This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/I8tF4bSTVlY_zcxDyq3l5_8IsrA.roa File: I8tF4bSTVlY_zcxDyq3l5_8IsrA.roa (raw, json) Hash identifier: 5MOyttbZDP6FZTfK0vRCCZXf2h18nz/X4xmp4raP59M= Subject key identifier: 23:CB:45:E1:B4:93:56:56:3F:CD:CC:43:CA:AD:E5:E7:FF:08:B2:B0 Certificate issuer: /CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29 Certificate serial: 019AAB8954F9188ACAF7A96C5A4FAAEEE069 Authority key identifier: BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/I8tF4bSTVlY_zcxDyq3l5_8IsrA.roa Signing time: Sat 22 Nov 2025 12:28:15 +0000 ROA not before: Sat 22 Nov 2025 12:28:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204292 IP address blocks: 185.234.218.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:89:54:f9:18:8a:ca:f7:a9:6c:5a:4f:aa:ee:e0:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29 Validity Not Before: Nov 22 12:28:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=23cb45e1b49356563fcdcc43caade5e7ff08b2b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5d:50:06:c7:40:74:ce:82:89:eb:9e:95:5e: e5:9a:82:17:73:f5:9a:c6:5f:d8:1f:cb:8b:4b:ff: 03:4b:98:7f:1c:68:98:5c:e5:c8:1b:2a:4e:3a:bf: 45:60:6e:31:0d:22:74:ca:86:0a:dd:17:a2:b4:21: 9d:cb:2b:9a:dd:af:28:82:65:4d:e0:b5:2d:da:94: d3:e1:ef:a1:7e:08:1d:70:72:c4:f5:51:a4:7b:0d: 2b:9a:a7:50:5b:54:10:99:12:83:d4:1f:ed:c9:30: 49:23:77:53:97:7b:35:ae:f3:6b:5a:d3:2c:88:7d: be:26:16:57:ed:27:62:b4:2f:3b:74:11:a7:15:34: f9:29:7d:99:e8:75:36:77:88:5d:72:9f:ec:47:76: 46:34:d0:99:35:ac:a2:41:58:e1:0f:13:f7:d3:d4: bc:bd:63:24:bb:f8:48:57:10:33:bc:7a:46:ea:90: ed:84:65:d0:58:77:a9:10:e1:d9:29:d8:19:f4:9b: 92:4e:8a:75:f5:6a:72:cb:7c:99:32:5f:a7:d5:9d: 23:81:d5:1a:3e:27:bc:eb:71:f2:c6:db:29:c5:2f: 5f:db:6c:2c:36:d9:27:aa:5f:af:a1:82:71:5a:c0: a7:42:2a:fc:98:c2:b1:b2:c7:08:d3:aa:dc:c8:c8: 00:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CB:45:E1:B4:93:56:56:3F:CD:CC:43:CA:AD:E5:E7:FF:08:B2:B0 X509v3 Authority Key Identifier: keyid:BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/I8tF4bSTVlY_zcxDyq3l5_8IsrA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.234.218.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:6e:97:d6:28:92:73:de:ec:36:e6:8f:fd:0c:58:7c:2f:9f: 18:2c:ae:0f:ca:48:f2:60:b7:56:5c:2c:e9:0a:c1:99:35:1f: c0:c3:0a:ca:f5:66:19:20:ae:45:70:65:cb:f7:99:27:93:04: ec:5a:81:55:ca:52:2a:68:c7:d2:d9:44:81:91:fc:db:ef:aa: a1:76:bb:13:4e:8f:5b:6a:c8:e3:60:9e:1a:56:40:14:58:76: 47:46:2f:c4:32:85:29:57:6e:37:3a:da:78:a6:71:ea:93:96: 44:9d:13:39:f2:d3:86:25:f0:e4:46:92:8f:52:8f:10:0a:52: ac:9a:4b:cc:62:d8:c5:ee:a5:5b:7a:12:d2:3e:64:2d:0c:8b: b7:5e:94:b1:75:00:ba:97:87:79:08:14:6e:a5:1e:a8:2e:d0: fb:6a:90:d7:c5:77:82:50:a5:34:e6:67:7c:65:0d:9a:b1:cb: 23:97:33:dd:d0:c2:07:be:13:cc:90:aa:86:97:81:6d:a0:6f: 03:da:6d:83:a8:96:6c:60:01:3d:24:50:07:c4:19:41:57:b3: 8e:07:db:82:1f:08:bd:f6:30:8a:e2:eb:9f:3d:45:2b:f7:5d: 98:8b:0b:68:64:80:fa:df:b6:76:f5:13:9d:cc:b9:51:78:76: 97:2f:8e:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqriVT5GIrK96lsWk+q7uBpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjYzYzZjAxMGM1NDBiY2Q0NTU0MzQ0YmZiOWE1OWEyZWRi YWJjMjkwHhcNMjUxMTIyMTIyODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2NiNDVlMWI0OTM1NjU2M2ZjZGNjNDNjYWFkZTVlN2ZmMDhiMmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF1QBsdAdM6CieuelV7lmoIXc/Wa xl/YH8uLS/8DS5h/HGiYXOXIGypOOr9FYG4xDSJ0yoYK3ReitCGdyyua3a8ogmVN 4LUt2pTT4e+hfggdcHLE9VGkew0rmqdQW1QQmRKD1B/tyTBJI3dTl3s1rvNrWtMs iH2+JhZX7SditC87dBGnFTT5KX2Z6HU2d4hdcp/sR3ZGNNCZNayiQVjhDxP309S8 vWMku/hIVxAzvHpG6pDthGXQWHepEOHZKdgZ9JuSTop19Wpyy3yZMl+n1Z0jgdUa Pie863HyxtspxS9f22wsNtknql+voYJxWsCnQir8mMKxsscI06rcyMgA4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCPLReG0k1ZWP83MQ8qt5ef/CLKwMB8GA1UdIwQY MBaAFLzGPwEMVAvNRVQ0S/uaWaLturwpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk1ZX0FReFVDODFGVkRSTC01cFpvdTI2dkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hMjljNjctZjI0ZC00OTc5LWIyYWYt Y2M0MWM0YTMxOThkLzEvSTh0RjRiU1RWbFlfemN4RHlxM2w1XzhJc3JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9hMjljNjctZjI0ZC00OTc5LWIyYWYtY2M0MWM0YTMxOThk LzEvdk1ZX0FReFVDODFGVkRSTC01cFpvdTI2dkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueraMA0G CSqGSIb3DQEBCwUAA4IBAQAcbpfWKJJz3uw25o/9DFh8L58YLK4PykjyYLdWXCzp CsGZNR/AwwrK9WYZIK5FcGXL95knkwTsWoFVylIqaMfS2USBkfzb76qhdrsTTo9b asjjYJ4aVkAUWHZHRi/EMoUpV243Otp4pnHqk5ZEnRM58tOGJfDkRpKPUo8QClKs mkvMYtjF7qVbehLSPmQtDIu3XpSxdQC6l4d5CBRupR6oLtD7apDXxXeCUKU05md8 ZQ2ascsjlzPd0MIHvhPMkKqGl4FtoG8D2m2DqJZsYAE9JFAHxBlBV7OOB9uCHwi9 9jCK4uufPUUr912YiwtoZID637Z29ROdzLlReHaXL44i -----END CERTIFICATE-----Generated at Sat Dec 6 08:17:43 2025 by rpki-client