This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/175bf7-6147-4389-8afc-69108f7e6771/1/iJgfeJgucg1akdh9sLRBuxTGJvU.roa File: iJgfeJgucg1akdh9sLRBuxTGJvU.roa (raw, json) Hash identifier: zNeKFlxClPmXZ5JB+RO0fxOfsZksD0cJ7YYmWLj6gAw= Subject key identifier: 88:98:1F:78:98:2E:72:0D:5A:91:D8:7D:B0:B4:41:BB:14:C6:26:F5 Certificate issuer: /CN=3491c0929a26e8d9919f4957cf7a7644f680dd2a Certificate serial: 019A7D3C7EAD1A83441BD79A0E1A45D4935B Authority key identifier: 34:91:C0:92:9A:26:E8:D9:91:9F:49:57:CF:7A:76:44:F6:80:DD:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJHAkpom6NmRn0lXz3p2RPaA3So.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/175bf7-6147-4389-8afc-69108f7e6771/1/iJgfeJgucg1akdh9sLRBuxTGJvU.roa Signing time: Thu 13 Nov 2025 12:41:47 +0000 ROA not before: Thu 13 Nov 2025 12:41:47 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49823 IP address blocks: 109.72.208.0/20 maxlen: 20 109.72.208.0/21 maxlen: 21 109.72.208.0/24 maxlen: 24 109.72.209.0/24 maxlen: 24 109.72.210.0/24 maxlen: 24 109.72.211.0/24 maxlen: 24 109.72.212.0/24 maxlen: 24 109.72.213.0/24 maxlen: 24 109.72.214.0/24 maxlen: 24 109.72.215.0/24 maxlen: 24 109.72.216.0/21 maxlen: 21 109.72.217.0/24 maxlen: 24 109.72.218.0/24 maxlen: 24 109.72.219.0/24 maxlen: 24 109.72.220.0/24 maxlen: 24 109.72.221.0/24 maxlen: 24 109.72.222.0/24 maxlen: 24 109.72.223.0/24 maxlen: 24 194.1.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/175bf7-6147-4389-8afc-69108f7e6771/1/NJHAkpom6NmRn0lXz3p2RPaA3So.crl rsync://rpki.ripe.net/repository/DEFAULT/63/175bf7-6147-4389-8afc-69108f7e6771/1/NJHAkpom6NmRn0lXz3p2RPaA3So.mft rsync://rpki.ripe.net/repository/DEFAULT/NJHAkpom6NmRn0lXz3p2RPaA3So.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:3c:7e:ad:1a:83:44:1b:d7:9a:0e:1a:45:d4:93:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3491c0929a26e8d9919f4957cf7a7644f680dd2a Validity Not Before: Nov 13 12:41:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=88981f78982e720d5a91d87db0b441bb14c626f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:af:6d:4b:13:9e:64:4c:0f:1a:fc:9f:3b:ad: 3c:71:02:8d:1b:c9:67:ce:a9:b1:8b:6d:2f:ba:7c: cc:5d:90:12:d5:78:70:18:4a:34:35:a5:8b:66:7f: b8:3a:fe:bd:56:fb:be:db:02:bd:16:f4:bc:6a:fe: 65:4e:5f:b0:57:82:51:9b:de:ac:fd:52:ea:a3:7e: 7e:1e:2f:36:99:a5:92:57:34:c5:11:a7:61:21:39: ed:55:32:13:fd:b6:90:33:71:14:ce:00:9c:e0:c1: 91:54:0e:f7:81:04:14:cf:0f:bb:81:d6:d0:23:e1: 8f:1d:f9:72:a4:9d:36:da:00:9d:05:fb:14:25:3c: e3:1e:49:03:d4:8e:c2:92:14:00:f3:59:77:a8:8e: 30:f7:ec:69:30:c9:2d:f5:a9:6b:4f:c9:f9:39:93: 60:b9:2a:02:61:9a:82:6c:c4:e7:41:a1:03:3d:70: a9:19:b5:a7:de:cf:69:76:48:12:55:2d:53:73:67: 32:d8:d6:ba:93:8f:a9:f9:74:f6:55:67:5c:bf:a6: 19:11:76:90:83:4d:8c:e7:7a:af:30:04:85:cc:49: 4f:52:9b:f1:ab:f3:b2:9c:5f:e4:b8:3e:44:e5:eb: fe:57:d2:fd:cc:5b:f7:eb:16:23:22:25:cf:37:9c: d7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:98:1F:78:98:2E:72:0D:5A:91:D8:7D:B0:B4:41:BB:14:C6:26:F5 X509v3 Authority Key Identifier: keyid:34:91:C0:92:9A:26:E8:D9:91:9F:49:57:CF:7A:76:44:F6:80:DD:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJHAkpom6NmRn0lXz3p2RPaA3So.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/175bf7-6147-4389-8afc-69108f7e6771/1/iJgfeJgucg1akdh9sLRBuxTGJvU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/175bf7-6147-4389-8afc-69108f7e6771/1/NJHAkpom6NmRn0lXz3p2RPaA3So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.208.0/20 194.1.180.0/24 Signature Algorithm: sha256WithRSAEncryption 03:d8:f8:5a:2e:f8:ff:c1:f6:32:b8:c1:02:bb:f5:e3:1d:c8: 31:3f:1c:ed:a8:12:03:6a:9c:24:8b:57:10:42:a4:09:1a:e6: 84:b0:b5:86:60:3e:35:12:2d:4d:12:e0:35:62:ce:4f:89:4d: 6f:94:83:f1:c7:f9:e9:c2:4a:ca:ef:8e:dd:1d:db:c1:ad:a4: 28:1f:b2:d0:ff:50:84:af:48:52:0d:ab:e9:bd:41:a6:27:8a: 40:28:64:04:6a:28:99:fc:f0:45:f2:f0:f7:8d:e8:6f:90:a7: 9e:36:9e:06:1f:d2:7c:d6:f3:46:00:7b:13:d6:52:f0:4d:b9: d2:82:63:4a:7b:a4:57:c7:68:6f:31:3a:3b:cf:36:a7:f3:ae: 8a:0f:53:3f:26:5c:93:10:46:c7:f9:29:3c:e6:b4:b0:62:74: 97:8a:f5:a4:8a:86:59:e8:50:68:38:6b:44:8b:ef:ab:35:db: 43:89:34:89:d8:be:e3:ce:e5:c5:f5:59:c0:e0:7b:d2:04:c8: 7c:cb:98:fc:99:77:62:92:5b:dd:fc:67:9e:4d:84:01:83:1b: aa:c0:1f:c0:3b:ef:81:73:7c:c2:b1:4b:97:a1:31:f4:1a:9d: 07:9c:3c:ec:6a:f7:30:c5:aa:66:0b:e4:8a:5c:0e:0f:65:b4: 96:9d:61:b6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZp9PH6tGoNEG9eaDhpF1JNbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OTFjMDkyOWEyNmU4ZDk5MTlmNDk1N2NmN2E3NjQ0ZjY4 MGRkMmEwHhcNMjUxMTEzMTI0MTQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODk4MWY3ODk4MmU3MjBkNWE5MWQ4N2RiMGI0NDFiYjE0YzYyNmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz69tSxOeZEwPGvyfO608cQKNG8ln zqmxi20vunzMXZAS1XhwGEo0NaWLZn+4Ov69Vvu+2wK9FvS8av5lTl+wV4JRm96s /VLqo35+Hi82maWSVzTFEadhITntVTIT/baQM3EUzgCc4MGRVA73gQQUzw+7gdbQ I+GPHflypJ022gCdBfsUJTzjHkkD1I7CkhQA81l3qI4w9+xpMMkt9alrT8n5OZNg uSoCYZqCbMTnQaEDPXCpGbWn3s9pdkgSVS1Tc2cy2Na6k4+p+XT2VWdcv6YZEXaQ g02M53qvMASFzElPUpvxq/OynF/kuD5E5ev+V9L9zFv36xYjIiXPN5zXgQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIiYH3iYLnINWpHYfbC0QbsUxib1MB8GA1UdIwQY MBaAFDSRwJKaJujZkZ9JV896dkT2gN0qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkpIQWtwb202Tm1SbjBsWHozcDJSUGFBM1NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xNzViZjctNjE0Ny00Mzg5LThhZmMt NjkxMDhmN2U2NzcxLzEvaUpnZmVKZ3VjZzFha2RoOXNMUkJ1eFRHSnZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8xNzViZjctNjE0Ny00Mzg5LThhZmMtNjkxMDhmN2U2Nzcx LzEvTkpIQWtwb202Tm1SbjBsWHozcDJSUGFBM1NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEbUjQAwQA wgG0MA0GCSqGSIb3DQEBCwUAA4IBAQAD2PhaLvj/wfYyuMECu/XjHcgxPxztqBID apwki1cQQqQJGuaEsLWGYD41Ei1NEuA1Ys5PiU1vlIPxx/npwkrK747dHdvBraQo H7LQ/1CEr0hSDavpvUGmJ4pAKGQEaiiZ/PBF8vD3jehvkKeeNp4GH9J81vNGAHsT 1lLwTbnSgmNKe6RXx2hvMTo7zzan866KD1M/JlyTEEbH+Sk85rSwYnSXivWkioZZ 6FBoOGtEi++rNdtDiTSJ2L7jzuXF9VnA4HvSBMh8y5j8mXdiklvd/GeeTYQBgxuq wB/AO++Bc3zCsUuXoTH0Gp0HnDzsavcwxapmC+SKXA4PZbSWnWG2 -----END CERTIFICATE-----Generated at Sat Dec 6 09:08:18 2025 by rpki-client