This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/T92wbYUJPyvhsYPA5aGgyuxICJk.roa File: T92wbYUJPyvhsYPA5aGgyuxICJk.roa (raw, json) Hash identifier: i+LFHWQrE7dp0tgeelHFckAFG5i7FgKfU1HA9UKD7U8= Subject key identifier: 4F:DD:B0:6D:85:09:3F:2B:E1:B1:83:C0:E5:A1:A0:CA:EC:48:08:99 Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B130C93729340BC7F8FC1121F45166509 Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/T92wbYUJPyvhsYPA5aGgyuxICJk.roa Signing time: Fri 12 Dec 2025 14:52:29 +0000 ROA not before: Fri 12 Dec 2025 14:52:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6079 IP address blocks: 2a0c:9e05::/32 maxlen: 32 2a0e:eb41::/32 maxlen: 32 2a0e:eb42::/32 maxlen: 32 2a0e:eb43::/32 maxlen: 32 2a0e:eb45::/32 maxlen: 32 2a0e:eb46::/32 maxlen: 32 2a0e:eb47::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:0c:93:72:93:40:bc:7f:8f:c1:12:1f:45:16:65:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Dec 12 14:52:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4fddb06d85093f2be1b183c0e5a1a0caec480899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:26:eb:dd:76:f9:77:7d:e2:af:d4:04:03:5b: 13:9e:f4:2e:f9:d1:b4:15:41:f2:22:fc:7c:d3:fd: d6:b5:f0:c0:07:9a:ae:31:0e:67:66:85:68:cb:8c: 8d:ae:7c:47:15:6c:8e:bd:0f:44:0d:22:41:15:74: 3f:08:ab:96:42:62:0f:dd:cd:3a:cc:e9:cc:a3:20: 6d:2c:e5:9d:15:27:56:04:f6:f3:bf:a2:f9:e1:14: e6:c1:67:47:cf:dc:71:1a:cf:b8:8c:08:37:31:e9: 72:a8:79:0e:79:ea:12:45:78:bc:d7:fe:43:5c:ba: 8c:01:18:ac:04:78:d1:7f:cb:81:af:e7:72:0b:4b: b0:15:9e:07:92:c0:a7:6a:90:08:0d:90:55:f4:5f: f4:ce:e5:45:c2:c7:f6:db:4c:39:b2:2c:7a:a3:9f: 4b:fa:16:7e:a7:87:6d:bb:c9:2d:0b:1e:06:8d:24: fd:ce:88:d3:07:ff:70:7f:26:30:73:3a:6d:1b:9b: 06:1c:11:69:72:8a:e5:96:00:47:75:e7:7d:25:27: e1:a5:3c:a2:2e:d3:ab:10:56:34:6c:3e:18:b8:5b: 4b:f5:a6:5c:25:a2:6e:9d:69:81:4a:00:79:8e:67: df:5e:5d:4f:fc:c3:ed:71:2d:31:88:28:78:99:0d: 87:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DD:B0:6D:85:09:3F:2B:E1:B1:83:C0:E5:A1:A0:CA:EC:48:08:99 X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/T92wbYUJPyvhsYPA5aGgyuxICJk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9e05::/32 2a0e:eb41::-2a0e:eb43:ffff:ffff:ffff:ffff:ffff:ffff 2a0e:eb45::-2a0e:eb47:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 27:df:63:41:db:e1:b2:98:1e:3e:eb:90:fc:34:e7:6b:6b:a2: 45:63:7a:f2:46:2f:c1:7f:c9:83:3b:36:7b:b1:ab:f5:9d:f4: 05:69:25:23:5a:07:c4:23:2f:56:88:bd:2c:d5:85:a4:ea:c7: 60:e5:9d:3d:86:1f:65:9f:d6:86:77:5f:f9:f0:77:c1:33:dc: 77:bc:aa:6c:d9:ee:51:24:cb:7b:8b:ee:ff:92:5e:43:c5:c9: 73:73:90:47:b3:b4:0a:40:1b:86:10:1c:80:b8:b4:94:7b:65: 0f:8e:ee:4a:5e:33:1c:b9:11:54:b0:ab:2d:83:94:09:62:3c: 6a:a3:3b:9e:1c:4d:65:fd:0b:0b:76:b6:3f:34:44:f1:a6:bd: 21:45:41:2b:2a:ad:81:0a:4a:c6:62:b0:c0:8b:9a:b7:6c:3a: 54:50:e7:74:bc:04:23:f1:27:ba:5d:7f:52:e4:86:af:38:13: 76:09:0c:b0:f3:9e:36:64:56:fb:72:53:5e:cd:0f:4d:c7:16: 5a:97:13:87:f2:13:75:32:ca:fd:06:63:5c:63:d6:c6:bc:d8: 92:d1:2c:77:58:64:6f:fb:df:c2:90:eb:89:d5:fe:72:69:a0: 08:32:21:1e:db:da:66:9f:17:35:1d:2e:55:d0:47:fe:a0:39: e7:82:b0:02 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZsTDJNyk0C8f4/BEh9FFmUJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjUxMjEyMTQ1MjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmRkYjA2ZDg1MDkzZjJiZTFiMTgzYzBlNWExYTBjYWVjNDgwODk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Cbr3Xb5d33ir9QEA1sTnvQu+dG0 FUHyIvx80/3WtfDAB5quMQ5nZoVoy4yNrnxHFWyOvQ9EDSJBFXQ/CKuWQmIP3c06 zOnMoyBtLOWdFSdWBPbzv6L54RTmwWdHz9xxGs+4jAg3MelyqHkOeeoSRXi81/5D XLqMARisBHjRf8uBr+dyC0uwFZ4HksCnapAIDZBV9F/0zuVFwsf220w5six6o59L +hZ+p4dtu8ktCx4GjST9zojTB/9wfyYwczptG5sGHBFpcorllgBHded9JSfhpTyi LtOrEFY0bD4YuFtL9aZcJaJunWmBSgB5jmffXl1P/MPtcS0xiCh4mQ2HQwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFE/dsG2FCT8r4bGDwOWhoMrsSAiZMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvVDkyd2JZVUpQeXZoc1lQQTVhR2d5dXhJQ0prLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAtBAIAAjAnAwUAKgyeBTAO AwUAKg7rQQMFAioO60AwDgMFACoO60UDBQMqDutAMA0GCSqGSIb3DQEBCwUAA4IB AQAn32NB2+GymB4+65D8NOdra6JFY3ryRi/Bf8mDOzZ7sav1nfQFaSUjWgfEIy9W iL0s1YWk6sdg5Z09hh9ln9aGd1/58HfBM9x3vKps2e5RJMt7i+7/kl5Dxclzc5BH s7QKQBuGEByAuLSUe2UPju5KXjMcuRFUsKstg5QJYjxqozueHE1l/QsLdrY/NETx pr0hRUErKq2BCkrGYrDAi5q3bDpUUOd0vAQj8Se6XX9S5IavOBN2CQyw8542ZFb7 clNezQ9NxxZalxOH8hN1Msr9BmNcY9bGvNiS0Sx3WGRv+9/CkOuJ1f5yaaAIMiEe 29pmnxc1HS5V0Ef+oDnngrAC -----END CERTIFICATE-----Generated at Fri Dec 19 20:18:49 2025 by rpki-client