This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/X2D5tJyZ1P0-9nM7gSImJrYDMdA.roa File: X2D5tJyZ1P0-9nM7gSImJrYDMdA.roa (raw, json) Hash identifier: eq9JqYZzquXG7L3WIvo1VFujull4g/XkQ32/wOKeEio= Subject key identifier: 5F:60:F9:B4:9C:99:D4:FD:3E:F6:73:3B:81:22:26:26:B6:03:31:D0 Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 019B2C7CB86375B33EC10A6D4500E639572B Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/X2D5tJyZ1P0-9nM7gSImJrYDMdA.roa Signing time: Wed 17 Dec 2025 13:25:29 +0000 ROA not before: Wed 17 Dec 2025 13:25:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210006 IP address blocks: 93.152.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:7c:b8:63:75:b3:3e:c1:0a:6d:45:00:e6:39:57:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Dec 17 13:25:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5f60f9b49c99d4fd3ef6733b81222626b60331d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b4:bd:9c:19:35:6c:3d:7d:7e:14:a5:07:e2: dd:42:05:73:40:45:85:67:00:84:62:fe:dc:4b:a0: 95:da:58:23:01:3c:4d:2b:18:a2:5f:37:8d:4c:4a: 57:89:4a:8a:57:2f:d4:07:e8:cc:d2:07:23:8a:a3: 3b:6e:ab:d9:fd:b2:8e:54:2b:1f:95:7b:23:c3:3e: 6c:73:fd:ba:0c:2f:f3:48:05:c9:95:2b:21:2a:77: 0a:16:1f:0c:62:74:ac:ce:d5:c2:de:43:e7:5b:bb: a1:b5:c8:fa:a8:17:8b:0f:d2:21:ee:7b:ee:11:94: b9:98:d5:9d:3b:14:39:e6:44:e6:c9:97:07:29:e2: 3c:7b:e2:6f:62:20:0a:68:d6:ee:22:95:02:96:ad: fe:a8:46:cf:f2:04:dd:a1:02:bb:6c:c6:4d:dd:e1: 1e:13:f1:0a:26:dd:ff:cb:13:db:ff:cf:43:42:d3: 1b:9f:fd:3b:f4:11:4a:6e:95:99:49:80:03:d3:e7: eb:64:2a:80:dd:a6:67:35:f4:0c:c8:26:84:b1:a7: 4c:6b:da:41:15:70:8f:2f:15:31:50:cb:26:ec:a1: 53:fa:25:86:2a:9a:13:eb:b4:e8:cd:be:ac:d3:8b: 33:34:89:0b:fa:ef:e7:9b:4f:9e:35:d9:a7:6f:1b: 43:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:60:F9:B4:9C:99:D4:FD:3E:F6:73:3B:81:22:26:26:B6:03:31:D0 X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/X2D5tJyZ1P0-9nM7gSImJrYDMdA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.152.230.0/24 Signature Algorithm: sha256WithRSAEncryption 26:12:27:5e:cd:0a:a8:d7:a9:7b:39:af:e1:54:05:e3:a7:96: 49:3c:0b:8f:86:af:0c:a6:b5:17:43:a6:23:a4:19:94:f5:e1: 88:5d:be:6e:ae:1f:fa:2d:2b:d4:1d:8f:a1:11:22:1c:93:77: 6e:a0:40:0a:c5:dc:77:c4:70:8a:bc:81:47:f7:a8:29:2d:21: db:1b:ff:cb:c3:e8:76:a8:60:59:9f:3a:a7:b9:1b:d2:18:46: 19:5b:f1:31:6d:59:54:fc:9e:ad:b3:f0:11:a3:2b:8c:a9:02: 6c:bc:a5:7b:a9:4d:fb:4d:fb:67:24:d9:84:04:6f:c3:5a:97: 41:8c:b7:46:71:2a:28:3e:94:71:ca:1a:b0:1f:f5:36:84:d8: 50:a6:e3:1d:af:67:16:ee:49:c4:37:72:3b:01:4f:d8:20:53: f6:4d:f0:04:23:55:86:4c:32:ab:f8:11:45:14:99:ee:a3:0a: a1:8b:9b:62:ca:ab:5f:7e:92:62:4f:f9:5e:80:04:f6:91:8d: 14:5b:f3:3d:cc:38:8d:34:13:2b:0f:e7:96:f3:fe:b5:12:15: 78:2e:ab:19:bc:4f:cf:f7:48:ea:7e:cc:d5:46:19:72:16:e0: b9:d8:a8:fe:26:03:b2:c8:67:c6:dc:18:d7:00:3c:cc:8d:f9: fe:6c:15:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZssfLhjdbM+wQptRQDmOVcrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjUxMjE3MTMyNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjYwZjliNDljOTlkNGZkM2VmNjczM2I4MTIyMjYyNmI2MDMzMWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrS9nBk1bD19fhSlB+LdQgVzQEWF ZwCEYv7cS6CV2lgjATxNKxiiXzeNTEpXiUqKVy/UB+jM0gcjiqM7bqvZ/bKOVCsf lXsjwz5sc/26DC/zSAXJlSshKncKFh8MYnSsztXC3kPnW7uhtcj6qBeLD9Ih7nvu EZS5mNWdOxQ55kTmyZcHKeI8e+JvYiAKaNbuIpUClq3+qEbP8gTdoQK7bMZN3eEe E/EKJt3/yxPb/89DQtMbn/079BFKbpWZSYAD0+frZCqA3aZnNfQMyCaEsadMa9pB FXCPLxUxUMsm7KFT+iWGKpoT67Tozb6s04szNIkL+u/nm0+eNdmnbxtDCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF9g+bScmdT9PvZzO4EiJia2AzHQMB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvWDJENXRKeVoxUDAtOW5NN2dTSW1KcllETWRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXZjmMA0G CSqGSIb3DQEBCwUAA4IBAQAmEidezQqo16l7Oa/hVAXjp5ZJPAuPhq8MprUXQ6Yj pBmU9eGIXb5urh/6LSvUHY+hESIck3duoEAKxdx3xHCKvIFH96gpLSHbG//Lw+h2 qGBZnzqnuRvSGEYZW/ExbVlU/J6ts/ARoyuMqQJsvKV7qU37TftnJNmEBG/DWpdB jLdGcSooPpRxyhqwH/U2hNhQpuMdr2cW7knEN3I7AU/YIFP2TfAEI1WGTDKr+BFF FJnuowqhi5tiyqtffpJiT/legAT2kY0UW/M9zDiNNBMrD+eW8/61EhV4LqsZvE/P 90jqfszVRhlyFuC52Kj+JgOyyGfG3BjXADzMjfn+bBUG -----END CERTIFICATE-----Generated at Sat Dec 20 23:51:38 2025 by rpki-client