r2ZVZaz3In2GIn5UxbGfc.roa File: B3fwM4r2ZVZaz3In2GIn5UxbGfc.roa (raw, json) Hash identifier: 2F/Pt2zMPvH/LBtn16Iz2DghFaDlVaTfIqbd5JVLdFg= Subject key identifier: 07:77:F0:33:8A:F6:65:56:5A:CF:72:27:D8:62:27:E5:4C:5B:19:F7 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 019A77302EEA9D7A9242DFE9E5D5E9C54239 Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/B3fwM4r2ZVZaz3In2GIn5UxbGfc.roa Signing time: Wed 12 Nov 2025 08:30:37 +0000 ROA not before: Wed 12 Nov 2025 08:30:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 996 IP address blocks: 95.155.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:77:30:2e:ea:9d:7a:92:42:df:e9:e5:d5:e9:c5:42:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Nov 12 08:30:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0777f0338af665565acf7227d86227e54c5b19f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:22:12:28:81:d5:d2:3a:a5:c7:ac:00:9c:ea: 2d:88:7c:6f:da:c2:ed:83:da:ba:e4:7c:e5:c2:9e: d2:fb:2b:76:36:cb:59:a9:36:30:15:52:18:55:46: d0:82:01:81:fb:b8:6c:8b:f4:50:15:b1:de:f6:b2: 5c:bd:7c:34:bc:f5:62:c1:40:42:ea:5e:63:f6:8c: b2:49:80:d8:4e:11:41:83:b7:62:f9:d1:6a:0f:17: 05:99:23:2b:00:ca:12:bd:41:6a:78:07:5f:4e:27: 43:b3:ba:42:05:b2:cf:32:b8:d9:69:7c:35:7b:d0: 0f:06:c9:d6:f1:2e:37:13:87:9d:f4:03:1f:a1:42: dc:9b:26:86:23:86:c3:9c:aa:a7:94:cc:4e:12:79: 4b:6d:a1:54:25:3f:f1:2e:b8:61:fb:37:b3:2e:51: 9a:1f:76:2a:9b:d4:f2:d4:c8:d4:ca:74:c0:fa:10: 8b:81:e7:03:19:cf:95:74:fe:bc:06:63:5b:17:b1: a1:cf:31:b4:59:c6:27:67:ab:7f:17:6d:0b:6b:da: 16:2e:a9:00:8b:78:7a:9c:0e:6a:a9:0c:40:4a:99: d6:6e:06:ec:f3:6c:a7:48:56:65:2a:9d:63:89:dc: ae:6e:f6:23:b0:92:68:2c:76:a4:99:a2:bf:57:14: 1f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:77:F0:33:8A:F6:65:56:5A:CF:72:27:D8:62:27:E5:4C:5B:19:F7 X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/B3fwM4r2ZVZaz3In2GIn5UxbGfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.155.146.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:76:3f:ff:63:c6:9e:a9:68:c9:11:1a:f6:87:3c:97:b5:9c: 7f:0e:6b:3d:22:32:b8:48:e7:4c:9c:cc:ab:7a:81:c7:38:a6: dc:b8:4d:fd:a2:43:09:c5:c0:de:f6:ee:8b:80:74:b4:f3:b1: b7:db:64:c4:d0:ea:f6:10:c4:c5:99:89:76:67:87:3a:ab:a6: dc:7b:3a:46:f3:42:8e:79:17:7e:a8:d1:52:4d:a3:63:92:85: b7:e8:a0:aa:52:3c:94:21:ae:86:b2:72:40:57:49:c8:12:70: f7:d6:a0:65:e4:a5:63:29:67:16:3d:ff:39:41:05:0d:a3:2e: da:6a:ce:36:e4:c7:cc:bb:d8:ea:03:ac:bb:cd:ae:e9:75:25: 24:65:db:77:74:bb:c6:c7:a2:0f:b4:75:8d:c8:46:77:4a:bf: 21:3d:43:4e:ab:56:78:27:9b:0d:9c:28:31:57:8d:b2:7e:ea: c7:f6:d7:09:19:93:6b:e1:68:ff:96:e7:9d:13:72:df:fd:e1: 50:a3:09:fb:53:df:1b:a2:51:6c:22:86:00:60:0e:ef:70:58: 61:92:2a:93:15:12:91:ec:37:e4:4f:22:10:c5:6d:1e:cd:22: c4:e6:e4:23:62:30:80:8e:e9:a1:40:ba:07:6f:95:4e:d9:c3: a5:30:7b:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp3MC7qnXqSQt/p5dXpxUI5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjUxMTEyMDgzMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzc3ZjAzMzhhZjY2NTU2NWFjZjcyMjdkODYyMjdlNTRjNWIxOWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiISKIHV0jqlx6wAnOotiHxv2sLt g9q65Hzlwp7S+yt2NstZqTYwFVIYVUbQggGB+7hsi/RQFbHe9rJcvXw0vPViwUBC 6l5j9oyySYDYThFBg7di+dFqDxcFmSMrAMoSvUFqeAdfTidDs7pCBbLPMrjZaXw1 e9APBsnW8S43E4ed9AMfoULcmyaGI4bDnKqnlMxOEnlLbaFUJT/xLrhh+zezLlGa H3Yqm9Ty1MjUynTA+hCLgecDGc+VdP68BmNbF7GhzzG0WcYnZ6t/F20La9oWLqkA i3h6nA5qqQxASpnWbgbs82ynSFZlKp1jidyubvYjsJJoLHakmaK/VxQf8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAd38DOK9mVWWs9yJ9hiJ+VMWxn3MB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEvQjNmd000cjJaVlphejNJbjJHSW41VXhiR2ZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBX5uSMA0G CSqGSIb3DQEBCwUAA4IBAQBddj//Y8aeqWjJERr2hzyXtZx/Dms9IjK4SOdMnMyr eoHHOKbcuE39okMJxcDe9u6LgHS087G322TE0Or2EMTFmYl2Z4c6q6bcezpG80KO eRd+qNFSTaNjkoW36KCqUjyUIa6GsnJAV0nIEnD31qBl5KVjKWcWPf85QQUNoy7a as425MfMu9jqA6y7za7pdSUkZdt3dLvGx6IPtHWNyEZ3Sr8hPUNOq1Z4J5sNnCgx V42yfurH9tcJGZNr4Wj/luedE3Lf/eFQown7U98bolFsIoYAYA7vcFhhkiqTFRKR 7DfkTyIQxW0ezSLE5uQjYjCAjumhQLoHb5VO2cOlMHvm -----END CERTIFICATE-----Generated at Fri Dec 5 06:25:52 2025 by rpki-client