This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/nS1WLePcNk0wxJVQAoq0SfHTCWw.roa File: nS1WLePcNk0wxJVQAoq0SfHTCWw.roa (raw, json) Hash identifier: /N0EJ4juDLfwbpXrNdKKbMwqT3lKS7SOYvpGsMPBWsU= Subject key identifier: 9D:2D:56:2D:E3:DC:36:4D:30:C4:95:50:02:8A:B4:49:F1:D3:09:6C Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c Certificate serial: 019B2286FC01528FED9A6D73A798E5BA3D4C Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/nS1WLePcNk0wxJVQAoq0SfHTCWw.roa Signing time: Mon 15 Dec 2025 15:00:30 +0000 ROA not before: Mon 15 Dec 2025 15:00:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 65632 IP address blocks: 188.125.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 18:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:86:fc:01:52:8f:ed:9a:6d:73:a7:98:e5:ba:3d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c Validity Not Before: Dec 15 15:00:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9d2d562de3dc364d30c49550028ab449f1d3096c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:10:ae:5f:b1:78:6c:34:32:ec:50:d9:3a:3e: ca:35:6b:55:23:6d:5c:8c:59:d9:49:0c:ee:d1:83: d0:35:88:f6:36:d2:15:03:4f:a0:ba:3d:0a:91:5c: ad:1d:a4:1d:13:f6:c7:d8:63:08:90:81:64:bd:7f: fb:91:dd:0f:12:55:32:d6:65:af:4d:35:0a:7c:e0: 1e:1d:6b:d8:1d:7b:c7:93:42:2d:cb:70:61:10:58: 0e:1d:82:45:61:55:52:06:25:d5:96:36:50:84:d3: 4d:d8:01:26:60:07:14:80:5b:3c:3a:16:33:a3:7b: 66:fa:73:22:e5:3c:a1:ca:23:b8:f6:fa:36:e5:a8: 24:1d:64:ca:3e:86:c0:4a:2a:0b:f5:ea:e5:af:88: 35:aa:c4:11:3e:e2:26:0b:78:1d:68:8b:20:6f:81: 93:46:ed:5a:14:9c:00:6d:94:6f:36:4d:1c:ff:a3: 11:57:86:ac:e4:5c:58:b0:50:54:a9:2d:30:12:e5: b2:f6:8d:25:9b:47:a5:f3:c8:ae:1c:84:1d:81:a9: 9b:be:93:ef:00:c2:bc:7a:d8:0b:47:6c:06:31:c0: 2e:8c:c8:1f:cd:c7:b1:c7:2f:bf:db:53:a7:29:de: 07:d8:e3:41:be:f2:d6:52:c3:a2:0e:2c:af:01:20: ce:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2D:56:2D:E3:DC:36:4D:30:C4:95:50:02:8A:B4:49:F1:D3:09:6C X509v3 Authority Key Identifier: keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/nS1WLePcNk0wxJVQAoq0SfHTCWw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.125.163.0/24 Signature Algorithm: sha256WithRSAEncryption 51:ec:c2:94:82:a9:63:0d:1f:4e:c8:88:cd:c9:b5:f8:1d:fe: e2:4d:4a:70:7b:09:74:be:95:fc:61:33:93:6b:47:b9:98:9d: 8a:7a:35:36:52:10:c2:06:1a:f8:83:97:97:6d:56:10:76:d3: 2b:b5:50:e5:e9:99:6d:b3:a5:25:e8:9c:0c:ce:ce:38:1a:e8: dd:bf:37:71:7c:2c:c1:4d:52:11:b6:d7:37:ad:1f:1b:30:c6: fc:b6:97:80:dc:67:b8:f2:db:77:b0:84:f2:6f:34:92:94:2c: 2a:af:f8:3e:0c:a8:38:0e:43:d9:a2:36:95:a2:de:9d:f2:82: 37:35:68:16:52:3d:c5:15:32:f2:7f:40:be:b0:75:95:4f:4a: 7e:6f:d8:84:45:20:9c:cb:0d:b4:e1:31:f6:1e:9a:b8:b7:6c: 45:b0:06:ac:90:9a:5d:a1:03:8b:0d:9d:67:0e:c0:f6:6b:f4: d2:aa:9c:34:c1:59:c1:2b:b7:db:7c:7f:79:a0:99:45:00:38: de:5b:32:3e:69:8f:84:de:d6:b1:26:d9:16:09:50:10:05:3a: 97:8e:9d:ee:43:b9:86:3a:53:2a:e9:34:61:97:62:97:36:2c: c3:61:42:1f:53:f3:ea:6f:de:31:ad:fd:55:d6:98:f2:2b:2a: 3f:5e:c1:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsihvwBUo/tmm1zp5jluj1MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MmY2MzNmNzZlOGQ4YWFlYWEzMmI1YWNlMTZhM2RiMzk0 M2Q4MGMwHhcNMjUxMjE1MTUwMDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDJkNTYyZGUzZGMzNjRkMzBjNDk1NTAwMjhhYjQ0OWYxZDMwOTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBCuX7F4bDQy7FDZOj7KNWtVI21c jFnZSQzu0YPQNYj2NtIVA0+guj0KkVytHaQdE/bH2GMIkIFkvX/7kd0PElUy1mWv TTUKfOAeHWvYHXvHk0Ity3BhEFgOHYJFYVVSBiXVljZQhNNN2AEmYAcUgFs8OhYz o3tm+nMi5TyhyiO49vo25agkHWTKPobASioL9erlr4g1qsQRPuImC3gdaIsgb4GT Ru1aFJwAbZRvNk0c/6MRV4as5FxYsFBUqS0wEuWy9o0lm0el88iuHIQdgambvpPv AMK8etgLR2wGMcAujMgfzcexxy+/21OnKd4H2ONBvvLWUsOiDiyvASDOMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ0tVi3j3DZNMMSVUAKKtEnx0wlsMB8GA1UdIwQY MBaAFFQvYz926Niq6qMrWs4Wo9s5Q9gMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDIt NjliOTUzYzlkNWFhLzEvblMxV0xlUGNOazB3eEpWUUFvcTBTZkhUQ1d3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDItNjliOTUzYzlkNWFh LzEvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvH2jMA0G CSqGSIb3DQEBCwUAA4IBAQBR7MKUgqljDR9OyIjNybX4Hf7iTUpwewl0vpX8YTOT a0e5mJ2KejU2UhDCBhr4g5eXbVYQdtMrtVDl6Zlts6Ul6JwMzs44GujdvzdxfCzB TVIRttc3rR8bMMb8tpeA3Ge48tt3sITybzSSlCwqr/g+DKg4DkPZojaVot6d8oI3 NWgWUj3FFTLyf0C+sHWVT0p+b9iERSCcyw204TH2Hpq4t2xFsAaskJpdoQOLDZ1n DsD2a/TSqpw0wVnBK7fbfH95oJlFADjeWzI+aY+E3taxJtkWCVAQBTqXjp3uQ7mG OlMq6TRhl2KXNizDYUIfU/Pqb94xrf1V1pjyKyo/XsEl -----END CERTIFICATE-----Generated at Sat Dec 20 03:59:36 2025 by rpki-client