This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/s0P13iYTmJLEifte-p5bD4QRnYo.roa File: s0P13iYTmJLEifte-p5bD4QRnYo.roa (raw, json) Hash identifier: xM9pCSClXcnJFx941v3/89TWptwUOZDuBMRrSV74iBA= Subject key identifier: B3:43:F5:DE:26:13:98:92:C4:89:FB:5E:FA:9E:5B:0F:84:11:9D:8A Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee Certificate serial: 019B310EC2A7A96FA58726BA01B6C3A6F66D Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/s0P13iYTmJLEifte-p5bD4QRnYo.roa Signing time: Thu 18 Dec 2025 10:43:29 +0000 ROA not before: Thu 18 Dec 2025 10:43:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 194.53.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:0e:c2:a7:a9:6f:a5:87:26:ba:01:b6:c3:a6:f6:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee Validity Not Before: Dec 18 10:43:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b343f5de26139892c489fb5efa9e5b0f84119d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b2:59:be:03:8f:67:2d:44:25:9e:16:7c:0c: 51:18:94:d5:2d:e0:10:e2:30:79:42:08:79:49:cc: 3f:2f:54:13:55:f2:20:5d:51:c1:4b:19:d8:cb:cb: 41:99:67:78:7d:dc:36:76:41:1c:e5:2a:a9:23:96: db:52:a0:c8:4d:49:ab:f7:43:83:b3:5d:58:5d:01: 87:f3:f3:cd:e0:de:7b:23:19:bd:67:e5:f1:5e:54: d9:97:66:b8:12:d9:82:22:2b:b9:e1:c9:69:8a:fb: 6d:64:ed:dc:4d:bc:59:c0:a9:8e:e3:b9:a0:02:75: f0:c9:b0:8f:56:48:fc:e0:02:92:d0:c6:86:cb:58: 2c:10:f1:8b:73:a1:a8:79:fc:47:c3:df:68:28:1d: ac:53:6f:a4:af:3f:fb:81:e0:44:25:a2:43:e6:6a: 58:4d:78:c2:33:0f:bd:52:ab:50:60:6d:56:1c:6d: 65:6a:b9:1b:80:03:cb:a8:f6:9e:16:cd:b8:2a:f6: e7:6f:31:ed:a2:65:1d:dd:7f:d0:59:1f:87:a6:64: 19:a7:da:96:bd:70:2e:ba:2a:b5:fa:55:b5:fb:a2: 44:6f:5c:73:86:45:db:16:67:d0:3d:e4:a0:9f:fd: 92:2f:47:cc:87:f9:a1:50:30:37:c0:87:88:a0:60: fa:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:43:F5:DE:26:13:98:92:C4:89:FB:5E:FA:9E:5B:0F:84:11:9D:8A X509v3 Authority Key Identifier: keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/s0P13iYTmJLEifte-p5bD4QRnYo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.53.139.0/24 Signature Algorithm: sha256WithRSAEncryption 69:15:f7:d9:7f:94:6a:ed:4f:56:c3:cd:90:fc:84:99:68:6d: b1:24:1f:12:9d:ae:47:7b:41:45:31:ca:74:56:11:4e:17:cc: 01:2f:db:d8:bb:1a:03:21:94:8a:82:39:7b:63:c6:ab:36:96: 82:c0:d3:61:cc:ca:b2:c9:11:98:6e:26:62:b9:e8:09:60:56: 9c:93:8d:09:c0:3e:dc:ff:66:ee:b1:94:ec:53:1b:cb:4f:83: 6a:f0:13:0b:af:55:c8:a7:1c:18:46:1b:01:cc:a4:08:f5:4d: 0a:87:6c:fe:a9:a3:c8:66:2c:39:16:34:15:a0:b2:82:60:ba: 0d:0f:f5:87:44:17:84:f6:d1:df:50:19:f5:65:8c:8d:a1:07: ac:a8:f9:72:cc:dc:0c:cf:02:97:5a:25:30:32:e8:54:67:24: 0a:04:96:48:9c:b9:ae:8a:6a:36:e2:86:35:8b:ee:de:59:12: b5:70:bf:ae:b5:8d:5a:a1:1b:78:77:23:ae:d8:fe:e9:7b:c9: eb:02:0a:26:12:92:80:41:df:9d:3e:89:a9:67:c1:fa:74:c9: 5b:2e:e7:c5:cc:fd:51:d2:d9:8b:4f:e4:a1:2b:29:67:df:ae: 7e:e7:6f:13:b9:97:40:75:f3:ce:99:31:c1:8c:14:b4:0e:80: c6:b4:23:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsxDsKnqW+lhya6AbbDpvZtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YWZlM2YwYzllNTU1ZTUyZDM1MDVkNjE2MzI3OGRmM2Rh MThjZWUwHhcNMjUxMjE4MTA0MzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzQzZjVkZTI2MTM5ODkyYzQ4OWZiNWVmYTllNWIwZjg0MTE5ZDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrJZvgOPZy1EJZ4WfAxRGJTVLeAQ 4jB5Qgh5Scw/L1QTVfIgXVHBSxnYy8tBmWd4fdw2dkEc5SqpI5bbUqDITUmr90OD s11YXQGH8/PN4N57Ixm9Z+XxXlTZl2a4EtmCIiu54clpivttZO3cTbxZwKmO47mg AnXwybCPVkj84AKS0MaGy1gsEPGLc6GoefxHw99oKB2sU2+krz/7geBEJaJD5mpY TXjCMw+9UqtQYG1WHG1larkbgAPLqPaeFs24KvbnbzHtomUd3X/QWR+HpmQZp9qW vXAuuiq1+lW1+6JEb1xzhkXbFmfQPeSgn/2SL0fMh/mhUDA3wIeIoGD68wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLND9d4mE5iSxIn7XvqeWw+EEZ2KMB8GA1UdIwQY MBaAFNSv4/DJ5VXlLTUF1hYyeN89oYzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xYzY3ZWYtZTgzZC00NDI3LTg2NGIt YzU5ODI1YmJjYjMyLzEvczBQMTNpWVRtSkxFaWZ0ZS1wNWJENFFSbllvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xYzY3ZWYtZTgzZC00NDI3LTg2NGItYzU5ODI1YmJjYjMy LzEvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjWLMA0G CSqGSIb3DQEBCwUAA4IBAQBpFffZf5Rq7U9Ww82Q/ISZaG2xJB8Sna5He0FFMcp0 VhFOF8wBL9vYuxoDIZSKgjl7Y8arNpaCwNNhzMqyyRGYbiZiuegJYFack40JwD7c /2busZTsUxvLT4Nq8BMLr1XIpxwYRhsBzKQI9U0Kh2z+qaPIZiw5FjQVoLKCYLoN D/WHRBeE9tHfUBn1ZYyNoQesqPlyzNwMzwKXWiUwMuhUZyQKBJZInLmuimo24oY1 i+7eWRK1cL+utY1aoRt4dyOu2P7pe8nrAgomEpKAQd+dPompZ8H6dMlbLufFzP1R 0tmLT+ShKyln365+528TuZdAdfPOmTHBjBS0DoDGtCPq -----END CERTIFICATE-----Generated at Sun Dec 21 09:59:17 2025 by rpki-client