This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/AbjHdO_ih7eu4AB0MD87DSrEVyg.roa File: AbjHdO_ih7eu4AB0MD87DSrEVyg.roa (raw, json) Hash identifier: K/wxvuWNfZCed3xovqP1ilL+Dg1htCygooCGyG2tXuA= Subject key identifier: 01:B8:C7:74:EF:E2:87:B7:AE:E0:00:74:30:3F:3B:0D:2A:C4:57:28 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019B08D7A8C1A12F57E7C62EE443624FD42A Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/AbjHdO_ih7eu4AB0MD87DSrEVyg.roa Signing time: Wed 10 Dec 2025 15:18:29 +0000 ROA not before: Wed 10 Dec 2025 15:18:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 95.170.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:d7:a8:c1:a1:2f:57:e7:c6:2e:e4:43:62:4f:d4:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Dec 10 15:18:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=01b8c774efe287b7aee00074303f3b0d2ac45728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1e:04:be:01:63:40:0d:2f:fc:4f:c8:ca:4f: 14:8c:c7:88:6f:87:72:e0:f2:69:20:44:67:74:35: 76:fa:d4:e5:74:29:5f:88:c3:43:2a:36:85:53:9c: ba:59:a8:63:bf:db:ff:d6:92:ae:4e:9c:25:0c:be: 2e:b2:b8:4e:8e:92:d3:8e:d2:99:e2:76:14:f3:92: 31:0a:7e:26:55:26:9e:81:f6:12:6f:96:fd:2f:30: 75:df:16:40:21:87:ae:81:06:83:db:0d:84:3a:59: fc:fa:d0:48:8f:c8:b8:58:d9:38:b0:7d:96:b5:fc: 3c:29:20:83:d9:7e:8a:2e:60:73:1c:12:51:1e:83: 5b:96:bb:b2:d6:9c:16:3f:2a:ee:d4:c4:4f:a0:da: a7:d4:e7:51:22:e3:2d:6d:47:f3:e5:0b:65:a2:0d: 23:c0:56:55:40:e4:4e:ac:cf:8e:51:ad:c2:09:e6: 18:91:26:01:bd:4a:c5:39:64:ff:e9:53:47:59:d6: a2:9f:92:c0:47:e4:34:a6:44:66:c5:0c:2c:cb:6c: a7:17:bb:52:49:f2:f3:03:0e:c3:14:bd:61:92:00: 6a:85:0d:cc:56:1f:9a:f1:a6:d3:4a:b0:7b:95:2e: 0b:5a:ff:e6:72:49:08:7f:70:67:f3:d4:d0:99:21: f9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B8:C7:74:EF:E2:87:B7:AE:E0:00:74:30:3F:3B:0D:2A:C4:57:28 X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/AbjHdO_ih7eu4AB0MD87DSrEVyg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.170.12.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:81:59:0c:17:7c:da:d8:0e:77:d2:49:71:bc:1c:ba:3b:ad: 72:e5:94:c8:a4:ce:02:2d:39:a8:40:28:fd:f6:10:d6:af:71: 21:2f:c0:59:6b:fb:8b:df:94:e9:92:b1:c3:92:ff:e7:47:22: 61:f5:bf:7e:7f:b2:d9:43:43:5f:08:12:ce:27:da:52:b2:b1: 06:0e:26:05:c0:26:99:83:21:af:78:75:90:18:77:d9:9c:26: 3a:4b:a1:1d:d7:be:1a:3f:7b:4b:6c:71:25:df:24:e0:45:99: 41:a8:78:f6:e2:20:54:47:03:4d:70:94:46:51:46:05:ba:c0: 51:11:49:f4:cb:78:55:27:95:f0:c1:ff:26:ba:b9:17:6b:3a: a5:ba:c8:24:56:6e:4c:1f:31:ce:c7:45:03:9e:52:71:bb:9b: 49:1f:b8:45:aa:50:e5:7c:e9:ff:27:85:3c:c8:c2:b7:cb:55: d1:ad:d9:96:7e:ce:a4:94:a1:86:8f:37:e0:cd:cb:8f:ff:80: 13:a7:d1:9c:26:ef:f0:12:36:27:01:75:dd:72:72:87:1f:b5: e1:dd:a2:c4:1d:63:f2:5d:ff:1a:19:a7:32:42:a8:42:05:78: e8:62:03:e8:b2:7b:86:23:6b:89:77:d3:1f:91:a8:0a:9e:8e: b1:f5:a0:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsI16jBoS9X58Yu5ENiT9QqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjUxMjEwMTUxODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWI4Yzc3NGVmZTI4N2I3YWVlMDAwNzQzMDNmM2IwZDJhYzQ1NzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR4EvgFjQA0v/E/Iyk8UjMeIb4dy 4PJpIERndDV2+tTldClfiMNDKjaFU5y6Wahjv9v/1pKuTpwlDL4usrhOjpLTjtKZ 4nYU85IxCn4mVSaegfYSb5b9LzB13xZAIYeugQaD2w2EOln8+tBIj8i4WNk4sH2W tfw8KSCD2X6KLmBzHBJRHoNblruy1pwWPyru1MRPoNqn1OdRIuMtbUfz5Qtlog0j wFZVQOROrM+OUa3CCeYYkSYBvUrFOWT/6VNHWdain5LAR+Q0pkRmxQwsy2ynF7tS SfLzAw7DFL1hkgBqhQ3MVh+a8abTSrB7lS4LWv/mckkIf3Bn89TQmSH59QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAG4x3Tv4oe3ruAAdDA/Ow0qxFcoMB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvQWJqSGRPX2loN2V1NEFCME1EODdEU3JFVnlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX6oMMA0G CSqGSIb3DQEBCwUAA4IBAQB7gVkMF3za2A530klxvBy6O61y5ZTIpM4CLTmoQCj9 9hDWr3EhL8BZa/uL35TpkrHDkv/nRyJh9b9+f7LZQ0NfCBLOJ9pSsrEGDiYFwCaZ gyGveHWQGHfZnCY6S6Ed174aP3tLbHEl3yTgRZlBqHj24iBURwNNcJRGUUYFusBR EUn0y3hVJ5Xwwf8murkXazqlusgkVm5MHzHOx0UDnlJxu5tJH7hFqlDlfOn/J4U8 yMK3y1XRrdmWfs6klKGGjzfgzcuP/4ATp9GcJu/wEjYnAXXdcnKHH7Xh3aLEHWPy Xf8aGacyQqhCBXjoYgPosnuGI2uJd9MfkagKno6x9aBR -----END CERTIFICATE-----Generated at Mon Dec 15 17:21:40 2025 by rpki-client