This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/nTJZbGV07OWGNZmbwc1LGVQ63fM.roa File: nTJZbGV07OWGNZmbwc1LGVQ63fM.roa (raw, json) Hash identifier: Ay2/kwpGOcUty9flUCNF+CVVvZB1+h5BADzDbDHTjKE= Subject key identifier: 9D:32:59:6C:65:74:EC:E5:86:35:99:9B:C1:CD:4B:19:54:3A:DD:F3 Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Certificate serial: 019B1B7FF6CC1C03B9E3A487E1776C25B9B6 Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/nTJZbGV07OWGNZmbwc1LGVQ63fM.roa Signing time: Sun 14 Dec 2025 06:15:29 +0000 ROA not before: Sun 14 Dec 2025 06:15:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 87.248.132.0/24 maxlen: 24 87.248.134.0/24 maxlen: 24 87.248.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 09:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:7f:f6:cc:1c:03:b9:e3:a4:87:e1:77:6c:25:b9:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Validity Not Before: Dec 14 06:15:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9d32596c6574ece58635999bc1cd4b19543addf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ff:e8:0c:73:7a:63:a3:a7:d1:ed:84:02:bf: be:17:d8:29:ad:e8:c9:05:d1:1d:51:6d:55:22:0b: c6:c1:ae:99:20:ba:bd:8a:77:74:15:ec:6c:51:77: 3a:de:b1:f5:11:f3:52:cc:ea:7c:93:5d:8c:c3:f2: ee:ab:b3:6b:ac:a4:c4:8c:38:06:fc:a3:50:07:31: e0:3f:8f:04:c0:d8:5e:ad:fb:f8:97:36:20:53:d8: fc:85:58:e7:60:df:ab:ed:bb:9b:38:8b:f9:00:4d: fe:6f:26:2a:55:df:94:15:12:9d:52:9e:dd:ca:f2: fd:a0:c7:cd:a3:4b:9e:47:07:5e:cd:6c:48:8f:c7: 9c:bd:32:1c:13:14:47:e0:a1:af:a9:b4:fd:a7:16: ee:a3:43:a1:3c:36:8b:71:e1:95:d9:1e:2f:47:a5: 23:b3:07:dc:96:1f:09:72:e7:76:64:9c:ba:d0:c5: c4:49:03:1d:69:25:2f:ec:e7:22:00:b9:45:7a:c2: 64:b6:05:f6:1f:9c:d7:23:a2:2b:ac:20:b8:e7:2d: 25:a8:47:cd:27:0a:54:92:c2:50:e2:fa:ce:38:ad: a7:51:c0:e2:3c:b3:0a:1e:a3:ee:2d:b8:dd:e3:8a: 0b:0a:ba:24:b2:76:ae:42:a1:69:a2:7f:48:0b:f0: 49:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:32:59:6C:65:74:EC:E5:86:35:99:9B:C1:CD:4B:19:54:3A:DD:F3 X509v3 Authority Key Identifier: keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/nTJZbGV07OWGNZmbwc1LGVQ63fM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.248.132.0/24 87.248.134.0/24 87.248.143.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:8d:5c:5e:67:65:1c:46:00:c2:81:c6:77:5e:bd:e4:e3:c9: 9e:48:1b:66:32:82:66:ab:a7:35:2a:6a:87:6f:6d:4b:d2:93: 07:f4:a3:05:23:8b:00:0d:4b:07:d2:24:3f:8a:3a:ad:ff:84: b9:ae:66:1f:18:08:9d:f0:2d:4c:8b:82:67:88:fc:3f:a7:b2: 46:c6:48:b2:21:c5:14:7a:ec:04:83:22:48:fe:83:cb:d7:68: ba:bb:d1:f8:22:f6:a1:52:91:20:77:21:6f:c5:06:58:ca:b3: 70:d9:d1:a0:b5:06:eb:46:b8:f3:06:17:7c:13:40:07:2c:aa: 5d:ed:14:d8:c5:d9:44:c4:2d:ec:5f:c7:9e:71:a0:47:14:ab: f0:e2:5b:bb:b6:5e:a6:44:d7:f2:ce:1b:33:65:bf:f6:c1:4b: 66:c0:35:e2:a9:ea:a1:0a:3f:11:5d:77:ad:80:13:9f:26:ac: 36:6c:46:4e:ee:d8:4b:89:c8:66:ae:a0:ca:96:06:4b:1b:b6: c7:42:76:1d:ae:ae:1d:19:34:44:47:14:8e:bb:e0:18:82:a6: 7e:42:25:22:94:e9:56:12:b2:dd:4e:4d:27:bc:b0:b7:0b:84: e9:e5:14:dc:97:d3:e1:80:e9:fc:11:e8:c1:68:54:bf:db:f7: 7e:50:b4:a7 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsbf/bMHAO546SH4XdsJbm2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy ZmM4YjQwHhcNMjUxMjE0MDYxNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDMyNTk2YzY1NzRlY2U1ODYzNTk5OWJjMWNkNGIxOTU0M2FkZGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv/oDHN6Y6On0e2EAr++F9gprejJ BdEdUW1VIgvGwa6ZILq9ind0FexsUXc63rH1EfNSzOp8k12Mw/Luq7NrrKTEjDgG /KNQBzHgP48EwNherfv4lzYgU9j8hVjnYN+r7bubOIv5AE3+byYqVd+UFRKdUp7d yvL9oMfNo0ueRwdezWxIj8ecvTIcExRH4KGvqbT9pxbuo0OhPDaLceGV2R4vR6Uj swfclh8Jcud2ZJy60MXESQMdaSUv7OciALlFesJktgX2H5zXI6IrrCC45y0lqEfN JwpUksJQ4vrOOK2nUcDiPLMKHqPuLbjd44oLCroksnauQqFpon9IC/BJhwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJ0yWWxldOzlhjWZm8HNSxlUOt3zMB8GA1UdIwQY MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct ZDNiMzhjZTlkYzM0LzEvblRKWmJHVjA3T1dHTlptYndjMUxHVlE2M2ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0 LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAV/iEAwQA V/iGAwQAV/iPMA0GCSqGSIb3DQEBCwUAA4IBAQA+jVxeZ2UcRgDCgcZ3Xr3k48me SBtmMoJmq6c1KmqHb21L0pMH9KMFI4sADUsH0iQ/ijqt/4S5rmYfGAid8C1Mi4Jn iPw/p7JGxkiyIcUUeuwEgyJI/oPL12i6u9H4IvahUpEgdyFvxQZYyrNw2dGgtQbr RrjzBhd8E0AHLKpd7RTYxdlExC3sX8eecaBHFKvw4lu7tl6mRNfyzhszZb/2wUtm wDXiqeqhCj8RXXetgBOfJqw2bEZO7thLichmrqDKlgZLG7bHQnYdrq4dGTRERxSO u+AYgqZ+QiUilOlWErLdTk0nvLC3C4Tp5RTcl9PhgOn8EejBaFS/2/d+ULSn -----END CERTIFICATE-----Generated at Mon Dec 15 17:21:40 2025 by rpki-client