This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/b0711a-542f-4105-8045-54256917be5e/1/IkjuUSYVhFqB9c8Ve3qoP2frrQM.roa File: IkjuUSYVhFqB9c8Ve3qoP2frrQM.roa (raw, json) Hash identifier: hiOleuwYxV5y1oByuoMj+j6p9k2DJmAa7Esj/bnUiHY= Subject key identifier: 22:48:EE:51:26:15:84:5A:81:F5:CF:15:7B:7A:A8:3F:67:EB:AD:03 Certificate issuer: /CN=29ddd647cbcc450e33f91019afbda97bbe9ee2a3 Certificate serial: 019A72AB185B4F163A3E59F3E42956845A86 Authority key identifier: 29:DD:D6:47:CB:CC:45:0E:33:F9:10:19:AF:BD:A9:7B:BE:9E:E2:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kd3WR8vMRQ4z-RAZr72pe76e4qM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/b0711a-542f-4105-8045-54256917be5e/1/IkjuUSYVhFqB9c8Ve3qoP2frrQM.roa Signing time: Tue 11 Nov 2025 11:26:46 +0000 ROA not before: Tue 11 Nov 2025 11:26:46 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12923 IP address blocks: 81.201.224.0/20 maxlen: 20 85.112.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/b0711a-542f-4105-8045-54256917be5e/1/Kd3WR8vMRQ4z-RAZr72pe76e4qM.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/b0711a-542f-4105-8045-54256917be5e/1/Kd3WR8vMRQ4z-RAZr72pe76e4qM.mft rsync://rpki.ripe.net/repository/DEFAULT/Kd3WR8vMRQ4z-RAZr72pe76e4qM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:72:ab:18:5b:4f:16:3a:3e:59:f3:e4:29:56:84:5a:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29ddd647cbcc450e33f91019afbda97bbe9ee2a3 Validity Not Before: Nov 11 11:26:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2248ee512615845a81f5cf157b7aa83f67ebad03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c4:9e:80:c6:3a:42:a9:c2:76:4c:20:5b:b1: b8:2e:ba:f3:9b:db:f2:65:ee:b2:1f:4b:81:65:32: 4e:8d:2d:31:f8:a8:b1:11:40:ef:35:5d:e2:88:e5: 40:d2:8e:5a:58:55:62:b0:a8:fa:5e:de:26:d5:42: 96:82:e0:14:35:05:8d:e8:cb:2c:b8:00:dd:7e:1a: 8a:0d:8a:c4:2f:42:2c:1a:4c:3d:06:d4:58:6e:4c: e8:be:4d:fe:63:4c:f1:7b:43:aa:f3:70:70:3c:f9: d6:8e:97:3b:73:41:d3:20:26:07:cb:9d:83:64:b7: 02:e4:10:e3:b7:81:98:aa:a3:51:8e:bd:b2:9b:5d: 1c:59:71:7e:7f:81:ab:17:16:af:83:7c:7e:33:54: 8c:cc:00:51:25:65:ad:06:e0:70:e0:b0:ff:eb:bf: f9:77:0d:f2:36:c8:82:20:5b:6f:5e:52:84:4d:7f: 18:35:ea:0b:b5:03:75:9b:96:4d:00:0d:50:93:35: 0c:5c:85:91:55:63:e4:32:e7:f7:33:09:e8:9f:41: cf:07:0d:af:f1:73:b5:1d:e6:d6:11:16:b2:b8:14: d3:16:be:03:51:7d:86:59:5a:d0:f4:76:84:a5:38: ea:c1:f0:e3:80:e3:b4:58:14:04:17:bc:75:b8:32: 78:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:48:EE:51:26:15:84:5A:81:F5:CF:15:7B:7A:A8:3F:67:EB:AD:03 X509v3 Authority Key Identifier: keyid:29:DD:D6:47:CB:CC:45:0E:33:F9:10:19:AF:BD:A9:7B:BE:9E:E2:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kd3WR8vMRQ4z-RAZr72pe76e4qM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b0711a-542f-4105-8045-54256917be5e/1/IkjuUSYVhFqB9c8Ve3qoP2frrQM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b0711a-542f-4105-8045-54256917be5e/1/Kd3WR8vMRQ4z-RAZr72pe76e4qM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.201.224.0/20 85.112.224.0/19 Signature Algorithm: sha256WithRSAEncryption 48:d4:99:27:b5:1f:7d:43:7d:0a:0d:10:9a:50:b6:98:d6:ca: 29:4d:4b:57:fc:82:0f:58:c5:9d:6e:fd:1c:d7:d6:f5:44:db: 1e:bf:31:e3:fa:72:0a:d8:3a:3a:7a:86:6d:e6:7b:07:09:3b: a5:80:e4:23:97:8e:12:93:06:29:c8:48:62:3f:50:30:a2:c7: da:8a:7d:c5:57:5c:a4:34:d0:f6:d0:6e:0b:35:5a:29:9d:0d: d3:b0:d1:5e:16:4d:ca:73:4c:80:29:47:ed:de:64:11:15:e3: 34:42:19:db:14:a5:08:5a:c4:c5:57:ab:ca:a2:3c:05:28:52: 9e:c7:cc:03:62:fe:14:72:fb:4b:d2:a5:2a:ea:83:c5:be:91: 9b:41:6e:cc:df:34:59:57:16:94:b1:16:3b:9e:9d:63:16:4e: 58:2d:a5:7b:3a:b2:cb:5b:37:29:ce:a3:88:0f:3d:63:18:46: 84:8c:c8:cf:de:41:fb:d7:67:0a:cc:da:62:47:49:84:91:0f: 7a:61:f0:82:23:29:0c:82:37:6a:f5:48:e3:c4:70:eb:01:36: dd:88:2e:4e:19:8e:7e:a1:ed:be:76:e1:bb:06:bb:6c:2b:57: 69:6c:d8:ef:9c:5a:7b:b1:df:bc:f9:de:0c:a3:be:9b:33:75: 31:c2:ae:01 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZpyqxhbTxY6Plnz5ClWhFqGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZGRkNjQ3Y2JjYzQ1MGUzM2Y5MTAxOWFmYmRhOTdiYmU5 ZWUyYTMwHhcNMjUxMTExMTEyNjQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjQ4ZWU1MTI2MTU4NDVhODFmNWNmMTU3YjdhYTgzZjY3ZWJhZDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsSegMY6QqnCdkwgW7G4Lrrzm9vy Ze6yH0uBZTJOjS0x+KixEUDvNV3iiOVA0o5aWFVisKj6Xt4m1UKWguAUNQWN6Mss uADdfhqKDYrEL0IsGkw9BtRYbkzovk3+Y0zxe0Oq83BwPPnWjpc7c0HTICYHy52D ZLcC5BDjt4GYqqNRjr2ym10cWXF+f4GrFxavg3x+M1SMzABRJWWtBuBw4LD/67/5 dw3yNsiCIFtvXlKETX8YNeoLtQN1m5ZNAA1QkzUMXIWRVWPkMuf3Mwnon0HPBw2v 8XO1HebWERayuBTTFr4DUX2GWVrQ9HaEpTjqwfDjgOO0WBQEF7x1uDJ4MQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCJI7lEmFYRagfXPFXt6qD9n660DMB8GA1UdIwQY MBaAFCnd1kfLzEUOM/kQGa+9qXu+nuKjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2QzV1I4dk1SUTR6LVJBWnI3MnBlNzZlNHFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iMDcxMWEtNTQyZi00MTA1LTgwNDUt NTQyNTY5MTdiZTVlLzEvSWtqdVVTWVZoRnFCOWM4VmUzcW9QMmZyclFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9iMDcxMWEtNTQyZi00MTA1LTgwNDUtNTQyNTY5MTdiZTVl LzEvS2QzV1I4dk1SUTR6LVJBWnI3MnBlNzZlNHFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEUcngAwQF VXDgMA0GCSqGSIb3DQEBCwUAA4IBAQBI1JkntR99Q30KDRCaULaY1sopTUtX/IIP WMWdbv0c19b1RNsevzHj+nIK2Do6eoZt5nsHCTulgOQjl44SkwYpyEhiP1Awosfa in3FV1ykNND20G4LNVopnQ3TsNFeFk3Kc0yAKUft3mQRFeM0QhnbFKUIWsTFV6vK ojwFKFKex8wDYv4UcvtL0qUq6oPFvpGbQW7M3zRZVxaUsRY7np1jFk5YLaV7OrLL WzcpzqOIDz1jGEaEjMjP3kH712cKzNpiR0mEkQ96YfCCIykMgjdq9UjjxHDrATbd iC5OGY5+oe2+duG7BrtsK1dpbNjvnFp7sd+8+d4Mo76bM3Uxwq4B -----END CERTIFICATE-----Generated at Sat Dec 6 21:11:32 2025 by rpki-client