This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/8yOSG1ZDFRYhiPDyzl6NTOqQUVs.roa File: 8yOSG1ZDFRYhiPDyzl6NTOqQUVs.roa (raw, json) Hash identifier: UAfeLN/47u93gTxRHYF0+4atcBCRY+Cwkr6m/YfQqY0= Subject key identifier: F3:23:92:1B:56:43:15:16:21:88:F0:F2:CE:5E:8D:4C:EA:90:51:5B Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019ADE1F0D1DD148461A82C29833802A4E85 Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/8yOSG1ZDFRYhiPDyzl6NTOqQUVs.roa Signing time: Tue 02 Dec 2025 08:12:48 +0000 ROA not before: Tue 02 Dec 2025 08:12:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 178.254.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:1f:0d:1d:d1:48:46:1a:82:c2:98:33:80:2a:4e:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Dec 2 08:12:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f323921b564315162188f0f2ce5e8d4cea90515b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8f:c4:f5:36:51:79:e6:3b:83:64:9f:2d:5b: e1:f8:ef:2b:3e:d7:aa:9f:c1:8d:d0:8f:7f:89:b4: 16:15:5a:b6:5b:15:f1:37:38:d9:89:0b:fa:cd:7d: d5:33:64:b0:e8:18:67:c9:0b:fe:6c:8e:31:d5:be: bc:23:54:10:ac:11:c6:da:8d:d0:4d:e3:e5:07:15: e2:5f:cc:67:89:4b:62:5c:72:0b:78:59:23:94:02: 11:a0:a7:fd:5f:ab:02:3f:d2:2e:00:32:53:d4:97: 96:1d:cc:a2:a3:82:14:49:cb:d3:0e:ba:e7:a8:87: 04:4b:92:39:7a:ed:d6:2c:26:92:36:03:39:fd:fd: 5d:1e:e6:b0:64:44:1f:3e:92:15:61:3c:fe:39:54: 3c:39:5f:72:d1:d7:6b:4f:eb:f5:5b:30:dc:b8:6d: e6:7d:6a:c6:b2:bc:f5:89:e4:07:cc:15:ab:b0:ca: 10:12:51:92:f7:53:49:9c:59:48:fb:d4:14:0d:9e: 65:df:35:aa:11:50:92:ab:0a:f4:c9:5e:b2:37:0c: 73:6a:af:e5:dc:3c:8c:e2:62:ca:9a:5a:e2:03:c6: 9a:52:5a:6d:a3:89:f0:4a:6c:1d:bb:09:fa:e0:52: 8c:26:c9:8f:be:5a:9a:5b:96:7a:12:36:95:a7:fb: 59:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:23:92:1B:56:43:15:16:21:88:F0:F2:CE:5E:8D:4C:EA:90:51:5B X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/8yOSG1ZDFRYhiPDyzl6NTOqQUVs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.254.181.0/24 Signature Algorithm: sha256WithRSAEncryption 32:78:50:ab:2e:09:4e:04:98:b3:73:41:21:b7:ff:5c:b6:f5: 77:0a:8a:dd:28:dd:24:31:f8:31:9e:1b:55:da:45:c5:f7:c5: 3c:f4:70:63:eb:d4:0a:74:90:9a:0e:e9:db:81:49:76:9d:67: 03:4d:75:43:3d:1b:c5:a5:2a:01:05:6d:3e:d7:6d:76:73:9d: 17:ca:36:31:40:5b:10:62:5b:6a:df:f0:04:38:58:99:5c:e6: 20:b0:b7:ee:1b:07:4a:82:f4:5e:3a:68:5d:78:a3:29:3c:89: 6f:84:40:ef:a4:c8:98:a6:7f:61:8f:ce:49:a0:6a:df:99:0b: 66:57:51:10:f7:14:d7:d9:2c:92:9e:fd:30:6d:f4:3a:b0:3d: 24:c6:4a:0c:c5:2d:9d:20:32:9d:27:f0:fc:c0:4c:9c:34:fc: 09:35:d7:c7:d9:79:12:c6:17:d2:6b:7e:e0:32:21:a0:c4:e3: 88:bd:c3:7b:cf:12:3a:e3:b9:da:33:0a:9b:00:cf:be:f9:de: 19:0c:1e:3a:2d:ed:81:5e:69:c5:a9:7d:25:20:2a:7e:7f:e5: bb:c8:0b:0e:17:6b:4b:93:b5:01:48:46:eb:81:a1:50:42:25: dd:bb:0e:03:e3:e1:92:9a:6f:7b:9f:af:a8:9b:7a:8c:bc:9d: 65:66:1b:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZreHw0d0UhGGoLCmDOAKk6FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjUxMjAyMDgxMjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzIzOTIxYjU2NDMxNTE2MjE4OGYwZjJjZTVlOGQ0Y2VhOTA1MTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4/E9TZReeY7g2SfLVvh+O8rPteq n8GN0I9/ibQWFVq2WxXxNzjZiQv6zX3VM2Sw6BhnyQv+bI4x1b68I1QQrBHG2o3Q TePlBxXiX8xniUtiXHILeFkjlAIRoKf9X6sCP9IuADJT1JeWHcyio4IUScvTDrrn qIcES5I5eu3WLCaSNgM5/f1dHuawZEQfPpIVYTz+OVQ8OV9y0ddrT+v1WzDcuG3m fWrGsrz1ieQHzBWrsMoQElGS91NJnFlI+9QUDZ5l3zWqEVCSqwr0yV6yNwxzaq/l 3DyM4mLKmlriA8aaUlpto4nwSmwduwn64FKMJsmPvlqaW5Z6EjaVp/tZCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPMjkhtWQxUWIYjw8s5ejUzqkFFbMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvOHlPU0cxWkRGUlloaVBEeXpsNk5UT3FRVVZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv61MA0G CSqGSIb3DQEBCwUAA4IBAQAyeFCrLglOBJizc0Eht/9ctvV3CordKN0kMfgxnhtV 2kXF98U89HBj69QKdJCaDunbgUl2nWcDTXVDPRvFpSoBBW0+1212c50XyjYxQFsQ Yltq3/AEOFiZXOYgsLfuGwdKgvReOmhdeKMpPIlvhEDvpMiYpn9hj85JoGrfmQtm V1EQ9xTX2SySnv0wbfQ6sD0kxkoMxS2dIDKdJ/D8wEycNPwJNdfH2XkSxhfSa37g MiGgxOOIvcN7zxI647naMwqbAM+++d4ZDB46Le2BXmnFqX0lICp+f+W7yAsOF2tL k7UBSEbrgaFQQiXduw4D4+GSmm97n6+om3qMvJ1lZhst -----END CERTIFICATE-----Generated at Sun Dec 7 02:06:04 2025 by rpki-client