This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/T5Ox6X5s_I2twZ0Cssf_NchxTww.roa File: T5Ox6X5s_I2twZ0Cssf_NchxTww.roa (raw, json) Hash identifier: sPLZ3QR5dtdwgQNHSRYU4O3H2e5m6MJIKMJWbzpQN5w= Subject key identifier: 4F:93:B1:E9:7E:6C:FC:8D:AD:C1:9D:02:B2:C7:FF:35:C8:71:4F:0C Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B30F8CB7944B31B26DC3C8F3000726D43 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/T5Ox6X5s_I2twZ0Cssf_NchxTww.roa Signing time: Thu 18 Dec 2025 10:19:29 +0000 ROA not before: Thu 18 Dec 2025 10:19:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209709 IP address blocks: 213.169.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:f8:cb:79:44:b3:1b:26:dc:3c:8f:30:00:72:6d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Dec 18 10:19:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4f93b1e97e6cfc8dadc19d02b2c7ff35c8714f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:57:c6:76:30:1d:3d:6e:74:84:16:10:3b:53: 8f:3f:54:28:f2:64:10:86:a4:f5:67:1e:08:3e:f4: 47:52:bc:5c:5a:5f:b2:49:d3:07:f0:9c:41:2e:ec: 0f:2b:c4:db:5e:15:8e:18:05:23:76:f2:3a:0e:76: a5:91:f6:08:f0:8f:90:2e:0a:f7:23:fe:81:8f:d6: f4:56:0f:c2:fb:45:0f:87:eb:ea:e0:df:65:73:df: 15:37:de:1e:8f:00:b6:fc:50:72:d0:6d:be:57:2d: cc:9f:d2:31:8d:39:98:86:36:4c:7d:cd:f5:bc:71: 38:9d:c2:d8:79:8b:0d:a9:a6:b6:80:7e:47:0a:b3: b8:97:6a:07:ba:94:77:d0:81:2e:6c:1f:23:87:9d: c0:91:dd:d4:92:4b:78:76:64:7c:cd:e6:cd:1f:ec: 9e:55:ff:6f:84:79:69:07:6e:8c:91:3e:9a:d3:6f: e6:d6:05:92:a2:f2:0d:4c:3c:21:4b:ca:83:df:7a: d4:df:49:64:8f:05:76:ab:fc:c8:f2:78:ff:e6:39: ef:2a:65:fc:0b:00:26:fd:e7:48:7e:65:38:77:09: c5:ef:5e:d5:d3:4f:7b:70:ae:6a:ec:a6:4c:5f:d9: 13:c6:42:48:5a:e7:1e:11:92:b3:59:8c:af:b0:02: f2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:93:B1:E9:7E:6C:FC:8D:AD:C1:9D:02:B2:C7:FF:35:C8:71:4F:0C X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/T5Ox6X5s_I2twZ0Cssf_NchxTww.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.169.206.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:4a:33:71:77:9e:c3:4e:0f:28:89:f9:a2:cc:81:3b:9d:1b: 56:12:e9:7e:85:a9:18:76:11:8b:2c:5b:31:6b:75:7f:49:fa: e3:3f:f8:41:57:4c:ad:cb:6c:99:7c:af:a8:b1:b3:43:84:b8: f2:d9:6b:8b:4a:13:8a:1d:0f:3d:04:0c:e9:8c:26:02:c5:be: fa:68:1a:a5:d3:98:04:8f:a2:cb:c9:26:92:2e:9d:53:27:67: 74:67:cc:0f:78:36:2d:33:90:59:5e:53:1c:2b:12:d3:f8:f1: 87:dd:c1:6c:59:c8:2a:0d:14:d2:6a:47:8d:f6:13:27:4b:ec: bc:4d:49:e3:5c:a9:48:9f:0d:24:01:04:1d:54:70:48:42:52: 24:0b:a9:7f:fb:81:48:93:0c:7c:f2:9e:3c:61:e2:ac:e3:49: 7a:4b:85:da:35:eb:c2:64:98:c0:ca:fb:47:01:e9:56:5f:d9: d7:87:85:64:4a:87:bc:1e:9a:9b:fd:65:67:ab:14:17:de:3e: 4e:76:ea:0a:75:9b:eb:4d:bd:e4:c7:0e:5f:4a:86:6a:58:1e: ec:62:7a:e1:4e:50:71:c5:05:a5:bb:6d:bf:b2:b5:8e:57:3e: a7:0c:88:dd:c1:2c:f0:ce:85:9a:b2:e1:ab:b2:d2:c0:a2:75: 67:39:bd:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsw+Mt5RLMbJtw8jzAAcm1DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjUxMjE4MTAxOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjkzYjFlOTdlNmNmYzhkYWRjMTlkMDJiMmM3ZmYzNWM4NzE0ZjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FfGdjAdPW50hBYQO1OPP1Qo8mQQ hqT1Zx4IPvRHUrxcWl+ySdMH8JxBLuwPK8TbXhWOGAUjdvI6DnalkfYI8I+QLgr3 I/6Bj9b0Vg/C+0UPh+vq4N9lc98VN94ejwC2/FBy0G2+Vy3Mn9IxjTmYhjZMfc31 vHE4ncLYeYsNqaa2gH5HCrO4l2oHupR30IEubB8jh53Akd3Ukkt4dmR8zebNH+ye Vf9vhHlpB26MkT6a02/m1gWSovINTDwhS8qD33rU30lkjwV2q/zI8nj/5jnvKmX8 CwAm/edIfmU4dwnF717V0097cK5q7KZMX9kTxkJIWuceEZKzWYyvsALy/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE+Tsel+bPyNrcGdArLH/zXIcU8MMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvVDVPeDZYNXNfSTJ0d1owQ3NzZl9OY2h4VHd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1anOMA0G CSqGSIb3DQEBCwUAA4IBAQALSjNxd57DTg8oifmizIE7nRtWEul+hakYdhGLLFsx a3V/SfrjP/hBV0yty2yZfK+osbNDhLjy2WuLShOKHQ89BAzpjCYCxb76aBql05gE j6LLySaSLp1TJ2d0Z8wPeDYtM5BZXlMcKxLT+PGH3cFsWcgqDRTSakeN9hMnS+y8 TUnjXKlInw0kAQQdVHBIQlIkC6l/+4FIkwx88p48YeKs40l6S4XaNevCZJjAyvtH AelWX9nXh4VkSoe8Hpqb/WVnqxQX3j5OduoKdZvrTb3kxw5fSoZqWB7sYnrhTlBx xQWlu22/srWOVz6nDIjdwSzwzoWasuGrstLAonVnOb0u -----END CERTIFICATE-----Generated at Sat Dec 20 03:21:06 2025 by rpki-client