This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/I-EAyalxyJcb3mCdLEW_KjnJh28.roa File: I-EAyalxyJcb3mCdLEW_KjnJh28.roa (raw, json) Hash identifier: ILntYHJsQMd6NnMaYmwE9WwXTjkIQwH3De7tLAyjOys= Subject key identifier: 23:E1:00:C9:A9:71:C8:97:1B:DE:60:9D:2C:45:BF:2A:39:C9:87:6F Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Certificate serial: 019A55C32326AF307E7246E12AC420C0C4C8 Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/I-EAyalxyJcb3mCdLEW_KjnJh28.roa Signing time: Wed 05 Nov 2025 20:44:03 +0000 ROA not before: Wed 05 Nov 2025 20:44:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211211 IP address blocks: 209.131.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:55:c3:23:26:af:30:7e:72:46:e1:2a:c4:20:c0:c4:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Validity Not Before: Nov 5 20:44:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=23e100c9a971c8971bde609d2c45bf2a39c9876f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d0:59:38:a9:fb:d7:67:95:b5:2f:66:af:03: 1c:29:0f:96:ad:47:1a:e1:f4:0c:73:b0:21:8a:91: c1:9a:98:66:67:9d:fc:70:04:7b:96:4a:62:b2:62: 01:63:35:db:8f:07:f2:a4:1d:a2:4e:26:c2:0a:86: cb:52:91:6b:12:fb:08:aa:74:fb:0b:0a:3d:bc:4f: 5e:cb:d3:e0:e4:e8:39:6f:36:bd:7b:d4:22:61:4d: 55:3f:df:99:1e:ca:13:e8:ce:1a:c9:49:07:b5:ab: 22:d3:25:28:a4:c5:f4:c5:04:ea:c5:c7:f8:3e:c4: 03:03:12:ef:0d:2e:0d:ed:bc:3d:3a:f8:63:4c:ee: 5f:c1:fc:e0:93:13:a3:93:04:0a:96:24:51:67:8e: 4b:0b:66:62:45:8d:66:9d:f1:a2:f7:0d:d4:d4:5f: a8:2b:d3:d9:cf:2c:6a:35:0a:29:a9:5f:c1:08:89: 06:97:71:14:19:46:e5:c0:73:3c:13:87:6c:00:7a: 5b:d8:b3:20:b3:f4:58:24:ed:59:e4:c2:44:f5:5d: d9:42:31:03:37:b3:5d:78:91:c2:94:cb:3a:63:2e: d5:e2:56:a3:81:b2:c0:1a:2c:2d:2b:00:d6:5f:11: 18:fc:6f:b6:f1:56:85:c5:97:91:1f:be:27:96:9f: 0c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E1:00:C9:A9:71:C8:97:1B:DE:60:9D:2C:45:BF:2A:39:C9:87:6F X509v3 Authority Key Identifier: keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/I-EAyalxyJcb3mCdLEW_KjnJh28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.131.70.0/24 Signature Algorithm: sha256WithRSAEncryption 88:80:d5:a1:fc:d1:17:70:55:9d:5d:f0:82:cf:96:a6:21:92: 3b:22:03:77:29:88:c9:c0:db:71:5b:0e:ee:81:e1:a9:d2:82: 73:48:b7:d9:02:7d:cf:ff:03:f1:4f:96:9e:d6:bb:a6:3f:d6: b9:0c:65:f5:5a:ee:e0:b0:61:1c:02:7e:c9:4d:ea:02:41:ac: 68:9d:e7:4e:0f:85:b0:b7:86:5d:d0:a8:db:0c:ad:b6:83:00: d3:ef:c8:ef:55:fd:01:04:25:3a:68:f3:e1:2d:45:2d:0b:d7: 0f:82:ab:45:17:fc:b7:a2:be:c5:2b:f6:ee:33:78:af:15:bd: b0:49:95:58:1c:13:b3:f9:28:bd:e6:89:7d:7e:43:96:19:18: b5:ed:33:53:32:45:0f:fc:a7:fc:6b:aa:3d:72:df:b2:cf:6d: 61:cb:ca:d9:a6:43:86:36:1a:96:79:fb:b6:8a:ca:77:74:db: 64:86:4d:65:e2:7d:bd:87:a8:cb:db:7e:c6:14:f7:9e:f5:cf: 0c:de:50:f9:1b:ae:2b:9b:2c:c9:fa:58:6f:d3:6b:e9:61:9e: aa:c3:36:19:a2:b0:3c:b9:9e:fe:e3:6f:01:58:a0:50:1d:2e: 67:b7:b3:92:4f:b0:0b:08:dc:1c:1e:c6:a4:ea:4f:c0:85:5d: 8f:3e:89:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpVwyMmrzB+ckbhKsQgwMTIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNjdiZmY3YmFkMWViODM4NGI1ODVkZjdiZWYxMjA2Zjdm MTlmN2UwHhcNMjUxMTA1MjA0NDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2UxMDBjOWE5NzFjODk3MWJkZTYwOWQyYzQ1YmYyYTM5Yzk4NzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9BZOKn712eVtS9mrwMcKQ+WrUca 4fQMc7AhipHBmphmZ538cAR7lkpismIBYzXbjwfypB2iTibCCobLUpFrEvsIqnT7 Cwo9vE9ey9Pg5Og5bza9e9QiYU1VP9+ZHsoT6M4ayUkHtasi0yUopMX0xQTqxcf4 PsQDAxLvDS4N7bw9OvhjTO5fwfzgkxOjkwQKliRRZ45LC2ZiRY1mnfGi9w3U1F+o K9PZzyxqNQopqV/BCIkGl3EUGUblwHM8E4dsAHpb2LMgs/RYJO1Z5MJE9V3ZQjED N7NdeJHClMs6Yy7V4lajgbLAGiwtKwDWXxEY/G+28VaFxZeRH74nlp8MYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCPhAMmpcciXG95gnSxFvyo5yYdvMB8GA1UdIwQY MBaAFLpnv/e60euDhLWF33vvEgb38Z9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYt ZGE0NTM4MDIyYWM3LzEvSS1FQXlhbHh5SmNiM21DZExFV19Lam5KaDI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYtZGE0NTM4MDIyYWM3 LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YNGMA0G CSqGSIb3DQEBCwUAA4IBAQCIgNWh/NEXcFWdXfCCz5amIZI7IgN3KYjJwNtxWw7u geGp0oJzSLfZAn3P/wPxT5ae1rumP9a5DGX1Wu7gsGEcAn7JTeoCQaxonedOD4Ww t4Zd0KjbDK22gwDT78jvVf0BBCU6aPPhLUUtC9cPgqtFF/y3or7FK/buM3ivFb2w SZVYHBOz+Si95ol9fkOWGRi17TNTMkUP/Kf8a6o9ct+yz21hy8rZpkOGNhqWefu2 isp3dNtkhk1l4n29h6jL237GFPee9c8M3lD5G64rmyzJ+lhv02vpYZ6qwzYZorA8 uZ7+428BWKBQHS5nt7OST7ALCNwcHsak6k/AhV2PPoky -----END CERTIFICATE-----Generated at Sat Dec 6 14:35:48 2025 by rpki-client