This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/IH8GUDUUtI846g0Rs8joZvepzjk.roa File: IH8GUDUUtI846g0Rs8joZvepzjk.roa (raw, json) Hash identifier: 6K+vAOEWGXGlUcaWJKc3qjbd7YBtdEpAKxwmOZoDOME= Subject key identifier: 20:7F:06:50:35:14:B4:8F:38:EA:0D:11:B3:C8:E8:66:F7:A9:CE:39 Certificate issuer: /CN=8b73f83735c8ab10a0a8d44e170128f023846e79 Certificate serial: 019A7E68A13FC326C5A9F51D2341D9D231A9 Authority key identifier: 8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/IH8GUDUUtI846g0Rs8joZvepzjk.roa Signing time: Thu 13 Nov 2025 18:09:37 +0000 ROA not before: Thu 13 Nov 2025 18:09:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202100 IP address blocks: 185.46.244.0/22 maxlen: 22 2a01:8ba0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 21:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7e:68:a1:3f:c3:26:c5:a9:f5:1d:23:41:d9:d2:31:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b73f83735c8ab10a0a8d44e170128f023846e79 Validity Not Before: Nov 13 18:09:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=207f06503514b48f38ea0d11b3c8e866f7a9ce39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:56:fd:3f:2d:b0:a6:6d:42:7a:75:8e:ce:6a: b5:e0:c8:cc:a6:cd:3c:10:10:00:30:09:26:ad:8f: d7:14:50:b9:74:11:4e:2e:d4:e1:6c:15:ae:87:8b: 8f:7e:b9:11:e6:54:ff:b6:f4:34:c4:be:4f:1b:95: 81:9c:73:94:c1:d9:61:65:ca:ad:4b:58:15:15:ef: ab:a2:39:e2:6a:7e:a2:6e:43:02:5f:55:bb:6f:d9: 5c:18:e9:51:59:31:c2:b8:61:26:09:47:07:aa:de: 75:fa:78:a6:21:d2:46:2e:b6:ef:b9:9f:64:54:5b: 29:03:d9:5d:8b:c3:64:3d:fa:37:1b:e4:6a:6d:ec: dd:2c:75:e8:b6:1e:2b:e0:12:66:7e:c6:12:ba:75: a2:8b:5f:31:24:3b:2b:ff:11:fd:96:58:83:c8:fe: 9f:29:53:8c:d3:a3:5f:97:d7:76:11:02:56:de:d9: 92:c8:21:85:8d:2b:b1:b8:7a:16:9f:01:af:41:73: 74:10:93:48:75:ea:82:ee:b2:e5:1b:28:9a:5a:eb: b9:64:91:ac:44:1b:58:19:52:cf:f8:ab:eb:14:a9: 52:9b:d1:e8:d3:29:7e:97:a1:0e:a7:8a:47:00:2b: ec:81:6f:21:cb:69:6b:6d:86:a7:ce:54:d6:ac:f5: 22:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7F:06:50:35:14:B4:8F:38:EA:0D:11:B3:C8:E8:66:F7:A9:CE:39 X509v3 Authority Key Identifier: keyid:8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/IH8GUDUUtI846g0Rs8joZvepzjk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.46.244.0/22 IPv6: 2a01:8ba0::/29 Signature Algorithm: sha256WithRSAEncryption 14:84:ba:82:dc:a6:ab:72:ab:02:ef:a2:10:92:4b:90:1f:c2: 1f:28:f5:01:4e:9e:3e:da:20:61:2e:28:2c:ed:df:1b:9b:19: 94:ae:80:56:c5:61:60:b8:b3:97:f9:7c:6d:af:fc:a9:2d:5c: a1:48:2f:91:64:9f:9d:4f:fb:07:2f:da:91:45:52:91:30:e9: ab:7c:fc:16:66:a3:91:32:e0:c7:f9:aa:1f:38:c2:44:c9:a6: fd:c2:70:2d:5c:15:91:7a:29:00:fa:73:26:6d:46:9c:02:05: f9:36:33:c7:71:f0:68:5f:bf:a6:9b:dd:2a:02:8d:71:81:1d: dc:d5:2c:ed:bc:40:c3:5e:c1:a0:89:08:b8:fb:a9:c8:32:69: 0c:60:8a:70:00:bc:53:26:fd:f7:2d:3a:70:49:14:85:95:e7: 02:6b:0f:ae:21:97:83:ab:c7:c5:99:4a:24:b5:52:cb:e3:45: 6a:7f:e3:02:4d:5a:22:0f:20:e3:97:8d:f2:ec:90:1f:c3:7a: 5f:8d:00:d7:37:0f:1b:32:63:d1:08:49:db:22:96:5a:fb:6e: 39:51:3a:53:54:de:9c:b5:28:64:0f:89:65:54:e4:c6:9d:e6: f4:5d:35:82:d6:3b:aa:c8:e9:2c:0c:3e:26:da:ba:04:3a:4a: 33:25:b9:4d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZp+aKE/wybFqfUdI0HZ0jGpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNzNmODM3MzVjOGFiMTBhMGE4ZDQ0ZTE3MDEyOGYwMjM4 NDZlNzkwHhcNMjUxMTEzMTgwOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDdmMDY1MDM1MTRiNDhmMzhlYTBkMTFiM2M4ZTg2NmY3YTljZTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVb9Py2wpm1CenWOzmq14MjMps08 EBAAMAkmrY/XFFC5dBFOLtThbBWuh4uPfrkR5lT/tvQ0xL5PG5WBnHOUwdlhZcqt S1gVFe+rojnian6ibkMCX1W7b9lcGOlRWTHCuGEmCUcHqt51+nimIdJGLrbvuZ9k VFspA9ldi8NkPfo3G+RqbezdLHXoth4r4BJmfsYSunWii18xJDsr/xH9lliDyP6f KVOM06Nfl9d2EQJW3tmSyCGFjSuxuHoWnwGvQXN0EJNIdeqC7rLlGyiaWuu5ZJGs RBtYGVLP+KvrFKlSm9Ho0yl+l6EOp4pHACvsgW8hy2lrbYanzlTWrPUi2QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCB/BlA1FLSPOOoNEbPI6Gb3qc45MB8GA1UdIwQY MBaAFItz+Dc1yKsQoKjUThcBKPAjhG55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTNQNE56WElxeENncU5ST0Z3RW84Q09FYm5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNzZhOTUtZjdhZS00NGI5LTlkOGQt NjVkZDdmNTJlNDZjLzEvSUg4R1VEVVV0STg0NmcwUnM4am9admVwemprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9lNzZhOTUtZjdhZS00NGI5LTlkOGQtNjVkZDdmNTJlNDZj LzEvaTNQNE56WElxeENncU5ST0Z3RW84Q09FYm5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuS70MA0E AgACMAcDBQMqAYugMA0GCSqGSIb3DQEBCwUAA4IBAQAUhLqC3KarcqsC76IQkkuQ H8IfKPUBTp4+2iBhLigs7d8bmxmUroBWxWFguLOX+Xxtr/ypLVyhSC+RZJ+dT/sH L9qRRVKRMOmrfPwWZqORMuDH+aofOMJEyab9wnAtXBWReikA+nMmbUacAgX5NjPH cfBoX7+mm90qAo1xgR3c1SztvEDDXsGgiQi4+6nIMmkMYIpwALxTJv33LTpwSRSF lecCaw+uIZeDq8fFmUoktVLL40Vqf+MCTVoiDyDjl43y7JAfw3pfjQDXNw8bMmPR CEnbIpZa+245UTpTVN6ctShkD4llVOTGneb0XTWC1juqyOksDD4m2roEOkozJblN -----END CERTIFICATE-----Generated at Mon Dec 15 06:24:27 2025 by rpki-client