This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/icpbYI2uxA1b82qTrMRbv5qsWVs.roa File: icpbYI2uxA1b82qTrMRbv5qsWVs.roa (raw, json) Hash identifier: zWuEcTKWewUNm8kg2GFxVZw5vFrT/oZVdmxi/tEQES4= Subject key identifier: 89:CA:5B:60:8D:AE:C4:0D:5B:F3:6A:93:AC:C4:5B:BF:9A:AC:59:5B Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7 Certificate serial: 019AE3E8B08A660C0AEB1C1C031A7E9C9DA1 Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/icpbYI2uxA1b82qTrMRbv5qsWVs.roa Signing time: Wed 03 Dec 2025 11:11:08 +0000 ROA not before: Wed 03 Dec 2025 11:11:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49198 IP address blocks: 185.47.208.0/23 maxlen: 23 185.47.208.0/24 maxlen: 24 185.47.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:e8:b0:8a:66:0c:0a:eb:1c:1c:03:1a:7e:9c:9d:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7 Validity Not Before: Dec 3 11:11:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=89ca5b608daec40d5bf36a93acc45bbf9aac595b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:25:70:89:b1:26:b4:5a:d1:ff:84:13:28:38: 27:3c:0b:4b:59:ae:73:50:e1:9a:5d:fb:bf:2e:10: f5:e8:3d:26:69:be:83:aa:b3:97:31:a9:cd:d1:5d: 9c:4d:be:e0:4f:4b:a8:72:41:b1:86:cc:45:53:3d: 05:44:02:4f:8f:a7:47:3f:cd:12:b2:77:5d:ca:b5: 14:01:d8:5f:1c:c9:8d:42:73:87:3e:ec:56:8c:f7: 82:c0:90:cd:98:6c:2a:b4:a5:57:41:8c:47:f1:91: 6c:2b:fc:ff:5b:a6:f0:3e:cc:cd:f2:46:16:b7:b1: 1e:e4:22:bf:6a:ab:fa:e3:cc:ea:b5:00:2e:b8:e7: 8d:e2:af:f0:e9:8b:77:68:a6:70:61:0f:0a:c8:0b: 22:5c:d2:6d:12:af:28:bd:da:d3:1b:a6:a3:7e:02: f9:b6:c5:ba:03:8c:c0:bf:6c:ce:e0:2e:de:96:90: 09:6b:bd:67:b0:bc:53:8e:3e:a6:ab:78:58:6e:9d: 51:52:d1:b8:98:84:be:b0:90:b0:31:51:f7:d0:c6: b8:9f:26:e0:7f:40:ed:95:ce:95:9d:09:c8:17:f7: 2c:94:85:66:8e:74:28:c5:d2:b3:98:c6:88:cc:dc: 64:5c:a6:90:e7:8a:b7:78:cc:cd:f4:d0:9d:67:8b: 45:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CA:5B:60:8D:AE:C4:0D:5B:F3:6A:93:AC:C4:5B:BF:9A:AC:59:5B X509v3 Authority Key Identifier: keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/icpbYI2uxA1b82qTrMRbv5qsWVs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.47.208.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:bf:a8:6d:c2:50:73:9d:77:f7:68:f9:0a:b2:1f:40:8f:f8: bd:38:c5:77:da:04:20:14:3f:19:43:1e:ce:bc:d3:7d:d7:fa: cc:05:3b:e8:0d:d5:87:be:a8:ff:0d:fc:55:37:e3:4a:7f:de: c2:70:f6:e8:0c:51:51:d1:86:09:5b:23:79:e5:32:cf:78:b6: 18:b9:b5:65:86:10:a5:e1:ec:59:28:49:c5:2d:dd:3e:c1:02: b5:b0:67:14:10:85:9c:f3:7a:51:54:81:f0:f3:27:71:b3:c5: a7:39:0b:9c:07:1a:30:0c:a3:79:39:5b:f9:28:9a:b1:2f:af: 02:a0:bf:fc:ea:a9:96:2d:3e:b4:9d:73:ab:ec:69:ce:9b:93: 00:17:ca:84:c6:de:57:4a:2d:b0:4f:72:8c:97:48:37:7c:cb: 53:75:41:4f:b6:92:30:dc:3e:5c:66:e3:2a:f4:da:a7:de:cc: 35:b3:63:6c:54:12:d3:82:98:27:be:ad:ff:81:d5:7a:7c:14: fd:a3:f4:e9:28:01:b3:09:2f:8d:e4:8b:4a:b3:21:7c:cd:9f: ee:22:d8:3f:4b:72:35:09:09:58:65:49:59:f0:1d:16:02:b9: 13:08:8c:8a:e9:bc:81:1d:cb:93:f1:45:d7:e8:d3:a5:5e:f9: aa:99:c6:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrj6LCKZgwK6xwcAxp+nJ2hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5YjEzMjBmYmMyNGQ2ZjQzNjZjYjY0ZmNmNWVkMmQ3YjFi NmJkZjcwHhcNMjUxMjAzMTExMTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWNhNWI2MDhkYWVjNDBkNWJmMzZhOTNhY2M0NWJiZjlhYWM1OTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCVwibEmtFrR/4QTKDgnPAtLWa5z UOGaXfu/LhD16D0mab6DqrOXManN0V2cTb7gT0uockGxhsxFUz0FRAJPj6dHP80S snddyrUUAdhfHMmNQnOHPuxWjPeCwJDNmGwqtKVXQYxH8ZFsK/z/W6bwPszN8kYW t7Ee5CK/aqv648zqtQAuuOeN4q/w6Yt3aKZwYQ8KyAsiXNJtEq8ovdrTG6ajfgL5 tsW6A4zAv2zO4C7elpAJa71nsLxTjj6mq3hYbp1RUtG4mIS+sJCwMVH30Ma4nybg f0Dtlc6VnQnIF/cslIVmjnQoxdKzmMaIzNxkXKaQ54q3eMzN9NCdZ4tF0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFInKW2CNrsQNW/Nqk6zEW7+arFlbMB8GA1UdIwQY MBaAFOmxMg+8JNb0Nmy2T89e0textr33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUt ZDNlMjgwMGJkNjQwLzEvaWNwYllJMnV4QTFiODJxVHJNUmJ2NXFzV1ZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUtZDNlMjgwMGJkNjQw LzEvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuS/QMA0G CSqGSIb3DQEBCwUAA4IBAQBrv6htwlBznXf3aPkKsh9Aj/i9OMV32gQgFD8ZQx7O vNN91/rMBTvoDdWHvqj/DfxVN+NKf97CcPboDFFR0YYJWyN55TLPeLYYubVlhhCl 4exZKEnFLd0+wQK1sGcUEIWc83pRVIHw8ydxs8WnOQucBxowDKN5OVv5KJqxL68C oL/86qmWLT60nXOr7GnOm5MAF8qExt5XSi2wT3KMl0g3fMtTdUFPtpIw3D5cZuMq 9Nqn3sw1s2NsVBLTgpgnvq3/gdV6fBT9o/TpKAGzCS+N5ItKsyF8zZ/uItg/S3I1 CQlYZUlZ8B0WArkTCIyK6byBHcuT8UXX6NOlXvmqmcaD -----END CERTIFICATE-----Generated at Sat Dec 6 17:48:39 2025 by rpki-client