This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/IzqBcQZCo9AKRsEzHD5ErtBM_K0.roa File: IzqBcQZCo9AKRsEzHD5ErtBM_K0.roa (raw, json) Hash identifier: 0bRYcwVRhwMrT0GU5K4Qo3lVJkdxZF0F6kEv8Ur6Vac= Subject key identifier: 23:3A:81:71:06:42:A3:D0:0A:46:C1:33:1C:3E:44:AE:D0:4C:FC:AD Certificate issuer: /CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd Certificate serial: 019B274237ACE5D52D9CE805EEEB6CCB3484 Authority key identifier: B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/IzqBcQZCo9AKRsEzHD5ErtBM_K0.roa Signing time: Tue 16 Dec 2025 13:03:29 +0000 ROA not before: Tue 16 Dec 2025 13:03:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42184 IP address blocks: 45.82.124.0/22 maxlen: 24 91.190.224.0/21 maxlen: 24 178.251.8.0/21 maxlen: 24 185.64.168.0/22 maxlen: 24 185.124.232.0/22 maxlen: 24 185.143.168.0/22 maxlen: 24 185.153.140.0/22 maxlen: 24 188.64.248.0/21 maxlen: 24 194.15.152.0/22 maxlen: 24 2a02:f08::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:42:37:ac:e5:d5:2d:9c:e8:05:ee:eb:6c:cb:34:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd Validity Not Before: Dec 16 13:03:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=233a81710642a3d00a46c1331c3e44aed04cfcad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:96:b9:a0:b5:55:bc:e0:a5:78:9f:66:dd:15: f5:95:96:08:7a:84:c3:e3:2b:76:24:ab:23:67:ad: 17:61:5b:b9:37:fe:e0:ee:d4:b8:00:62:7f:c7:1e: 26:f8:8e:8a:a6:04:1d:50:ae:a2:7b:01:d0:12:cd: 8a:40:08:68:54:74:c0:ea:23:e3:75:96:b0:3e:20: ce:b9:ad:ca:85:27:db:23:22:ff:1e:31:36:69:0c: 9f:ea:12:5f:30:82:bd:cc:17:cf:3f:53:d7:b3:f4: 02:6a:b9:da:53:f3:1c:17:89:1b:17:c4:46:3b:e7: 3f:89:69:0d:60:3d:5b:fa:87:5a:2f:a0:2d:4e:20: 4e:78:82:7c:6f:78:9d:ca:12:0e:46:71:82:6c:4e: 72:c5:d6:f8:11:d5:9e:b2:b1:8c:c7:44:3d:9f:f6: 23:93:2d:1c:14:45:6d:e4:44:f8:95:f6:c1:67:a5: 4b:de:e9:7d:c2:d8:38:32:da:c4:1b:11:c5:aa:cc: fe:df:f0:5b:09:3c:d9:3d:f7:58:5d:96:53:ab:c9: b7:7d:4c:1d:02:36:9c:a1:ee:66:9c:63:bb:46:12: 37:5c:6b:d8:ad:d1:ce:78:79:c2:ed:a0:80:06:a1: b8:3d:46:77:d0:74:84:e1:3e:4b:7b:10:c8:70:38: 00:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3A:81:71:06:42:A3:D0:0A:46:C1:33:1C:3E:44:AE:D0:4C:FC:AD X509v3 Authority Key Identifier: keyid:B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/IzqBcQZCo9AKRsEzHD5ErtBM_K0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.124.0/22 91.190.224.0/21 178.251.8.0/21 185.64.168.0/22 185.124.232.0/22 185.143.168.0/22 185.153.140.0/22 188.64.248.0/21 194.15.152.0/22 IPv6: 2a02:f08::/32 Signature Algorithm: sha256WithRSAEncryption 4d:f5:49:51:e8:c7:d8:58:4d:eb:5c:01:50:4e:dd:7d:35:7a: a9:22:82:a8:0f:89:4f:8b:2e:d4:dd:5f:fe:45:4a:83:1b:6d: 11:4f:64:91:5c:21:97:9d:86:10:fc:ed:00:75:cb:68:ba:70: 46:47:6f:62:3f:8d:e9:81:0c:c6:1d:52:4a:f9:3a:a3:e0:52: 29:1a:f2:eb:1e:90:82:0d:ed:8a:ed:18:a2:e0:8a:74:cc:68: 31:8a:21:70:65:75:8a:59:e0:1a:79:7b:b0:e8:d0:5c:c5:a1: 85:fb:93:fa:ec:a5:3d:05:74:de:62:0b:3f:2b:46:21:8f:ac: cf:76:4f:9a:84:b2:98:1f:0d:1f:68:a9:f0:8a:38:ad:a6:58: 19:e8:38:a0:b5:b3:76:e7:33:65:a9:b0:4b:71:e8:ae:87:6e: 6c:40:cd:66:f4:fe:ba:e9:fd:b5:28:ad:70:88:94:93:13:7c: fc:7b:7c:00:60:c0:da:db:fb:74:33:0c:2c:b6:d8:da:cc:43: c0:5e:12:66:76:49:53:d2:d2:95:4a:1c:0b:38:6b:07:dd:09: 57:80:1a:92:9f:44:a1:4d:d4:ec:71:b3:2d:c3:85:71:74:78: b0:85:1b:2e:98:dd:b4:1a:8d:6d:36:4c:e7:dc:97:12:78:35: d5:de:11:e2 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZsnQjes5dUtnOgF7utsyzSEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYjZmNTRlYTliMTVhOGJkNGYzMzgyNTM4NmNiMjc3YjAz NDM5ZGQwHhcNMjUxMjE2MTMwMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzNhODE3MTA2NDJhM2QwMGE0NmMxMzMxYzNlNDRhZWQwNGNmY2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Za5oLVVvOCleJ9m3RX1lZYIeoTD 4yt2JKsjZ60XYVu5N/7g7tS4AGJ/xx4m+I6KpgQdUK6iewHQEs2KQAhoVHTA6iPj dZawPiDOua3KhSfbIyL/HjE2aQyf6hJfMIK9zBfPP1PXs/QCarnaU/McF4kbF8RG O+c/iWkNYD1b+odaL6AtTiBOeIJ8b3idyhIORnGCbE5yxdb4EdWesrGMx0Q9n/Yj ky0cFEVt5ET4lfbBZ6VL3ul9wtg4MtrEGxHFqsz+3/BbCTzZPfdYXZZTq8m3fUwd Ajacoe5mnGO7RhI3XGvYrdHOeHnC7aCABqG4PUZ30HSE4T5LexDIcDgAFQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFCM6gXEGQqPQCkbBMxw+RK7QTPytMB8GA1UdIwQY MBaAFLO29U6psVqL1PM4JThssnewNDndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczdiMVRxbXhXb3ZVOHpnbE9HeXlkN0EwT2QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84ZGU0YTMtOGQ1YS00NmIxLWE3MzUt MmY0NmU5MzE3Y2M2LzEvSXpxQmNRWkNvOUFLUnNFekhENUVydEJNX0swLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi84ZGU0YTMtOGQ1YS00NmIxLWE3MzUtMmY0NmU5MzE3Y2M2 LzEvczdiMVRxbXhXb3ZVOHpnbE9HeXlkN0EwT2QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQCLVJ8AwQD W77gAwQDsvsIAwQCuUCoAwQCuXzoAwQCuY+oAwQCuZmMAwQDvED4AwQCwg+YMA0E AgACMAcDBQAqAg8IMA0GCSqGSIb3DQEBCwUAA4IBAQBN9UlR6MfYWE3rXAFQTt19 NXqpIoKoD4lPiy7U3V/+RUqDG20RT2SRXCGXnYYQ/O0AdctounBGR29iP43pgQzG HVJK+Tqj4FIpGvLrHpCCDe2K7Rii4Ip0zGgxiiFwZXWKWeAaeXuw6NBcxaGF+5P6 7KU9BXTeYgs/K0Yhj6zPdk+ahLKYHw0faKnwijitplgZ6DigtbN25zNlqbBLceiu h25sQM1m9P666f21KK1wiJSTE3z8e3wAYMDa2/t0MwwsttjazEPAXhJmdklT0tKV ShwLOGsH3QlXgBqSn0ShTdTscbMtw4VxdHiwhRsumN20Go1tNkzn3JcSeDXV3hHi -----END CERTIFICATE-----Generated at Wed Dec 17 19:26:28 2025 by rpki-client