This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4TtAf5DgcwzbkWPzo-XnuRKRKVw.roa File: 4TtAf5DgcwzbkWPzo-XnuRKRKVw.roa (raw, json) Hash identifier: 9u0G1ZewTc6PqeuICesv4J2HwDVw/46rJkNVExYii50= Subject key identifier: E1:3B:40:7F:90:E0:73:0C:DB:91:63:F3:A3:E5:E7:B9:12:91:29:5C Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B2B00F8398467EDEC6235385896834FB9 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4TtAf5DgcwzbkWPzo-XnuRKRKVw.roa Signing time: Wed 17 Dec 2025 06:30:42 +0000 ROA not before: Wed 17 Dec 2025 06:30:42 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199959 IP address blocks: 93.123.76.0/22 maxlen: 24 193.47.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:00:f8:39:84:67:ed:ec:62:35:38:58:96:83:4f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Dec 17 06:30:42 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e13b407f90e0730cdb9163f3a3e5e7b91291295c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9d:2f:e4:7a:9a:e6:90:e7:82:c0:8b:f5:47: 24:f7:7e:26:26:1a:05:8c:2e:f6:86:b8:86:4c:b5: ed:04:30:fb:c5:65:bd:b5:58:57:05:38:00:35:ba: 00:4d:cd:ac:09:8a:3a:83:21:33:18:fb:fe:06:ea: c8:41:08:e8:36:48:37:c4:cc:be:c3:96:fd:76:20: 6d:87:97:c6:f6:4b:9f:c7:43:20:b1:c1:10:3b:a5: db:21:10:ad:f2:2f:d7:36:7c:3a:92:67:42:69:12: 25:d7:bc:bb:15:42:6a:db:3b:25:4b:e7:22:9d:17: 8f:34:c1:aa:16:8f:62:70:70:9e:e1:ad:2c:d8:7f: ba:c4:28:d5:44:41:25:80:20:28:0c:03:e6:33:bd: 4c:00:52:59:3c:2a:cd:cd:8b:33:a6:26:33:ab:2d: 5b:04:d3:0e:b5:f5:a8:7a:83:28:bb:a6:53:2c:56: f3:5e:3f:c0:4a:7c:19:21:c5:e4:f3:59:1a:92:71: 6c:8b:19:0f:1a:82:47:92:18:5e:13:71:3e:53:5c: ab:80:d3:38:18:1e:91:e5:53:03:d9:f9:f4:06:09: 81:68:ec:f9:23:4c:af:dc:69:6d:90:e0:5a:1e:93: 2d:9c:d9:8d:3f:61:72:5c:9d:c7:4b:8f:46:61:d6: 79:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3B:40:7F:90:E0:73:0C:DB:91:63:F3:A3:E5:E7:B9:12:91:29:5C X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4TtAf5DgcwzbkWPzo-XnuRKRKVw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.123.76.0/22 193.47.62.0/24 Signature Algorithm: sha256WithRSAEncryption 67:bf:ed:3c:d9:45:ca:b2:d8:71:06:cc:40:66:69:97:0b:8c: 90:cb:bc:f4:c5:60:d4:90:5d:2c:94:34:7c:fa:79:ed:99:3d: 73:50:11:c2:0f:e4:ef:e7:85:10:1c:55:78:aa:93:15:e4:f3: 1f:2a:49:8b:37:da:41:43:2e:b9:8b:c7:f8:ef:0c:e6:14:f2: 89:22:7d:62:1e:87:c4:a0:63:73:e4:e6:77:04:32:0c:3f:10: d3:61:17:b6:d4:1f:3f:0d:c7:9f:9b:c7:60:15:6a:1c:fd:1f: 62:46:a2:ed:80:58:79:9f:11:d9:1d:4e:b1:4f:dc:76:23:50: 4f:7d:9c:69:9a:74:e7:63:53:02:22:33:fd:a6:9a:9b:78:b0: ce:66:f2:de:39:73:a8:95:e9:79:8d:2e:11:09:0c:cf:08:ed: 37:34:9c:95:6c:b9:56:42:fa:22:18:da:0a:f4:93:50:d9:6b: 04:71:57:5e:1d:64:a2:00:ff:85:2a:f8:f7:29:91:a7:e4:16: 1c:ab:51:9b:93:f6:55:75:09:5b:cc:23:1a:20:79:89:a6:24: f3:3f:67:cf:9d:87:13:62:0b:23:7d:e7:6a:c4:9d:50:d2:cf: a5:4c:b9:2e:05:a0:c5:83:4f:ca:40:cd:03:55:bf:cd:30:12: 2a:7e:76:43 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsrAPg5hGft7GI1OFiWg0+5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMjE3MDYzMDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTNiNDA3ZjkwZTA3MzBjZGI5MTYzZjNhM2U1ZTdiOTEyOTEyOTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs50v5Hqa5pDngsCL9Uck934mJhoF jC72hriGTLXtBDD7xWW9tVhXBTgANboATc2sCYo6gyEzGPv+BurIQQjoNkg3xMy+ w5b9diBth5fG9kufx0MgscEQO6XbIRCt8i/XNnw6kmdCaRIl17y7FUJq2zslS+ci nRePNMGqFo9icHCe4a0s2H+6xCjVREElgCAoDAPmM71MAFJZPCrNzYszpiYzqy1b BNMOtfWoeoMou6ZTLFbzXj/ASnwZIcXk81kaknFsixkPGoJHkhheE3E+U1yrgNM4 GB6R5VMD2fn0BgmBaOz5I0yv3GltkOBaHpMtnNmNP2FyXJ3HS49GYdZ5SQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOE7QH+Q4HMM25Fj86Pl57kSkSlcMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvNFR0QWY1RGdjd3pia1dQem8tWG51UktSS1Z3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXXtMAwQA wS8+MA0GCSqGSIb3DQEBCwUAA4IBAQBnv+082UXKsthxBsxAZmmXC4yQy7z0xWDU kF0slDR8+nntmT1zUBHCD+Tv54UQHFV4qpMV5PMfKkmLN9pBQy65i8f47wzmFPKJ In1iHofEoGNz5OZ3BDIMPxDTYRe21B8/Dcefm8dgFWoc/R9iRqLtgFh5nxHZHU6x T9x2I1BPfZxpmnTnY1MCIjP9ppqbeLDOZvLeOXOolel5jS4RCQzPCO03NJyVbLlW QvoiGNoK9JNQ2WsEcVdeHWSiAP+FKvj3KZGn5BYcq1Gbk/ZVdQlbzCMaIHmJpiTz P2fPnYcTYgsjfedqxJ1Q0s+lTLkuBaDFg0/KQM0DVb/NMBIqfnZD -----END CERTIFICATE-----Generated at Sat Dec 20 05:09:11 2025 by rpki-client