This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/1ipyeOR9lPycgxOriGkT6D7Fl7A.roa File: 1ipyeOR9lPycgxOriGkT6D7Fl7A.roa (raw, json) Hash identifier: QCaaL4rHAtO8X/L/PhI5SAbxY2KRFJXehCD4GCBBkAM= Subject key identifier: D6:2A:72:78:E4:7D:94:FC:9C:83:13:AB:88:69:13:E8:3E:C5:97:B0 Certificate issuer: /CN=232b703089e3800d9ed29124731ecba4e9ab454f Certificate serial: 019ABD2BA6867999E7DC5E1467A801242DDB Authority key identifier: 23:2B:70:30:89:E3:80:0D:9E:D2:91:24:73:1E:CB:A4:E9:AB:45:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IytwMInjgA2e0pEkcx7LpOmrRU8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/1ipyeOR9lPycgxOriGkT6D7Fl7A.roa Signing time: Tue 25 Nov 2025 22:39:05 +0000 ROA not before: Tue 25 Nov 2025 22:39:05 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206890 IP address blocks: 185.172.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/IytwMInjgA2e0pEkcx7LpOmrRU8.crl rsync://rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/IytwMInjgA2e0pEkcx7LpOmrRU8.mft rsync://rpki.ripe.net/repository/DEFAULT/IytwMInjgA2e0pEkcx7LpOmrRU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bd:2b:a6:86:79:99:e7:dc:5e:14:67:a8:01:24:2d:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=232b703089e3800d9ed29124731ecba4e9ab454f Validity Not Before: Nov 25 22:39:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d62a7278e47d94fc9c8313ab886913e83ec597b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1f:05:10:b6:4b:db:04:07:2b:06:ae:c5:aa: b1:a3:16:92:1d:ca:ea:e0:5e:85:01:0a:96:02:2f: e8:1f:ec:7f:bb:2e:c4:05:56:13:a8:a8:eb:2e:17: 95:5d:cc:41:e8:51:e5:c7:8d:42:fe:f2:30:9a:54: 41:e8:44:fa:1b:6f:f5:6d:6d:d7:53:86:42:fd:35: 6a:73:b5:31:1e:47:16:73:1d:00:39:b0:13:eb:ec: 3f:31:fd:85:a3:42:4c:19:9c:f7:0c:e5:8b:08:e4: 67:a9:ad:e2:b1:2c:9e:94:e5:0b:23:7f:2a:8e:04: 6b:c3:6b:cc:6f:a9:e2:ad:82:9a:67:a7:b1:48:61: 9f:e7:fd:39:12:da:4d:ab:07:cc:ab:da:c0:5d:5d: 54:6e:50:b5:30:06:0c:89:73:e9:ce:79:71:ea:bc: 95:8b:21:c3:a4:d5:10:be:83:56:4d:98:33:d4:00: 28:6e:11:44:ef:50:81:7d:e7:bf:6d:ba:75:c8:c7: 30:a1:49:7d:7b:b5:45:8b:d8:f8:13:07:75:16:32: 5c:39:0f:47:ba:51:2c:77:9c:62:e8:ab:d7:70:5c: 46:3f:67:23:d1:2b:ce:ba:b4:5f:81:28:3b:5a:92: 63:38:a8:ce:0a:49:01:ba:93:fe:99:1d:c6:60:6a: 81:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:2A:72:78:E4:7D:94:FC:9C:83:13:AB:88:69:13:E8:3E:C5:97:B0 X509v3 Authority Key Identifier: keyid:23:2B:70:30:89:E3:80:0D:9E:D2:91:24:73:1E:CB:A4:E9:AB:45:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IytwMInjgA2e0pEkcx7LpOmrRU8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/1ipyeOR9lPycgxOriGkT6D7Fl7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/IytwMInjgA2e0pEkcx7LpOmrRU8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.172.240.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:e0:36:ff:19:2b:b5:ee:b7:ae:bd:74:45:71:d9:45:05:bc: 35:05:85:ea:b8:0e:15:64:9f:f2:b6:35:cb:e0:f7:04:e8:31: 6b:3e:83:3f:ed:b0:8f:f7:29:e7:58:01:59:91:22:02:d7:58: 99:2e:cd:e3:ab:b1:91:a7:62:0b:a5:3b:99:b9:07:7b:c3:51: dc:48:c8:e0:ca:30:e5:7b:78:6e:85:aa:d9:50:a9:89:9f:6b: ba:14:e1:63:28:a0:47:fe:49:9f:60:13:d7:8b:32:1f:9f:22: 22:3a:8d:91:f7:33:a3:e6:8a:33:6b:55:a4:ae:ab:fb:37:21: b2:f6:ce:bb:de:e1:1e:a6:1e:09:d5:38:11:cd:a8:ab:81:0c: 9b:4d:62:b5:62:f8:35:f2:df:3a:1c:30:31:d9:f1:e9:25:7a: 71:77:95:af:ff:e4:08:0c:e0:d6:d8:96:00:d7:c4:fb:b9:2a: 7d:03:89:33:77:18:9c:3e:45:f2:df:c3:34:c2:b8:cd:76:9d: 5a:8c:83:a4:de:a7:75:79:cd:16:1e:64:27:d9:1e:49:61:73: 35:26:b7:8f:29:c9:49:1d:e6:30:27:95:9e:4c:45:37:4f:6f: 4c:6a:db:c2:a6:06:da:db:54:bc:93:21:02:3a:e1:11:e6:ce: b6:b2:37:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq9K6aGeZnn3F4UZ6gBJC3bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMmI3MDMwODllMzgwMGQ5ZWQyOTEyNDczMWVjYmE0ZTlh YjQ1NGYwHhcNMjUxMTI1MjIzOTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjJhNzI3OGU0N2Q5NGZjOWM4MzEzYWI4ODY5MTNlODNlYzU5N2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR8FELZL2wQHKwauxaqxoxaSHcrq 4F6FAQqWAi/oH+x/uy7EBVYTqKjrLheVXcxB6FHlx41C/vIwmlRB6ET6G2/1bW3X U4ZC/TVqc7UxHkcWcx0AObAT6+w/Mf2Fo0JMGZz3DOWLCORnqa3isSyelOULI38q jgRrw2vMb6nirYKaZ6exSGGf5/05EtpNqwfMq9rAXV1UblC1MAYMiXPpznlx6ryV iyHDpNUQvoNWTZgz1AAobhFE71CBfee/bbp1yMcwoUl9e7VFi9j4Ewd1FjJcOQ9H ulEsd5xi6KvXcFxGP2cj0SvOurRfgSg7WpJjOKjOCkkBupP+mR3GYGqB4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNYqcnjkfZT8nIMTq4hpE+g+xZewMB8GA1UdIwQY MBaAFCMrcDCJ44ANntKRJHMey6Tpq0VPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXl0d01JbmpnQTJlMHBFa2N4N0xwT21yUlU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC81OWNmNzEtOWRjZS00ZDU0LWFjYTct YzA2ZDAzNjBlMTE0LzEvMWlweWVPUjlsUHljZ3hPcmlHa1Q2RDdGbDdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC81OWNmNzEtOWRjZS00ZDU0LWFjYTctYzA2ZDAzNjBlMTE0 LzEvSXl0d01JbmpnQTJlMHBFa2N4N0xwT21yUlU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuazwMA0G CSqGSIb3DQEBCwUAA4IBAQCb4Db/GSu17reuvXRFcdlFBbw1BYXquA4VZJ/ytjXL 4PcE6DFrPoM/7bCP9ynnWAFZkSIC11iZLs3jq7GRp2ILpTuZuQd7w1HcSMjgyjDl e3huharZUKmJn2u6FOFjKKBH/kmfYBPXizIfnyIiOo2R9zOj5ooza1Wkrqv7NyGy 9s673uEeph4J1TgRzairgQybTWK1Yvg18t86HDAx2fHpJXpxd5Wv/+QIDODW2JYA 18T7uSp9A4kzdxicPkXy38M0wrjNdp1ajIOk3qd1ec0WHmQn2R5JYXM1JrePKclJ HeYwJ5WeTEU3T29MatvCpgba21S8kyECOuER5s62sjfB -----END CERTIFICATE-----Generated at Sat Dec 6 13:42:37 2025 by rpki-client