This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/iI30nfDsBhExpS3xd7Ao_hR6634.roa File: iI30nfDsBhExpS3xd7Ao_hR6634.roa (raw, json) Hash identifier: Ri4PPxwNbTb8t+Vmf7x4SKgeY8qYnc9vjqMssowa560= Subject key identifier: 88:8D:F4:9D:F0:EC:06:11:31:A5:2D:F1:77:B0:28:FE:14:7A:EB:7E Certificate issuer: /CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699 Certificate serial: 019ACB6F6BFD5708939D1B5AB215E63A1529 Authority key identifier: F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/iI30nfDsBhExpS3xd7Ao_hR6634.roa Signing time: Fri 28 Nov 2025 17:07:48 +0000 ROA not before: Fri 28 Nov 2025 17:07:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216067 IP address blocks: 104.167.26.0/23 maxlen: 23 176.116.4.0/24 maxlen: 24 185.77.23.0/24 maxlen: 24 185.188.16.0/24 maxlen: 24 217.114.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:6f:6b:fd:57:08:93:9d:1b:5a:b2:15:e6:3a:15:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699 Validity Not Before: Nov 28 17:07:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=888df49df0ec061131a52df177b028fe147aeb7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:e6:55:fe:f3:15:9f:97:1c:34:d3:ab:6f: 1e:56:ca:6f:e4:d9:3b:a3:99:53:b8:e7:d2:fa:1e: 5b:7c:52:9b:73:4f:02:1d:93:74:bf:dd:fa:e4:55: b6:62:b8:4c:86:4a:93:66:01:50:60:36:62:f1:68: 16:3e:c7:aa:26:e3:8a:04:36:40:49:44:7a:e7:99: cc:a5:df:31:fc:71:a8:5b:c5:67:f6:90:cb:65:4e: e9:fe:0e:3d:9b:c5:88:b5:45:eb:5e:6e:0d:53:af: 1a:a8:5b:05:aa:a7:4c:31:03:9d:a2:06:b1:64:c1: 05:ba:e6:ee:fc:0a:fc:f8:07:87:66:b4:b7:cd:31: 12:8d:e9:22:39:2b:57:aa:1b:ab:33:ff:01:18:3d: 69:cb:2a:d3:d4:78:80:93:33:18:db:7f:7f:f3:5e: e1:c5:e4:17:f8:52:83:cd:ae:14:0e:8c:30:4c:1b: 4f:7e:a4:8d:94:e5:35:4f:e1:3d:74:89:a5:96:cf: 55:dd:0d:6d:27:da:ea:b6:cc:50:c0:42:74:93:dc: 1d:fd:a7:ba:c9:26:57:44:f3:af:31:72:f9:91:25: aa:93:6b:43:55:92:99:0f:3c:09:20:ec:70:32:79: a7:08:24:81:80:a2:de:a8:66:a4:e3:42:ba:06:13: 75:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8D:F4:9D:F0:EC:06:11:31:A5:2D:F1:77:B0:28:FE:14:7A:EB:7E X509v3 Authority Key Identifier: keyid:F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/iI30nfDsBhExpS3xd7Ao_hR6634.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.167.26.0/23 176.116.4.0/24 185.77.23.0/24 185.188.16.0/24 217.114.35.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:0e:2d:60:36:72:a4:09:9f:ae:0f:19:7e:8d:85:a8:8b:52: 87:80:f9:1d:62:62:81:76:80:1b:39:6e:6d:ed:16:20:c2:fe: ff:7a:07:9a:c2:79:03:77:00:ed:1a:0f:02:01:cb:a8:16:fe: 9c:34:aa:1a:0a:fa:26:21:1f:70:2c:74:6d:87:df:f8:26:50: b2:9c:e7:eb:2f:59:43:bf:5e:ce:af:c5:72:79:dd:35:48:6f: a5:cf:81:f8:66:cc:e9:d9:f7:2f:e9:91:64:68:ff:6b:43:85: 05:6d:4b:89:7f:f3:bc:b2:dd:87:20:f3:c9:f2:c0:b8:2c:90: 90:37:f8:4c:91:3a:14:38:4c:44:d0:ab:99:4f:f4:0d:2c:6d: af:7b:bb:8e:48:1a:52:06:2d:33:4e:24:34:b7:a3:75:fe:3f: c0:c7:95:f9:85:ac:df:b4:77:32:ba:e0:a4:5a:d1:5b:ff:b3: e0:6d:ab:4e:2d:f7:94:c5:eb:90:5c:ef:14:90:44:33:11:4f: b6:a1:d6:a9:dc:07:44:df:bd:4d:92:1c:f8:f1:41:fb:88:2b: cf:1d:ee:a2:d8:20:69:16:e8:71:4a:f5:7f:71:21:8c:79:b1: f8:e8:f6:84:7b:78:f1:b9:ee:7e:ca:11:cd:97:9f:0c:91:4d: 53:9c:50:10 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZrLb2v9VwiTnRtashXmOhUpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYzA2NDQ2MGVhNmQ1Y2ZkM2Y4OGRjMWNmNGVkMDc1MDJi YmI2OTkwHhcNMjUxMTI4MTcwNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODhkZjQ5ZGYwZWMwNjExMzFhNTJkZjE3N2IwMjhmZTE0N2FlYjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNzmVf7zFZ+XHDTTq28eVspv5Nk7 o5lTuOfS+h5bfFKbc08CHZN0v9365FW2YrhMhkqTZgFQYDZi8WgWPseqJuOKBDZA SUR655nMpd8x/HGoW8Vn9pDLZU7p/g49m8WItUXrXm4NU68aqFsFqqdMMQOdogax ZMEFuubu/Ar8+AeHZrS3zTESjekiOStXqhurM/8BGD1pyyrT1HiAkzMY239/817h xeQX+FKDza4UDowwTBtPfqSNlOU1T+E9dImlls9V3Q1tJ9rqtsxQwEJ0k9wd/ae6 ySZXRPOvMXL5kSWqk2tDVZKZDzwJIOxwMnmnCCSBgKLeqGak40K6BhN10QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFIiN9J3w7AYRMaUt8XewKP4Ueut+MB8GA1UdIwQY MBaAFPHAZEYOptXP0/iNwc9O0HUCu7aZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGNCa1JnNm0xY19ULUkzQnowN1FkUUs3dHBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mNDUwNmUtZmI4OC00OGE5LTgyODUt YzlhY2ZlM2YzMTIxLzEvaUkzMG5mRHNCaEV4cFMzeGQ3QW9faFI2NjM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9mNDUwNmUtZmI4OC00OGE5LTgyODUtYzlhY2ZlM2YzMTIx LzEvOGNCa1JnNm0xY19ULUkzQnowN1FkUUs3dHBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBaKcaAwQA sHQEAwQAuU0XAwQAubwQAwQA2XIjMA0GCSqGSIb3DQEBCwUAA4IBAQB6Di1gNnKk CZ+uDxl+jYWoi1KHgPkdYmKBdoAbOW5t7RYgwv7/egeawnkDdwDtGg8CAcuoFv6c NKoaCvomIR9wLHRth9/4JlCynOfrL1lDv17Or8Vyed01SG+lz4H4Zszp2fcv6ZFk aP9rQ4UFbUuJf/O8st2HIPPJ8sC4LJCQN/hMkToUOExE0KuZT/QNLG2ve7uOSBpS Bi0zTiQ0t6N1/j/Ax5X5hazftHcyuuCkWtFb/7PgbatOLfeUxeuQXO8UkEQzEU+2 odap3AdE371Nkhz48UH7iCvPHe6i2CBpFuhxSvV/cSGMebH46PaEe3jxue5+yhHN l58MkU1TnFAQ -----END CERTIFICATE-----Generated at Sat Dec 6 11:04:09 2025 by rpki-client