This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/urZl65CRivx52sketiAe5EpBFP4.roa File: urZl65CRivx52sketiAe5EpBFP4.roa (raw, json) Hash identifier: bKGI/B1E7oGfmCcuUp3qEKXz5nXRyj9wb1zzwK0fBnE= Subject key identifier: BA:B6:65:EB:90:91:8A:FC:79:DA:C9:1E:B6:20:1E:E4:4A:41:14:FE Certificate issuer: /CN=7741d13a15a987dd60019c0265d2ecec4840944a Certificate serial: 019B2C4B7778623181B377B464502C71046A Authority key identifier: 77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/urZl65CRivx52sketiAe5EpBFP4.roa Signing time: Wed 17 Dec 2025 12:31:41 +0000 ROA not before: Wed 17 Dec 2025 12:31:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 14618 IP address blocks: 81.161.62.0/24 maxlen: 24 91.227.193.0/24 maxlen: 24 194.34.104.0/24 maxlen: 24 2a01:fd40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.crl rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.mft rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 18:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:4b:77:78:62:31:81:b3:77:b4:64:50:2c:71:04:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7741d13a15a987dd60019c0265d2ecec4840944a Validity Not Before: Dec 17 12:31:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bab665eb90918afc79dac91eb6201ee44a4114fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b6:38:66:48:07:80:79:54:c2:b4:d9:97:e8: 4e:ba:04:f0:b1:0f:01:90:a1:19:ae:40:3f:af:c0: 2b:94:83:e5:f1:58:4b:88:14:6b:4b:8f:78:2e:bb: 4f:34:96:fc:4e:a9:4f:56:61:67:a7:ba:05:05:e1: 6f:aa:bc:e8:80:59:e1:ff:e9:3c:fc:a9:11:58:29: 2c:cd:28:38:e6:d0:e9:75:c3:e5:20:ee:46:cc:1f: 84:3f:c8:f9:de:f0:4b:a0:48:73:56:a4:f8:ac:4a: 3c:ad:24:e7:72:1e:73:ad:aa:77:53:21:57:39:cc: ca:3f:7d:97:27:12:e1:3f:87:f6:e9:07:f6:50:e9: 6e:9e:af:36:c1:0d:3f:98:b5:12:8d:41:59:12:81: f4:0d:e4:70:6b:18:7b:8e:64:ff:b7:d6:f9:be:7e: c7:be:05:d9:36:2f:19:ea:0f:4c:e5:8d:bb:03:f6: d2:a8:25:90:7b:c9:ef:a5:80:4c:ad:0b:0c:c2:ad: 55:ea:58:98:3f:79:95:2e:aa:48:f8:93:8b:3f:5d: 5d:d1:3e:3a:8e:1e:4f:15:24:7f:f8:e1:7e:61:f7: 9b:f7:15:86:96:94:c6:81:a8:18:2f:09:89:b0:80: 47:3f:9f:35:40:07:77:fc:c8:d6:cc:9a:b7:62:7a: 16:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B6:65:EB:90:91:8A:FC:79:DA:C9:1E:B6:20:1E:E4:4A:41:14:FE X509v3 Authority Key Identifier: keyid:77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/urZl65CRivx52sketiAe5EpBFP4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.161.62.0/24 91.227.193.0/24 194.34.104.0/24 IPv6: 2a01:fd40::/32 Signature Algorithm: sha256WithRSAEncryption ac:b0:22:dd:4e:a1:9b:b9:98:19:db:9b:76:a7:d4:2b:68:e5: da:93:85:bd:4e:d8:75:a1:76:49:ba:26:ab:37:81:04:32:ab: 8e:3d:98:2a:07:02:b4:db:80:6c:f7:43:5e:30:0a:61:c7:4c: 9e:2b:2f:63:4c:88:cf:f0:18:ac:36:86:8c:99:4c:8c:6a:d6: c8:1d:fa:96:61:a8:17:6b:87:d1:24:bc:4f:4e:c2:41:c4:79: 7b:ad:12:f6:2c:d9:85:aa:6c:75:35:db:cb:b3:bd:f0:07:21: 7b:df:7a:7e:28:57:d2:81:40:6f:60:d2:e8:ab:24:70:27:bd: 01:22:66:43:e1:fa:3e:dd:9a:46:b3:b5:ea:36:bc:31:84:60: b8:51:65:a5:27:be:fe:46:08:4a:23:f4:cc:94:28:5f:02:e6: a6:82:9f:4e:84:37:0d:04:86:e0:ae:45:ba:b6:a3:e2:e0:55: 87:91:76:19:a7:30:0c:f8:f5:51:b9:19:4c:45:7b:ae:f7:31: a4:50:1f:a6:8d:af:70:a0:62:1d:0f:ad:09:9e:60:84:a9:6d: 65:cb:96:d8:bd:d2:60:06:01:e2:0b:8a:b5:aa:d1:55:3a:63: a4:ee:7f:87:1b:41:56:15:d6:34:b0:4c:94:c3:4e:54:77:f9: b3:67:be:84 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZssS3d4YjGBs3e0ZFAscQRqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NDFkMTNhMTVhOTg3ZGQ2MDAxOWMwMjY1ZDJlY2VjNDg0 MDk0NGEwHhcNMjUxMjE3MTIzMTQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWI2NjVlYjkwOTE4YWZjNzlkYWM5MWViNjIwMWVlNDRhNDExNGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbY4ZkgHgHlUwrTZl+hOugTwsQ8B kKEZrkA/r8ArlIPl8VhLiBRrS494LrtPNJb8TqlPVmFnp7oFBeFvqrzogFnh/+k8 /KkRWCkszSg45tDpdcPlIO5GzB+EP8j53vBLoEhzVqT4rEo8rSTnch5zrap3UyFX OczKP32XJxLhP4f26Qf2UOlunq82wQ0/mLUSjUFZEoH0DeRwaxh7jmT/t9b5vn7H vgXZNi8Z6g9M5Y27A/bSqCWQe8nvpYBMrQsMwq1V6liYP3mVLqpI+JOLP11d0T46 jh5PFSR/+OF+Yfeb9xWGlpTGgagYLwmJsIBHP581QAd3/MjWzJq3YnoWkwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFLq2ZeuQkYr8edrJHrYgHuRKQRT+MB8GA1UdIwQY MBaAFHdB0ToVqYfdYAGcAmXS7OxIQJRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDBIUk9oV3BoOTFnQVp3Q1pkTHM3RWhBbEVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8wYmU5ZDAtOTk5YS00NDlhLTg1MTkt MzUyM2UzMDMwYmU0LzEvdXJabDY1Q1Jpdng1MnNrZXRpQWU1RXBCRlA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8wYmU5ZDAtOTk5YS00NDlhLTg1MTktMzUyM2UzMDMwYmU0 LzEvZDBIUk9oV3BoOTFnQVp3Q1pkTHM3RWhBbEVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAUaE+AwQA W+PBAwQAwiJoMA0EAgACMAcDBQAqAf1AMA0GCSqGSIb3DQEBCwUAA4IBAQCssCLd TqGbuZgZ25t2p9QraOXak4W9Tth1oXZJuiarN4EEMquOPZgqBwK024Bs90NeMAph x0yeKy9jTIjP8BisNoaMmUyMatbIHfqWYagXa4fRJLxPTsJBxHl7rRL2LNmFqmx1 NdvLs73wByF733p+KFfSgUBvYNLoqyRwJ70BImZD4fo+3ZpGs7XqNrwxhGC4UWWl J77+RghKI/TMlChfAuamgp9OhDcNBIbgrkW6tqPi4FWHkXYZpzAM+PVRuRlMRXuu 9zGkUB+mja9woGIdD60JnmCEqW1ly5bYvdJgBgHiC4q1qtFVOmOk7n+HG0FWFdY0 sEyUw05Ud/mzZ76E -----END CERTIFICATE-----Generated at Sat Dec 20 04:20:21 2025 by rpki-client