This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/324h0IVENhrz26-GJdTRWk6dqhg.roa File: 324h0IVENhrz26-GJdTRWk6dqhg.roa (raw, json) Hash identifier: K4I0DJTQlqLsiypVZHI8ileZfP3AjOvHxCfU/BDE5JI= Subject key identifier: DF:6E:21:D0:85:44:36:1A:F3:DB:AF:86:25:D4:D1:5A:4E:9D:AA:18 Certificate issuer: /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a Certificate serial: 019A1E7CBF4378909F51E2716157C4528E1B Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/324h0IVENhrz26-GJdTRWk6dqhg.roa Signing time: Sun 26 Oct 2025 03:08:03 +0000 ROA not before: Sun 26 Oct 2025 03:08:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 397368 IP address blocks: 74.122.25.0/24 maxlen: 24 74.122.26.0/24 maxlen: 24 74.122.27.0/24 maxlen: 24 103.124.182.0/23 maxlen: 23 103.250.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1e:7c:bf:43:78:90:9f:51:e2:71:61:57:c4:52:8e:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a Validity Not Before: Oct 26 03:08:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=df6e21d08544361af3dbaf8625d4d15a4e9daa18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:54:d4:a6:c4:2f:f4:92:05:88:2c:5f:a3:d9: 74:2a:7f:4f:57:1c:40:77:bb:25:7c:89:0e:83:7a: 82:ef:83:a4:02:6e:82:de:7b:4c:9d:17:64:24:58: 0d:67:9d:fc:b8:6d:ff:9a:62:ae:8e:cc:c5:c8:8b: d6:a2:42:49:ec:88:23:72:da:90:b8:9c:bc:9d:59: 84:2e:db:5b:ee:b7:f2:50:3c:0d:8c:5c:75:00:53: ed:b4:44:1b:e8:75:6c:5e:ac:52:59:11:1e:e1:25: 28:1a:19:74:e0:09:a2:d6:f6:ea:5b:d1:6a:b0:3b: 75:ca:93:22:38:d8:11:a6:f9:b3:29:de:1f:7b:5d: 2c:b8:02:b9:f0:63:96:fb:14:0d:70:08:ec:60:4c: 11:80:e9:5a:47:b0:09:0d:27:7c:59:04:5c:20:57: c9:43:94:ae:23:aa:9e:e3:a7:a7:92:7e:bc:a5:5e: d3:ca:11:e6:57:bd:0c:d7:ae:5f:af:c1:7c:99:b2: 72:cd:4f:e8:3e:05:55:95:50:df:b6:ab:cb:5b:2c: 35:e3:c3:86:c4:bc:c6:32:cf:63:90:8a:4d:8d:0b: 1a:08:e1:d9:46:d3:da:85:8f:d0:22:be:d0:87:94: 29:f5:31:94:4d:48:3c:c4:5a:5b:a3:ab:ee:25:4c: 30:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6E:21:D0:85:44:36:1A:F3:DB:AF:86:25:D4:D1:5A:4E:9D:AA:18 X509v3 Authority Key Identifier: keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/324h0IVENhrz26-GJdTRWk6dqhg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 74.122.25.0-74.122.27.255 103.124.182.0/23 103.250.172.0/22 Signature Algorithm: sha256WithRSAEncryption 76:06:f2:c7:10:11:08:33:97:12:dc:ab:8f:6d:36:0a:8b:ad: e4:41:7f:6e:e2:1b:2e:21:34:e7:b0:70:67:70:4e:ba:5d:13: 50:f2:65:14:81:eb:43:b7:f0:a3:c7:61:9d:b1:b4:8a:ef:c9: 8f:dc:4b:49:dc:ae:04:49:f5:8a:7c:ba:77:8b:2a:96:5d:75: f4:1a:c0:bd:a4:83:16:0d:34:0a:db:3f:69:bc:bf:7b:4e:c2: 65:a8:c4:41:e0:04:b6:58:d2:3d:87:6a:16:76:43:39:d9:ad: 0e:6f:33:8e:ec:ab:b5:44:3f:3c:05:ac:f2:23:0c:84:20:c9: 3d:48:19:af:07:c3:48:5b:b9:b6:d5:4d:4f:2a:57:da:22:19: 21:14:a6:43:18:70:64:5e:c3:eb:d6:27:41:8b:99:d8:f4:f2: 06:0a:14:3b:34:65:35:0c:44:5c:02:7f:b6:9a:c4:b9:2a:cc: 14:ba:7a:97:d6:ca:a0:2e:73:45:59:73:d5:e0:4e:1a:a8:d9: 3c:98:23:83:a9:34:4b:ea:e7:4a:25:24:81:9a:0f:bc:af:fe: 2e:35:08:e9:c7:f7:cd:2a:af:00:7c:28:b9:be:40:82:76:d5: 5e:2b:a3:45:1f:cc:53:d4:2a:68:c4:3d:40:52:07:8c:57:77: 45:9d:a3:14 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZoefL9DeJCfUeJxYVfEUo4bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MDRjYzBlMDM4ZWIwZTY5N2VjNmU3YWU0OWQwMjg2MTQ2 ZTBjMWEwHhcNMjUxMDI2MDMwODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjZlMjFkMDg1NDQzNjFhZjNkYmFmODYyNWQ0ZDE1YTRlOWRhYTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1TUpsQv9JIFiCxfo9l0Kn9PVxxA d7slfIkOg3qC74OkAm6C3ntMnRdkJFgNZ538uG3/mmKujszFyIvWokJJ7IgjctqQ uJy8nVmELttb7rfyUDwNjFx1AFPttEQb6HVsXqxSWREe4SUoGhl04Ami1vbqW9Fq sDt1ypMiONgRpvmzKd4fe10suAK58GOW+xQNcAjsYEwRgOlaR7AJDSd8WQRcIFfJ Q5SuI6qe46enkn68pV7TyhHmV70M165fr8F8mbJyzU/oPgVVlVDftqvLWyw148OG xLzGMs9jkIpNjQsaCOHZRtPahY/QIr7Qh5Qp9TGUTUg8xFpbo6vuJUwwBQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFN9uIdCFRDYa89uvhiXU0VpOnaoYMB8GA1UdIwQY MBaAFLQEzA4DjrDml+xueuSdAoYUbgwaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEFUTURnT09zT2FYN0c1NjVKMENoaFJ1REJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9hYmUxNmItOTJjYy00OGUzLWI1Yjkt ODZhMmYwNjdiNGU4LzEvMzI0aDBJVkVOaHJ6MjYtR0pkVFJXazZkcWhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9hYmUxNmItOTJjYy00OGUzLWI1YjktODZhMmYwNjdiNGU4 LzEvdEFUTURnT09zT2FYN0c1NjVKMENoaFJ1REJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBABKehkD BAJKehgDBAFnfLYDBAJn+qwwDQYJKoZIhvcNAQELBQADggEBAHYG8scQEQgzlxLc q49tNgqLreRBf27iGy4hNOewcGdwTrpdE1DyZRSB60O38KPHYZ2xtIrvyY/cS0nc rgRJ9Yp8uneLKpZddfQawL2kgxYNNArbP2m8v3tOwmWoxEHgBLZY0j2HahZ2QznZ rQ5vM47sq7VEPzwFrPIjDIQgyT1IGa8Hw0hbubbVTU8qV9oiGSEUpkMYcGRew+vW J0GLmdj08gYKFDs0ZTUMRFwCf7aaxLkqzBS6epfWyqAuc0VZc9XgThqo2TyYI4Op NEvq50olJIGaD7yv/i41COnH980qrwB8KLm+QIJ21V4ro0UfzFPUKmjEPUBSB4xX d0WdoxQ= -----END CERTIFICATE-----Generated at Sat Dec 6 10:51:08 2025 by rpki-client