This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Ahn8di1Mfuv_FTzb1VwtxPx0bGI.roa File: Ahn8di1Mfuv_FTzb1VwtxPx0bGI.roa (raw, json) Hash identifier: HBihyJ/InBoJ6hBsvzLdCihEWQ2oI0vxJqmk96Nt0dI= Subject key identifier: 02:19:FC:76:2D:4C:7E:EB:FF:15:3C:DB:D5:5C:2D:C4:FC:74:6C:62 Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Certificate serial: 019B224A8DB67D5D4FF2FC8CEE394464BF1E Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Ahn8di1Mfuv_FTzb1VwtxPx0bGI.roa Signing time: Mon 15 Dec 2025 13:54:29 +0000 ROA not before: Mon 15 Dec 2025 13:54:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 87.254.2.0/24 maxlen: 24 87.254.10.0/24 maxlen: 24 87.254.11.0/24 maxlen: 24 87.254.12.0/23 maxlen: 24 87.254.18.0/23 maxlen: 24 87.254.22.0/24 maxlen: 24 87.254.29.0/24 maxlen: 24 217.25.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:54:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:4a:8d:b6:7d:5d:4f:f2:fc:8c:ee:39:44:64:bf:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Validity Not Before: Dec 15 13:54:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0219fc762d4c7eebff153cdbd55c2dc4fc746c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:49:1f:c6:23:22:97:56:d6:8b:9b:d9:8f:68: a1:14:7a:f0:38:77:15:1e:02:0f:a7:ec:8e:7c:26: d5:da:a5:fa:c3:27:2a:93:04:a0:1b:bd:6d:81:d2: 9d:86:9a:02:14:12:80:d7:77:8e:ce:69:62:47:e6: 6c:91:3f:02:d9:09:c4:90:b1:e9:a0:9b:99:3c:cb: dd:c9:a9:1d:9d:aa:47:33:c9:5a:c7:f3:e3:42:08: 4b:61:7f:34:52:9b:46:a1:39:6f:3b:72:5f:9f:5c: 62:c8:9d:90:f8:c8:27:24:40:b6:4d:e9:f8:e4:88: b1:ad:46:d5:1e:7e:7d:b9:e4:41:64:c6:7f:ac:e8: 9f:70:fa:db:ba:a4:85:23:e1:39:d3:c6:c2:91:f5: 39:5b:f6:5b:fb:60:be:28:c8:0b:37:fc:22:e3:56: bb:c8:fa:cd:75:20:d8:90:3a:d3:5a:37:2a:0d:24: a2:ff:a9:3f:a2:02:77:42:c5:aa:6d:3e:4a:49:83: db:7f:d7:ed:28:7b:2d:2d:a9:37:dc:c9:25:1c:ca: b4:8b:b7:58:bd:1d:79:89:8a:58:ef:64:4f:bb:c4: a1:61:86:39:89:99:20:be:88:a8:c2:d2:bd:48:87: 73:09:41:87:2b:f3:e8:01:1c:72:7e:aa:0e:d2:c9: 16:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:19:FC:76:2D:4C:7E:EB:FF:15:3C:DB:D5:5C:2D:C4:FC:74:6C:62 X509v3 Authority Key Identifier: keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Ahn8di1Mfuv_FTzb1VwtxPx0bGI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.254.2.0/24 87.254.10.0-87.254.13.255 87.254.18.0/23 87.254.22.0/24 87.254.29.0/24 217.25.3.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:87:86:46:81:54:af:56:ba:ed:32:c1:22:53:0b:b4:68:28: f2:be:f6:a3:be:40:17:fb:87:a0:cf:8c:20:cb:27:2b:d8:ad: f5:02:94:de:13:25:e2:ad:6b:bc:dd:b9:da:d9:1c:56:5b:df: 4d:bc:21:ff:ec:c2:f8:6f:62:e0:d7:22:a8:bf:ea:8b:b6:23: f1:8c:fe:10:3e:48:99:3e:80:85:a0:eb:e5:2f:76:ef:03:72: 00:37:e9:d9:c4:a5:5e:53:86:90:29:16:75:97:bd:85:4e:50: 98:44:cb:ee:2a:fd:b0:c3:3a:8e:6a:e6:74:eb:27:2c:d5:14: d5:e0:b1:74:c8:f6:a6:86:f2:2a:87:b7:53:77:f4:52:71:ac: 7b:94:67:84:d8:5b:92:ac:e8:58:5d:c6:65:85:0d:06:c9:8c: bc:23:5c:cd:4d:c5:d0:23:32:ca:3f:8c:cf:11:7a:66:5c:73: a7:8c:2b:61:61:55:ec:3b:cb:3a:a2:8c:6a:0a:1d:42:8f:0e: 3b:fb:8e:cd:54:0c:85:de:a1:1d:91:8d:ba:a4:4d:e5:5e:9f: c9:66:57:39:03:8e:ec:62:e6:a1:78:e6:10:b2:9f:fa:f8:93: 92:c5:e1:64:5e:00:f5:26:65:44:da:e4:10:c0:34:cb:3f:43: cb:95:e7:45 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZsiSo22fV1P8vyM7jlEZL8eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1 OGRjZDQwHhcNMjUxMjE1MTM1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjE5ZmM3NjJkNGM3ZWViZmYxNTNjZGJkNTVjMmRjNGZjNzQ2YzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUkfxiMil1bWi5vZj2ihFHrwOHcV HgIPp+yOfCbV2qX6wycqkwSgG71tgdKdhpoCFBKA13eOzmliR+ZskT8C2QnEkLHp oJuZPMvdyakdnapHM8lax/PjQghLYX80UptGoTlvO3Jfn1xiyJ2Q+MgnJEC2Ten4 5IixrUbVHn59ueRBZMZ/rOifcPrbuqSFI+E508bCkfU5W/Zb+2C+KMgLN/wi41a7 yPrNdSDYkDrTWjcqDSSi/6k/ogJ3QsWqbT5KSYPbf9ftKHstLak33MklHMq0i7dY vR15iYpY72RPu8ShYYY5iZkgvoiowtK9SIdzCUGHK/PoARxyfqoO0skWRwIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFAIZ/HYtTH7r/xU829VcLcT8dGxiMB8GA1UdIwQY MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt NmZjZGNkNWFiNjYwLzEvQWhuOGRpMU1mdXZfRlR6YjFWd3R4UHgwYkdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAV/4CMAwD BAFX/goDBAFX/gwDBAFX/hIDBABX/hYDBABX/h0DBADZGQMwDQYJKoZIhvcNAQEL BQADggEBAByHhkaBVK9Wuu0ywSJTC7RoKPK+9qO+QBf7h6DPjCDLJyvYrfUClN4T JeKta7zdudrZHFZb3028If/swvhvYuDXIqi/6ou2I/GM/hA+SJk+gIWg6+Uvdu8D cgA36dnEpV5ThpApFnWXvYVOUJhEy+4q/bDDOo5q5nTrJyzVFNXgsXTI9qaG8iqH t1N39FJxrHuUZ4TYW5Ks6FhdxmWFDQbJjLwjXM1NxdAjMso/jM8RemZcc6eMK2Fh Vew7yzqijGoKHUKPDjv7js1UDIXeoR2RjbqkTeVen8lmVzkDjuxi5qF45hCyn/r4 k5LF4WReAPUmZUTa5BDANMs/Q8uV50U= -----END CERTIFICATE-----Generated at Mon Dec 15 17:21:40 2025 by rpki-client