This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/l8CQILKKOV9SehhbPkP0BIIlIy4.roa File: l8CQILKKOV9SehhbPkP0BIIlIy4.roa (raw, json) Hash identifier: c8qLBHksz9VFPoMA/FDkeBAwz30zDQyWLTbpkTUWNsE= Subject key identifier: 97:C0:90:20:B2:8A:39:5F:52:7A:18:5B:3E:43:F4:04:82:25:23:2E Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019AE3BF7DC77952AC8BFD24666B36A74DF5 Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/l8CQILKKOV9SehhbPkP0BIIlIy4.roa Signing time: Wed 03 Dec 2025 10:26:08 +0000 ROA not before: Wed 03 Dec 2025 10:26:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208185 IP address blocks: 195.178.128.0/22 maxlen: 24 195.178.128.0/24 maxlen: 24 195.178.129.0/24 maxlen: 24 195.178.130.0/24 maxlen: 24 195.178.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:bf:7d:c7:79:52:ac:8b:fd:24:66:6b:36:a7:4d:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Dec 3 10:26:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=97c09020b28a395f527a185b3e43f4048225232e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:01:a5:d2:0b:0a:0e:83:d1:41:4b:96:d8:e1: e0:aa:d1:de:04:f8:3f:66:9d:eb:2a:1f:db:7f:4b: 69:8c:ac:eb:62:e9:10:3a:db:ee:db:18:de:bb:56: 25:db:52:91:43:cf:e0:f2:ee:f6:e5:ce:29:57:5b: 09:34:7d:43:2f:c0:4b:63:ff:4c:c7:8f:5d:d6:11: d9:92:ce:3e:67:ac:15:ab:ed:c3:d1:b0:95:b0:09: 3a:e4:df:cc:03:5e:e5:19:df:ae:fd:33:80:d2:a4: 86:47:19:86:fc:04:e7:6d:5f:b1:71:63:a1:24:d7: b7:1a:b5:bd:a0:b3:48:e6:54:72:08:f0:21:42:1f: 29:dc:14:29:70:c6:fd:a0:1c:92:b7:89:c0:3c:c5: a3:c1:0c:0d:f8:71:f8:17:a8:8a:34:c6:a8:e5:1a: 69:72:8a:99:73:30:36:85:f5:b1:17:58:5b:e1:71: b3:ed:27:ec:05:0e:67:23:0d:f4:de:a8:65:57:65: fa:61:42:3d:29:b7:58:5b:45:37:17:9b:80:12:28: d3:a0:11:90:0a:fc:6a:8d:04:f5:af:92:46:47:44: 6a:e7:dc:5a:0f:9a:3a:62:3a:83:6f:a3:96:d3:9d: f7:39:69:40:88:7f:bc:79:8c:95:6f:51:80:63:1f: 5c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C0:90:20:B2:8A:39:5F:52:7A:18:5B:3E:43:F4:04:82:25:23:2E X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/l8CQILKKOV9SehhbPkP0BIIlIy4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.178.128.0/22 Signature Algorithm: sha256WithRSAEncryption 77:14:0b:a5:a2:37:1c:ac:1d:79:f4:44:cf:d2:c4:17:85:dc: c0:02:c7:31:9e:64:dd:56:dc:16:56:47:5f:15:3e:d1:33:27: ac:b9:31:34:0a:6a:5b:02:da:e5:e0:61:ab:26:48:29:00:50: ad:28:fe:05:45:50:8b:eb:0a:72:d5:49:25:ca:a9:8b:df:8a: 95:85:bd:d3:a3:5b:73:8d:a4:e6:15:fa:c6:c3:1b:9b:9b:70: d8:0c:6e:36:64:e4:f3:f7:91:a6:bf:3d:1f:12:81:97:ac:3b: 69:53:37:7c:6e:bf:44:f6:b0:a8:c9:4b:6a:b8:71:b5:f1:3c: 9a:74:b0:78:59:7f:32:80:59:18:0b:2c:ae:1d:46:d6:32:70: f8:0f:bf:a8:dd:12:b8:e9:e5:df:95:58:ea:7f:14:63:ca:8e: 44:7d:76:42:5f:16:9c:e8:0e:20:41:ef:aa:67:ef:9c:4e:5e: fb:94:ce:05:2a:20:c4:1e:71:3c:6d:76:3a:dc:37:f6:21:00: 4d:e4:5e:d3:49:a6:74:a4:f9:2a:6a:68:cb:6c:78:49:f0:1a: 17:17:1d:b2:60:5d:85:71:e4:4e:c3:97:dd:4f:04:43:a9:c9: ea:8c:da:40:ee:cd:fc:9c:dd:8a:99:12:1d:a4:e9:d2:36:73: 6e:d0:b4:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrjv33HeVKsi/0kZms2p031MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjUxMjAzMTAyNjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2MwOTAyMGIyOGEzOTVmNTI3YTE4NWIzZTQzZjQwNDgyMjUyMzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwGl0gsKDoPRQUuW2OHgqtHeBPg/ Zp3rKh/bf0tpjKzrYukQOtvu2xjeu1Yl21KRQ8/g8u725c4pV1sJNH1DL8BLY/9M x49d1hHZks4+Z6wVq+3D0bCVsAk65N/MA17lGd+u/TOA0qSGRxmG/ATnbV+xcWOh JNe3GrW9oLNI5lRyCPAhQh8p3BQpcMb9oBySt4nAPMWjwQwN+HH4F6iKNMao5Rpp coqZczA2hfWxF1hb4XGz7SfsBQ5nIw303qhlV2X6YUI9KbdYW0U3F5uAEijToBGQ CvxqjQT1r5JGR0Rq59xaD5o6YjqDb6OW0533OWlAiH+8eYyVb1GAYx9cjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJfAkCCyijlfUnoYWz5D9ASCJSMuMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvbDhDUUlMS0tPVjlTZWhoYlBrUDBCSUlsSXk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw7KAMA0G CSqGSIb3DQEBCwUAA4IBAQB3FAulojccrB159ETP0sQXhdzAAscxnmTdVtwWVkdf FT7RMyesuTE0CmpbAtrl4GGrJkgpAFCtKP4FRVCL6wpy1UklyqmL34qVhb3To1tz jaTmFfrGwxubm3DYDG42ZOTz95Gmvz0fEoGXrDtpUzd8br9E9rCoyUtquHG18Tya dLB4WX8ygFkYCyyuHUbWMnD4D7+o3RK46eXflVjqfxRjyo5EfXZCXxac6A4gQe+q Z++cTl77lM4FKiDEHnE8bXY63Df2IQBN5F7TSaZ0pPkqamjLbHhJ8BoXFx2yYF2F ceROw5fdTwRDqcnqjNpA7s38nN2KmRIdpOnSNnNu0LTT -----END CERTIFICATE-----Generated at Sat Dec 6 11:34:29 2025 by rpki-client