This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/PKUvfHbMyWxol9e6o_KImjFDt1M.roa File: PKUvfHbMyWxol9e6o_KImjFDt1M.roa (raw, json) Hash identifier: Uw1mXrwQRaqUc4sj0hqORTjZRxV0jUwss0xyBFHdDfA= Subject key identifier: 3C:A5:2F:7C:76:CC:C9:6C:68:97:D7:BA:A3:F2:88:9A:31:43:B7:53 Certificate issuer: /CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df Certificate serial: 019AD98C18D753489D72D456AC4177F6C111 Authority key identifier: 1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/PKUvfHbMyWxol9e6o_KImjFDt1M.roa Signing time: Mon 01 Dec 2025 10:53:48 +0000 ROA not before: Mon 01 Dec 2025 10:53:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210538 IP address blocks: 93.177.102.0/24 maxlen: 24 193.164.4.0/24 maxlen: 24 193.164.6.0/24 maxlen: 24 193.164.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:8c:18:d7:53:48:9d:72:d4:56:ac:41:77:f6:c1:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df Validity Not Before: Dec 1 10:53:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3ca52f7c76ccc96c6897d7baa3f2889a3143b753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:96:c7:9b:c0:ac:e2:9c:7d:64:95:f6:5a:99: cc:99:f4:78:86:f4:d7:2d:e3:50:7d:a6:b5:96:a0: d3:a1:c5:b0:a2:17:ab:36:9a:55:75:74:83:cc:67: bc:1d:f1:2f:a3:b2:f7:09:9d:37:b8:90:58:df:5e: 5c:db:ff:f7:3a:88:ee:cb:f7:0a:81:45:e4:49:8c: 75:ea:84:d7:3d:65:ba:f1:cf:a6:70:25:79:7f:28: 54:21:f4:6d:a2:67:e0:9f:cc:98:97:98:1e:45:ce: 8d:08:57:2c:49:4a:d1:12:74:bb:62:50:ec:41:b3: 62:eb:3a:69:23:97:02:2a:59:8a:f3:6a:29:fe:20: 6c:00:58:9e:8d:9b:0d:d7:ca:3d:a6:17:a9:64:ff: 46:e8:13:b9:f1:d1:20:15:79:9c:6e:5a:32:fc:53: 5d:5b:c9:37:33:bb:8e:94:44:2e:3b:a7:eb:c3:de: ef:dc:49:7d:76:ed:cc:95:8b:c0:45:35:4d:b2:21: 36:90:59:b5:ce:09:1b:b3:82:43:9f:09:cc:b3:4e: 2c:62:90:e3:a5:c6:b7:09:87:53:fb:f9:4e:41:f2: 85:2a:f1:69:b7:f6:d0:d7:bb:b7:9e:62:8f:da:dd: 7c:21:3a:37:b1:6d:ba:e8:10:23:f8:ce:50:2d:f1: 4b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A5:2F:7C:76:CC:C9:6C:68:97:D7:BA:A3:F2:88:9A:31:43:B7:53 X509v3 Authority Key Identifier: keyid:1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/PKUvfHbMyWxol9e6o_KImjFDt1M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.177.102.0/24 193.164.4.0/24 193.164.6.0/23 Signature Algorithm: sha256WithRSAEncryption b0:ce:49:56:e3:e9:30:1b:f0:a6:14:07:71:1e:9b:e9:55:36: ed:a1:da:df:46:89:b2:fa:87:fc:4a:32:13:1e:ab:51:5f:80: 7c:aa:a7:31:a3:f3:a3:ec:ee:48:31:f9:6c:66:3f:fb:d7:d0: 12:29:a4:49:50:46:c4:c3:80:29:51:1f:ba:b9:01:5f:7c:ec: 04:05:54:9c:e7:90:97:98:da:23:43:57:71:28:e1:59:72:a0: dd:82:06:2c:0a:06:80:dc:5e:18:bf:b5:9a:39:2b:dc:d7:6e: f9:42:13:8a:14:68:4c:79:7d:0e:9d:fc:cf:67:06:8d:d0:46: d9:d1:1d:96:f8:02:1d:23:6b:0e:ce:95:d5:6a:69:4e:89:22: 71:a5:d1:9d:7a:94:7c:88:62:5c:d0:42:fe:b8:17:c7:ff:72: c3:04:24:4c:d6:dd:56:9c:c6:ad:48:ef:54:89:36:b8:79:b5: 5f:81:bc:de:17:6e:b8:19:5a:33:d4:fd:7a:b7:e9:55:40:04: 62:1e:01:2b:99:e0:d1:43:1c:24:45:9e:a7:e3:f8:fc:38:fa: c6:18:42:8c:27:08:3e:06:5d:e4:c1:8e:26:47:41:73:ac:46: ad:85:0c:a7:75:7a:88:b2:ea:db:53:4e:0a:d7:14:11:7e:ae: 34:c6:bc:ca -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrZjBjXU0idctRWrEF39sERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYmM5ZmIzMzEyYTRhYmYxZGRjMjg1MThlNzYwOGUwZWMz Mjc1ZGYwHhcNMjUxMjAxMTA1MzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2E1MmY3Yzc2Y2NjOTZjNjg5N2Q3YmFhM2YyODg5YTMxNDNiNzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJbHm8Cs4px9ZJX2WpnMmfR4hvTX LeNQfaa1lqDTocWwoherNppVdXSDzGe8HfEvo7L3CZ03uJBY315c2//3Oojuy/cK gUXkSYx16oTXPWW68c+mcCV5fyhUIfRtomfgn8yYl5geRc6NCFcsSUrREnS7YlDs QbNi6zppI5cCKlmK82op/iBsAFiejZsN18o9phepZP9G6BO58dEgFXmcbloy/FNd W8k3M7uOlEQuO6frw97v3El9du3MlYvARTVNsiE2kFm1zgkbs4JDnwnMs04sYpDj pca3CYdT+/lOQfKFKvFpt/bQ17u3nmKP2t18ITo3sW266BAj+M5QLfFLlQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDylL3x2zMlsaJfXuqPyiJoxQ7dTMB8GA1UdIwQY MBaAFBq8n7MxKkq/HdwoUY52CODsMnXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3J5ZnN6RXFTcjhkM0NoUmpuWUk0T3d5ZGQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yNmU3N2YtZmEzNy00OTAwLWEzM2Qt ZDFkNmRlYTk4NzkwLzEvUEtVdmZIYk15V3hvbDllNm9fS0ltakZEdDFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8yNmU3N2YtZmEzNy00OTAwLWEzM2QtZDFkNmRlYTk4Nzkw LzEvR3J5ZnN6RXFTcjhkM0NoUmpuWUk0T3d5ZGQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXbFmAwQA waQEAwQBwaQGMA0GCSqGSIb3DQEBCwUAA4IBAQCwzklW4+kwG/CmFAdxHpvpVTbt odrfRomy+of8SjITHqtRX4B8qqcxo/Oj7O5IMflsZj/719ASKaRJUEbEw4ApUR+6 uQFffOwEBVSc55CXmNojQ1dxKOFZcqDdggYsCgaA3F4Yv7WaOSvc1275QhOKFGhM eX0OnfzPZwaN0EbZ0R2W+AIdI2sOzpXVamlOiSJxpdGdepR8iGJc0EL+uBfH/3LD BCRM1t1WnMatSO9UiTa4ebVfgbzeF264GVoz1P16t+lVQARiHgErmeDRQxwkRZ6n 4/j8OPrGGEKMJwg+Bl3kwY4mR0FzrEathQyndXqIsurbU04K1xQRfq40xrzK -----END CERTIFICATE-----Generated at Fri Dec 5 16:14:45 2025 by rpki-client