This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/NSkX2Ttb-GtCmihukXko3Fmf1IQ.roa File: NSkX2Ttb-GtCmihukXko3Fmf1IQ.roa (raw, json) Hash identifier: ibd1ZtePvRWyvxK9VkiNqtamRlmDibd6ciqaMsxSjvs= Subject key identifier: 35:29:17:D9:3B:5B:F8:6B:42:9A:28:6E:91:79:28:DC:59:9F:D4:84 Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Certificate serial: 019B3166A8387AD2CE9B40139B85C18D4627 Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/NSkX2Ttb-GtCmihukXko3Fmf1IQ.roa Signing time: Thu 18 Dec 2025 12:19:29 +0000 ROA not before: Thu 18 Dec 2025 12:19:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211373 IP address blocks: 195.39.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:66:a8:38:7a:d2:ce:9b:40:13:9b:85:c1:8d:46:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Validity Not Before: Dec 18 12:19:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=352917d93b5bf86b429a286e917928dc599fd484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:15:cf:94:e4:6f:37:5e:98:16:cc:d9:86:db: e4:4f:dc:3c:20:b6:16:dd:2b:d4:aa:0f:cf:37:7d: af:4e:a3:22:c2:99:c4:9e:ed:f6:51:dd:ee:40:9d: 14:a3:c1:ce:72:dd:a7:22:4c:1b:a5:3e:7c:eb:49: 6b:01:ca:fc:e3:63:13:78:3a:d2:45:f1:bf:70:7a: da:5b:24:61:e8:df:22:08:a0:27:20:9f:4a:69:5f: 7b:b4:18:0d:13:5d:0e:ac:d0:19:97:92:70:87:f3: 01:29:6f:58:7a:99:a9:a6:3f:79:0c:75:eb:73:07: a3:75:1d:71:16:a0:71:0a:34:f1:0d:36:d3:92:9f: 1d:9b:a4:d4:cb:d3:f5:56:79:a5:f8:45:71:a3:75: 40:79:d7:90:34:7c:3a:6a:55:1a:3d:78:4e:48:e6: 90:94:23:af:94:68:7f:79:28:60:2b:da:96:13:86: 0e:e5:68:7c:2e:61:3c:61:d2:42:6c:a6:3d:ce:cd: e2:17:ba:65:09:d7:1f:6e:72:7b:68:a7:41:2d:a9: fd:fb:79:4a:09:ba:8e:5c:7c:e5:c5:5f:03:e4:ba: 02:92:a2:17:96:89:03:47:56:65:93:2a:16:34:a2: 9b:ef:63:8c:2b:45:46:2a:77:f6:c3:54:43:01:fc: c2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:29:17:D9:3B:5B:F8:6B:42:9A:28:6E:91:79:28:DC:59:9F:D4:84 X509v3 Authority Key Identifier: keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/NSkX2Ttb-GtCmihukXko3Fmf1IQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.39.214.0/24 Signature Algorithm: sha256WithRSAEncryption 85:09:a6:74:7c:9f:72:ed:f9:f1:dd:a2:98:ed:82:c6:48:93: b0:fa:dc:e2:c0:0d:4f:95:f7:00:86:fd:3b:e0:12:94:7a:ae: fd:58:08:e7:33:43:2c:a2:62:5d:37:ec:57:a3:d6:82:c5:7b: b4:37:26:36:0d:91:3d:83:5f:bd:53:1b:b8:02:04:89:c1:17: 26:f5:9d:03:65:1c:d0:7e:85:8a:7b:5b:50:1d:63:a9:8a:d3: 22:77:0f:74:38:23:fd:49:15:a9:91:8b:1d:3b:18:6f:61:72: c8:54:a0:6a:a9:18:99:dd:ed:12:9b:95:e9:aa:10:64:25:31: 35:6c:56:77:38:38:fe:2c:04:13:1e:65:d6:ac:cc:c0:82:de: c0:9f:2c:58:dd:49:8a:ec:55:ec:77:b0:9a:9e:d8:bd:5e:88: a5:cd:5b:d8:23:4e:74:8c:c6:2a:da:61:0b:85:74:1c:91:f7: cf:5e:22:7c:da:30:d6:56:9d:8c:9e:1d:24:1d:54:4b:1e:a8: db:3e:bd:3d:70:52:a0:87:76:b7:23:c1:c9:90:d9:de:50:04: 61:17:70:61:23:a1:84:df:ae:76:05:88:49:f7:1e:68:49:fe: ba:56:ef:8c:5d:63:c5:b7:20:d9:a5:6c:e4:c3:fb:97:99:cf: 0c:e6:1f:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsxZqg4etLOm0ATm4XBjUYnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4 NGU4YzYwHhcNMjUxMjE4MTIxOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTI5MTdkOTNiNWJmODZiNDI5YTI4NmU5MTc5MjhkYzU5OWZkNDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRXPlORvN16YFszZhtvkT9w8ILYW 3SvUqg/PN32vTqMiwpnEnu32Ud3uQJ0Uo8HOct2nIkwbpT5860lrAcr842MTeDrS RfG/cHraWyRh6N8iCKAnIJ9KaV97tBgNE10OrNAZl5Jwh/MBKW9Yepmppj95DHXr cwejdR1xFqBxCjTxDTbTkp8dm6TUy9P1Vnml+EVxo3VAedeQNHw6alUaPXhOSOaQ lCOvlGh/eShgK9qWE4YO5Wh8LmE8YdJCbKY9zs3iF7plCdcfbnJ7aKdBLan9+3lK CbqOXHzlxV8D5LoCkqIXlokDR1ZlkyoWNKKb72OMK0VGKnf2w1RDAfzCkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDUpF9k7W/hrQpoobpF5KNxZn9SEMB8GA1UdIwQY MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt YjBkNzJlOTEwZWZlLzEvTlNrWDJUdGItR3RDbWlodWtYa28zRm1mMUlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyfWMA0G CSqGSIb3DQEBCwUAA4IBAQCFCaZ0fJ9y7fnx3aKY7YLGSJOw+tziwA1PlfcAhv07 4BKUeq79WAjnM0MsomJdN+xXo9aCxXu0NyY2DZE9g1+9Uxu4AgSJwRcm9Z0DZRzQ foWKe1tQHWOpitMidw90OCP9SRWpkYsdOxhvYXLIVKBqqRiZ3e0Sm5XpqhBkJTE1 bFZ3ODj+LAQTHmXWrMzAgt7AnyxY3UmK7FXsd7Canti9XoilzVvYI050jMYq2mEL hXQckffPXiJ82jDWVp2Mnh0kHVRLHqjbPr09cFKgh3a3I8HJkNneUARhF3BhI6GE 3652BYhJ9x5oSf66Vu+MXWPFtyDZpWzkw/uXmc8M5h+0 -----END CERTIFICATE-----Generated at Sat Dec 20 12:54:13 2025 by rpki-client