This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/I4AeQbB27YGBJ6rcGLTRKR2F550.roa File: I4AeQbB27YGBJ6rcGLTRKR2F550.roa (raw, json) Hash identifier: UIY98sWU5q875YoF6i4X8Jb2tdiHntT6LMJCK5ZTjXQ= Subject key identifier: 23:80:1E:41:B0:76:ED:81:81:27:AA:DC:18:B4:D1:29:1D:85:E7:9D Certificate issuer: /CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1 Certificate serial: 019A90A797ECD2B4A39BA8C920D9643A9A1C Authority key identifier: F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/I4AeQbB27YGBJ6rcGLTRKR2F550.roa Signing time: Mon 17 Nov 2025 07:11:33 +0000 ROA not before: Mon 17 Nov 2025 07:11:33 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216211 IP address blocks: 80.249.134.0/24 maxlen: 24 2a13:edc0:1::/48 maxlen: 48 2a13:edc0:2::/48 maxlen: 48 2a13:edc0:3::/48 maxlen: 48 2a13:edc0:4::/48 maxlen: 48 2a13:edc0:5::/48 maxlen: 48 2a13:edc0:6::/48 maxlen: 48 2a13:edc0:7::/48 maxlen: 48 2a13:edc0:8::/48 maxlen: 48 2a13:edc0:9::/48 maxlen: 48 2a13:edc0:10::/48 maxlen: 48 2a13:edc0:11::/48 maxlen: 48 2a13:edc0:12::/48 maxlen: 48 2a13:edc0:13::/48 maxlen: 48 2a13:edc0:14::/48 maxlen: 48 2a13:edc0:15::/48 maxlen: 48 2a13:edc0:16::/48 maxlen: 48 2a13:edc0:17::/48 maxlen: 48 2a13:edc0:18::/48 maxlen: 48 2a13:edc0:19::/48 maxlen: 48 2a13:edc0:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:90:a7:97:ec:d2:b4:a3:9b:a8:c9:20:d9:64:3a:9a:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1 Validity Not Before: Nov 17 07:11:33 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=23801e41b076ed818127aadc18b4d1291d85e79d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:28:2d:2b:d6:37:fd:fe:e2:3b:54:dd:dd:91: 8c:43:6a:e3:6f:d7:27:19:7f:3d:e5:05:c2:89:f9: 58:00:cd:44:9b:c3:53:5f:f4:24:71:8b:3c:70:5d: ba:b4:b9:6a:82:47:a7:89:ee:7f:d0:44:ef:33:54: 84:e0:78:4e:52:7d:de:fb:99:9b:aa:97:e8:79:ed: e0:cc:a6:77:45:ff:b8:b4:38:78:f4:30:21:bc:90: f4:00:c4:55:af:8f:df:dc:b4:59:49:f7:e9:3b:f2: f7:e4:2c:3b:4d:bc:4c:00:f3:8c:45:30:db:bc:04: 74:81:2a:0b:e1:e4:38:e2:58:2c:73:9c:97:9c:ef: 23:06:30:5a:20:00:9b:31:5d:c8:3a:65:d1:ae:e8: 64:12:63:8b:9e:72:7e:1d:5c:3d:46:06:c8:19:12: 54:59:53:87:7f:a0:73:4c:bb:4e:60:93:72:f2:6b: 14:c9:75:6e:83:46:1e:1d:2f:09:08:8f:c4:29:4f: 21:80:21:dd:cd:7e:e6:79:b0:1f:dc:36:4f:7b:00: f5:66:0a:bf:e7:d2:38:5b:29:c0:ec:1d:ca:5c:98: cf:d1:f0:77:55:78:4d:cf:c4:f2:42:bc:84:1c:d6: 58:fc:6c:6e:23:48:1a:f0:c8:36:7f:9c:88:d8:54: 1b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:80:1E:41:B0:76:ED:81:81:27:AA:DC:18:B4:D1:29:1D:85:E7:9D X509v3 Authority Key Identifier: keyid:F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/I4AeQbB27YGBJ6rcGLTRKR2F550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.249.134.0/24 IPv6: 2a13:edc0:1::-2a13:edc0:9:ffff:ffff:ffff:ffff:ffff 2a13:edc0:10::-2a13:edc0:19:ffff:ffff:ffff:ffff:ffff 2a13:edc0:20::/48 Signature Algorithm: sha256WithRSAEncryption 97:97:27:38:c9:09:8d:e0:e3:f4:f4:8f:a1:b8:ab:08:b7:88: 94:f7:5e:ee:e7:9d:ec:67:80:40:f7:6f:b3:62:11:c9:c2:88: 3c:12:60:fd:4d:7b:51:95:12:b1:3c:e4:b0:80:e0:af:82:51: eb:40:11:18:63:85:e9:fa:d6:0a:d2:c7:c1:40:3b:cd:9b:80: a8:bc:ff:6e:f5:6f:8e:d1:50:d2:08:ca:66:2a:96:f8:dc:d2: 0a:64:a1:fb:21:4a:11:f4:d6:69:74:e3:ae:2b:4f:e5:28:09: 5e:86:68:6b:47:f4:25:b4:f8:3f:14:03:21:c7:cf:6a:eb:4f: cc:07:ed:d9:54:99:00:c2:79:e2:ab:1c:37:ba:ee:1c:6b:5d: 82:ce:3c:db:d7:50:1e:69:6b:ac:39:96:69:6f:17:7a:89:75: d1:0f:dc:81:20:5f:64:8a:70:fc:c8:ba:a4:6b:fa:df:d8:a5: e1:97:4f:f8:2f:a8:c7:95:bc:60:58:f3:96:5f:40:e3:26:c2: 9e:14:10:08:37:df:f8:74:32:92:0c:bb:0a:d1:e3:76:8f:f8: 8e:b8:6f:08:0b:bb:b4:51:fa:16:53:4b:b4:d8:23:6d:57:5a: 14:3d:33:3a:ba:09:41:a6:91:91:51:16:68:88:bb:f9:7a:b7: 9b:4b:c8:ce -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZqQp5fs0rSjm6jJINlkOpocMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMWVkN2IxZjYzYjUxYWE1MTZhOWZmY2IwMzVhM2EwZDY5 ZTY1YTEwHhcNMjUxMTE3MDcxMTMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzgwMWU0MWIwNzZlZDgxODEyN2FhZGMxOGI0ZDEyOTFkODVlNzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApygtK9Y3/f7iO1Td3ZGMQ2rjb9cn GX895QXCiflYAM1Em8NTX/QkcYs8cF26tLlqgkenie5/0ETvM1SE4HhOUn3e+5mb qpfoee3gzKZ3Rf+4tDh49DAhvJD0AMRVr4/f3LRZSffpO/L35Cw7TbxMAPOMRTDb vAR0gSoL4eQ44lgsc5yXnO8jBjBaIACbMV3IOmXRruhkEmOLnnJ+HVw9RgbIGRJU WVOHf6BzTLtOYJNy8msUyXVug0YeHS8JCI/EKU8hgCHdzX7mebAf3DZPewD1Zgq/ 59I4WynA7B3KXJjP0fB3VXhNz8TyQryEHNZY/GxuI0ga8Mg2f5yI2FQbhQIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFCOAHkGwdu2BgSeq3Bi00SkdheedMB8GA1UdIwQY MBaAFPMe17H2O1GqUWqf/LA1o6DWnmWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHg3WHNmWTdVYXBSYXBfOHNEV2pvTmFlWmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC85OWVkMDYtZTQ0NS00Y2EyLWI2NDct YmQyYjNhYmFlMTIxLzEvSTRBZVFiQjI3WUdCSjZyY0dMVFJLUjJGNTUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC85OWVkMDYtZTQ0NS00Y2EyLWI2NDctYmQyYjNhYmFlMTIx LzEvOHg3WHNmWTdVYXBSYXBfOHNEV2pvTmFlWmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzAMBAIAATAGAwQAUPmGMDcE AgACMDEwEgMHACoT7cAAAQMHASoT7cAACDASAwcEKhPtwAAQAwcBKhPtwAAYAwcA KhPtwAAgMA0GCSqGSIb3DQEBCwUAA4IBAQCXlyc4yQmN4OP09I+huKsIt4iU917u 553sZ4BA92+zYhHJwog8EmD9TXtRlRKxPOSwgOCvglHrQBEYY4Xp+tYK0sfBQDvN m4CovP9u9W+O0VDSCMpmKpb43NIKZKH7IUoR9NZpdOOuK0/lKAlehmhrR/QltPg/ FAMhx89q60/MB+3ZVJkAwnniqxw3uu4ca12Czjzb11AeaWusOZZpbxd6iXXRD9yB IF9kinD8yLqka/rf2KXhl0/4L6jHlbxgWPOWX0DjJsKeFBAIN9/4dDKSDLsK0eN2 j/iOuG8IC7u0UfoWU0u02CNtV1oUPTM6uglBppGRURZoiLv5erebS8jO -----END CERTIFICATE-----Generated at Sat Dec 6 17:17:09 2025 by rpki-client