This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/8b-JQ0B4OeomGbojQ4PaiEVexlI.roa File: 8b-JQ0B4OeomGbojQ4PaiEVexlI.roa (raw, json) Hash identifier: PDPZU+uajsc1VUxrfy28T4es/CG+VoGQyCpiUpUvLyI= Subject key identifier: F1:BF:89:43:40:78:39:EA:26:19:BA:23:43:83:DA:88:45:5E:C6:52 Certificate issuer: /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7 Certificate serial: 019AD98B2CDEA548065066CFC95BEBC74B75 Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/8b-JQ0B4OeomGbojQ4PaiEVexlI.roa Signing time: Mon 01 Dec 2025 10:52:48 +0000 ROA not before: Mon 01 Dec 2025 10:52:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 393559 IP address blocks: 94.136.231.0/24 maxlen: 24 94.136.236.0/23 maxlen: 23 94.136.240.0/22 maxlen: 22 109.72.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:8b:2c:de:a5:48:06:50:66:cf:c9:5b:eb:c7:4b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7 Validity Not Before: Dec 1 10:52:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f1bf8943407839ea2619ba234383da88455ec652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ac:1d:f9:e3:3c:f5:73:d6:f2:b4:20:04:8c: 36:da:ce:37:b8:fd:35:2b:b9:a5:7c:d6:2f:9b:76: d5:c0:d2:e7:c1:f4:25:75:26:02:c9:98:88:a7:5a: 20:56:2d:a8:4a:a8:44:2b:e7:1f:66:b3:34:6c:80: eb:f0:0e:aa:2d:dc:65:6f:b3:c7:55:5a:b3:c4:16: 13:0f:d3:4f:dd:e4:89:58:31:fd:a4:63:f7:ca:a6: 77:0e:cb:9d:6b:b0:e9:e0:65:78:7d:1a:7d:72:03: 0a:1a:8b:07:6e:5e:c4:3c:a5:b3:3b:46:58:19:7a: b4:2a:e3:8e:9b:50:a2:3c:b1:36:50:29:4b:ba:94: 3a:21:d9:bc:0d:21:4e:da:1f:8c:f9:bb:eb:78:e3: 93:1d:7e:e6:3d:1a:bc:51:ae:02:8a:b8:4f:2e:36: c5:ff:10:f5:4e:3d:b1:24:ca:7b:68:c9:6d:ea:c9: e2:e4:7b:be:29:30:39:08:7f:15:28:19:44:03:b1: 8b:36:ba:be:ac:47:e5:bb:63:1b:86:49:f7:d4:97: 57:cb:a8:e2:82:4c:78:8b:c3:7d:b3:7c:1d:00:8d: 66:fd:14:51:2b:f3:d9:8b:6d:71:8e:9a:1b:41:2f: 5a:30:cd:9f:10:20:7b:61:e5:e0:32:01:2d:1e:3c: f9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:BF:89:43:40:78:39:EA:26:19:BA:23:43:83:DA:88:45:5E:C6:52 X509v3 Authority Key Identifier: keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/8b-JQ0B4OeomGbojQ4PaiEVexlI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.136.231.0/24 94.136.236.0/23 94.136.240.0/22 109.72.17.0/24 Signature Algorithm: sha256WithRSAEncryption 52:52:a0:df:9f:c7:1a:8a:99:60:61:dc:f2:2c:a2:4f:9a:7a: 47:51:24:68:b0:5d:3e:94:67:83:8c:74:47:a9:b0:5f:29:ca: c6:1d:db:d0:79:a3:38:53:ed:da:c5:8a:e6:a3:16:5f:fd:95: 84:28:7d:77:3f:e5:7b:ca:e8:f7:71:ae:7b:b5:e4:66:c8:e9: d2:f9:3d:47:68:f8:79:13:d0:2a:57:c2:ca:2a:3d:b9:22:68: c9:28:e1:cf:0f:00:e3:17:f6:25:48:1f:19:98:4a:49:a2:22: 48:ee:0f:1d:9b:7c:eb:c4:a8:18:4e:e8:ca:ac:2a:66:47:34: a4:7c:02:41:33:55:88:80:2b:ab:fc:41:1e:f4:75:34:27:b0: 92:62:82:d5:61:42:04:c0:eb:cb:a2:0a:40:55:f2:c8:20:53: b2:c3:68:3b:d7:38:0a:9e:e2:90:13:c9:2c:c8:7b:6c:c1:f6: 47:80:2b:24:02:00:b7:47:c7:32:75:1f:b4:20:4f:f4:c1:fa: 91:b8:05:a9:55:e0:e7:c4:e9:24:96:ec:40:68:64:3f:8c:35: b3:c9:18:34:61:99:0d:fe:72:7e:27:1a:77:94:f1:0c:21:4b: e8:3d:dc:96:0b:70:88:25:6d:ac:b1:6c:53:da:8b:d5:99:fd: 2f:09:ad:63 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZrZiyzepUgGUGbPyVvrx0t1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYjc2YWM5ZjdhODRhZDc5MGFkNTdjODgwYmM5Zjg2MmFk NGM5ZTcwHhcNMjUxMjAxMTA1MjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWJmODk0MzQwNzgzOWVhMjYxOWJhMjM0MzgzZGE4ODQ1NWVjNjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtawd+eM89XPW8rQgBIw22s43uP01 K7mlfNYvm3bVwNLnwfQldSYCyZiIp1ogVi2oSqhEK+cfZrM0bIDr8A6qLdxlb7PH VVqzxBYTD9NP3eSJWDH9pGP3yqZ3Dsuda7Dp4GV4fRp9cgMKGosHbl7EPKWzO0ZY GXq0KuOOm1CiPLE2UClLupQ6Idm8DSFO2h+M+bvreOOTHX7mPRq8Ua4CirhPLjbF /xD1Tj2xJMp7aMlt6sni5Hu+KTA5CH8VKBlEA7GLNrq+rEflu2Mbhkn31JdXy6ji gkx4i8N9s3wdAI1m/RRRK/PZi21xjpobQS9aMM2fECB7YeXgMgEtHjz5AQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPG/iUNAeDnqJhm6I0OD2ohFXsZSMB8GA1UdIwQY MBaAFJO3asn3qErXkK1XyIC8n4Yq1MnnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kMzNjZTAtNjlhMC00YmEzLWIzYzkt OTk4Mjc4ZjRmYmIyLzEvOGItSlEwQjRPZW9tR2JvalE0UGFpRVZleGxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kMzNjZTAtNjlhMC00YmEzLWIzYzktOTk4Mjc4ZjRmYmIy LzEvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAXojnAwQB XojsAwQCXojwAwQAbUgRMA0GCSqGSIb3DQEBCwUAA4IBAQBSUqDfn8caiplgYdzy LKJPmnpHUSRosF0+lGeDjHRHqbBfKcrGHdvQeaM4U+3axYrmoxZf/ZWEKH13P+V7 yuj3ca57teRmyOnS+T1HaPh5E9AqV8LKKj25ImjJKOHPDwDjF/YlSB8ZmEpJoiJI 7g8dm3zrxKgYTujKrCpmRzSkfAJBM1WIgCur/EEe9HU0J7CSYoLVYUIEwOvLogpA VfLIIFOyw2g71zgKnuKQE8ksyHtswfZHgCskAgC3R8cydR+0IE/0wfqRuAWpVeDn xOkkluxAaGQ/jDWzyRg0YZkN/nJ+Jxp3lPEMIUvoPdyWC3CIJW2ssWxT2ovVmf0v Ca1j -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:50 2025 by rpki-client