This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Phu2nli9lCvsxHbXVyMP25QcGBU.roa File: Phu2nli9lCvsxHbXVyMP25QcGBU.roa (raw, json) Hash identifier: C93S5lyPLin9gQ4E1c8YlHx6c8vdXkwLjQSH53ms6gQ= Subject key identifier: 3E:1B:B6:9E:58:BD:94:2B:EC:C4:76:D7:57:23:0F:DB:94:1C:18:15 Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019B20D245867D6A737C91191B53CB338A1A Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Phu2nli9lCvsxHbXVyMP25QcGBU.roa Signing time: Mon 15 Dec 2025 07:03:29 +0000 ROA not before: Mon 15 Dec 2025 07:03:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 395374 IP address blocks: 92.62.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 20:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:d2:45:86:7d:6a:73:7c:91:19:1b:53:cb:33:8a:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Dec 15 07:03:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3e1bb69e58bd942becc476d757230fdb941c1815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:01:98:c3:2c:a0:1e:41:7f:0d:7b:48:93:be: 07:0b:b4:46:c9:d1:9f:7a:46:89:7b:24:96:2e:22: 19:39:6c:53:53:dd:24:ef:76:04:fd:d0:d6:a0:6b: 72:bb:1a:a8:ba:3d:7c:03:6c:21:39:30:58:89:2b: 5c:04:fc:10:98:cc:77:78:e4:79:60:4d:f9:5b:a1: 5a:a4:08:09:bf:b4:81:92:e9:0b:f0:da:7b:29:7c: a0:d2:a0:b4:01:99:5f:1a:43:81:45:29:6d:4e:a4: d1:52:b8:af:de:95:57:15:34:14:5e:c0:77:f3:ca: e7:68:54:a5:ef:ca:e1:0f:4b:39:ff:87:4b:10:36: 0f:0d:29:ed:ab:fa:71:d2:9d:60:38:b0:a0:4c:92: 65:6b:83:e7:3b:11:38:46:4c:cf:7d:62:6a:c7:1c: 8f:85:89:cf:62:f9:2d:d7:51:ba:d9:d7:42:a8:c8: 91:73:7f:be:42:00:2c:ec:43:e8:e9:0a:c4:41:67: d1:0f:6f:33:e2:cf:ba:d0:de:a0:40:7e:00:b4:e7: e5:98:0b:4e:a5:5b:49:ba:2a:27:ca:de:6b:14:4b: eb:90:65:6e:dc:07:70:95:cf:04:3d:92:9a:fd:32: 73:3a:a1:53:51:a7:78:43:ca:33:91:46:a5:25:c0: 39:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1B:B6:9E:58:BD:94:2B:EC:C4:76:D7:57:23:0F:DB:94:1C:18:15 X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Phu2nli9lCvsxHbXVyMP25QcGBU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.62.248.0/24 Signature Algorithm: sha256WithRSAEncryption a2:69:f8:7a:e7:dd:3d:8b:ad:5f:1b:d1:8b:40:08:3d:0b:84: fd:eb:a6:cc:64:80:c5:af:3b:78:87:9c:f6:fa:48:bf:aa:ef: 8b:28:57:70:67:f6:51:fc:56:60:3e:c9:5b:62:40:b7:c5:21: 5c:8a:62:11:84:52:aa:70:47:a2:6c:59:07:49:72:d4:0c:73: 38:61:e3:df:8f:be:6e:ef:25:bf:69:07:70:37:a6:23:a2:06: d4:fe:fb:2e:90:b6:7b:99:a5:b6:45:70:ec:1f:cc:b3:66:27: fe:23:b8:5c:57:89:8b:f5:3e:3c:d1:f5:ac:76:5c:37:7d:01: bd:39:d2:52:0b:68:4c:a5:3f:08:c3:3d:9d:77:f1:f5:c2:dc: d6:0e:c1:7a:68:ba:b9:48:c8:8a:d6:c4:bf:c5:a1:fc:86:e7: 84:fb:5c:3a:ec:c3:60:c3:6e:a3:7c:4b:5b:ec:a2:de:46:d7: e0:71:50:e8:91:c8:02:c9:76:3b:88:c0:6c:76:d9:7e:63:ae: 5a:fe:83:88:ce:ce:59:ab:ee:42:59:bd:4b:12:0b:77:33:97: 35:a4:ce:52:d5:41:31:3a:c6:ac:d4:8d:49:7e:54:ac:c0:0f: e7:0b:58:da:92:9b:1a:34:bf:02:df:d0:17:72:50:ae:dd:72: f6:a4:61:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsg0kWGfWpzfJEZG1PLM4oaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjUxMjE1MDcwMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTFiYjY5ZTU4YmQ5NDJiZWNjNDc2ZDc1NzIzMGZkYjk0MWMxODE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQGYwyygHkF/DXtIk74HC7RGydGf ekaJeySWLiIZOWxTU90k73YE/dDWoGtyuxqouj18A2whOTBYiStcBPwQmMx3eOR5 YE35W6FapAgJv7SBkukL8Np7KXyg0qC0AZlfGkOBRSltTqTRUriv3pVXFTQUXsB3 88rnaFSl78rhD0s5/4dLEDYPDSntq/px0p1gOLCgTJJla4PnOxE4RkzPfWJqxxyP hYnPYvkt11G62ddCqMiRc3++QgAs7EPo6QrEQWfRD28z4s+60N6gQH4AtOflmAtO pVtJuionyt5rFEvrkGVu3Adwlc8EPZKa/TJzOqFTUad4Q8ozkUalJcA52QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD4btp5YvZQr7MR211cjD9uUHBgVMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvUGh1Mm5saTlsQ3ZzeEhiWFZ5TVAyNVFjR0JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXD74MA0G CSqGSIb3DQEBCwUAA4IBAQCiafh65909i61fG9GLQAg9C4T966bMZIDFrzt4h5z2 +ki/qu+LKFdwZ/ZR/FZgPslbYkC3xSFcimIRhFKqcEeibFkHSXLUDHM4YePfj75u 7yW/aQdwN6YjogbU/vsukLZ7maW2RXDsH8yzZif+I7hcV4mL9T480fWsdlw3fQG9 OdJSC2hMpT8Iwz2dd/H1wtzWDsF6aLq5SMiK1sS/xaH8hueE+1w67MNgw26jfEtb 7KLeRtfgcVDokcgCyXY7iMBsdtl+Y65a/oOIzs5Zq+5CWb1LEgt3M5c1pM5S1UEx Osas1I1JflSswA/nC1jakpsaNL8C39AXclCu3XL2pGFf -----END CERTIFICATE-----Generated at Sat Dec 20 04:20:29 2025 by rpki-client