This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Ixo-8S6WASdYlQuTP_CIvr2em9k.roa File: Ixo-8S6WASdYlQuTP_CIvr2em9k.roa (raw, json) Hash identifier: YCf8Yjw51Gv33rYMLc2UroCapc3q1dzvlDUUEZ59hVg= Subject key identifier: 23:1A:3E:F1:2E:96:01:27:58:95:0B:93:3F:F0:88:BE:BD:9E:9B:D9 Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Certificate serial: 019AEF2B183A20E76A62F5576CF88FC7E667 Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Ixo-8S6WASdYlQuTP_CIvr2em9k.roa Signing time: Fri 05 Dec 2025 15:39:30 +0000 ROA not before: Fri 05 Dec 2025 15:39:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215727 IP address blocks: 80.71.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:2b:18:3a:20:e7:6a:62:f5:57:6c:f8:8f:c7:e6:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Validity Not Before: Dec 5 15:39:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=231a3ef12e96012758950b933ff088bebd9e9bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9c:74:9b:5b:9f:f5:be:95:ae:59:30:7a:98: 70:5f:de:f9:13:6a:75:04:70:39:c6:0f:2c:9d:7c: a1:c1:28:95:d3:05:12:02:6c:58:ef:66:7d:14:fc: f8:67:78:ca:e4:91:59:f1:4f:f6:d8:1c:65:1d:71: 11:ee:88:d6:cc:67:14:e8:8c:01:85:32:55:85:58: 43:33:4e:bb:fb:ea:71:17:da:10:61:df:76:16:6a: b8:bc:0b:6f:59:c9:51:36:7f:07:da:17:81:ed:46: 4c:e4:3a:74:b1:af:90:d6:49:aa:19:5e:b6:34:8d: 43:08:e6:3e:34:01:81:30:5f:36:22:92:bb:84:2f: 8b:e6:20:00:c9:5a:71:ef:bc:ac:3c:75:94:3e:d6: c6:c9:41:35:a9:0a:4f:85:b2:09:c9:e5:94:f5:02: 99:a6:db:ec:74:f7:b0:39:32:a7:08:fd:cc:91:f0: 98:47:e8:30:40:33:28:6d:12:65:31:7e:e7:55:d8: 05:13:3d:41:69:29:5e:ae:db:cd:c1:7f:e5:f1:af: 92:a8:e4:34:20:b3:ac:57:21:95:81:2f:2f:f0:be: cf:fa:59:97:ff:ab:2d:ca:08:ec:0c:86:84:54:4a: a5:3b:2a:98:7c:2b:b2:55:28:90:67:66:cf:29:68: b1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1A:3E:F1:2E:96:01:27:58:95:0B:93:3F:F0:88:BE:BD:9E:9B:D9 X509v3 Authority Key Identifier: keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Ixo-8S6WASdYlQuTP_CIvr2em9k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.71.237.0/24 Signature Algorithm: sha256WithRSAEncryption 82:39:a3:4d:a0:ae:7f:0f:5f:88:ad:ca:3a:d2:7e:14:65:67: ea:9d:c2:62:34:db:8f:f7:1e:f3:4c:c7:25:8c:ab:64:33:f2: e7:0c:43:20:92:ee:b1:86:dd:71:c8:c1:d1:15:24:16:bc:cb: 6a:a9:64:93:f9:de:46:fd:de:a8:64:32:7e:53:40:66:4c:0a: e3:2f:f8:b4:63:d9:ab:30:b8:51:fb:b5:9e:7a:ca:eb:bd:3a: fc:cf:cf:28:b2:7b:05:be:6b:06:f6:14:fc:34:cd:6e:82:73: e6:0f:08:c9:fe:a5:80:4b:d2:f7:2c:9e:d8:50:eb:7f:52:b6: 61:1d:18:dd:8c:28:1a:5e:5e:db:6d:5e:cd:ea:ee:68:0d:ad: b0:c0:1d:46:e0:70:55:c0:9c:90:0a:2e:d7:d5:b0:69:78:37: 2a:f0:37:94:a1:a0:ba:51:55:c8:c0:ab:b2:a5:25:62:50:c6: 87:b6:db:be:eb:0d:bd:53:87:c7:69:45:6f:4b:03:08:da:2e: 84:f5:df:e4:6c:0f:e3:14:11:b4:0e:2d:a7:cc:75:55:34:59: e8:00:1d:f8:a9:3c:67:55:0e:d5:3b:61:b8:d1:ae:99:e1:47: 44:51:1b:6a:8e:ac:5c:a9:2b:32:5e:84:07:89:ea:7b:9c:84: 20:15:2b:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrvKxg6IOdqYvVXbPiPx+ZnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx MDhlNDcwHhcNMjUxMjA1MTUzOTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzFhM2VmMTJlOTYwMTI3NTg5NTBiOTMzZmYwODhiZWJkOWU5YmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5x0m1uf9b6VrlkwephwX975E2p1 BHA5xg8snXyhwSiV0wUSAmxY72Z9FPz4Z3jK5JFZ8U/22BxlHXER7ojWzGcU6IwB hTJVhVhDM067++pxF9oQYd92Fmq4vAtvWclRNn8H2heB7UZM5Dp0sa+Q1kmqGV62 NI1DCOY+NAGBMF82IpK7hC+L5iAAyVpx77ysPHWUPtbGyUE1qQpPhbIJyeWU9QKZ ptvsdPewOTKnCP3MkfCYR+gwQDMobRJlMX7nVdgFEz1BaSlertvNwX/l8a+SqOQ0 ILOsVyGVgS8v8L7P+lmX/6stygjsDIaEVEqlOyqYfCuyVSiQZ2bPKWixfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCMaPvEulgEnWJULkz/wiL69npvZMB8GA1UdIwQY MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt MTkxODliM2M5YzdkLzEvSXhvLThTNldBU2RZbFF1VFBfQ0l2cjJlbTlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEftMA0G CSqGSIb3DQEBCwUAA4IBAQCCOaNNoK5/D1+Irco60n4UZWfqncJiNNuP9x7zTMcl jKtkM/LnDEMgku6xht1xyMHRFSQWvMtqqWST+d5G/d6oZDJ+U0BmTArjL/i0Y9mr MLhR+7WeesrrvTr8z88osnsFvmsG9hT8NM1ugnPmDwjJ/qWAS9L3LJ7YUOt/UrZh HRjdjCgaXl7bbV7N6u5oDa2wwB1G4HBVwJyQCi7X1bBpeDcq8DeUoaC6UVXIwKuy pSViUMaHttu+6w29U4fHaUVvSwMI2i6E9d/kbA/jFBG0Di2nzHVVNFnoAB34qTxn VQ7VO2G40a6Z4UdEURtqjqxcqSsyXoQHiep7nIQgFStF -----END CERTIFICATE-----Generated at Sun Dec 7 01:06:44 2025 by rpki-client