This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/T2Nj8BPdOWOZk5D_d1066_PTqVg.roa File: T2Nj8BPdOWOZk5D_d1066_PTqVg.roa (raw, json) Hash identifier: IPfNc20dZTKVEC7YgJXwTU+cGiDBZcuTIhbh81jcots= Subject key identifier: 4F:63:63:F0:13:DD:39:63:99:93:90:FF:77:5D:3A:EB:F3:D3:A9:58 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 019B31B5E6A10367050369E1A01AD0313DF3 Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/T2Nj8BPdOWOZk5D_d1066_PTqVg.roa Signing time: Thu 18 Dec 2025 13:46:03 +0000 ROA not before: Thu 18 Dec 2025 13:46:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 63199 IP address blocks: 93.88.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:b5:e6:a1:03:67:05:03:69:e1:a0:1a:d0:31:3d:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Dec 18 13:46:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4f6363f013dd3963999390ff775d3aebf3d3a958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e8:63:ee:b2:b6:2b:06:69:c1:b8:74:24:91: 7b:0d:32:9e:5d:0e:8b:46:ba:69:77:9b:e9:fe:8d: 07:4a:56:16:df:42:75:23:ef:b2:6f:dd:c0:30:ae: 59:3f:24:8f:d6:1d:9c:ec:bd:fc:b0:e8:cb:9a:5b: 08:cb:db:0f:0a:2e:0a:ac:1e:a8:02:70:04:cb:46: a2:a8:c4:a5:cc:ae:97:1f:d7:30:f3:7f:8f:d8:ff: e3:a9:69:b4:63:bb:6d:1f:eb:48:d1:81:db:61:d0: 44:79:89:2b:99:1b:28:e7:49:9f:56:f8:56:ba:28: 5a:39:bb:11:96:a9:49:dc:4e:f1:06:f0:49:40:6d: 6f:f6:e2:89:72:f9:9a:55:99:54:ab:b7:4d:d7:61: 5c:b7:28:a6:e8:58:71:1a:59:81:eb:99:19:ac:42: 86:60:5c:71:39:8d:c1:c9:a9:ba:82:b3:24:4c:1d: 70:4a:60:68:5b:b2:1f:e1:6c:9e:9b:38:e0:a5:72: d5:eb:e9:d0:b3:1c:98:30:2e:9e:a6:ce:9d:51:d4: a8:4a:b9:57:ef:18:96:2d:56:06:96:d0:b2:b7:39: 28:89:9e:33:3f:f9:e7:5b:d9:2e:cc:1b:f1:41:33: 40:ad:db:62:5b:98:15:8e:b2:df:95:6c:34:e7:51: 7b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:63:63:F0:13:DD:39:63:99:93:90:FF:77:5D:3A:EB:F3:D3:A9:58 X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/T2Nj8BPdOWOZk5D_d1066_PTqVg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.88.153.0/24 Signature Algorithm: sha256WithRSAEncryption 21:85:35:ff:3f:0c:92:77:2b:4a:c2:63:e8:10:21:bd:89:13: 70:ef:f2:7b:57:f2:57:21:77:c3:59:02:19:f4:99:0a:b4:6e: 2e:d9:3d:19:02:42:27:9c:af:d2:5f:54:48:d0:2e:4d:e1:b5: cb:2c:44:f7:19:fb:a3:1c:d7:a6:69:c6:55:c0:c3:96:6f:91: 2a:ff:2f:10:67:f4:fb:f7:ff:4a:d2:da:1b:c2:31:58:69:3d: 1a:69:5f:f2:cf:4d:4b:b7:e4:73:3d:61:98:60:0a:d8:ec:64: 56:4c:fa:32:73:80:bc:d7:6d:8a:b4:7c:59:dd:55:83:27:1e: bd:bb:98:b1:07:7f:bd:11:2a:50:b9:df:81:30:4f:cb:17:6f: 5a:37:67:7e:9d:7f:19:a1:de:db:68:40:26:8a:a4:12:27:42: f0:0b:dd:f6:39:25:78:c1:ad:6d:15:4a:43:a3:bc:47:73:02: e7:1b:7b:1a:7b:5d:20:ff:bf:f3:13:0f:05:52:91:24:16:50: 2f:af:ca:46:5c:05:2b:8c:c5:e5:f2:e8:25:f3:91:cd:96:8b: 47:97:d6:7b:df:12:36:af:54:56:c3:bf:a0:b4:49:3f:13:d3: 8f:72:67:f2:ac:30:b0:22:fd:16:2a:a1:2f:d1:cd:95:56:7c: 2a:e7:cb:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsxteahA2cFA2nhoBrQMT3zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjUxMjE4MTM0NjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjYzNjNmMDEzZGQzOTYzOTk5MzkwZmY3NzVkM2FlYmYzZDNhOTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArehj7rK2KwZpwbh0JJF7DTKeXQ6L Rrppd5vp/o0HSlYW30J1I++yb93AMK5ZPySP1h2c7L38sOjLmlsIy9sPCi4KrB6o AnAEy0aiqMSlzK6XH9cw83+P2P/jqWm0Y7ttH+tI0YHbYdBEeYkrmRso50mfVvhW uihaObsRlqlJ3E7xBvBJQG1v9uKJcvmaVZlUq7dN12Fctyim6FhxGlmB65kZrEKG YFxxOY3Byam6grMkTB1wSmBoW7If4WyemzjgpXLV6+nQsxyYMC6eps6dUdSoSrlX 7xiWLVYGltCytzkoiZ4zP/nnW9kuzBvxQTNArdtiW5gVjrLflWw051F7BQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE9jY/AT3TljmZOQ/3ddOuvz06lYMB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEvVDJOajhCUGRPV09aazVEX2QxMDY2X1BUcVZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXViZMA0G CSqGSIb3DQEBCwUAA4IBAQAhhTX/PwySdytKwmPoECG9iRNw7/J7V/JXIXfDWQIZ 9JkKtG4u2T0ZAkInnK/SX1RI0C5N4bXLLET3GfujHNemacZVwMOWb5Eq/y8QZ/T7 9/9K0tobwjFYaT0aaV/yz01Lt+RzPWGYYArY7GRWTPoyc4C8122KtHxZ3VWDJx69 u5ixB3+9ESpQud+BME/LF29aN2d+nX8Zod7baEAmiqQSJ0LwC932OSV4wa1tFUpD o7xHcwLnG3sae10g/7/zEw8FUpEkFlAvr8pGXAUrjMXl8ugl85HNlotHl9Z73xI2 r1RWw7+gtEk/E9OPcmfyrDCwIv0WKqEv0c2VVnwq58tK -----END CERTIFICATE-----Generated at Fri Dec 19 18:28:22 2025 by rpki-client