This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8ba3T2Ce9P0KSalPYgRXYSAoJT8.roa File: 8ba3T2Ce9P0KSalPYgRXYSAoJT8.roa (raw, json) Hash identifier: /8LsK68KxOGxn64hy1cWz/drzdi3Xh3XScA82kGMSsk= Subject key identifier: F1:B6:B7:4F:60:9E:F4:FD:0A:49:A9:4F:62:04:57:61:20:28:25:3F Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019AC9115B990840CA0BE53E5661937D11A2 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8ba3T2Ce9P0KSalPYgRXYSAoJT8.roa Signing time: Fri 28 Nov 2025 06:05:49 +0000 ROA not before: Fri 28 Nov 2025 06:05:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211443 IP address blocks: 178.215.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:11:5b:99:08:40:ca:0b:e5:3e:56:61:93:7d:11:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Nov 28 06:05:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f1b6b74f609ef4fd0a49a94f620457612028253f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ef:8c:cc:e2:b4:1f:52:c0:14:25:77:16:33: c7:4b:02:f9:ae:7b:01:b8:13:0c:f2:ef:25:16:d9: 18:0b:9e:08:cd:81:38:27:2f:c7:56:d8:c7:d5:78: 87:ce:79:0b:aa:35:ea:cc:ca:43:71:50:9e:ea:8a: 44:c3:dd:97:10:9d:4d:2d:9c:69:34:c0:55:f0:1b: 52:36:b3:6a:02:6f:bd:5b:9a:f6:f5:a0:45:92:3d: 8a:ba:a2:71:3e:c4:42:14:ad:3f:14:16:c1:d0:00: 14:9f:a5:09:75:01:d9:1f:f1:76:2a:49:aa:a3:fa: b2:98:c5:01:4b:13:2e:42:d5:cc:40:1b:6c:c5:fa: c6:c4:21:68:1b:2f:ea:c8:ae:d5:5d:b7:be:22:d7: 55:91:19:f1:a4:a2:26:ba:2e:3b:a9:64:9e:80:15: cd:ef:d2:f4:1e:4e:55:57:50:aa:32:67:d9:82:45: 26:d6:29:6f:71:57:8d:59:41:9e:82:49:4b:50:48: bc:97:cb:db:72:bd:9c:46:cd:d7:f8:ee:a6:80:4b: dd:22:67:8f:39:ed:f0:93:bd:38:08:2f:7f:7e:7e: 99:07:a9:2a:2a:ce:bf:25:d9:f4:81:0d:2e:2d:b8: 51:ab:bc:ab:38:cf:51:44:2b:af:39:aa:8f:dd:b2: f9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B6:B7:4F:60:9E:F4:FD:0A:49:A9:4F:62:04:57:61:20:28:25:3F X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8ba3T2Ce9P0KSalPYgRXYSAoJT8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.215.227.0/24 Signature Algorithm: sha256WithRSAEncryption 45:a1:ed:14:26:29:bb:5e:6a:ae:b2:b8:af:28:1e:7f:31:4e: e9:d3:87:20:00:66:e0:30:65:3e:c2:05:d1:8e:95:09:a1:57: 1d:f3:51:46:97:a1:b2:f1:dd:59:75:9b:cb:c4:05:e5:61:01: f4:7d:b7:57:1d:0c:50:96:28:b7:5e:7d:cb:74:49:bd:1f:40: 92:92:0b:a8:46:62:cf:30:d2:55:48:f1:80:69:0b:03:9d:54: 46:7d:40:2b:f0:81:ed:ca:83:c2:34:20:df:86:29:c1:5a:f3: 92:e3:d3:6b:b7:b8:bb:71:c5:ac:cf:ab:47:e9:fe:14:49:aa: 3b:3e:91:16:d6:0d:db:e1:22:62:4f:c4:3c:79:6f:76:80:5f: b7:fb:8a:70:c9:3c:e9:6e:f0:3c:ac:e7:05:12:b9:3c:10:a2: 38:04:10:9c:f8:a9:fa:8c:d4:10:19:63:a7:ee:94:3c:12:92: 1e:bb:53:24:65:11:79:65:2d:cb:8e:7a:8a:9b:1b:cf:bb:40: 6c:9a:ec:66:e2:0f:a3:d1:d3:13:1a:c9:92:f5:9d:c6:2b:97: 38:f0:f8:c7:13:86:d0:c2:43:95:6f:db:55:66:ca:1e:2e:1e: 92:4c:43:dc:73:22:84:ae:78:23:0d:17:6d:df:7f:a4:ec:bb: 40:31:17:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrJEVuZCEDKC+U+VmGTfRGiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMTI4MDYwNTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWI2Yjc0ZjYwOWVmNGZkMGE0OWE5NGY2MjA0NTc2MTIwMjgyNTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq++MzOK0H1LAFCV3FjPHSwL5rnsB uBMM8u8lFtkYC54IzYE4Jy/HVtjH1XiHznkLqjXqzMpDcVCe6opEw92XEJ1NLZxp NMBV8BtSNrNqAm+9W5r29aBFkj2KuqJxPsRCFK0/FBbB0AAUn6UJdQHZH/F2Kkmq o/qymMUBSxMuQtXMQBtsxfrGxCFoGy/qyK7VXbe+ItdVkRnxpKImui47qWSegBXN 79L0Hk5VV1CqMmfZgkUm1ilvcVeNWUGegklLUEi8l8vbcr2cRs3X+O6mgEvdImeP Oe3wk704CC9/fn6ZB6kqKs6/Jdn0gQ0uLbhRq7yrOM9RRCuvOaqP3bL5PwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPG2t09gnvT9CkmpT2IEV2EgKCU/MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvOGJhM1QyQ2U5UDBLU2FsUFlnUlhZU0FvSlQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstfjMA0G CSqGSIb3DQEBCwUAA4IBAQBFoe0UJim7XmqusrivKB5/MU7p04cgAGbgMGU+wgXR jpUJoVcd81FGl6Gy8d1ZdZvLxAXlYQH0fbdXHQxQlii3Xn3LdEm9H0CSkguoRmLP MNJVSPGAaQsDnVRGfUAr8IHtyoPCNCDfhinBWvOS49Nrt7i7ccWsz6tH6f4USao7 PpEW1g3b4SJiT8Q8eW92gF+3+4pwyTzpbvA8rOcFErk8EKI4BBCc+Kn6jNQQGWOn 7pQ8EpIeu1MkZRF5ZS3LjnqKmxvPu0Bsmuxm4g+j0dMTGsmS9Z3GK5c48PjHE4bQ wkOVb9tVZsoeLh6STEPccyKErngjDRdt33+k7LtAMRdl -----END CERTIFICATE-----Generated at Fri Nov 28 08:37:07 2025 by rpki-client