This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/IuFMGMo0qQPNaw_HwikeG1qpC1g.roa File: IuFMGMo0qQPNaw_HwikeG1qpC1g.roa (raw, json) Hash identifier: pfIr6AYyv+yYDp1crXdTbGLCvoMDiRQhQRhnL5paHiM= Subject key identifier: 22:E1:4C:18:CA:34:A9:03:CD:6B:0F:C7:C2:29:1E:1B:5A:A9:0B:58 Certificate issuer: /CN=8e2f3c739e5171e4c026da96e5b50ffc267d606f Certificate serial: 019A747C0C4947414DAA239FECB57CD3CBF4 Authority key identifier: 8E:2F:3C:73:9E:51:71:E4:C0:26:DA:96:E5:B5:0F:FC:26:7D:60:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/IuFMGMo0qQPNaw_HwikeG1qpC1g.roa Signing time: Tue 11 Nov 2025 19:54:37 +0000 ROA not before: Tue 11 Nov 2025 19:54:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203874 IP address blocks: 2001:67c:2598::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.crl rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:74:7c:0c:49:47:41:4d:aa:23:9f:ec:b5:7c:d3:cb:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3c739e5171e4c026da96e5b50ffc267d606f Validity Not Before: Nov 11 19:54:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=22e14c18ca34a903cd6b0fc7c2291e1b5aa90b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5b:79:6b:95:ee:8b:85:fd:46:5d:c1:09:02: a4:ff:1a:41:04:1f:34:02:77:ca:7e:60:b4:5c:2d: 85:d8:8e:11:b9:2d:b8:30:3e:f0:82:9b:50:81:5d: e0:d8:b6:94:e1:53:ce:25:b5:54:63:0a:9a:7d:cf: 86:4b:bd:8a:64:76:dc:3a:ab:13:53:91:88:74:3a: c8:0c:93:b1:ae:51:f4:e3:11:51:19:e9:77:61:86: 76:af:a6:38:0d:03:76:d1:e3:4a:e3:86:a3:10:18: 42:30:91:70:2a:21:2c:f2:b9:b5:3d:b4:dc:74:fd: 94:63:59:fd:57:fc:bf:cf:fb:4e:ea:85:ec:ab:fe: 49:fd:0b:e9:2a:0a:b5:68:44:55:f3:99:87:38:f9: 09:eb:0b:73:0a:26:a8:7b:a7:20:1b:77:26:a2:3a: 09:83:67:02:44:16:53:fb:69:b2:b4:a9:47:bf:6d: b7:fa:73:b1:dd:01:fc:8b:8c:3b:9a:08:07:51:0a: c9:19:24:37:e9:da:6f:be:4b:f8:94:d9:92:f4:37: fe:6f:77:ad:e1:17:34:25:df:a2:1d:9b:b3:33:ee: d6:16:02:81:1c:cd:a9:91:63:39:64:99:3e:16:43: bd:89:09:2e:79:16:1c:a6:ce:0c:59:87:c3:ff:0b: 53:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E1:4C:18:CA:34:A9:03:CD:6B:0F:C7:C2:29:1E:1B:5A:A9:0B:58 X509v3 Authority Key Identifier: keyid:8E:2F:3C:73:9E:51:71:E4:C0:26:DA:96:E5:B5:0F:FC:26:7D:60:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/IuFMGMo0qQPNaw_HwikeG1qpC1g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2598::/48 Signature Algorithm: sha256WithRSAEncryption 0c:a5:ea:3d:ce:4b:87:a8:a2:95:32:f9:7a:21:be:59:10:a4: e7:3b:57:50:d6:6a:d0:32:c5:f5:b9:45:9c:3a:0a:11:23:47: 5a:10:34:21:05:d3:60:8d:e4:d6:ee:2f:72:e2:5e:77:30:0c: 9a:55:80:44:5e:a8:6d:75:51:68:5c:5a:96:eb:e6:7d:04:ec: 7d:26:64:64:ab:f9:cf:c0:b8:18:d1:32:1f:17:7e:1c:07:d5: bf:38:a7:54:a6:00:df:ff:c1:2e:0c:ff:89:33:30:1d:58:a1: fa:5a:2d:2a:27:b0:35:84:6b:50:31:06:6c:a9:e2:a6:f8:b0: 98:6e:5b:f4:44:d1:98:da:1f:ec:6f:e8:27:d7:a1:1f:59:c4: 3d:df:a3:45:63:68:27:91:7c:88:63:0d:ad:bf:31:40:de:39: 6d:14:7e:b4:ad:2e:1c:32:72:95:cf:7e:9d:a9:81:10:af:11: 7f:1b:95:4e:58:ee:ba:17:93:7b:3e:7f:70:52:5e:bf:0f:80: 4d:c0:92:f8:80:78:bf:dd:d2:0b:ab:9c:48:8b:a5:81:da:38: 90:56:60:a9:c4:24:2c:54:c1:a2:25:66:70:11:2e:d8:64:0d: ff:40:ab:25:86:8b:00:8a:db:b7:48:8b:0d:58:62:34:32:11: 62:9c:70:a1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZp0fAxJR0FNqiOf7LV808v0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMmYzYzczOWU1MTcxZTRjMDI2ZGE5NmU1YjUwZmZjMjY3 ZDYwNmYwHhcNMjUxMTExMTk1NDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmUxNGMxOGNhMzRhOTAzY2Q2YjBmYzdjMjI5MWUxYjVhYTkwYjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVt5a5Xui4X9Rl3BCQKk/xpBBB80 AnfKfmC0XC2F2I4RuS24MD7wgptQgV3g2LaU4VPOJbVUYwqafc+GS72KZHbcOqsT U5GIdDrIDJOxrlH04xFRGel3YYZ2r6Y4DQN20eNK44ajEBhCMJFwKiEs8rm1PbTc dP2UY1n9V/y/z/tO6oXsq/5J/QvpKgq1aERV85mHOPkJ6wtzCiaoe6cgG3cmojoJ g2cCRBZT+2mytKlHv223+nOx3QH8i4w7mggHUQrJGSQ36dpvvkv4lNmS9Df+b3et 4Rc0Jd+iHZuzM+7WFgKBHM2pkWM5ZJk+FkO9iQkueRYcps4MWYfD/wtTTwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCLhTBjKNKkDzWsPx8IpHhtaqQtYMB8GA1UdIwQY MBaAFI4vPHOeUXHkwCbaluW1D/wmfWBvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamk4OGM1NVJjZVRBSnRxVzViVVBfQ1o5WUc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mZTU2MDAtZDBkYy00YmY5LWJiOTkt MWFlYzE0NThiZGI3LzEvSXVGTUdNbzBxUVBOYXdfSHdpa2VHMXFwQzFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9mZTU2MDAtZDBkYy00YmY5LWJiOTktMWFlYzE0NThiZGI3 LzEvamk4OGM1NVJjZVRBSnRxVzViVVBfQ1o5WUc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCWY MA0GCSqGSIb3DQEBCwUAA4IBAQAMpeo9zkuHqKKVMvl6Ib5ZEKTnO1dQ1mrQMsX1 uUWcOgoRI0daEDQhBdNgjeTW7i9y4l53MAyaVYBEXqhtdVFoXFqW6+Z9BOx9JmRk q/nPwLgY0TIfF34cB9W/OKdUpgDf/8EuDP+JMzAdWKH6Wi0qJ7A1hGtQMQZsqeKm +LCYblv0RNGY2h/sb+gn16EfWcQ936NFY2gnkXyIYw2tvzFA3jltFH60rS4cMnKV z36dqYEQrxF/G5VOWO66F5N7Pn9wUl6/D4BNwJL4gHi/3dILq5xIi6WB2jiQVmCp xCQsVMGiJWZwES7YZA3/QKslhosAitu3SIsNWGI0MhFinHCh -----END CERTIFICATE-----Generated at Sat Dec 6 17:18:24 2025 by rpki-client