This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/iXKwz38ZMbiEEaTX-_IpdO5hn4E.roa File: iXKwz38ZMbiEEaTX-_IpdO5hn4E.roa (raw, json) Hash identifier: 0cx/lQgZi2jHvk5uPfrrhYqKV7eQYwbciyjofO7JZpY= Subject key identifier: 89:72:B0:CF:7F:19:31:B8:84:11:A4:D7:FB:F2:29:74:EE:61:9F:81 Certificate issuer: /CN=e6a54852077a007838303c1f61c84387cccdd684 Certificate serial: 019A96D86DBCE5150D48E9191B465E373A9B Authority key identifier: E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/iXKwz38ZMbiEEaTX-_IpdO5hn4E.roa Signing time: Tue 18 Nov 2025 12:02:37 +0000 ROA not before: Tue 18 Nov 2025 12:02:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199378 IP address blocks: 185.151.116.0/23 maxlen: 23 185.151.116.0/24 maxlen: 24 185.151.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:d8:6d:bc:e5:15:0d:48:e9:19:1b:46:5e:37:3a:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6a54852077a007838303c1f61c84387cccdd684 Validity Not Before: Nov 18 12:02:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8972b0cf7f1931b88411a4d7fbf22974ee619f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4f:8b:e9:38:da:5e:6e:40:bb:64:fd:2b:1a: f4:eb:ed:7c:9f:01:5d:b2:2f:f1:66:03:33:f1:2c: 73:7c:3d:83:67:ea:22:92:f8:9f:71:77:9f:3b:d5: 10:a9:8e:b3:7d:67:58:b8:6b:9a:b0:01:14:1d:07: dd:06:df:e6:0f:f0:d9:c8:2b:93:09:5e:6b:44:34: 9f:75:59:fb:19:e8:d6:5a:6d:7f:49:05:aa:1f:59: df:5d:59:29:3e:66:11:0d:96:4d:d3:e1:48:65:42: aa:9a:30:94:c2:74:4c:85:50:a5:31:cf:5c:b1:90: a0:97:c2:b0:f2:bc:ca:ae:87:97:f6:a1:64:70:a9: e9:28:92:f8:b1:01:81:03:99:fa:79:b8:c8:0a:5e: bf:52:a9:79:e2:57:e1:eb:1e:73:f6:1d:d4:8b:42: 27:c7:44:f0:a6:d3:30:1a:5a:f7:f5:21:4a:4e:ee: f7:77:d6:31:43:5f:a2:94:92:50:c9:e7:95:0b:62: b1:08:0c:0c:81:1f:6f:c2:f0:e2:39:28:49:4b:a3: 7f:1d:37:50:29:36:22:0e:5b:1a:5a:96:49:39:3e: b1:40:0f:25:43:d7:b5:9f:3b:42:a3:38:59:55:f4: ae:b8:93:f9:2d:58:1f:67:63:d0:3c:3c:56:79:4e: 1c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:72:B0:CF:7F:19:31:B8:84:11:A4:D7:FB:F2:29:74:EE:61:9F:81 X509v3 Authority Key Identifier: keyid:E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/iXKwz38ZMbiEEaTX-_IpdO5hn4E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.151.116.0/23 Signature Algorithm: sha256WithRSAEncryption 68:9b:1a:a9:07:c8:25:20:1d:71:7d:5a:9b:c2:b0:61:f2:fb: 3f:eb:7d:b2:3e:cf:ee:ff:48:f2:46:9a:b7:1d:ae:34:41:a9: 7f:54:70:88:73:96:db:bc:82:69:74:0b:49:4c:f0:7d:f0:05: 9d:ac:d3:b9:4c:99:a7:4a:66:af:01:6c:e9:53:0c:3e:3a:c9: f0:87:6d:12:e4:eb:13:64:79:0d:1d:bb:c9:85:5d:8e:97:b5: 59:fe:00:9d:ec:fa:18:ac:b6:b3:0e:4c:a1:25:5d:33:be:4b: fc:5e:f9:a5:11:e7:5d:b8:d0:3f:1b:7e:d7:ff:6f:66:67:cd: ad:92:03:0c:45:2f:64:de:2e:44:cf:18:f1:e9:19:0d:53:7c: 8b:22:3f:72:df:31:48:ac:dc:69:ab:b3:c5:4f:e3:22:a6:56: 7b:f9:f4:1c:43:a7:42:5a:ee:3a:66:80:1d:ae:da:cb:d8:c6: c5:c3:7c:33:9a:d1:36:b0:c6:6c:ae:dd:b6:d6:71:d6:bb:9a: 68:89:05:0f:2f:94:c4:cf:0a:91:c5:3a:21:b6:c9:fc:69:5b: 3b:2c:06:3f:80:76:0f:71:ef:6a:9e:6a:ab:18:b7:2c:32:b4: 3b:25:32:23:49:99:32:82:7a:eb:74:38:9a:22:54:95:32:70: db:cf:83:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqW2G285RUNSOkZG0ZeNzqbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YTU0ODUyMDc3YTAwNzgzODMwM2MxZjYxYzg0Mzg3Y2Nj ZGQ2ODQwHhcNMjUxMTE4MTIwMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTcyYjBjZjdmMTkzMWI4ODQxMWE0ZDdmYmYyMjk3NGVlNjE5ZjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30+L6TjaXm5Au2T9Kxr06+18nwFd si/xZgMz8SxzfD2DZ+oikvifcXefO9UQqY6zfWdYuGuasAEUHQfdBt/mD/DZyCuT CV5rRDSfdVn7GejWWm1/SQWqH1nfXVkpPmYRDZZN0+FIZUKqmjCUwnRMhVClMc9c sZCgl8Kw8rzKroeX9qFkcKnpKJL4sQGBA5n6ebjICl6/Uql54lfh6x5z9h3Ui0In x0TwptMwGlr39SFKTu73d9YxQ1+ilJJQyeeVC2KxCAwMgR9vwvDiOShJS6N/HTdQ KTYiDlsaWpZJOT6xQA8lQ9e1nztCozhZVfSuuJP5LVgfZ2PQPDxWeU4cawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIlysM9/GTG4hBGk1/vyKXTuYZ+BMB8GA1UdIwQY MBaAFOalSFIHegB4ODA8H2HIQ4fMzdaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXFWSVVnZDZBSGc0TUR3ZlljaERoOHpOMW9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mYzgwM2YtOTY3NS00MzU1LTgwZjYt Nzc3MzAxNTljOGQ0LzEvaVhLd3ozOFpNYmlFRWFUWC1fSXBkTzVobjRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mYzgwM2YtOTY3NS00MzU1LTgwZjYtNzc3MzAxNTljOGQ0 LzEvNXFWSVVnZDZBSGc0TUR3ZlljaERoOHpOMW9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuZd0MA0G CSqGSIb3DQEBCwUAA4IBAQBomxqpB8glIB1xfVqbwrBh8vs/632yPs/u/0jyRpq3 Ha40Qal/VHCIc5bbvIJpdAtJTPB98AWdrNO5TJmnSmavAWzpUww+Osnwh20S5OsT ZHkNHbvJhV2Ol7VZ/gCd7PoYrLazDkyhJV0zvkv8XvmlEedduNA/G37X/29mZ82t kgMMRS9k3i5Ezxjx6RkNU3yLIj9y3zFIrNxpq7PFT+MiplZ7+fQcQ6dCWu46ZoAd rtrL2MbFw3wzmtE2sMZsrt221nHWu5poiQUPL5TEzwqRxTohtsn8aVs7LAY/gHYP ce9qnmqrGLcsMrQ7JTIjSZkygnrrdDiaIlSVMnDbz4Mx -----END CERTIFICATE-----Generated at Sun Dec 7 03:37:14 2025 by rpki-client