This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/df1_7TmCDam63hXtw_yCEwyYqKg.roa File: df1_7TmCDam63hXtw_yCEwyYqKg.roa (raw, json) Hash identifier: kGWeXD1UZGmhJr1odiGtCLrn4dA0/qZDze7TQEvYfXg= Subject key identifier: 75:FD:7F:ED:39:82:0D:A9:BA:DE:15:ED:C3:FC:82:13:0C:98:A8:A8 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 019A686FA133A86B1D38C761DEE9E08BDED9 Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/df1_7TmCDam63hXtw_yCEwyYqKg.roa Signing time: Sun 09 Nov 2025 11:45:37 +0000 ROA not before: Sun 09 Nov 2025 11:45:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 984 IP address blocks: 93.88.157.0/24 maxlen: 24 93.88.158.0/24 maxlen: 24 95.155.149.0/24 maxlen: 24 152.89.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 15:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:68:6f:a1:33:a8:6b:1d:38:c7:61:de:e9:e0:8b:de:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Nov 9 11:45:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=75fd7fed39820da9bade15edc3fc82130c98a8a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:95:6a:03:84:08:75:79:d5:5a:d1:aa:f5:67: 61:a0:d9:e9:9c:52:31:ff:f6:39:11:2b:bf:d5:82: d3:6a:b3:e3:a4:3e:1c:b8:19:26:c2:c2:e3:0f:23: 12:f7:9e:87:d2:ae:01:27:71:f0:99:e6:13:10:b4: 18:92:12:d2:25:38:c2:e7:fa:bf:78:70:f6:6d:87: 86:81:d6:aa:eb:ff:5b:b3:1e:7b:df:5b:d8:fa:bf: 73:12:5c:e5:1f:84:d7:98:bf:38:36:d8:fc:f7:38: 7a:de:2b:3a:87:a1:37:5f:b1:3f:a2:ee:e7:39:1b: 06:b9:01:39:c8:fc:cb:3b:c3:9d:19:f2:ad:d1:47: 9b:36:5c:ec:bd:e3:b9:1e:91:ad:9b:fa:7e:23:d9: d8:69:31:b2:3b:8d:4e:d1:20:c5:a1:77:82:8c:ad: 37:21:3d:a2:b8:64:43:50:91:5e:94:b1:44:c7:cf: 64:e7:db:62:88:87:f6:04:9a:ce:22:90:ef:86:3f: d7:57:db:90:aa:92:d8:5f:da:88:e4:d4:de:24:81: 07:e5:e8:56:01:b6:cf:7c:8e:a9:10:d9:70:1d:1d: db:70:94:2e:9c:58:d3:2a:78:92:4b:d7:02:9b:bc: e5:9a:ef:ac:8b:0b:1b:ca:36:e0:e4:96:0d:db:5d: bd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:FD:7F:ED:39:82:0D:A9:BA:DE:15:ED:C3:FC:82:13:0C:98:A8:A8 X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/df1_7TmCDam63hXtw_yCEwyYqKg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.88.157.0-93.88.158.255 95.155.149.0/24 152.89.87.0/24 Signature Algorithm: sha256WithRSAEncryption 04:2a:07:8c:3c:06:0f:30:8c:e9:89:70:cf:48:a5:c4:1b:aa: f4:ce:9f:d8:8c:08:0b:51:d2:15:bf:95:71:42:d8:89:71:e7: 33:4e:ab:ff:1a:24:15:8c:3d:86:81:e7:18:77:7e:4d:e4:bd: db:3c:ba:92:31:18:9b:d0:fd:79:5e:09:c7:60:a8:6c:68:61: 0d:17:64:f4:30:c5:2e:1a:84:5d:55:d8:e9:dc:12:3a:11:07: 2e:1b:86:71:3b:9c:6b:20:b4:64:09:d0:a2:06:13:40:1b:86: 08:6f:6f:2c:00:36:3a:04:53:46:d6:0d:7d:08:5f:9a:a6:64: 1c:6b:c1:48:0d:f0:df:80:47:b1:77:2d:49:8a:6a:87:ab:e1: e7:c0:bc:26:92:5d:0b:0b:f4:d6:b8:89:a9:53:b4:7e:10:6f: 42:cf:36:17:31:43:cf:ed:11:28:0d:82:f0:2e:db:eb:a7:02: f5:fa:88:72:58:1b:2a:d3:e1:9c:1c:4e:35:43:9a:5c:b6:ef: 00:ae:80:df:90:6e:c7:93:d8:25:f0:92:b7:3f:42:0b:96:9c: 58:ef:7b:b7:80:cc:b3:37:da:5e:52:02:6c:b7:38:e8:67:dd: 3b:2b:b6:bd:ac:05:63:c0:f7:bc:83:44:01:ca:f0:4b:97:93: a1:6d:31:2d -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZpob6EzqGsdOMdh3ungi97ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjUxMTA5MTE0NTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWZkN2ZlZDM5ODIwZGE5YmFkZTE1ZWRjM2ZjODIxMzBjOThhOGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5VqA4QIdXnVWtGq9WdhoNnpnFIx //Y5ESu/1YLTarPjpD4cuBkmwsLjDyMS956H0q4BJ3HwmeYTELQYkhLSJTjC5/q/ eHD2bYeGgdaq6/9bsx5731vY+r9zElzlH4TXmL84Ntj89zh63is6h6E3X7E/ou7n ORsGuQE5yPzLO8OdGfKt0UebNlzsveO5HpGtm/p+I9nYaTGyO41O0SDFoXeCjK03 IT2iuGRDUJFelLFEx89k59tiiIf2BJrOIpDvhj/XV9uQqpLYX9qI5NTeJIEH5ehW AbbPfI6pENlwHR3bcJQunFjTKniSS9cCm7zlmu+siwsbyjbg5JYN2129/wIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFHX9f+05gg2put4V7cP8ghMMmKioMB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEvZGYxXzdUbUNEYW02M2hYdHdfeUNFd3lZcUtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBABdWJ0D BABdWJ4DBABfm5UDBACYWVcwDQYJKoZIhvcNAQELBQADggEBAAQqB4w8Bg8wjOmJ cM9IpcQbqvTOn9iMCAtR0hW/lXFC2Ilx5zNOq/8aJBWMPYaB5xh3fk3kvds8upIx GJvQ/XleCcdgqGxoYQ0XZPQwxS4ahF1V2OncEjoRBy4bhnE7nGsgtGQJ0KIGE0Ab hghvbywANjoEU0bWDX0IX5qmZBxrwUgN8N+AR7F3LUmKaoer4efAvCaSXQsL9Na4 ialTtH4Qb0LPNhcxQ8/tESgNgvAu2+unAvX6iHJYGyrT4ZwcTjVDmly27wCugN+Q bseT2CXwkrc/QguWnFjve7eAzLM32l5SAmy3OOhn3Tsrtr2sBWPA97yDRAHK8EuX k6FtMS0= -----END CERTIFICATE-----Generated at Wed Dec 3 16:39:35 2025 by rpki-client