This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/il-qcm8BXhJJbuwTEtMlZsdwzrA.roa File: il-qcm8BXhJJbuwTEtMlZsdwzrA.roa (raw, json) Hash identifier: X2pXyg0VyMcTFdv3dYH0TPKO4ALVbEzMev/iuCDaW0g= Subject key identifier: 8A:5F:AA:72:6F:01:5E:12:49:6E:EC:13:12:D3:25:66:C7:70:CE:B0 Certificate issuer: /CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101 Certificate serial: 019A6FF99073249CE7A48F80D9C3D75E5C03 Authority key identifier: 1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/il-qcm8BXhJJbuwTEtMlZsdwzrA.roa Signing time: Mon 10 Nov 2025 22:53:37 +0000 ROA not before: Mon 10 Nov 2025 22:53:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205007 IP address blocks: 185.48.250.0/24 maxlen: 24 185.48.251.0/24 maxlen: 24 2a04:b540:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6f:f9:90:73:24:9c:e7:a4:8f:80:d9:c3:d7:5e:5c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101 Validity Not Before: Nov 10 22:53:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8a5faa726f015e12496eec1312d32566c770ceb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ab:44:fe:73:ac:4b:1e:ce:17:d6:38:70:b7: 50:53:01:92:ca:fd:d1:47:d4:50:b2:d9:68:5f:81: 5e:b8:30:9f:e0:53:fa:42:f6:69:fc:b0:7b:0d:f7: 90:0e:06:2b:ec:7b:a0:0a:38:c8:d5:75:12:9c:8b: 3a:76:c4:0d:80:66:b7:1a:ae:24:b4:25:2f:bf:c1: 00:6c:f6:de:7b:03:a2:ca:aa:cc:b2:6d:6a:43:19: 87:2a:56:89:d9:8c:36:94:5e:a2:61:1c:44:10:94: ea:58:21:e6:31:0e:7d:43:ec:5f:63:a8:d5:53:eb: 8b:e3:12:6f:7f:13:24:4e:e2:ef:f1:00:92:1b:da: e0:28:57:20:fb:ac:9e:20:f9:4a:e0:5e:ef:83:ea: 94:6c:4d:be:81:86:17:3c:16:3b:cc:b2:58:6e:4a: 29:cd:5b:88:be:99:cb:9d:3c:df:92:9d:e2:29:ed: 7f:85:9a:f1:e1:18:44:f3:48:64:56:70:c7:e7:a7: ed:ba:69:9b:ac:7d:52:f4:78:e0:79:7d:37:5f:55: 44:62:b3:d0:e4:81:26:3e:bc:fe:88:e7:02:39:fe: 90:bf:2c:d0:94:2a:77:00:78:41:ca:2c:b8:bb:36: 6b:48:51:92:eb:d7:6d:c1:5a:5d:7e:31:ec:5b:ac: 6d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5F:AA:72:6F:01:5E:12:49:6E:EC:13:12:D3:25:66:C7:70:CE:B0 X509v3 Authority Key Identifier: keyid:1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/il-qcm8BXhJJbuwTEtMlZsdwzrA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.48.250.0/23 IPv6: 2a04:b540:3000::/36 Signature Algorithm: sha256WithRSAEncryption 82:0f:54:92:2c:63:31:14:b0:f9:0e:2f:c2:e9:c9:20:8c:11: 8e:0e:78:d8:d9:04:dc:7b:d3:07:16:6a:75:bc:9b:d1:d1:16: b0:ac:fe:b0:6b:30:42:0f:03:7a:2d:ca:1a:6f:a0:c0:72:2f: 0a:6b:9c:d3:69:2b:8a:d9:e7:42:73:b9:bb:44:dd:dc:39:3a: d2:a1:15:de:5e:7d:d0:31:d1:c8:74:b2:79:9d:0b:8e:2b:99: 70:43:af:27:e9:bd:dd:53:1c:f4:ff:54:0a:9f:dd:e0:0d:50: 98:8a:e6:a0:ed:ad:97:66:a8:63:c6:74:b0:23:00:03:c3:87: 3a:bb:2e:ed:be:11:7f:ae:ea:79:fe:93:6a:6d:75:e5:71:ce: 51:49:4f:df:b4:3d:de:1f:b5:4a:c9:ca:a5:d4:0d:a5:9b:a6: f1:60:11:ca:78:12:6c:83:02:03:5b:d6:06:00:34:9e:27:60: 8a:2d:87:c4:7f:56:a0:aa:e7:dd:e0:86:a7:8e:23:4a:b7:00: 30:46:76:6c:4d:94:8d:51:93:41:5b:a5:ad:82:85:f1:47:16: 45:a3:b2:ed:88:c0:b9:44:71:37:46:96:01:6e:8c:5a:bd:97: 4d:e3:26:d6:09:5f:c0:5c:96:37:f6:43:d8:d8:bd:6e:97:f1: 26:33:40:69 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZpv+ZBzJJznpI+A2cPXXlwDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiOTgyODgzZTFkZmJmNDYzM2UwOGMwYjU4Yzg1ZTg5ZmZj MzIxMDEwHhcNMjUxMTEwMjI1MzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTVmYWE3MjZmMDE1ZTEyNDk2ZWVjMTMxMmQzMjU2NmM3NzBjZWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5atE/nOsSx7OF9Y4cLdQUwGSyv3R R9RQstloX4FeuDCf4FP6QvZp/LB7DfeQDgYr7HugCjjI1XUSnIs6dsQNgGa3Gq4k tCUvv8EAbPbeewOiyqrMsm1qQxmHKlaJ2Yw2lF6iYRxEEJTqWCHmMQ59Q+xfY6jV U+uL4xJvfxMkTuLv8QCSG9rgKFcg+6yeIPlK4F7vg+qUbE2+gYYXPBY7zLJYbkop zVuIvpnLnTzfkp3iKe1/hZrx4RhE80hkVnDH56ftummbrH1S9HjgeX03X1VEYrPQ 5IEmPrz+iOcCOf6QvyzQlCp3AHhByiy4uzZrSFGS69dtwVpdfjHsW6xtFQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFIpfqnJvAV4SSW7sExLTJWbHcM6wMB8GA1UdIwQY MBaAFBuYKIPh379GM+CMC1jIXon/wyEBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzVnb2ctSGZ2MFl6NEl3TFdNaGVpZl9ESVFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81Nzg2MGEtZGQ1ZS00NmU4LTllY2It ZDA3OGVlYzgyYjJhLzEvaWwtcWNtOEJYaEpKYnV3VEV0TWxac2R3enJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS81Nzg2MGEtZGQ1ZS00NmU4LTllY2ItZDA3OGVlYzgyYjJh LzEvRzVnb2ctSGZ2MFl6NEl3TFdNaGVpZl9ESVFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBuTD6MA4E AgACMAgDBgQqBLVAMDANBgkqhkiG9w0BAQsFAAOCAQEAgg9UkixjMRSw+Q4vwunJ IIwRjg542NkE3HvTBxZqdbyb0dEWsKz+sGswQg8Dei3KGm+gwHIvCmuc02kritnn QnO5u0Td3Dk60qEV3l590DHRyHSyeZ0LjiuZcEOvJ+m93VMc9P9UCp/d4A1QmIrm oO2tl2aoY8Z0sCMAA8OHOrsu7b4Rf67qef6Tam115XHOUUlP37Q93h+1SsnKpdQN pZum8WARyngSbIMCA1vWBgA0nidgii2HxH9WoKrn3eCGp44jSrcAMEZ2bE2UjVGT QVulrYKF8UcWRaOy7YjAuURxN0aWAW6MWr2XTeMm1glfwFyWN/ZD2Ni9bpfxJjNA aQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:24 2025 by rpki-client