This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/1-Dwv_TCbVeakK-33ayGrBDh0q30.roa File: 1-Dwv_TCbVeakK-33ayGrBDh0q30.roa (raw, json) Hash identifier: vrqoMLfQh6NOVRzCXTYlgGuOaUapn06Oyqq7ThnzM7E= Subject key identifier: F8:3C:2F:FD:30:9B:55:E6:A4:2B:ED:F7:6B:21:AB:04:38:74:AB:7D Certificate issuer: /CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4 Certificate serial: 019B2D27EBB96E6411920666D4F6373EC54D Authority key identifier: A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/1-Dwv_TCbVeakK-33ayGrBDh0q30.roa Signing time: Wed 17 Dec 2025 16:32:29 +0000 ROA not before: Wed 17 Dec 2025 16:32:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206790 IP address blocks: 193.223.254.0/23 maxlen: 24 2001:678:e04::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:27:eb:b9:6e:64:11:92:06:66:d4:f6:37:3e:c5:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4 Validity Not Before: Dec 17 16:32:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f83c2ffd309b55e6a42bedf76b21ab043874ab7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:31:df:51:7a:e0:c4:fe:13:a4:4f:15:47:1d: 05:99:7b:1a:fa:4d:d3:8f:95:df:3d:08:62:86:2f: da:4f:43:c8:34:6c:e3:6b:db:3d:e9:22:75:aa:b8: c4:7e:d0:f3:43:d8:64:86:ee:02:18:f9:b7:39:10: 38:ca:d8:6a:c2:ab:6b:46:03:a6:9d:e5:65:f9:67: b3:a0:3b:aa:97:70:f2:af:a0:51:3f:f0:af:7b:9b: 45:6f:0a:75:80:ea:e4:21:e7:39:5a:56:9d:a9:0f: 3c:bf:8e:82:4a:8d:71:a6:d2:5a:28:0e:99:1d:01: 19:65:40:9a:10:4a:34:5b:9b:54:51:32:6b:47:6f: 49:6e:0d:de:4c:ac:93:60:ee:a4:ca:7e:0a:55:33: ed:ea:26:da:75:8c:fe:4d:5c:65:de:0f:e6:8e:c9: 75:00:8e:46:b3:d3:6d:ce:1a:a0:d8:ab:a0:ba:00: a3:7f:b4:2c:3e:1a:da:4b:94:4c:01:1d:97:d9:b9: 13:8a:97:c2:76:c2:6d:70:1f:cf:4c:46:1d:8d:7a: 9b:b4:0a:6d:db:c6:21:4a:53:d4:34:55:0e:df:8c: 9e:9e:da:10:4f:09:60:c3:44:96:47:87:af:8f:c0: d0:6c:b0:60:05:c5:b0:64:5c:5b:6a:30:89:d5:ad: ed:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3C:2F:FD:30:9B:55:E6:A4:2B:ED:F7:6B:21:AB:04:38:74:AB:7D X509v3 Authority Key Identifier: keyid:A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/1-Dwv_TCbVeakK-33ayGrBDh0q30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.223.254.0/23 IPv6: 2001:678:e04::/48 Signature Algorithm: sha256WithRSAEncryption 9f:b0:b2:37:ac:e2:24:32:21:91:f5:6c:fb:6b:11:78:55:24: 00:a5:01:88:a5:dd:7b:c6:1b:a6:5f:a3:5c:60:6f:d8:ec:ed: fb:f1:bb:47:34:a1:2e:89:fb:67:80:c5:e9:2c:e1:75:57:0b: 4b:d3:37:f9:9e:a4:00:68:47:fc:e3:f0:4e:1c:84:c1:1c:6c: f2:34:d2:0f:fd:ae:ed:e6:85:92:b4:d8:23:34:ff:c2:dd:9a: 0f:4a:da:e4:e2:c0:03:c2:8e:c2:32:f0:ab:f7:13:2f:b6:9e: b8:68:ef:72:a4:ea:2f:03:a0:3f:79:1a:78:54:e0:87:c0:e4: 09:60:88:43:89:8c:23:00:bf:6c:2e:69:d9:3c:05:8e:bc:13: 6e:57:f1:ee:34:18:15:cc:7c:97:5a:fb:d0:f8:93:36:2e:f6: 65:87:d6:2a:16:27:0d:2e:33:1a:a6:ab:e4:5c:60:23:91:f2: 23:bb:c0:da:86:bc:26:f5:a1:bd:67:6f:eb:99:23:92:31:64: fd:f5:5a:89:03:ca:47:8b:6d:f9:ef:58:c5:c9:2a:6a:fe:8b: 9c:cd:81:83:b0:17:bd:99:b4:18:51:7f:6a:9a:7e:1a:f3:6d: 20:21:ba:3c:86:d0:6f:15:e5:63:4e:07:a3:1f:d5:28:69:ea: 77:bc:05:b3 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZstJ+u5bmQRkgZm1PY3PsVNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZmYzYTczODY4ZGMxMWNkOGRiZjVlMWMzODBiYmI3MTA2 MDJmYjQwHhcNMjUxMjE3MTYzMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODNjMmZmZDMwOWI1NWU2YTQyYmVkZjc2YjIxYWIwNDM4NzRhYjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDHfUXrgxP4TpE8VRx0FmXsa+k3T j5XfPQhihi/aT0PINGzja9s96SJ1qrjEftDzQ9hkhu4CGPm3ORA4ythqwqtrRgOm neVl+WezoDuql3Dyr6BRP/Cve5tFbwp1gOrkIec5WladqQ88v46CSo1xptJaKA6Z HQEZZUCaEEo0W5tUUTJrR29Jbg3eTKyTYO6kyn4KVTPt6ibadYz+TVxl3g/mjsl1 AI5Gs9Ntzhqg2KugugCjf7QsPhraS5RMAR2X2bkTipfCdsJtcB/PTEYdjXqbtApt 28YhSlPUNFUO34yentoQTwlgw0SWR4evj8DQbLBgBcWwZFxbajCJ1a3t2QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPg8L/0wm1XmpCvt92shqwQ4dKt9MB8GA1UdIwQY MBaAFKn/OnOGjcEc2Nv14cOAu7cQYC+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWY4NmM0YU53UnpZMl9YaHc0Qzd0eEJnTDdRLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85MTU4NWEtYTM4Zi00NzQ5LTlmNDgt NDc5NzRmNWM3MDRhLzEvMS1Ed3ZfVENiVmVha0stMzNheUdyQkRoMHEzMC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZjIvOTE1ODVhLWEzOGYtNDc0OS05ZjQ4LTQ3OTc0ZjVjNzA0 YS8xL3FmODZjNGFOd1J6WTJfWGh3NEM3dHhCZ0w3US5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAcHf/jAP BAIAAjAJAwcAIAEGeA4EMA0GCSqGSIb3DQEBCwUAA4IBAQCfsLI3rOIkMiGR9Wz7 axF4VSQApQGIpd17xhumX6NcYG/Y7O378btHNKEuiftngMXpLOF1VwtL0zf5nqQA aEf84/BOHITBHGzyNNIP/a7t5oWStNgjNP/C3ZoPStrk4sADwo7CMvCr9xMvtp64 aO9ypOovA6A/eRp4VOCHwOQJYIhDiYwjAL9sLmnZPAWOvBNuV/HuNBgVzHyXWvvQ +JM2LvZlh9YqFicNLjMapqvkXGAjkfIju8Dahrwm9aG9Z2/rmSOSMWT99VqJA8pH i23571jFySpq/ouczYGDsBe9mbQYUX9qmn4a820gIbo8htBvFeVjTgejH9Uoaep3 vAWz -----END CERTIFICATE-----Generated at Wed Dec 24 10:36:24 2025 by rpki-client