This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/4SmB41euEOxEr75RnuMOxqru4tM.roa File: 4SmB41euEOxEr75RnuMOxqru4tM.roa (raw, json) Hash identifier: gKQmWnegPjuIHDqA5p6blbnSDFS80Rd4wpfMeMUgC68= Subject key identifier: E1:29:81:E3:57:AE:10:EC:44:AF:BE:51:9E:E3:0E:C6:AA:EE:E2:D3 Certificate issuer: /CN=34832317d2544434b659e5692071d8e4c4938b06 Certificate serial: 019B3B600EC2070A6E71C28DC4F9EA2020EE Authority key identifier: 34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/4SmB41euEOxEr75RnuMOxqru4tM.roa Signing time: Sat 20 Dec 2025 10:48:29 +0000 ROA not before: Sat 20 Dec 2025 10:48:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197893 IP address blocks: 176.28.72.0/24 maxlen: 24 176.28.73.0/24 maxlen: 24 176.28.74.0/24 maxlen: 24 176.28.75.0/24 maxlen: 24 176.28.76.0/24 maxlen: 24 176.28.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:60:0e:c2:07:0a:6e:71:c2:8d:c4:f9:ea:20:20:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34832317d2544434b659e5692071d8e4c4938b06 Validity Not Before: Dec 20 10:48:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e12981e357ae10ec44afbe519ee30ec6aaeee2d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:af:d9:3c:58:3d:bf:e2:32:07:58:21:18:38: 6a:3e:33:8f:38:43:19:ee:45:68:f1:f2:a4:91:a2: 89:cb:b8:47:0f:48:d1:71:85:f5:c7:0d:73:b0:13: aa:4d:7c:fa:38:6c:24:a1:f4:81:09:c5:14:2a:3e: ff:b4:54:fb:5e:d6:3a:e1:9f:50:7f:ce:d6:2f:b1: e7:19:7f:48:0f:e3:e0:bb:4b:83:d0:5a:9b:b7:88: 96:2d:6d:cd:5c:1b:4e:a9:cf:37:96:52:72:52:37: 01:be:bd:25:bc:40:36:9f:08:a5:36:0c:01:d0:4b: f7:75:88:13:ac:87:be:a8:16:5a:af:a8:d2:6e:bd: 65:80:ae:be:69:2a:7c:29:62:0b:29:d7:f0:fc:2d: 71:55:73:89:25:fb:26:82:9c:29:d3:75:63:95:c4: 54:d1:cd:34:4d:69:92:ec:29:73:c3:60:c6:a3:a3: 69:fa:5c:ce:d3:6f:99:d6:8a:a7:83:18:7e:aa:ed: 91:cd:52:37:a7:f7:48:01:ee:9b:10:24:bd:74:92: 2e:90:b5:ad:61:9a:6c:36:14:4b:26:2c:6f:a6:0e: a6:94:8b:ab:38:5d:70:43:28:60:a8:a6:a7:e1:30: 89:a9:bc:57:1e:0d:ea:2d:0b:5f:27:2f:59:93:c5: 13:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:29:81:E3:57:AE:10:EC:44:AF:BE:51:9E:E3:0E:C6:AA:EE:E2:D3 X509v3 Authority Key Identifier: keyid:34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/4SmB41euEOxEr75RnuMOxqru4tM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.28.72.0-176.28.76.255 176.28.79.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:5a:b1:0c:65:88:4f:22:f6:2f:98:c7:c0:35:95:e4:a7:a2: 7f:6b:bd:0a:63:34:98:f4:c9:54:48:cd:3b:b9:e6:9e:3f:ad: 10:07:e0:85:20:ee:9e:84:05:ae:cd:50:b7:de:e8:52:f9:71: 6a:6a:9d:a1:28:69:99:18:a3:e5:dd:ee:07:73:dc:44:fd:a5: ed:42:e5:41:bc:5a:cb:38:23:7d:d8:95:bf:3e:67:93:df:9c: 96:55:92:4a:9d:ec:1f:22:57:51:4a:b2:9a:c2:ec:13:67:5e: a8:d9:19:af:05:fc:80:70:64:0d:86:13:91:3c:29:0c:4d:8a: 26:fa:ec:73:e1:3f:86:14:11:f4:36:f6:85:d8:5f:b3:fc:d8: a4:62:2a:b8:14:d3:d3:50:80:3d:eb:a4:a5:90:ec:4e:0f:da: 64:31:0f:a6:3c:f3:23:90:cf:81:ea:91:61:4b:c7:7c:6a:89: c7:5b:b5:39:e9:9d:9e:72:96:61:bc:92:cb:9f:77:b4:ae:f7: f3:bc:04:d7:4c:22:80:0e:92:46:b4:80:c3:78:69:06:f0:d7: 7d:df:8e:d3:57:fb:e6:f1:3e:fb:f2:03:cf:d5:88:2e:7b:f8: 2c:34:9f:1c:7b:3e:4c:49:fb:35:82:4f:4c:a1:3b:43:dc:f4: ee:2d:69:3d -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZs7YA7CBwpuccKNxPnqICDuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ODMyMzE3ZDI1NDQ0MzRiNjU5ZTU2OTIwNzFkOGU0YzQ5 MzhiMDYwHhcNMjUxMjIwMTA0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTI5ODFlMzU3YWUxMGVjNDRhZmJlNTE5ZWUzMGVjNmFhZWVlMmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16/ZPFg9v+IyB1ghGDhqPjOPOEMZ 7kVo8fKkkaKJy7hHD0jRcYX1xw1zsBOqTXz6OGwkofSBCcUUKj7/tFT7XtY64Z9Q f87WL7HnGX9ID+Pgu0uD0Fqbt4iWLW3NXBtOqc83llJyUjcBvr0lvEA2nwilNgwB 0Ev3dYgTrIe+qBZar6jSbr1lgK6+aSp8KWILKdfw/C1xVXOJJfsmgpwp03VjlcRU 0c00TWmS7Clzw2DGo6Np+lzO02+Z1oqngxh+qu2RzVI3p/dIAe6bECS9dJIukLWt YZpsNhRLJixvpg6mlIurOF1wQyhgqKan4TCJqbxXHg3qLQtfJy9Zk8UTrQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFOEpgeNXrhDsRK++UZ7jDsaq7uLTMB8GA1UdIwQY MBaAFDSDIxfSVEQ0tlnlaSBx2OTEk4sGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTklNakY5SlVSRFMyV2VWcElISFk1TVNUaXdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81YTJlZDktOGY4ZS00YzFkLWFhZjMt MzBjNjVhZDgzMjkxLzEvNFNtQjQxZXVFT3hFcjc1Um51TU94cXJ1NHRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81YTJlZDktOGY4ZS00YzFkLWFhZjMtMzBjNjVhZDgzMjkx LzEvTklNakY5SlVSRFMyV2VWcElISFk1TVNUaXdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAOwHEgD BACwHEwDBACwHE8wDQYJKoZIhvcNAQELBQADggEBAG9asQxliE8i9i+Yx8A1leSn on9rvQpjNJj0yVRIzTu55p4/rRAH4IUg7p6EBa7NULfe6FL5cWpqnaEoaZkYo+Xd 7gdz3ET9pe1C5UG8Wss4I33Ylb8+Z5PfnJZVkkqd7B8iV1FKsprC7BNnXqjZGa8F /IBwZA2GE5E8KQxNiib67HPhP4YUEfQ29oXYX7P82KRiKrgU09NQgD3rpKWQ7E4P 2mQxD6Y88yOQz4HqkWFLx3xqicdbtTnpnZ5ylmG8ksufd7Su9/O8BNdMIoAOkka0 gMN4aQbw133fjtNX++bxPvvyA8/ViC57+Cw0nxx7PkxJ+zWCT0yhO0Pc9O4taT0= -----END CERTIFICATE-----Generated at Wed Dec 24 16:57:19 2025 by rpki-client