This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/iXKePU1MhfMj_Ffi0i3iTBdPQkI.roa File: iXKePU1MhfMj_Ffi0i3iTBdPQkI.roa (raw, json) Hash identifier: bDo44FzoFFr9RyRvLSrFxMRFhrYySuyVvMJPoVIhUAM= Subject key identifier: 89:72:9E:3D:4D:4C:85:F3:23:FC:57:E2:D2:2D:E2:4C:17:4F:42:42 Certificate issuer: /CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4 Certificate serial: 019B024D28C34C0060B18E01DFB139FF38D7 Authority key identifier: C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/iXKePU1MhfMj_Ffi0i3iTBdPQkI.roa Signing time: Tue 09 Dec 2025 08:49:29 +0000 ROA not before: Tue 09 Dec 2025 08:49:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55154 IP address blocks: 194.33.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 20:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:4d:28:c3:4c:00:60:b1:8e:01:df:b1:39:ff:38:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4 Validity Not Before: Dec 9 08:49:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=89729e3d4d4c85f323fc57e2d22de24c174f4242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7b:e2:01:a8:4b:72:0c:e2:47:26:0b:89:ed: dc:e4:95:7c:87:1f:01:c1:89:3c:3e:7e:59:14:48: 71:f2:93:de:2e:ad:74:12:f0:5f:e0:54:76:46:c0: a7:ad:43:a9:40:9d:90:5e:8f:f4:88:28:98:f9:df: 5a:25:23:48:bc:bd:8a:ef:3b:2b:9d:fa:9c:9b:fd: 5a:2a:c4:23:4a:0e:f4:6d:39:41:40:7d:a9:e2:24: 4c:0c:83:3f:1d:16:34:ac:2f:91:56:0e:37:fa:67: de:18:f1:59:a6:2a:1e:16:ac:ec:ef:eb:0e:cc:7b: 89:77:6e:65:b8:68:6d:cd:e9:50:11:22:98:d8:98: ea:ce:39:6c:73:b3:f7:30:be:0b:06:c2:ed:fe:c6: aa:48:74:1c:70:ca:cd:9f:3b:4a:d1:a7:00:a7:68: bb:b1:34:01:9a:5c:19:8e:4f:6c:1c:da:8a:d9:ef: 68:b9:c0:41:d4:a4:fb:47:2a:be:ea:5d:dc:39:b6: fb:ce:46:06:2e:3a:f9:34:1e:db:61:b1:4e:11:a0: d9:69:32:31:10:9c:e5:60:85:be:4a:6d:56:44:1c: 61:e4:29:1b:08:fb:ca:5f:f4:26:06:72:55:fe:3e: a1:51:4e:e6:f0:22:63:f4:e8:33:43:89:d3:2a:c3: 23:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:72:9E:3D:4D:4C:85:F3:23:FC:57:E2:D2:2D:E2:4C:17:4F:42:42 X509v3 Authority Key Identifier: keyid:C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/iXKePU1MhfMj_Ffi0i3iTBdPQkI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.28.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:df:d0:30:f3:50:35:32:63:70:6c:c6:cd:25:65:41:29:6f: ff:78:c5:6f:5f:9b:81:14:f5:e0:22:9f:77:7d:a2:7f:9a:b3: df:71:3e:c8:32:f0:81:ea:8f:28:57:06:08:8f:79:a6:fc:0e: fc:fb:e2:6a:19:16:71:60:27:72:c3:56:7d:c1:ed:0a:0e:dc: 80:71:c9:8e:a8:2e:2e:2e:e8:33:09:91:3f:ee:e1:6c:3a:70: e8:44:e4:d7:1d:a8:47:be:c9:d9:af:e6:dd:9b:11:5f:ab:09: e1:fe:ba:88:87:70:66:db:23:e9:97:ee:c5:46:b0:6a:dc:cb: 85:1c:f8:0d:5f:35:8b:e4:45:d6:bd:7f:2e:20:28:73:17:26: 20:97:05:aa:77:8c:e6:96:0a:3e:be:81:84:38:dc:f5:c4:34: 7f:7c:2e:59:f9:16:56:f7:ea:93:51:05:59:16:96:ff:16:88: ae:f6:55:08:4a:b8:ef:36:2d:09:67:b1:f4:ea:fb:d5:b1:ac: 96:2b:00:2b:7e:ef:83:48:0f:16:89:ce:8c:2f:0b:33:a0:43: 58:b8:89:64:63:56:fd:cf:f5:b7:58:cc:5d:78:4c:2c:2f:b1: 21:52:11:e7:1b:87:c2:d0:12:c3:91:bc:03:62:c5:e4:e6:b4: 2f:86:c9:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsCTSjDTABgsY4B37E5/zjXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYmE1MGZjYTMzYjE4MGQ2ODQzNmU3ZWYwY2JmNjkwNGJh ZjQ1ZDQwHhcNMjUxMjA5MDg0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTcyOWUzZDRkNGM4NWYzMjNmYzU3ZTJkMjJkZTI0YzE3NGY0MjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnviAahLcgziRyYLie3c5JV8hx8B wYk8Pn5ZFEhx8pPeLq10EvBf4FR2RsCnrUOpQJ2QXo/0iCiY+d9aJSNIvL2K7zsr nfqcm/1aKsQjSg70bTlBQH2p4iRMDIM/HRY0rC+RVg43+mfeGPFZpioeFqzs7+sO zHuJd25luGhtzelQESKY2Jjqzjlsc7P3ML4LBsLt/saqSHQccMrNnztK0acAp2i7 sTQBmlwZjk9sHNqK2e9oucBB1KT7Ryq+6l3cObb7zkYGLjr5NB7bYbFOEaDZaTIx EJzlYIW+Sm1WRBxh5CkbCPvKX/QmBnJV/j6hUU7m8CJj9OgzQ4nTKsMjCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIlynj1NTIXzI/xX4tIt4kwXT0JCMB8GA1UdIwQY MBaAFMC6UPyjOxgNaENufvDL9pBLr0XUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0xwUV9LTTdHQTFvUTI1LThNdjJrRXV2UmRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80MjJhNGMtODM5NC00NmI0LWFhMTgt ZDFmYmU1YTkxZDcwLzEvaVhLZVBVMU1oZk1qX0ZmaTBpM2lUQmRQUWtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80MjJhNGMtODM5NC00NmI0LWFhMTgtZDFmYmU1YTkxZDcw LzEvd0xwUV9LTTdHQTFvUTI1LThNdjJrRXV2UmRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiEcMA0G CSqGSIb3DQEBCwUAA4IBAQBt39Aw81A1MmNwbMbNJWVBKW//eMVvX5uBFPXgIp93 faJ/mrPfcT7IMvCB6o8oVwYIj3mm/A78++JqGRZxYCdyw1Z9we0KDtyAccmOqC4u LugzCZE/7uFsOnDoROTXHahHvsnZr+bdmxFfqwnh/rqIh3Bm2yPpl+7FRrBq3MuF HPgNXzWL5EXWvX8uIChzFyYglwWqd4zmlgo+voGEONz1xDR/fC5Z+RZW9+qTUQVZ Fpb/Foiu9lUISrjvNi0JZ7H06vvVsayWKwArfu+DSA8Wic6MLwszoENYuIlkY1b9 z/W3WMxdeEwsL7EhUhHnG4fC0BLDkbwDYsXk5rQvhsmi -----END CERTIFICATE-----Generated at Tue Dec 23 05:18:59 2025 by rpki-client