This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/iLSgImJKA6sfcvh2C5H8MSiXYgc.roa File: iLSgImJKA6sfcvh2C5H8MSiXYgc.roa (raw, json) Hash identifier: i6Q1/zgekWcF03q/uHf2eJzbB2A8g+6dH//zgAn+ods= Subject key identifier: 88:B4:A0:22:62:4A:03:AB:1F:72:F8:76:0B:91:FC:31:28:97:62:07 Certificate issuer: /CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2 Certificate serial: 019AE9E94322FC6BA5041E0936498B06E8F9 Authority key identifier: AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/iLSgImJKA6sfcvh2C5H8MSiXYgc.roa Signing time: Thu 04 Dec 2025 15:09:29 +0000 ROA not before: Thu 04 Dec 2025 15:09:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211056 IP address blocks: 193.186.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:e9:43:22:fc:6b:a5:04:1e:09:36:49:8b:06:e8:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2 Validity Not Before: Dec 4 15:09:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=88b4a022624a03ab1f72f8760b91fc3128976207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:54:54:87:b0:e0:0d:99:39:71:dc:30:be:62: fd:15:51:ea:20:a7:06:03:e1:88:db:b3:6e:b3:a8: 04:53:de:84:31:f1:78:5f:be:f3:50:67:19:23:24: 0e:64:8c:8e:64:07:ca:d1:7b:e2:4a:83:d4:40:1e: 25:6a:81:e4:06:ef:2d:cf:0f:d3:f7:09:2f:a6:ec: 49:7a:38:e3:80:19:f7:91:2c:38:2d:4e:9c:3f:f9: b5:fa:1e:32:45:fc:2c:3b:43:00:d2:fe:88:e4:54: 81:15:ba:43:a0:18:44:ca:c5:6d:81:e6:03:24:6f: 50:bf:80:47:15:3e:d9:01:7d:f1:20:00:60:13:56: ca:17:10:53:ac:86:78:0c:9f:0a:bb:84:15:62:fa: 58:65:63:a4:dc:8f:13:ff:ae:6d:6a:7b:c9:35:08: e5:4c:c6:20:ce:ac:bb:62:69:01:c0:84:8a:23:8b: 96:25:a6:86:d6:c1:ae:b6:87:e2:25:29:5f:03:e8: 33:c5:24:e6:d2:22:67:64:79:46:31:f9:cf:65:16: 32:a2:ac:a9:5e:5f:9c:97:c6:b2:f8:0f:11:a5:33: 7f:84:31:96:05:a5:c8:3d:a4:c1:17:e0:13:8e:3f: f6:09:c5:18:d7:e5:4a:4b:bd:6b:0c:b3:03:90:72: 8f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B4:A0:22:62:4A:03:AB:1F:72:F8:76:0B:91:FC:31:28:97:62:07 X509v3 Authority Key Identifier: keyid:AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/iLSgImJKA6sfcvh2C5H8MSiXYgc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.186.215.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:31:45:95:6a:48:4d:5c:9a:89:45:e7:5c:44:f8:2e:c4:c8: 75:72:7c:7c:56:67:0f:bf:aa:29:9e:0b:40:c1:ab:ac:97:1f: ec:70:f5:03:a9:70:f7:4b:92:de:37:25:c7:26:7f:03:50:ca: 6b:c2:62:e9:c5:64:c9:68:bd:c1:3e:2a:74:e8:c9:1c:e2:00: 37:97:6e:31:c3:07:a9:4e:ad:b0:31:e6:f6:9a:52:d5:38:a1: 8e:8d:5a:dc:cf:01:b0:74:d8:92:bf:78:9e:19:f4:aa:17:f8: ae:ba:09:f2:60:8e:ea:65:b8:6c:40:17:c3:78:0f:a1:ad:5f: 71:9b:37:71:56:c6:24:b7:77:a9:65:a5:67:0e:49:b7:99:69: de:60:5e:a3:92:40:d2:ad:c5:20:26:a7:4a:37:0f:4e:9c:1e: 3f:12:31:bd:d2:44:1b:74:dc:80:da:ba:dc:99:91:b2:1d:19: 9f:35:e0:55:4f:4a:79:a6:88:a8:85:ea:9c:8c:6a:3a:9d:ec: 04:59:90:be:1c:ec:cf:f6:8f:d0:51:e1:9b:10:2f:14:d3:70: 7d:3b:3e:a9:2a:6a:36:b8:a0:e6:e2:65:a0:85:84:02:0d:23: 4e:db:6f:d1:c8:b4:fa:c5:ac:1d:63:21:0a:4e:31:af:d9:cf: 6a:c8:c9:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrp6UMi/GulBB4JNkmLBuj5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzE5MThjMWY0NWU2ZWMxN2RhY2E2N2E3YWQxOTNjYWYw NGI3YjIwHhcNMjUxMjA0MTUwOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGI0YTAyMjYyNGEwM2FiMWY3MmY4NzYwYjkxZmMzMTI4OTc2MjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1RUh7DgDZk5cdwwvmL9FVHqIKcG A+GI27Nus6gEU96EMfF4X77zUGcZIyQOZIyOZAfK0XviSoPUQB4laoHkBu8tzw/T 9wkvpuxJejjjgBn3kSw4LU6cP/m1+h4yRfwsO0MA0v6I5FSBFbpDoBhEysVtgeYD JG9Qv4BHFT7ZAX3xIABgE1bKFxBTrIZ4DJ8Ku4QVYvpYZWOk3I8T/65tanvJNQjl TMYgzqy7YmkBwISKI4uWJaaG1sGutofiJSlfA+gzxSTm0iJnZHlGMfnPZRYyoqyp Xl+cl8ay+A8RpTN/hDGWBaXIPaTBF+ATjj/2CcUY1+VKS71rDLMDkHKPJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIi0oCJiSgOrH3L4dguR/DEol2IHMB8GA1UdIwQY MBaAFKvBkYwfRebsF9rKZ6etGTyvBLeyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84Zjg4ZGUtZGFlZC00OGQyLWI3MDEt NmJiNWZlNjY1NzUwLzEvaUxTZ0ltSktBNnNmY3ZoMkM1SDhNU2lYWWdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84Zjg4ZGUtZGFlZC00OGQyLWI3MDEtNmJiNWZlNjY1NzUw LzEvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbrXMA0G CSqGSIb3DQEBCwUAA4IBAQAMMUWVakhNXJqJRedcRPguxMh1cnx8VmcPv6opngtA wauslx/scPUDqXD3S5LeNyXHJn8DUMprwmLpxWTJaL3BPip06Mkc4gA3l24xwwep Tq2wMeb2mlLVOKGOjVrczwGwdNiSv3ieGfSqF/iuugnyYI7qZbhsQBfDeA+hrV9x mzdxVsYkt3epZaVnDkm3mWneYF6jkkDSrcUgJqdKNw9OnB4/EjG90kQbdNyA2rrc mZGyHRmfNeBVT0p5poioheqcjGo6newEWZC+HOzP9o/QUeGbEC8U03B9Oz6pKmo2 uKDm4mWghYQCDSNO22/RyLT6xawdYyEKTjGv2c9qyMlq -----END CERTIFICATE-----Generated at Sat Dec 6 16:51:58 2025 by rpki-client