This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/I8U89O9tJpiXMO1-8M-1h4tHDe0.roa File: I8U89O9tJpiXMO1-8M-1h4tHDe0.roa (raw, json) Hash identifier: grEqNQsgQL87eOOxL5f7rnMv8IQ+ZhiUxpZ5tEaDHVs= Subject key identifier: 23:C5:3C:F4:EF:6D:26:98:97:30:ED:7E:F0:CF:B5:87:8B:47:0D:ED Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8 Certificate serial: 019AB556CC7D9B566DE88137BF3377AA2967 Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/I8U89O9tJpiXMO1-8M-1h4tHDe0.roa Signing time: Mon 24 Nov 2025 10:09:15 +0000 ROA not before: Mon 24 Nov 2025 10:09:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206276 IP address blocks: 45.8.12.0/22 maxlen: 22 45.141.240.0/22 maxlen: 22 78.142.212.0/22 maxlen: 22 178.251.16.0/22 maxlen: 22 185.179.184.0/22 maxlen: 22 185.190.100.0/22 maxlen: 22 193.38.224.0/22 maxlen: 22 194.49.56.0/22 maxlen: 22 212.63.112.0/22 maxlen: 22 2a0a:8c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:56:cc:7d:9b:56:6d:e8:81:37:bf:33:77:aa:29:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8 Validity Not Before: Nov 24 10:09:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=23c53cf4ef6d26989730ed7ef0cfb5878b470ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d8:57:53:e5:6d:f3:45:37:58:b4:6d:af:35: 1f:67:ca:ed:b1:9a:ff:72:ca:32:e3:d1:3d:4d:37: 53:5b:5a:a5:0b:05:92:8e:a9:f5:51:2a:72:85:3b: 5f:f8:eb:91:7b:2a:10:26:c9:32:ef:e8:0a:a1:22: 49:b5:4f:1b:a3:2f:34:94:69:9b:1c:83:8f:98:89: 1f:57:50:a4:de:26:8c:70:fc:4e:9f:e2:aa:a6:a4: 85:18:a2:15:2b:df:22:0e:87:8f:70:9c:4e:e0:89: 22:b3:ef:ba:96:48:25:54:e1:c9:d4:a8:70:d4:77: 92:c4:59:83:7e:a1:35:c3:94:ae:a3:43:86:3c:85: 6d:8b:a6:a9:6f:81:2d:02:58:5a:00:89:26:32:d2: 54:42:70:a8:36:78:88:ec:6c:0b:ac:f5:24:9e:cc: e1:19:76:a8:93:3f:b8:b9:54:2f:b5:ee:3f:05:fd: 8e:8c:90:40:0e:cd:6f:68:04:cf:2c:9e:fa:16:8d: 46:6a:b2:da:99:22:91:81:32:19:58:6f:65:95:61: ec:1e:99:90:af:0c:08:91:82:b3:94:5b:33:2e:99: a3:7a:cc:8d:e0:e0:2c:bf:ba:73:53:81:6b:20:cb: 43:3f:e7:98:5e:de:1d:2b:cb:d6:f1:de:01:a1:87: aa:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C5:3C:F4:EF:6D:26:98:97:30:ED:7E:F0:CF:B5:87:8B:47:0D:ED X509v3 Authority Key Identifier: keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/I8U89O9tJpiXMO1-8M-1h4tHDe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.12.0/22 45.141.240.0/22 78.142.212.0/22 178.251.16.0/22 185.179.184.0/22 185.190.100.0/22 193.38.224.0/22 194.49.56.0/22 212.63.112.0/22 IPv6: 2a0a:8c0::/29 Signature Algorithm: sha256WithRSAEncryption 9d:32:01:18:a8:08:3d:95:ac:35:e9:c3:cf:9a:c8:5b:b3:f7: dc:a9:3a:c5:0a:19:27:98:da:e2:cd:c7:85:49:3e:e1:e0:9b: d7:ce:e0:70:55:d9:67:44:74:ea:89:c6:d0:da:6f:5f:b6:94: 1a:0a:14:4b:a1:db:f4:11:50:78:6b:ce:54:ec:19:5a:56:af: 45:94:ca:59:24:2a:73:8c:da:30:2f:3f:2f:fa:db:6e:c3:25: be:d0:7b:1e:0f:71:86:f1:fc:00:2f:78:6b:13:07:ab:5c:f0: 1e:ff:a9:15:19:1f:44:d3:e6:53:31:5b:3c:e1:4f:96:f1:6e: 84:76:fb:dc:89:29:74:8c:01:a6:0b:6d:92:08:a6:4d:6c:0c: 10:70:4d:98:0b:cd:ac:aa:06:cb:a9:5f:e6:1d:63:ea:b3:01: 2b:3c:42:22:76:c5:d9:79:dc:0b:dc:f8:dd:2e:88:af:2e:4f: 3a:96:c0:bd:99:6d:c2:89:fe:84:04:30:8f:04:68:de:b1:93: 9b:5c:a8:fe:90:51:c6:83:14:f6:ad:45:f9:6f:d8:0c:58:2d: 90:4c:e3:c1:fe:62:62:db:87:c6:f4:a3:13:70:1f:61:80:eb: ac:a6:5b:c0:fd:8b:46:97:bd:37:bf:39:4f:68:81:9f:1e:9a: 48:37:ac:2b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZq1Vsx9m1Zt6IE3vzN3qilnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZmEyOTM2OGM4YmU2OWM4ZWRkNWFhMTkzNTU3ZmNiYTJh NTdlYzgwHhcNMjUxMTI0MTAwOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2M1M2NmNGVmNmQyNjk4OTczMGVkN2VmMGNmYjU4NzhiNDcwZGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59hXU+Vt80U3WLRtrzUfZ8rtsZr/ csoy49E9TTdTW1qlCwWSjqn1USpyhTtf+OuReyoQJsky7+gKoSJJtU8boy80lGmb HIOPmIkfV1Ck3iaMcPxOn+KqpqSFGKIVK98iDoePcJxO4Ikis++6lkglVOHJ1Khw 1HeSxFmDfqE1w5Suo0OGPIVti6apb4EtAlhaAIkmMtJUQnCoNniI7GwLrPUknszh GXaokz+4uVQvte4/Bf2OjJBADs1vaATPLJ76Fo1GarLamSKRgTIZWG9llWHsHpmQ rwwIkYKzlFszLpmjesyN4OAsv7pzU4FrIMtDP+eYXt4dK8vW8d4BoYeqfwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFCPFPPTvbSaYlzDtfvDPtYeLRw3tMB8GA1UdIwQY MBaAFD36KTaMi+acjt1aoZNVf8uipX7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGZvcE5veUw1cHlPM1ZxaGsxVl95NktsZnNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yZDRmN2YtMTZlNy00ZmU2LWExODkt YmQ1OGQwMDIxYTA5LzEvSThVODlPOXRKcGlYTU8xLThNLTFoNHRIRGUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8yZDRmN2YtMTZlNy00ZmU2LWExODktYmQ1OGQwMDIxYTA5 LzEvUGZvcE5veUw1cHlPM1ZxaGsxVl95NktsZnNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQCLQgMAwQC LY3wAwQCTo7UAwQCsvsQAwQCubO4AwQCub5kAwQCwSbgAwQCwjE4AwQC1D9wMA0E AgACMAcDBQMqCgjAMA0GCSqGSIb3DQEBCwUAA4IBAQCdMgEYqAg9law16cPPmshb s/fcqTrFChknmNrizceFST7h4JvXzuBwVdlnRHTqicbQ2m9ftpQaChRLodv0EVB4 a85U7BlaVq9FlMpZJCpzjNowLz8v+ttuwyW+0HseD3GG8fwAL3hrEwerXPAe/6kV GR9E0+ZTMVs84U+W8W6EdvvciSl0jAGmC22SCKZNbAwQcE2YC82sqgbLqV/mHWPq swErPEIidsXZedwL3PjdLoivLk86lsC9mW3Cif6EBDCPBGjesZObXKj+kFHGgxT2 rUX5b9gMWC2QTOPB/mJi24fG9KMTcB9hgOusplvA/YtGl703vzlPaIGfHppIN6wr -----END CERTIFICATE-----Generated at Sat Dec 6 13:13:01 2025 by rpki-client