This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/iBrr36_dEMFLFaR63rVxYsL0nrA.roa File: iBrr36_dEMFLFaR63rVxYsL0nrA.roa (raw, json) Hash identifier: QjXP3L9aexbdxGC+T9YhEQ3e0t4EbvVU5SQA2xtPTEY= Subject key identifier: 88:1A:EB:DF:AF:DD:10:C1:4B:15:A4:7A:DE:B5:71:62:C2:F4:9E:B0 Certificate issuer: /CN=d04b6ea628179ca3a0e41bffaeea2d33a55461de Certificate serial: 019A97AB00342B15F8E286928FC5EC37BA99 Authority key identifier: D0:4B:6E:A6:28:17:9C:A3:A0:E4:1B:FF:AE:EA:2D:33:A5:54:61:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EtupigXnKOg5Bv_ruotM6VUYd4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/iBrr36_dEMFLFaR63rVxYsL0nrA.roa Signing time: Tue 18 Nov 2025 15:52:37 +0000 ROA not before: Tue 18 Nov 2025 15:52:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50301 IP address blocks: 109.233.64.0/21 maxlen: 21 193.84.186.0/24 maxlen: 24 2a0c:4800::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.mft rsync://rpki.ripe.net/repository/DEFAULT/0EtupigXnKOg5Bv_ruotM6VUYd4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 15:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:ab:00:34:2b:15:f8:e2:86:92:8f:c5:ec:37:ba:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d04b6ea628179ca3a0e41bffaeea2d33a55461de Validity Not Before: Nov 18 15:52:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=881aebdfafdd10c14b15a47adeb57162c2f49eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:07:42:c3:62:41:6d:d6:8b:18:1f:95:f1:6f: 47:94:2e:e3:da:1f:56:77:5b:8c:77:69:b6:da:cb: a5:81:a9:af:10:36:5f:3b:9f:ea:0b:4e:93:70:07: d1:4b:0e:cc:ac:46:86:e4:98:e3:fe:7f:74:ad:98: 7b:fe:96:03:a0:a5:b6:4c:be:6a:26:88:36:1a:cb: ed:b1:cb:65:d9:9d:41:c5:65:c7:08:8a:c8:9d:a7: 29:41:65:d1:cd:98:06:9a:93:9e:72:36:84:f4:d6: 6b:1e:27:72:b9:4b:28:ba:56:91:cc:c9:76:dc:74: da:0c:2a:d8:7e:7c:65:a7:5a:87:02:77:ee:2a:c4: 3e:f9:05:1f:3a:64:54:a1:f1:8b:3b:80:86:c9:d8: 45:dc:f4:bc:04:63:47:2a:af:46:46:9b:a1:91:70: d6:db:a2:1c:04:ae:e5:8f:c7:5b:2c:bf:37:f7:04: 28:3d:9a:81:75:c5:5f:c3:c9:c0:34:10:fd:16:4d: f7:0b:b7:65:43:a3:45:39:bf:00:7f:c5:df:3b:c8: 4c:7b:68:4a:21:ba:cb:fd:f2:5a:df:37:f0:44:04: 82:89:ef:0b:c7:ba:dd:3b:b6:ac:af:bf:30:30:0f: 85:7d:42:97:4a:84:62:bf:1e:26:60:67:d4:88:fe: 0c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1A:EB:DF:AF:DD:10:C1:4B:15:A4:7A:DE:B5:71:62:C2:F4:9E:B0 X509v3 Authority Key Identifier: keyid:D0:4B:6E:A6:28:17:9C:A3:A0:E4:1B:FF:AE:EA:2D:33:A5:54:61:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EtupigXnKOg5Bv_ruotM6VUYd4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/iBrr36_dEMFLFaR63rVxYsL0nrA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.233.64.0/21 193.84.186.0/24 IPv6: 2a0c:4800::/29 Signature Algorithm: sha256WithRSAEncryption 70:f9:41:e8:da:29:f8:3d:bd:30:44:2e:23:ad:6c:f7:9f:2e: bd:cd:29:7b:dc:1f:af:9b:cb:62:d6:a1:30:e2:88:e3:b8:26: e5:f5:cc:ff:c6:26:e9:3a:ff:72:64:de:a8:72:76:b7:1f:d2: ac:b6:dc:1e:57:66:e6:14:08:7a:9e:d7:73:e5:1d:33:ab:dd: 74:fa:1f:54:d3:f8:17:94:28:3a:de:31:76:d8:f0:cb:de:02: 81:ed:b1:e2:cd:3c:ea:dc:a8:23:82:ab:86:b1:9a:b5:55:84: 4d:45:18:e8:e6:1e:a3:7d:0a:b8:a3:12:1d:47:32:5f:f6:ab: 32:66:56:01:88:cb:b2:8c:1a:8c:6f:91:63:4b:45:c2:1f:76: 08:ac:20:4e:ec:bf:49:f7:fe:63:b1:10:97:dc:5f:e1:17:e8: 4c:f2:12:3f:7b:64:82:c5:94:b6:a5:b8:60:4f:cf:ac:a7:ff: ed:de:f4:fd:74:96:93:64:71:e5:9a:95:d2:cd:c3:04:86:ab: 79:31:23:f1:08:37:fd:51:9e:a3:ef:49:e8:40:8a:13:f9:f3: ef:6f:d6:aa:9e:8f:cc:8a:1a:08:18:2d:85:65:1f:8a:ad:87: 29:d8:09:6d:fd:1a:dd:d4:55:f2:69:3d:27:9c:92:11:5d:a4: 8b:7d:76:ec -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZqXqwA0KxX44oaSj8XsN7qZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNGI2ZWE2MjgxNzljYTNhMGU0MWJmZmFlZWEyZDMzYTU1 NDYxZGUwHhcNMjUxMTE4MTU1MjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODFhZWJkZmFmZGQxMGMxNGIxNWE0N2FkZWI1NzE2MmMyZjQ5ZWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAdCw2JBbdaLGB+V8W9HlC7j2h9W d1uMd2m22sulgamvEDZfO5/qC06TcAfRSw7MrEaG5Jjj/n90rZh7/pYDoKW2TL5q Jog2Gsvtsctl2Z1BxWXHCIrInacpQWXRzZgGmpOecjaE9NZrHidyuUsoulaRzMl2 3HTaDCrYfnxlp1qHAnfuKsQ++QUfOmRUofGLO4CGydhF3PS8BGNHKq9GRpuhkXDW 26IcBK7lj8dbLL839wQoPZqBdcVfw8nANBD9Fk33C7dlQ6NFOb8Af8XfO8hMe2hK IbrL/fJa3zfwRASCie8Lx7rdO7asr78wMA+FfUKXSoRivx4mYGfUiP4MVwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIga69+v3RDBSxWket61cWLC9J6wMB8GA1UdIwQY MBaAFNBLbqYoF5yjoOQb/67qLTOlVGHeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEV0dXBpZ1huS09nNUJ2X3J1b3RNNlZVWWQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9lMWU2YjMtOTMwYS00MDIyLWE4Yzct ZWNjNzIyZjlkN2ZmLzEvaUJycjM2X2RFTUZMRmFSNjNyVnhZc0wwbnJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9lMWU2YjMtOTMwYS00MDIyLWE4YzctZWNjNzIyZjlkN2Zm LzEvMEV0dXBpZ1huS09nNUJ2X3J1b3RNNlZVWWQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDbelAAwQA wVS6MA0EAgACMAcDBQMqDEgAMA0GCSqGSIb3DQEBCwUAA4IBAQBw+UHo2in4Pb0w RC4jrWz3ny69zSl73B+vm8ti1qEw4ojjuCbl9cz/xibpOv9yZN6ocna3H9Ksttwe V2bmFAh6ntdz5R0zq910+h9U0/gXlCg63jF22PDL3gKB7bHizTzq3KgjgquGsZq1 VYRNRRjo5h6jfQq4oxIdRzJf9qsyZlYBiMuyjBqMb5FjS0XCH3YIrCBO7L9J9/5j sRCX3F/hF+hM8hI/e2SCxZS2pbhgT8+sp//t3vT9dJaTZHHlmpXSzcMEhqt5MSPx CDf9UZ6j70noQIoT+fPvb9aqno/MihoIGC2FZR+KrYcp2Alt/Rrd1FXyaT0nnJIR XaSLfXbs -----END CERTIFICATE-----Generated at Sun Dec 7 00:26:39 2025 by rpki-client