This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nUcIfWjD-UJ3Yuc7rJnbx7bf1Ac.roa File: nUcIfWjD-UJ3Yuc7rJnbx7bf1Ac.roa (raw, json) Hash identifier: V5GXO++n+XIDRRfG5iINdFx4hJdEL43+nusrJUlPO1Y= Subject key identifier: 9D:47:08:7D:68:C3:F9:42:77:62:E7:3B:AC:99:DB:C7:B6:DF:D4:07 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B1CA7B1F6CD5184AD319C88D7C65BF041 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nUcIfWjD-UJ3Yuc7rJnbx7bf1Ac.roa Signing time: Sun 14 Dec 2025 11:38:30 +0000 ROA not before: Sun 14 Dec 2025 11:38:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210705 IP address blocks: 94.183.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:04:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:a7:b1:f6:cd:51:84:ad:31:9c:88:d7:c6:5b:f0:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 14 11:38:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9d47087d68c3f9427762e73bac99dbc7b6dfd407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:86:59:89:44:a4:cf:17:7e:85:85:93:13:b1: e1:5a:c8:e3:9e:8b:74:65:56:39:35:24:61:3f:b0: b6:5f:39:e7:05:4c:b6:dd:c1:0d:fe:48:85:95:51: 74:b0:2e:0b:25:ac:f9:c2:91:07:82:e2:66:39:2a: 7e:6e:6d:b6:71:3f:1f:f0:2e:2e:66:94:14:40:1a: 59:cf:8a:2d:5e:ce:69:b3:2e:e1:34:ab:eb:a8:d3: 7f:2b:3a:3c:49:af:c3:8b:48:6b:59:4a:3e:b5:d9: 29:c9:8e:e0:b8:b7:2a:ed:c7:d2:59:be:e0:80:56: 03:cd:90:8e:6f:23:ba:42:19:e9:36:e3:fc:a8:44: af:84:e5:4c:10:73:f7:5d:08:1e:fa:09:0d:bc:d4: 05:57:cb:08:e4:21:17:dc:e7:d5:98:19:b3:0a:42: 40:f3:85:82:50:46:6e:76:64:a8:d8:74:f0:b4:ac: f7:f7:ef:28:8d:50:d4:a3:7a:49:58:b6:48:9b:70: 23:e0:d1:65:66:22:9d:be:89:46:aa:76:41:aa:32: b6:e8:60:94:9b:ad:e1:9e:53:d8:35:6d:66:f5:8a: d1:00:37:f6:ab:cd:48:45:f4:fa:9b:65:b9:ce:a3: 90:83:56:16:48:34:68:48:c9:a2:3d:a5:ac:58:49: 49:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:47:08:7D:68:C3:F9:42:77:62:E7:3B:AC:99:DB:C7:B6:DF:D4:07 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nUcIfWjD-UJ3Yuc7rJnbx7bf1Ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.183.165.0/24 Signature Algorithm: sha256WithRSAEncryption 90:82:73:7d:d5:0b:e1:f2:ce:2b:f6:15:b4:f7:82:dd:e4:3e: 35:22:2e:56:c6:31:6a:9f:61:3d:f2:ee:2a:6a:ed:00:51:f7: 28:bf:7d:b5:e7:8b:5c:41:fa:a4:a8:48:25:a1:3c:83:a9:0a: 9c:a7:a8:e3:eb:e9:ac:82:26:86:3d:33:0a:16:fb:fb:bb:6c: bb:c6:6b:52:56:18:1c:66:6d:a6:90:da:64:e6:df:96:20:89: a5:51:22:78:d7:15:4f:69:7d:4d:de:f3:3a:7a:b7:3e:e0:fd: 16:4f:72:d2:ee:e5:6b:79:77:d2:9d:6d:0a:42:70:ef:83:21: 6e:b4:4c:2c:42:cb:44:f9:89:e1:60:74:1b:3f:56:95:92:30: 25:6b:db:42:e8:68:a9:a4:ce:9e:b5:93:d7:7e:30:09:4c:ee: 09:5f:66:19:d8:e5:a0:5d:9c:82:a6:1c:aa:9d:a4:46:d0:32: 52:25:4e:81:3c:16:37:ef:9c:56:34:51:36:f8:02:e9:3b:97: 05:c6:78:15:bd:03:e1:c1:ec:a7:f0:63:ae:a4:eb:e1:e7:52: 71:8c:bd:df:7f:2d:57:f1:da:8d:8b:4b:df:70:63:80:12:8b: 56:53:b8:5f:ab:de:49:4f:69:2a:5f:ba:51:66:b4:f2:cc:3f: be:18:85:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZscp7H2zVGErTGciNfGW/BBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjE0MTEzODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDQ3MDg3ZDY4YzNmOTQyNzc2MmU3M2JhYzk5ZGJjN2I2ZGZkNDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIZZiUSkzxd+hYWTE7HhWsjjnot0 ZVY5NSRhP7C2XznnBUy23cEN/kiFlVF0sC4LJaz5wpEHguJmOSp+bm22cT8f8C4u ZpQUQBpZz4otXs5psy7hNKvrqNN/Kzo8Sa/Di0hrWUo+tdkpyY7guLcq7cfSWb7g gFYDzZCObyO6QhnpNuP8qESvhOVMEHP3XQge+gkNvNQFV8sI5CEX3OfVmBmzCkJA 84WCUEZudmSo2HTwtKz39+8ojVDUo3pJWLZIm3Aj4NFlZiKdvolGqnZBqjK26GCU m63hnlPYNW1m9YrRADf2q81IRfT6m2W5zqOQg1YWSDRoSMmiPaWsWElJKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ1HCH1ow/lCd2LnO6yZ28e239QHMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvblVjSWZXakQtVUozWXVjN3JKbmJ4N2JmMUFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrelMA0G CSqGSIb3DQEBCwUAA4IBAQCQgnN91Qvh8s4r9hW094Ld5D41Ii5WxjFqn2E98u4q au0AUfcov32154tcQfqkqEgloTyDqQqcp6jj6+msgiaGPTMKFvv7u2y7xmtSVhgc Zm2mkNpk5t+WIImlUSJ41xVPaX1N3vM6erc+4P0WT3LS7uVreXfSnW0KQnDvgyFu tEwsQstE+YnhYHQbP1aVkjAla9tC6GippM6etZPXfjAJTO4JX2YZ2OWgXZyCphyq naRG0DJSJU6BPBY375xWNFE2+ALpO5cFxngVvQPhweyn8GOupOvh51JxjL3ffy1X 8dqNi0vfcGOAEotWU7hfq95JT2kqX7pRZrTyzD++GIUD -----END CERTIFICATE-----Generated at Sat Dec 20 17:45:38 2025 by rpki-client