This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/073GrQpBQATOuuhZGpr6jV24MWU.roa File: 073GrQpBQATOuuhZGpr6jV24MWU.roa (raw, json) Hash identifier: 8s1+WHvUVFOEN3kgSXcEF2hzw7Cn5/LYNAZ+hbuOmcY= Subject key identifier: D3:BD:C6:AD:0A:41:40:04:CE:BA:E8:59:1A:9A:FA:8D:5D:B8:31:65 Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Certificate serial: 019B320E3231BEEF81273C61CA72E547D751 Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/073GrQpBQATOuuhZGpr6jV24MWU.roa Signing time: Thu 18 Dec 2025 15:22:29 +0000 ROA not before: Thu 18 Dec 2025 15:22:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49367 IP address blocks: 93.113.150.0/24 maxlen: 24 93.113.151.0/24 maxlen: 24 94.176.108.0/24 maxlen: 24 2a04:68c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:0e:32:31:be:ef:81:27:3c:61:ca:72:e5:47:d7:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Validity Not Before: Dec 18 15:22:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d3bdc6ad0a414004cebae8591a9afa8d5db83165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:94:6e:46:70:e0:b6:8a:82:f5:d8:25:df:fe: 69:f3:99:e0:9b:63:1c:7e:5d:27:38:7a:7a:f5:20: b0:b3:d6:ea:94:c0:cd:88:73:82:b9:96:56:a2:5c: 32:39:44:9a:64:22:7f:1e:36:1f:b8:96:95:da:0a: 2c:1d:c7:06:79:31:07:36:09:24:07:bf:ef:d9:7a: 41:4d:49:14:a6:02:1d:2a:fd:1b:21:b3:5a:b2:e6: b5:b8:b5:8a:5e:b3:c0:1c:41:1a:c1:48:4b:d8:ff: 99:ee:ee:95:12:53:82:eb:38:23:05:c4:1b:3e:df: 9c:25:cc:44:b5:39:bd:14:40:46:f6:9a:0e:26:1c: 2b:1c:3c:9f:e2:58:9f:1b:cb:53:fa:0d:aa:a7:c4: bb:32:c1:ac:22:38:e0:90:51:bb:22:1b:42:2e:75: a8:6d:50:db:f7:02:de:83:51:87:03:fe:ee:78:58: 6d:7c:b3:a3:f4:2c:b2:9f:6b:ef:d8:a5:76:9e:df: fa:22:8b:a2:d3:e4:90:23:dd:94:d4:71:50:69:b3: 4e:27:d4:8c:97:42:15:a2:a5:97:c6:0d:30:a5:ec: dd:70:08:a8:4e:7b:4c:9d:77:bf:35:a9:91:20:35: de:4e:64:b4:77:91:65:4a:8f:09:7c:ee:bf:bc:d3: 2e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BD:C6:AD:0A:41:40:04:CE:BA:E8:59:1A:9A:FA:8D:5D:B8:31:65 X509v3 Authority Key Identifier: keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/073GrQpBQATOuuhZGpr6jV24MWU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.113.150.0/23 94.176.108.0/24 IPv6: 2a04:68c0::/32 Signature Algorithm: sha256WithRSAEncryption a5:ac:c0:ac:30:4e:64:6f:44:68:1b:96:5a:ca:57:58:0e:2c: 87:a0:78:82:77:ba:44:97:ec:b6:1a:3d:dd:06:65:cc:fc:dd: 2a:ca:01:9c:66:4f:a6:31:e3:0d:2e:84:50:c2:81:ec:e0:33: 4c:80:52:16:b6:d7:f4:9a:24:59:cb:58:10:3d:31:db:5e:ec: 5d:bf:33:2d:df:ae:7d:91:d4:c0:3f:48:da:3c:c9:85:36:73: 4d:38:7b:30:e0:5f:51:75:fc:50:e7:00:d8:95:d0:b4:73:ce: b8:dd:e8:fc:e4:6d:c2:63:a7:bd:00:f8:6b:ef:6e:02:b8:de: 09:82:08:2d:ab:91:fe:76:b6:83:b4:85:db:b9:99:0a:aa:8c: 20:05:ec:ee:df:09:a3:5a:9b:c8:91:23:5a:fe:65:e2:34:15: ec:93:e1:c2:24:2b:13:d8:32:56:66:ad:c3:9d:08:55:8c:2e: d9:25:60:cc:cb:cc:d8:9b:fc:71:28:02:88:ca:43:30:14:6b: ed:5b:f5:6d:f3:a8:5a:f8:4d:4f:f3:9d:b6:cd:55:40:b1:49: b2:2c:d4:1e:4e:d7:88:fd:ce:94:c3:c8:a9:c8:3c:23:6c:a6: b4:3f:7a:70:9d:b8:8e:e5:c9:e8:30:f1:bd:b0:fc:4b:9b:bb: 7d:21:b9:d2 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZsyDjIxvu+BJzxhynLlR9dRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3 NjA1MTkwHhcNMjUxMjE4MTUyMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2JkYzZhZDBhNDE0MDA0Y2ViYWU4NTkxYTlhZmE4ZDVkYjgzMTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZRuRnDgtoqC9dgl3/5p85ngm2Mc fl0nOHp69SCws9bqlMDNiHOCuZZWolwyOUSaZCJ/HjYfuJaV2gosHccGeTEHNgkk B7/v2XpBTUkUpgIdKv0bIbNasua1uLWKXrPAHEEawUhL2P+Z7u6VElOC6zgjBcQb Pt+cJcxEtTm9FEBG9poOJhwrHDyf4lifG8tT+g2qp8S7MsGsIjjgkFG7IhtCLnWo bVDb9wLeg1GHA/7ueFhtfLOj9Cyyn2vv2KV2nt/6Ioui0+SQI92U1HFQabNOJ9SM l0IVoqWXxg0wpezdcAioTntMnXe/NamRIDXeTmS0d5FlSo8JfO6/vNMuVQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNO9xq0KQUAEzrroWRqa+o1duDFlMB8GA1UdIwQY MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt NzQwOGViOGJjNTg2LzEvMDczR3JRcEJRQVRPdXVoWkdwcjZqVjI0TVdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2 LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBXXGWAwQA XrBsMA0EAgACMAcDBQAqBGjAMA0GCSqGSIb3DQEBCwUAA4IBAQClrMCsME5kb0Ro G5ZayldYDiyHoHiCd7pEl+y2Gj3dBmXM/N0qygGcZk+mMeMNLoRQwoHs4DNMgFIW ttf0miRZy1gQPTHbXuxdvzMt3659kdTAP0jaPMmFNnNNOHsw4F9RdfxQ5wDYldC0 c8643ej85G3CY6e9APhr724CuN4Jgggtq5H+draDtIXbuZkKqowgBezu3wmjWpvI kSNa/mXiNBXsk+HCJCsT2DJWZq3DnQhVjC7ZJWDMy8zYm/xxKAKIykMwFGvtW/Vt 86ha+E1P8522zVVAsUmyLNQeTteI/c6Uw8ipyDwjbKa0P3pwnbiO5cnoMPG9sPxL m7t9IbnS -----END CERTIFICATE-----Generated at Sat Dec 20 07:44:02 2025 by rpki-client