This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/io80l1tuBZlvtmsc3O2CUblyXEk.roa File: io80l1tuBZlvtmsc3O2CUblyXEk.roa (raw, json) Hash identifier: Ee8tLpUdxcl7RdODwc+jsH7Hsy3sy1biq2Koz6VaGbs= Subject key identifier: 8A:8F:34:97:5B:6E:05:99:6F:B6:6B:1C:DC:ED:82:51:B9:72:5C:49 Certificate issuer: /CN=17c203e3f365923a843d3220317a1c68cf74de0f Certificate serial: 019ADA4E2EB3C666AC72541143F36C6D201A Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/io80l1tuBZlvtmsc3O2CUblyXEk.roa Signing time: Mon 01 Dec 2025 14:25:48 +0000 ROA not before: Mon 01 Dec 2025 14:25:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215373 IP address blocks: 37.203.35.0/24 maxlen: 24 37.203.37.0/24 maxlen: 24 37.203.38.0/24 maxlen: 24 89.111.9.0/24 maxlen: 24 89.111.10.0/24 maxlen: 24 89.111.22.0/24 maxlen: 24 89.111.25.0/24 maxlen: 24 89.111.26.0/24 maxlen: 24 89.111.27.0/24 maxlen: 24 89.111.28.0/24 maxlen: 24 89.111.30.0/24 maxlen: 24 89.111.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:4e:2e:b3:c6:66:ac:72:54:11:43:f3:6c:6d:20:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f Validity Not Before: Dec 1 14:25:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8a8f34975b6e05996fb66b1cdced8251b9725c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:21:e2:c0:57:b1:74:08:30:18:6b:d8:94:3b: 87:26:45:17:39:d1:b0:2e:a6:64:c5:c9:cc:95:8e: b7:8b:37:85:f9:b8:81:22:e6:29:2b:06:28:f7:7b: 32:68:fc:0a:27:91:d4:73:66:74:68:22:82:05:2b: 5a:65:0e:41:07:fb:d2:72:69:71:50:b0:b6:fa:0f: 84:11:48:e7:9b:23:69:c5:df:32:55:2d:3f:2c:35: 6f:c9:ae:66:a5:04:88:a0:43:aa:b6:dd:a6:a2:f6: bc:2e:bf:06:76:d0:13:76:f2:09:18:b1:34:a4:ce: bd:12:e0:8c:0f:15:0f:d7:a7:00:22:25:ee:cb:2a: 58:73:5d:ad:a1:a7:be:05:6e:08:92:56:70:ad:98: 5f:64:9a:98:2b:16:af:17:6e:a2:14:c8:89:9f:55: 08:f9:19:f0:a8:38:80:cf:09:29:89:ee:7e:09:44: 04:b7:9b:9b:cb:69:93:37:47:dd:4d:91:28:47:74: 38:b0:e9:b7:91:e3:e8:ca:5e:8b:c0:63:0f:ba:48: 35:9e:2b:78:18:c8:ff:14:1a:e9:fa:22:cf:d9:97: 6b:7d:1b:94:ce:74:87:4c:c0:d4:86:01:37:19:0b: 81:e1:e8:3d:4e:e1:7d:e3:9d:0f:b3:b0:5c:d0:ff: 1e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8F:34:97:5B:6E:05:99:6F:B6:6B:1C:DC:ED:82:51:B9:72:5C:49 X509v3 Authority Key Identifier: keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/io80l1tuBZlvtmsc3O2CUblyXEk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.203.35.0/24 37.203.37.0-37.203.38.255 89.111.9.0-89.111.10.255 89.111.22.0/24 89.111.25.0-89.111.28.255 89.111.30.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:e9:37:e4:1f:f5:40:e0:a5:0f:c1:65:ff:68:f6:e5:98:05: 7d:7c:61:27:9e:4e:68:bd:f8:17:f6:ac:2d:43:1c:4b:1b:af: 00:56:1a:5a:72:05:09:c4:b7:6c:d7:89:53:1f:e4:e0:17:a6: d0:7e:87:ae:c0:57:9d:6c:ce:96:94:c0:7d:f9:b3:50:58:96: 9c:07:2f:48:bb:e8:bd:4c:fb:06:ed:94:a5:f2:30:40:00:64: 47:99:12:50:62:60:eb:18:b7:c5:56:6a:a5:a5:70:4d:13:01: 6e:eb:90:6c:c3:be:9b:d6:49:6a:9f:0a:40:72:28:7e:13:e3: aa:38:27:ce:28:4d:41:75:be:27:49:2b:fd:fd:97:76:83:12: 9c:55:bd:c0:13:b9:67:41:5f:74:03:2f:dc:46:34:ea:dc:50: a2:82:b9:5f:32:23:a8:06:d4:b0:83:63:78:76:8b:e5:ae:d3: 84:8c:08:95:d6:af:f9:1f:30:48:33:7b:57:3a:7b:1b:14:bb: 43:2a:a5:ef:10:fc:92:13:36:38:ed:e1:7c:1c:37:40:1b:5a: 41:c5:70:2b:65:bf:35:18:1f:39:4c:f5:65:dc:d4:32:03:f8: 60:a4:e0:02:33:74:e0:ed:fd:52:02:77:76:ef:96:a7:9b:20: 71:a9:73:63 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZraTi6zxmasclQRQ/NsbSAaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YzIwM2UzZjM2NTkyM2E4NDNkMzIyMDMxN2ExYzY4Y2Y3 NGRlMGYwHhcNMjUxMjAxMTQyNTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YThmMzQ5NzViNmUwNTk5NmZiNjZiMWNkY2VkODI1MWI5NzI1YzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyHiwFexdAgwGGvYlDuHJkUXOdGw LqZkxcnMlY63izeF+biBIuYpKwYo93syaPwKJ5HUc2Z0aCKCBStaZQ5BB/vScmlx ULC2+g+EEUjnmyNpxd8yVS0/LDVvya5mpQSIoEOqtt2mova8Lr8GdtATdvIJGLE0 pM69EuCMDxUP16cAIiXuyypYc12toae+BW4IklZwrZhfZJqYKxavF26iFMiJn1UI +RnwqDiAzwkpie5+CUQEt5uby2mTN0fdTZEoR3Q4sOm3kePoyl6LwGMPukg1nit4 GMj/FBrp+iLP2ZdrfRuUznSHTMDUhgE3GQuB4eg9TuF9450Ps7Bc0P8eywIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFIqPNJdbbgWZb7ZrHNztglG5clxJMB8GA1UdIwQY MBaAFBfCA+PzZZI6hD0yIDF6HGjPdN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjhJRDRfTmxranFFUFRJZ01Yb2NhTTkwM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy84OWFlOGUtNDY3NC00NTVkLTlmMjMt YWM2N2EzNmU0YWFiLzEvaW84MGwxdHVCWmx2dG1zYzNPMkNVYmx5WEVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy84OWFlOGUtNDY3NC00NTVkLTlmMjMtYWM2N2EzNmU0YWFi LzEvRjhJRDRfTmxranFFUFRJZ01Yb2NhTTkwM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAJcsjMAwD BAAlyyUDBAAlyyYwDAMEAFlvCQMEAFlvCgMEAFlvFjAMAwQAWW8ZAwQAWW8cAwQB WW8eMA0GCSqGSIb3DQEBCwUAA4IBAQAv6TfkH/VA4KUPwWX/aPblmAV9fGEnnk5o vfgX9qwtQxxLG68AVhpacgUJxLds14lTH+TgF6bQfoeuwFedbM6WlMB9+bNQWJac By9Iu+i9TPsG7ZSl8jBAAGRHmRJQYmDrGLfFVmqlpXBNEwFu65Bsw76b1klqnwpA cih+E+OqOCfOKE1Bdb4nSSv9/Zd2gxKcVb3AE7lnQV90Ay/cRjTq3FCigrlfMiOo BtSwg2N4dovlrtOEjAiV1q/5HzBIM3tXOnsbFLtDKqXvEPySEzY47eF8HDdAG1pB xXArZb81GB85TPVl3NQyA/hgpOACM3Tg7f1SAnd275anmyBxqXNj -----END CERTIFICATE-----Generated at Sat Dec 6 13:12:27 2025 by rpki-client