This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/np7bb4cprJI0JUnamK_X4k_hZbI.roa File: np7bb4cprJI0JUnamK_X4k_hZbI.roa (raw, json) Hash identifier: HP9Zkc5oPmbRVdULHA3wQjk32ztfj77qxOT+RCq0u8E= Subject key identifier: 9E:9E:DB:6F:87:29:AC:92:34:25:49:DA:98:AF:D7:E2:4F:E1:65:B2 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B2BB612FA71B4463BBCA7278D22289635 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/np7bb4cprJI0JUnamK_X4k_hZbI.roa Signing time: Wed 17 Dec 2025 09:48:31 +0000 ROA not before: Wed 17 Dec 2025 09:48:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60117 IP address blocks: 85.31.46.0/24 maxlen: 24 91.92.21.0/24 maxlen: 24 109.206.243.0/24 maxlen: 24 185.218.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:b6:12:fa:71:b4:46:3b:bc:a7:27:8d:22:28:96:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Dec 17 09:48:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9e9edb6f8729ac92342549da98afd7e24fe165b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f7:cc:7a:a8:8e:5d:8b:10:c5:e1:82:47:78: 8c:65:57:9a:8b:a8:b1:13:55:5e:21:d1:c9:fa:9e: 3a:f3:65:90:3c:7d:3d:92:dc:ed:19:95:2e:0f:c2: 05:88:02:cd:be:66:bc:56:57:03:68:99:98:ce:3b: 6e:12:70:8b:61:7c:e6:b0:37:c2:ff:95:6d:66:eb: 92:f2:09:63:78:fe:5d:12:3e:60:2d:c3:68:44:b1: 9f:d3:06:86:2a:c8:18:04:bf:19:90:91:5d:e5:7f: 72:60:eb:4e:a5:f4:60:c5:b2:6e:4a:ed:58:a4:0d: cb:3a:2c:fe:45:43:01:f1:32:e1:07:89:ee:95:8f: 7e:49:61:49:26:d7:50:8a:1d:34:69:7d:a5:43:ec: 4b:6d:ce:ba:22:14:ef:bd:f3:c9:33:fd:ec:c1:03: d4:3d:07:c5:19:1a:1e:0d:70:00:42:3d:6a:c5:9d: fc:88:69:50:14:56:68:21:79:18:df:ad:96:c8:f1: d5:04:e4:d6:52:ec:44:d7:e1:3d:ff:ac:67:cf:b1: 2f:cd:b4:c2:dd:67:c8:24:1b:e4:6d:e7:2b:a9:49: ab:e6:36:f2:8f:e8:0a:34:07:f9:28:1d:cf:5c:9e: 8a:31:4e:d6:00:02:76:90:0f:67:5a:90:9c:a8:17: 6f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:9E:DB:6F:87:29:AC:92:34:25:49:DA:98:AF:D7:E2:4F:E1:65:B2 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/np7bb4cprJI0JUnamK_X4k_hZbI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.31.46.0/24 91.92.21.0/24 109.206.243.0/24 185.218.138.0/24 Signature Algorithm: sha256WithRSAEncryption 21:79:b4:92:d3:e1:8b:ac:0d:4b:43:98:8e:1e:52:1f:2e:03: ae:4e:9b:0e:3b:60:63:fe:b2:46:fd:0d:96:f0:de:3f:47:9e: b7:d3:e4:25:d2:a3:01:59:ec:6f:62:f8:78:6d:77:13:0a:b3: e8:ec:19:d7:d7:be:e8:87:29:69:a4:35:a9:f8:96:56:86:81: 1f:7a:ff:38:47:46:fa:e2:af:eb:c5:1a:e6:65:b5:5a:e0:96: 59:09:6c:de:20:fb:e4:ed:9c:f1:29:01:b3:c4:3d:14:e0:41: 9e:9e:0d:9d:4b:ce:ea:16:b6:fa:58:04:ba:6d:e9:e2:13:23: 59:66:07:a2:71:22:d1:60:0d:3d:aa:f8:56:36:87:1c:d0:2e: 4c:a7:59:4e:e8:a0:3b:32:d7:86:cc:ea:c5:a6:16:71:76:8a: b8:02:88:10:a7:06:47:99:39:f8:83:88:27:9f:ad:3d:4f:54: a5:9e:0c:ea:84:6e:b6:8e:4c:b3:c0:4f:4d:f4:67:42:c1:59: ff:48:f9:d2:d9:b2:13:0f:c9:34:9e:08:7f:15:88:62:44:bf: 36:2a:01:75:22:9a:5f:22:73:6f:49:d0:d1:92:eb:34:08:d2: ef:8a:02:09:59:04:58:3e:4d:16:bb:15:44:c5:2a:20:f5:48: 04:c2:19:84 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZsrthL6cbRGO7ynJ40iKJY1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMjE3MDk0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTllZGI2Zjg3MjlhYzkyMzQyNTQ5ZGE5OGFmZDdlMjRmZTE2NWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ffMeqiOXYsQxeGCR3iMZVeai6ix E1VeIdHJ+p4682WQPH09ktztGZUuD8IFiALNvma8VlcDaJmYzjtuEnCLYXzmsDfC /5VtZuuS8gljeP5dEj5gLcNoRLGf0waGKsgYBL8ZkJFd5X9yYOtOpfRgxbJuSu1Y pA3LOiz+RUMB8TLhB4nulY9+SWFJJtdQih00aX2lQ+xLbc66IhTvvfPJM/3swQPU PQfFGRoeDXAAQj1qxZ38iGlQFFZoIXkY362WyPHVBOTWUuxE1+E9/6xnz7EvzbTC 3WfIJBvkbecrqUmr5jbyj+gKNAf5KB3PXJ6KMU7WAAJ2kA9nWpCcqBdv/wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJ6e22+HKaySNCVJ2piv1+JP4WWyMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvbnA3YmI0Y3BySkkwSlVuYW1LX1g0a19oWmJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVR8uAwQA W1wVAwQAbc7zAwQAudqKMA0GCSqGSIb3DQEBCwUAA4IBAQAhebSS0+GLrA1LQ5iO HlIfLgOuTpsOO2Bj/rJG/Q2W8N4/R5630+Ql0qMBWexvYvh4bXcTCrPo7BnX177o hylppDWp+JZWhoEfev84R0b64q/rxRrmZbVa4JZZCWzeIPvk7ZzxKQGzxD0U4EGe ng2dS87qFrb6WAS6beniEyNZZgeicSLRYA09qvhWNocc0C5Mp1lO6KA7MteGzOrF phZxdoq4AogQpwZHmTn4g4gnn609T1SlngzqhG62jkyzwE9N9GdCwVn/SPnS2bIT D8k0ngh/FYhiRL82KgF1IppfInNvSdDRkus0CNLvigIJWQRYPk0WuxVExSog9UgE whmE -----END CERTIFICATE-----Generated at Sat Dec 20 05:28:31 2025 by rpki-client