This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/DB8vpbqfjA4YjCb-2FzU7zAiwmw.roa File: DB8vpbqfjA4YjCb-2FzU7zAiwmw.roa (raw, json) Hash identifier: I/8Gokk6XG3QeOAJYtW+jvmWnIyDjJaFgsMUIbtc+Tw= Subject key identifier: 0C:1F:2F:A5:BA:9F:8C:0E:18:8C:26:FE:D8:5C:D4:EF:30:22:C2:6C Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f Certificate serial: 019AE40F76F1A3CA5E2BC50B507E643DEF78 Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/DB8vpbqfjA4YjCb-2FzU7zAiwmw.roa Signing time: Wed 03 Dec 2025 11:53:30 +0000 ROA not before: Wed 03 Dec 2025 11:53:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35534 IP address blocks: 178.175.162.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:0f:76:f1:a3:ca:5e:2b:c5:0b:50:7e:64:3d:ef:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f Validity Not Before: Dec 3 11:53:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0c1f2fa5ba9f8c0e188c26fed85cd4ef3022c26c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:09:c1:25:64:d3:c4:2f:36:9f:c4:b3:6e:39: cb:4b:85:1c:be:9c:c0:96:16:21:c2:d6:0f:3f:0f: 31:eb:a1:10:cc:d0:a4:c9:4f:a5:42:90:9a:5a:0e: 18:e0:64:62:d0:f2:52:2b:d6:68:b1:cc:a4:09:52: 9b:0d:03:8a:2a:3e:6b:b5:6f:eb:1c:dd:08:bd:66: 98:89:b7:d1:0f:1d:b8:22:d6:69:4f:4d:32:e0:af: d8:82:fd:72:17:88:03:1a:28:3f:32:77:67:38:39: f6:08:89:a3:db:67:db:4c:a2:e8:6f:a8:aa:4a:6c: 9f:a2:97:00:15:74:6d:53:8d:61:ec:cf:7e:7b:68: e8:de:d1:2d:5a:57:59:28:10:64:be:2d:94:b8:69: 7d:b2:45:58:aa:7f:e5:51:0b:04:a1:51:16:27:35: 43:c8:72:7a:28:98:4b:d2:f7:39:d5:d9:c0:42:a5: 3c:75:b2:1e:17:b7:7e:ea:43:67:18:3f:d1:b8:21: 42:49:59:7b:27:94:4b:c2:90:6b:28:f2:32:65:76: d9:fc:42:45:b5:e1:c1:9b:cc:35:7b:97:21:97:cc: a1:4a:e4:03:56:59:d4:1b:42:db:8a:56:aa:84:b1: 6a:57:a8:ad:9b:bd:5e:d9:95:e8:c1:47:ec:9e:ec: bf:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1F:2F:A5:BA:9F:8C:0E:18:8C:26:FE:D8:5C:D4:EF:30:22:C2:6C X509v3 Authority Key Identifier: keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/DB8vpbqfjA4YjCb-2FzU7zAiwmw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.175.162.0/23 Signature Algorithm: sha256WithRSAEncryption 19:a8:5d:75:87:68:8d:7e:1c:96:d5:05:dc:59:ad:37:18:14: 82:00:c7:e1:8a:c7:c7:6d:8c:ac:1d:44:36:46:36:9a:16:31: c3:b5:40:8a:28:bd:aa:2a:b6:86:eb:62:05:8d:c9:69:94:22: 73:bb:59:66:a7:1d:93:03:dd:fc:ad:b3:dc:f7:bd:dc:3c:77: a4:c6:82:a8:57:75:1b:90:6e:1b:21:3c:fc:72:fd:62:84:2c: bf:0c:c0:42:85:a0:f1:f2:a3:33:b2:7e:12:3e:1c:c5:ef:48: 2e:76:85:66:58:4b:b5:79:26:a7:1a:de:7c:c3:22:1e:75:e7: 13:23:27:9f:93:62:a1:78:fe:2a:b3:bb:e7:c8:03:7c:d7:b6: 00:e7:e4:92:ab:bf:e6:81:47:03:29:8e:ca:be:64:f5:6b:d6: 9c:5e:b0:6e:41:1a:ae:a4:b9:22:45:fd:b1:5e:fa:93:31:89: c4:09:89:a2:71:88:1e:e0:1f:12:5b:85:09:c3:07:17:ed:ab: fc:18:f0:d7:27:71:2c:b4:2c:93:ec:a4:70:a0:52:f0:b4:23: 93:25:1b:39:87:1f:69:8a:6d:5e:74:19:6f:df:57:46:b6:1f: dc:78:bd:0b:31:b5:ea:63:7d:5a:cb:b4:43:78:56:72:6b:cc: dd:e4:62:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrkD3bxo8peK8ULUH5kPe94MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0 ZGFiN2YwHhcNMjUxMjAzMTE1MzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzFmMmZhNWJhOWY4YzBlMTg4YzI2ZmVkODVjZDRlZjMwMjJjMjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAnBJWTTxC82n8SzbjnLS4UcvpzA lhYhwtYPPw8x66EQzNCkyU+lQpCaWg4Y4GRi0PJSK9ZoscykCVKbDQOKKj5rtW/r HN0IvWaYibfRDx24ItZpT00y4K/Ygv1yF4gDGig/MndnODn2CImj22fbTKLob6iq SmyfopcAFXRtU41h7M9+e2jo3tEtWldZKBBkvi2UuGl9skVYqn/lUQsEoVEWJzVD yHJ6KJhL0vc51dnAQqU8dbIeF7d+6kNnGD/RuCFCSVl7J5RLwpBrKPIyZXbZ/EJF teHBm8w1e5chl8yhSuQDVlnUG0LbilaqhLFqV6itm71e2ZXowUfsnuy/bwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAwfL6W6n4wOGIwm/thc1O8wIsJsMB8GA1UdIwQY MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct OWRkNmU4OGZjYzhkLzEvREI4dnBicWZqQTRZakNiLTJGelU3ekFpd213LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsq+iMA0G CSqGSIb3DQEBCwUAA4IBAQAZqF11h2iNfhyW1QXcWa03GBSCAMfhisfHbYysHUQ2 RjaaFjHDtUCKKL2qKraG62IFjclplCJzu1lmpx2TA938rbPc973cPHekxoKoV3Ub kG4bITz8cv1ihCy/DMBChaDx8qMzsn4SPhzF70gudoVmWEu1eSanGt58wyIedecT Iyefk2KheP4qs7vnyAN817YA5+SSq7/mgUcDKY7KvmT1a9acXrBuQRqupLkiRf2x XvqTMYnECYmicYge4B8SW4UJwwcX7av8GPDXJ3EstCyT7KRwoFLwtCOTJRs5hx9p im1edBlv31dGth/ceL0LMbXqY31ay7RDeFZya8zd5GIg -----END CERTIFICATE-----Generated at Sat Dec 6 23:30:27 2025 by rpki-client