This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/x2FhTc5Vu1JZWhNTuLxQSl0SdDE.roa File: x2FhTc5Vu1JZWhNTuLxQSl0SdDE.roa (raw, json) Hash identifier: wGzfIs/Vj61F/Wl+KMvOGlwtVpgmoEHKIZg/OQa1cF4= Subject key identifier: C7:61:61:4D:CE:55:BB:52:59:5A:13:53:B8:BC:50:4A:5D:12:74:31 Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Certificate serial: 019B226F2DE488019B9F5832E3D9725E841E Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/x2FhTc5Vu1JZWhNTuLxQSl0SdDE.roa Signing time: Mon 15 Dec 2025 14:34:30 +0000 ROA not before: Mon 15 Dec 2025 14:34:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401838 IP address blocks: 93.89.211.0/24 maxlen: 24 93.89.216.0/24 maxlen: 24 93.89.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:6f:2d:e4:88:01:9b:9f:58:32:e3:d9:72:5e:84:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Validity Not Before: Dec 15 14:34:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c761614dce55bb52595a1353b8bc504a5d127431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a0:7b:7b:67:2b:96:52:10:75:8d:c1:19:07: ac:78:19:87:79:50:61:df:92:72:c6:c1:ca:99:d0: 8f:a7:a7:3a:a9:a7:64:43:9b:fa:5a:d4:48:ef:27: 5a:19:c2:a1:0b:e1:72:f9:f2:41:cd:7f:be:16:a2: f6:51:c3:8b:b7:6d:82:f1:43:fd:08:1e:9c:7d:5a: 75:1b:bb:32:3b:f2:93:f9:9f:3c:db:77:d9:df:6b: d6:5c:53:f9:c0:42:b3:ae:23:db:44:38:28:83:2e: ba:28:81:67:78:9e:3b:ee:a8:62:f4:29:c0:4f:5e: af:f8:59:41:93:c4:19:35:e7:aa:31:67:e8:0d:ec: 5f:4c:54:c0:a5:9e:9d:28:02:fa:d0:4e:6b:cf:11: bc:d9:5a:f9:79:ec:80:02:b7:ff:4e:64:d6:d1:d1: 31:ce:c0:de:f7:e4:01:6e:42:9a:6d:ef:e6:5c:25: 65:61:8a:dd:11:69:83:74:d5:50:96:a3:91:11:23: 26:2b:b7:49:07:08:2e:c2:78:70:fa:92:d9:f6:90: 2b:e8:ff:a7:e8:b3:06:aa:a6:e2:a9:a9:c7:10:e8: 77:a1:80:f0:49:6c:78:95:92:14:7b:22:7e:8e:36: 22:e7:55:05:85:ab:2b:03:27:9e:00:cf:ae:31:0f: 6e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:61:61:4D:CE:55:BB:52:59:5A:13:53:B8:BC:50:4A:5D:12:74:31 X509v3 Authority Key Identifier: keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/x2FhTc5Vu1JZWhNTuLxQSl0SdDE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.89.211.0/24 93.89.216.0/23 Signature Algorithm: sha256WithRSAEncryption 31:9f:ff:90:37:48:04:55:ea:10:23:ae:77:78:9e:f9:77:9a: c7:49:fe:4c:aa:01:db:6a:75:15:c0:cf:fe:7c:12:bd:a0:d2: b0:71:9b:7f:a7:78:51:9c:c6:d9:c3:9f:65:40:6e:9c:3e:f7: 4d:66:62:f2:d9:e3:37:56:b7:66:d0:eb:2d:d1:d8:8e:62:d0: be:47:7f:65:bd:a2:07:97:be:1f:11:6f:47:d8:1e:6a:6d:5d: 00:ac:5e:a0:02:da:e3:88:2f:68:8b:c0:9d:78:4f:60:0f:62: 05:c8:2c:6a:e9:79:70:94:87:e5:f9:10:c2:23:5f:12:3c:9a: a6:d9:95:0e:7c:8a:2d:60:f6:d1:bc:44:d6:47:be:ba:31:33: ec:4f:dd:47:e6:fe:66:2a:da:75:04:54:a9:dc:99:df:c8:38: 20:22:04:b7:98:39:65:e7:2b:7e:30:f8:fe:a2:dc:29:01:a2: 1b:7a:4e:ca:fa:a1:d2:49:9d:a5:e2:de:f3:59:a9:d8:ff:9e: bc:9e:4e:1d:0b:08:63:f2:11:7d:9e:19:e3:8b:af:ed:fa:b5: b8:5f:14:e7:b3:99:3f:7d:46:79:b4:21:2d:9b:e2:2c:98:03: d8:b8:58:d0:85:6d:11:1e:b2:1b:ae:58:b0:79:cb:b2:b3:97: cd:d8:eb:2f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsiby3kiAGbn1gy49lyXoQeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx OWZiMjAwHhcNMjUxMjE1MTQzNDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzYxNjE0ZGNlNTViYjUyNTk1YTEzNTNiOGJjNTA0YTVkMTI3NDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6B7e2crllIQdY3BGQeseBmHeVBh 35JyxsHKmdCPp6c6qadkQ5v6WtRI7ydaGcKhC+Fy+fJBzX++FqL2UcOLt22C8UP9 CB6cfVp1G7syO/KT+Z8823fZ32vWXFP5wEKzriPbRDgogy66KIFneJ477qhi9CnA T16v+FlBk8QZNeeqMWfoDexfTFTApZ6dKAL60E5rzxG82Vr5eeyAArf/TmTW0dEx zsDe9+QBbkKabe/mXCVlYYrdEWmDdNVQlqORESMmK7dJBwguwnhw+pLZ9pAr6P+n 6LMGqqbiqanHEOh3oYDwSWx4lZIUeyJ+jjYi51UFhasrAyeeAM+uMQ9u2QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMdhYU3OVbtSWVoTU7i8UEpdEnQxMB8GA1UdIwQY MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt NDI2OWI1NmJmN2Q0LzEveDJGaFRjNVZ1MUpaV2hOVHVMeFFTbDBTZERFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0 LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXVnTAwQB XVnYMA0GCSqGSIb3DQEBCwUAA4IBAQAxn/+QN0gEVeoQI653eJ75d5rHSf5MqgHb anUVwM/+fBK9oNKwcZt/p3hRnMbZw59lQG6cPvdNZmLy2eM3Vrdm0Ost0diOYtC+ R39lvaIHl74fEW9H2B5qbV0ArF6gAtrjiC9oi8CdeE9gD2IFyCxq6XlwlIfl+RDC I18SPJqm2ZUOfIotYPbRvETWR766MTPsT91H5v5mKtp1BFSp3JnfyDggIgS3mDll 5yt+MPj+otwpAaIbek7K+qHSSZ2l4t7zWanY/568nk4dCwhj8hF9nhnji6/t+rW4 XxTns5k/fUZ5tCEtm+IsmAPYuFjQhW0RHrIbrliwecuys5fN2Osv -----END CERTIFICATE-----Generated at Sat Dec 20 06:16:49 2025 by rpki-client