This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/fK4A406_cDMWDbbITZ8j0-6GJrU.roa File: fK4A406_cDMWDbbITZ8j0-6GJrU.roa (raw, json) Hash identifier: bX1tVxJTNfb2sGSB9JY1Wec4/HKYzsBLiSEQzrPo2fo= Subject key identifier: 7C:AE:00:E3:4E:BF:70:33:16:0D:B6:C8:4D:9F:23:D3:EE:86:26:B5 Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b Certificate serial: 019B270D1DBAC8DCE56626C877EFFB98B03E Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/fK4A406_cDMWDbbITZ8j0-6GJrU.roa Signing time: Tue 16 Dec 2025 12:05:29 +0000 ROA not before: Tue 16 Dec 2025 12:05:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35297 IP address blocks: 188.95.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:0d:1d:ba:c8:dc:e5:66:26:c8:77:ef:fb:98:b0:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b Validity Not Before: Dec 16 12:05:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7cae00e34ebf7033160db6c84d9f23d3ee8626b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d6:5e:c8:b2:41:1d:b6:75:e5:40:ce:11:74: ed:55:fa:bb:92:68:a4:ee:55:7d:98:a5:ea:6d:8a: 2c:b8:73:24:be:8d:a7:d5:7e:ed:89:22:f5:6e:5e: 60:88:41:9a:24:72:d1:f5:9e:93:16:43:b7:b0:2a: ac:73:9a:e5:55:0f:6e:1f:de:97:e7:d7:d6:67:9c: de:6f:d4:9f:fb:b2:a8:6d:f6:6d:08:13:a3:96:93: 64:71:a6:b4:43:b0:e8:21:c8:30:a4:2b:0e:d8:67: 56:38:0e:d4:60:c2:2f:6c:0e:f4:b2:8d:6a:c3:61: a6:1f:3f:14:51:40:97:d0:55:22:e2:96:d0:b4:bc: 7f:85:03:5f:f9:d8:16:f7:00:51:b1:77:cf:4b:91: 97:7d:df:96:a2:e0:05:31:04:93:3c:cb:f0:2d:1a: 52:f0:72:af:45:07:04:86:fa:1f:bf:c8:90:8d:db: 53:86:ca:e9:89:2f:4c:71:28:c0:d9:ff:05:50:46: 33:b0:be:bc:73:49:3d:3e:35:19:38:05:5d:ce:88: 5b:ab:bd:94:d9:5c:c2:2b:e0:c0:6d:eb:9c:59:a9: b3:24:2f:35:f9:da:b6:a9:09:b1:ee:66:13:9a:75: 11:99:39:49:44:d1:97:01:67:98:21:f6:52:0d:96: 3a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:AE:00:E3:4E:BF:70:33:16:0D:B6:C8:4D:9F:23:D3:EE:86:26:B5 X509v3 Authority Key Identifier: keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/fK4A406_cDMWDbbITZ8j0-6GJrU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.95.197.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:05:d1:ee:99:93:41:c1:7a:66:1c:86:3a:5a:1e:91:73:3f: 2d:a2:6e:1b:50:c7:20:d9:11:3b:b8:94:32:2e:c1:6f:78:0f: 52:9d:98:69:ee:ce:8e:88:32:8f:51:df:b2:1b:9e:1a:39:d1: cf:0e:33:5b:b1:c4:74:c4:7d:e6:eb:f7:82:47:b1:8b:92:07: 7c:f6:a4:de:63:e3:8e:05:06:e7:d5:22:a9:82:f8:3c:1d:96: bf:d8:09:33:f1:cd:aa:de:1f:30:e2:a2:e3:46:43:84:f9:3a: 4d:3a:da:1a:13:b6:42:35:15:35:b0:ac:11:ea:6e:3b:7b:31: b8:e6:8f:86:bf:1f:d5:86:5d:a7:1b:13:24:b1:1f:fe:f6:12: 1f:92:d8:08:02:db:c7:72:57:3b:07:6d:a7:5b:e2:95:ee:66: ae:9e:41:7d:c8:fb:74:15:e7:2a:af:78:6e:07:08:0c:e7:fd: 11:31:2e:41:46:4b:3d:5f:48:f9:1c:ad:a5:bd:a5:dd:8e:64: 9e:e6:0a:a9:e2:74:c1:87:b3:f3:55:65:f8:22:3f:42:90:88: 92:56:0b:fe:31:b5:a8:f6:dd:ce:c9:72:63:1b:05:44:04:89: 8e:cb:54:1c:58:f2:57:3a:89:33:93:67:0f:6f:0e:0e:c3:74: f8:18:43:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsnDR26yNzlZibId+/7mLA+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NjA0MzU2Yzc1MDFhZTIxMDRiMmNjZWQzY2VkYzVkYmRj MTE2M2IwHhcNMjUxMjE2MTIwNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2FlMDBlMzRlYmY3MDMzMTYwZGI2Yzg0ZDlmMjNkM2VlODYyNmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9ZeyLJBHbZ15UDOEXTtVfq7kmik 7lV9mKXqbYosuHMkvo2n1X7tiSL1bl5giEGaJHLR9Z6TFkO3sCqsc5rlVQ9uH96X 59fWZ5zeb9Sf+7KobfZtCBOjlpNkcaa0Q7DoIcgwpCsO2GdWOA7UYMIvbA70so1q w2GmHz8UUUCX0FUi4pbQtLx/hQNf+dgW9wBRsXfPS5GXfd+WouAFMQSTPMvwLRpS 8HKvRQcEhvofv8iQjdtThsrpiS9McSjA2f8FUEYzsL68c0k9PjUZOAVdzohbq72U 2VzCK+DAbeucWamzJC81+dq2qQmx7mYTmnURmTlJRNGXAWeYIfZSDZY6CwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHyuAONOv3AzFg22yE2fI9Puhia1MB8GA1UdIwQY MBaAFKhgQ1bHUBriEEssztPO3F29wRY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80NTg1MDEtYWNhYi00MmVkLThhNmEt N2JlYmJiNzBjMDUwLzEvZks0QTQwNl9jRE1XRGJiSVRaOGowLTZHSnJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC80NTg1MDEtYWNhYi00MmVkLThhNmEtN2JlYmJiNzBjMDUw LzEvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvF/FMA0G CSqGSIb3DQEBCwUAA4IBAQCLBdHumZNBwXpmHIY6Wh6Rcz8tom4bUMcg2RE7uJQy LsFveA9SnZhp7s6OiDKPUd+yG54aOdHPDjNbscR0xH3m6/eCR7GLkgd89qTeY+OO BQbn1SKpgvg8HZa/2Akz8c2q3h8w4qLjRkOE+TpNOtoaE7ZCNRU1sKwR6m47ezG4 5o+Gvx/Vhl2nGxMksR/+9hIfktgIAtvHclc7B22nW+KV7maunkF9yPt0Fecqr3hu BwgM5/0RMS5BRks9X0j5HK2lvaXdjmSe5gqp4nTBh7PzVWX4Ij9CkIiSVgv+MbWo 9t3OyXJjGwVEBImOy1QcWPJXOokzk2cPbw4Ow3T4GEM0 -----END CERTIFICATE-----Generated at Sat Dec 20 11:37:20 2025 by rpki-client