This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/IPsGPqLmFHx-C33JFo-4MPUAWR4.roa File: IPsGPqLmFHx-C33JFo-4MPUAWR4.roa (raw, json) Hash identifier: Sl37i0Ko7qbIuxKKVw0qC5lMicuIGX9lG5VLqXg9Ln0= Subject key identifier: 20:FB:06:3E:A2:E6:14:7C:7E:0B:7D:C9:16:8F:B8:30:F5:00:59:1E Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019B0A8F1C8BF9BEA485A303326A0496E5F8 Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/IPsGPqLmFHx-C33JFo-4MPUAWR4.roa Signing time: Wed 10 Dec 2025 23:18:29 +0000 ROA not before: Wed 10 Dec 2025 23:18:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209371 IP address blocks: 193.9.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0a:8f:1c:8b:f9:be:a4:85:a3:03:32:6a:04:96:e5:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Dec 10 23:18:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=20fb063ea2e6147c7e0b7dc9168fb830f500591e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:18:b0:d6:42:ca:e3:9c:73:71:34:fc:6c:a7: 88:ab:ec:20:3c:37:c6:85:bc:6b:6d:d9:09:51:bf: 97:e9:1f:66:47:66:94:b0:fc:53:ea:f3:8b:0e:99: 3d:ba:83:aa:12:6a:c1:d7:66:fc:2d:24:d8:12:d8: b9:45:1a:4c:55:27:10:3c:1b:34:9d:21:0c:16:04: 0d:0d:b0:ae:3a:df:14:20:f7:50:7d:a2:38:ab:68: 09:bf:60:b0:4c:af:7e:bb:1e:c6:8d:49:8f:2f:f5: 31:fb:b2:95:11:bd:c7:e4:03:60:cb:da:14:21:73: 96:e1:04:56:ac:c9:ca:22:31:15:04:5a:ef:1c:34: 17:8e:23:85:48:92:1f:6b:cd:93:ce:e0:cd:0e:ac: b7:51:a1:c8:6c:df:fb:8c:d5:f0:ba:55:cf:32:2f: 89:de:e2:b7:ef:4b:4e:fc:d5:da:1a:22:bc:df:52: 60:a8:bd:fa:84:03:88:86:9f:b7:b6:2b:9b:63:83: 57:9b:f1:f3:ea:57:3f:e7:7f:96:f2:3c:a9:74:40: a9:e0:2f:eb:da:c1:9c:b7:63:30:d0:94:5b:00:93: 57:d1:14:9e:26:d5:c8:93:2a:31:9a:77:70:a2:0c: 4a:a6:86:44:66:de:65:55:b8:05:18:96:c1:55:b0: f6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FB:06:3E:A2:E6:14:7C:7E:0B:7D:C9:16:8F:B8:30:F5:00:59:1E X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/IPsGPqLmFHx-C33JFo-4MPUAWR4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.9.56.0/24 Signature Algorithm: sha256WithRSAEncryption 12:f4:20:63:8d:60:d8:e0:f3:43:f4:02:24:11:c4:a5:7a:9c: 21:3a:ff:cf:87:99:20:d6:21:b8:0c:6f:45:76:0a:77:dc:df: 71:70:d0:f5:ff:71:2a:a7:ec:0a:b4:6e:e9:7c:f4:69:5a:28: 0e:99:0f:32:f0:9b:cd:d2:6f:98:e9:b2:9e:77:79:ac:08:12: cb:c2:08:e4:34:bd:bc:75:d1:13:f2:d3:11:97:2e:b5:67:95: 9e:3b:c4:dc:f6:e6:fa:c2:3c:7a:31:2a:5f:79:f1:2b:17:a7: d2:b7:0b:90:ec:b0:9c:dc:11:c3:44:78:e9:c4:fc:de:9c:de: 14:09:ea:d8:a7:5e:f0:3d:5d:dc:46:1b:bc:11:2c:dd:f2:95: 01:73:70:3d:51:38:48:30:24:ba:f5:5e:ee:be:65:59:5f:c4: 14:e7:ef:9f:02:a7:fa:b6:9e:69:c0:fe:fa:b9:07:46:8c:f3: 2c:0f:b7:d5:9b:c0:95:18:02:90:2e:b7:51:37:e9:53:74:dc: 1d:f9:8a:4c:68:b9:df:df:d8:93:d3:f9:f5:41:31:1c:e5:2d: 75:38:84:68:ca:c9:cd:d6:3d:01:ff:9e:59:5d:e8:2d:80:a1: 82:f7:4a:f7:42:b3:e8:6c:ee:03:f7:9f:53:4b:a3:0f:4e:f4: 0e:3e:31:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsKjxyL+b6khaMDMmoEluX4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjUxMjEwMjMxODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGZiMDYzZWEyZTYxNDdjN2UwYjdkYzkxNjhmYjgzMGY1MDA1OTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBiw1kLK45xzcTT8bKeIq+wgPDfG hbxrbdkJUb+X6R9mR2aUsPxT6vOLDpk9uoOqEmrB12b8LSTYEti5RRpMVScQPBs0 nSEMFgQNDbCuOt8UIPdQfaI4q2gJv2CwTK9+ux7GjUmPL/Ux+7KVEb3H5ANgy9oU IXOW4QRWrMnKIjEVBFrvHDQXjiOFSJIfa82TzuDNDqy3UaHIbN/7jNXwulXPMi+J 3uK370tO/NXaGiK831JgqL36hAOIhp+3tiubY4NXm/Hz6lc/53+W8jypdECp4C/r 2sGct2Mw0JRbAJNX0RSeJtXIkyoxmndwogxKpoZEZt5lVbgFGJbBVbD23QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCD7Bj6i5hR8fgt9yRaPuDD1AFkeMB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvSVBzR1BxTG1GSHgtQzMzSkZvLTRNUFVBV1I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQk4MA0G CSqGSIb3DQEBCwUAA4IBAQAS9CBjjWDY4PND9AIkEcSlepwhOv/Ph5kg1iG4DG9F dgp33N9xcND1/3Eqp+wKtG7pfPRpWigOmQ8y8JvN0m+Y6bKed3msCBLLwgjkNL28 ddET8tMRly61Z5WeO8Tc9ub6wjx6MSpfefErF6fStwuQ7LCc3BHDRHjpxPzenN4U CerYp17wPV3cRhu8ESzd8pUBc3A9UThIMCS69V7uvmVZX8QU5++fAqf6tp5pwP76 uQdGjPMsD7fVm8CVGAKQLrdRN+lTdNwd+YpMaLnf39iT0/n1QTEc5S11OIRoysnN 1j0B/55ZXegtgKGC90r3QrPobO4D959TS6MPTvQOPjEt -----END CERTIFICATE-----Generated at Fri Dec 19 22:34:22 2025 by rpki-client