This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/ixwjBK7Z98Yhw2jIsyuDpMwVppk.roa File: ixwjBK7Z98Yhw2jIsyuDpMwVppk.roa (raw, json) Hash identifier: uwAzJ4k+Cy5/mKVxdmEP9AnGARSTpYc1O4YtIIseZak= Subject key identifier: 8B:1C:23:04:AE:D9:F7:C6:21:C3:68:C8:B3:2B:83:A4:CC:15:A6:99 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019AE24B7A50A7E308392E31522399727C7C Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/ixwjBK7Z98Yhw2jIsyuDpMwVppk.roa Signing time: Wed 03 Dec 2025 03:39:48 +0000 ROA not before: Wed 03 Dec 2025 03:39:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 30738 IP address blocks: 46.8.96.0/24 maxlen: 24 46.8.100.0/22 maxlen: 24 46.8.112.0/22 maxlen: 24 46.8.118.0/23 maxlen: 24 46.8.120.0/21 maxlen: 24 46.8.194.0/23 maxlen: 24 46.8.198.0/23 maxlen: 24 46.8.202.0/24 maxlen: 24 109.248.16.0/20 maxlen: 24 188.130.182.0/24 maxlen: 24 188.130.224.0/21 maxlen: 24 195.211.52.0/22 maxlen: 24 2001:1468::/32 maxlen: 33 2001:1468:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e2:4b:7a:50:a7:e3:08:39:2e:31:52:23:99:72:7c:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Dec 3 03:39:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8b1c2304aed9f7c621c368c8b32b83a4cc15a699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e7:3b:32:29:7f:a4:da:7b:87:a2:73:b9:0d: 11:93:8f:dd:be:f3:43:f9:f5:70:49:9b:f7:d7:80: 15:4a:62:ac:62:54:00:36:c1:af:6a:66:ea:23:ea: 53:21:b3:22:7b:7b:fb:cf:00:bf:9e:90:f0:c2:8c: 17:65:e1:94:34:a6:d4:86:ce:16:02:8f:71:62:0b: 2d:ee:01:29:fe:ea:a8:39:35:46:2d:53:0b:b3:9f: 26:ae:bf:26:39:77:19:b2:68:bf:3c:c2:a1:3a:50: 03:82:1f:00:20:07:69:4f:aa:bd:f3:f9:e4:3f:b4: 42:00:96:a2:49:64:0b:01:0c:12:3f:c7:40:c1:15: a7:20:30:71:06:72:b7:ea:c0:1c:66:84:d0:c4:3a: a3:3e:50:17:dc:2d:09:d4:4d:8c:1c:e4:87:a4:98: 08:5c:5b:5a:7a:33:fd:48:06:c5:99:e8:b3:5b:55: 87:d7:00:91:f5:38:9c:a0:26:ce:63:8c:96:0b:34: 8a:7b:ce:9c:97:32:a5:91:88:f6:43:4d:79:9c:a1: b6:8d:4a:3f:ea:0c:fb:fb:21:b5:04:0b:da:77:d3: 24:99:6f:99:74:64:e8:9d:bc:c1:d5:e3:d1:83:11: 14:45:54:15:12:5b:45:e2:c0:f8:6f:30:fe:e7:37: 55:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:1C:23:04:AE:D9:F7:C6:21:C3:68:C8:B3:2B:83:A4:CC:15:A6:99 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/ixwjBK7Z98Yhw2jIsyuDpMwVppk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.8.96.0/24 46.8.100.0/22 46.8.112.0/22 46.8.118.0-46.8.127.255 46.8.194.0/23 46.8.198.0/23 46.8.202.0/24 109.248.16.0/20 188.130.182.0/24 188.130.224.0/21 195.211.52.0/22 IPv6: 2001:1468::/32 Signature Algorithm: sha256WithRSAEncryption 46:ca:1b:d9:8a:05:a6:ce:a7:a4:14:64:2a:3f:4e:84:d6:3c: 80:cf:67:05:c7:6f:52:50:1f:8a:b0:df:5c:f2:89:e2:33:b3: 15:85:d9:da:df:41:b3:cb:b9:51:75:e4:5f:5a:bd:1b:68:eb: 77:59:1b:52:27:9b:d7:ec:f1:08:97:80:3a:5c:92:bd:a8:36: ab:d1:42:c9:bc:81:1d:61:44:34:4e:ad:34:65:d5:41:c6:8a: 76:78:b7:a3:7f:7b:67:0b:e1:1a:22:4a:e4:bd:3a:aa:c9:c9: c5:f9:34:47:32:fb:2f:15:bf:01:1f:58:2e:d0:18:bf:16:07: 2e:45:84:22:1b:28:37:d9:dd:9f:8a:c7:f8:8a:8d:b4:15:8e: 4b:04:ec:c8:ee:5e:4a:6e:bb:67:f7:cc:92:8f:5c:05:ad:41: f1:69:4e:86:93:cf:6d:76:0b:2a:27:01:de:a0:41:40:4b:3e: 32:24:bc:e8:2d:5c:4a:26:ab:89:58:4e:80:8d:5b:b7:89:bf: 45:ad:ce:b9:00:61:b3:fa:7e:12:47:e7:49:92:76:16:47:ca: 61:4c:e1:87:0e:c1:fd:c9:58:e4:be:45:2e:90:94:7e:8f:43: ee:30:cb:6f:94:c0:1d:da:2c:01:f9:18:74:b5:60:1a:e0:96: e8:3b:d9:e9 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgISAZriS3pQp+MIOS4xUiOZcnx8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjUxMjAzMDMzOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjFjMjMwNGFlZDlmN2M2MjFjMzY4YzhiMzJiODNhNGNjMTVhNjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtec7Mil/pNp7h6JzuQ0Rk4/dvvND +fVwSZv314AVSmKsYlQANsGvambqI+pTIbMie3v7zwC/npDwwowXZeGUNKbUhs4W Ao9xYgst7gEp/uqoOTVGLVMLs58mrr8mOXcZsmi/PMKhOlADgh8AIAdpT6q98/nk P7RCAJaiSWQLAQwSP8dAwRWnIDBxBnK36sAcZoTQxDqjPlAX3C0J1E2MHOSHpJgI XFtaejP9SAbFmeizW1WH1wCR9TicoCbOY4yWCzSKe86clzKlkYj2Q015nKG2jUo/ 6gz7+yG1BAvad9MkmW+ZdGTonbzB1ePRgxEURVQVEltF4sD4bzD+5zdVIwIDAQAB o4ICXDCCAlgwHQYDVR0OBBYEFIscIwSu2ffGIcNoyLMrg6TMFaaZMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvaXh3akJLN1o5OFlodzJqSXN5dURwTXdWcHBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTBQBAIAATBKAwQALghgAwQC LghkAwQCLghwMAwDBAEuCHYDBAcuCAADBAEuCMIDBAEuCMYDBAAuCMoDBARt+BAD BAC8grYDBAO8guADBALD0zQwDQQCAAIwBwMFACABFGgwDQYJKoZIhvcNAQELBQAD ggEBAEbKG9mKBabOp6QUZCo/ToTWPIDPZwXHb1JQH4qw31zyieIzsxWF2drfQbPL uVF15F9avRto63dZG1Inm9fs8QiXgDpckr2oNqvRQsm8gR1hRDROrTRl1UHGinZ4 t6N/e2cL4RoiSuS9OqrJycX5NEcy+y8VvwEfWC7QGL8WBy5FhCIbKDfZ3Z+Kx/iK jbQVjksE7MjuXkpuu2f3zJKPXAWtQfFpToaTz212CyonAd6gQUBLPjIkvOgtXEom q4lYToCNW7eJv0WtzrkAYbP6fhJH50mSdhZHymFM4YcOwf3JWOS+RS6QlH6PQ+4w y2+UwB3aLAH5GHS1YBrglug72ek= -----END CERTIFICATE-----Generated at Sun Dec 7 04:11:13 2025 by rpki-client