This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/p_cEtwAKV-Rlrx0AVlOkIT9YaBE.roa File: p_cEtwAKV-Rlrx0AVlOkIT9YaBE.roa (raw, json) Hash identifier: jc+qY0kwMv8ssr9G2N0r6dyWsIiTrUgTiC5tZzaNhU8= Subject key identifier: A7:F7:04:B7:00:0A:57:E4:65:AF:1D:00:56:53:A4:21:3F:58:68:11 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019A95A78F123BA2F025DCFC09FCA777CB3E Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/p_cEtwAKV-Rlrx0AVlOkIT9YaBE.roa Signing time: Tue 18 Nov 2025 06:29:37 +0000 ROA not before: Tue 18 Nov 2025 06:29:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135391 IP address blocks: 158.173.216.0/24 maxlen: 24 158.173.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:95:a7:8f:12:3b:a2:f0:25:dc:fc:09:fc:a7:77:cb:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Nov 18 06:29:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a7f704b7000a57e465af1d005653a4213f586811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:39:1e:7f:5a:4b:c0:8d:ee:1e:c6:9a:fe:5d: 8b:7a:7b:e4:d1:11:dc:6d:52:fc:2f:84:44:62:68: b6:33:ab:db:4f:c3:ac:e7:1b:d4:5b:f5:5e:67:2a: 6a:15:2a:f0:56:c3:e5:2e:f2:9e:68:38:07:78:f9: 64:e5:87:06:63:53:c3:74:55:65:05:d9:da:64:2e: 06:fd:49:a4:9f:2c:a2:5c:cc:cd:db:25:31:fc:db: 1c:8a:35:26:84:a2:ca:f6:b8:7b:7d:e8:86:95:be: 19:7a:87:6c:5b:4b:34:28:a3:f9:76:91:09:02:bb: 14:12:f0:bd:f9:90:de:e7:0d:83:d4:d2:24:5e:17: c2:1d:82:57:ed:e8:31:44:76:f0:05:c0:c4:e0:3e: 09:d4:95:aa:27:01:71:75:12:31:55:de:78:80:d7: 30:41:c1:fb:f1:21:fb:34:b0:46:cb:98:d9:18:44: b1:c2:f3:a6:f3:37:e7:49:e1:74:15:3f:5d:cb:3f: e2:e2:bf:d7:ec:cf:c5:a7:d9:3f:0f:28:10:68:c7: 4c:6c:eb:29:20:2a:7e:84:a7:c8:75:8a:fe:da:a5: 9a:b2:f1:b1:91:55:f1:f3:17:14:b8:69:e5:e0:2b: 07:63:c4:2b:18:43:fd:b9:0d:52:2a:44:5a:91:cb: a0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F7:04:B7:00:0A:57:E4:65:AF:1D:00:56:53:A4:21:3F:58:68:11 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/p_cEtwAKV-Rlrx0AVlOkIT9YaBE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.173.216.0/24 158.173.221.0/24 Signature Algorithm: sha256WithRSAEncryption b4:10:28:89:1a:4b:28:a3:8c:aa:0c:ab:7b:9c:63:07:ef:fd: ee:fb:d0:b2:33:a2:2a:e0:41:ab:b5:5c:49:ec:05:99:38:bc: d5:bf:45:28:fc:10:35:8f:82:2d:29:4a:1f:d1:84:4a:1d:f4: e2:e6:4c:9c:13:1c:e7:fc:82:32:5f:29:a2:b5:36:f5:df:9c: 81:35:09:46:bf:a0:ba:b3:91:cf:5b:af:ef:05:25:ae:6f:ab: c2:0d:48:2c:85:06:f3:62:b1:26:94:f8:de:61:59:c0:46:b7: 09:3f:72:72:d3:df:01:b9:5f:cf:8b:c1:d0:5e:36:c9:41:8c: f2:3e:1d:6d:a4:30:62:6c:28:a7:fb:20:da:57:c3:d8:f8:90: 07:5d:c9:6a:5c:54:f4:2e:e0:f2:52:c6:af:da:91:f7:d1:f9: 70:4d:d1:1c:f7:a3:86:a7:56:89:55:71:eb:54:14:d0:88:b7: 52:cd:b6:ae:3d:61:a2:b0:0e:42:60:3b:59:d4:ef:70:8a:51: 68:85:77:6a:59:ee:63:49:b7:85:42:29:05:08:73:bf:f5:b3: 5a:6a:e2:58:63:49:2e:0e:cd:59:7f:1d:05:81:dc:60:35:74: 92:88:e1:7a:5d:f5:0f:9e:c0:33:c3:13:7b:65:8c:b9:79:f9: 22:59:00:4c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqVp48SO6LwJdz8Cfynd8s+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjUxMTE4MDYyOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2Y3MDRiNzAwMGE1N2U0NjVhZjFkMDA1NjUzYTQyMTNmNTg2ODExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDkef1pLwI3uHsaa/l2Lenvk0RHc bVL8L4REYmi2M6vbT8Os5xvUW/VeZypqFSrwVsPlLvKeaDgHePlk5YcGY1PDdFVl BdnaZC4G/UmknyyiXMzN2yUx/NscijUmhKLK9rh7feiGlb4ZeodsW0s0KKP5dpEJ ArsUEvC9+ZDe5w2D1NIkXhfCHYJX7egxRHbwBcDE4D4J1JWqJwFxdRIxVd54gNcw QcH78SH7NLBGy5jZGESxwvOm8zfnSeF0FT9dyz/i4r/X7M/Fp9k/DygQaMdMbOsp ICp+hKfIdYr+2qWasvGxkVXx8xcUuGnl4CsHY8QrGEP9uQ1SKkRakcugawIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKf3BLcAClfkZa8dAFZTpCE/WGgRMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvcF9jRXR3QUtWLVJscngwQVZsT2tJVDlZYUJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnq3YAwQA nq3dMA0GCSqGSIb3DQEBCwUAA4IBAQC0ECiJGksoo4yqDKt7nGMH7/3u+9CyM6Iq 4EGrtVxJ7AWZOLzVv0Uo/BA1j4ItKUof0YRKHfTi5kycExzn/IIyXymitTb135yB NQlGv6C6s5HPW6/vBSWub6vCDUgshQbzYrEmlPjeYVnARrcJP3Jy098BuV/Pi8HQ XjbJQYzyPh1tpDBibCin+yDaV8PY+JAHXclqXFT0LuDyUsav2pH30flwTdEc96OG p1aJVXHrVBTQiLdSzbauPWGisA5CYDtZ1O9wilFohXdqWe5jSbeFQikFCHO/9bNa auJYY0kuDs1Zfx0FgdxgNXSSiOF6XfUPnsAzwxN7ZYy5efkiWQBM -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:03 2025 by rpki-client