This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ieu2DgsIW2Au2_BN0t2MI4zFpGQ.roa File: Ieu2DgsIW2Au2_BN0t2MI4zFpGQ.roa (raw, json) Hash identifier: UipgRoiGbtCCLG5G5R8DBUOif3QOh3XqOxC/J9/ZfHw= Subject key identifier: 21:EB:B6:0E:0B:08:5B:60:2E:DB:F0:4D:D2:DD:8C:23:8C:C5:A4:64 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B12792F4B4B17EA00558B5EA5E2FE13D8 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ieu2DgsIW2Au2_BN0t2MI4zFpGQ.roa Signing time: Fri 12 Dec 2025 12:11:30 +0000 ROA not before: Fri 12 Dec 2025 12:11:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151704 IP address blocks: 45.95.3.0/24 maxlen: 24 87.121.98.0/24 maxlen: 24 178.215.239.0/24 maxlen: 24 194.113.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:79:2f:4b:4b:17:ea:00:55:8b:5e:a5:e2:fe:13:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Dec 12 12:11:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=21ebb60e0b085b602edbf04dd2dd8c238cc5a464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3c:15:b6:f1:f2:91:a5:61:a4:60:14:4d:81: 21:04:53:a4:cb:f5:65:ec:0d:5a:a5:45:17:9d:c6: 0f:b8:ce:54:5f:7a:1c:37:e1:56:19:4f:6c:61:8e: cb:ff:db:0e:be:00:9e:a8:6a:db:4e:8d:90:75:f0: 45:c8:32:9c:57:78:d1:7a:38:d5:fd:4c:fd:10:95: 6e:2a:64:9e:13:c7:0d:91:19:19:88:0f:fb:b3:3f: 19:4c:4c:e9:be:d0:e8:fd:6a:70:72:96:ec:7f:8f: 59:84:28:d8:59:6b:2b:bc:a6:a6:92:62:98:51:68: d4:99:1b:ad:85:96:08:14:4a:ac:a3:40:5a:b2:96: d0:64:d8:e1:19:57:91:85:1f:dd:a0:12:4a:1d:9b: e6:41:b9:d0:2b:90:e4:56:5f:26:ce:b8:bb:9f:aa: 47:25:a7:30:d8:95:8d:5b:a9:d9:29:66:b9:d4:ba: 92:ff:8a:fc:ee:df:8a:3d:83:48:00:35:cb:6d:21: 77:78:4e:03:ee:b8:54:b3:99:94:7e:bd:bf:05:c1: 81:0d:de:2d:09:95:16:1a:17:76:19:e7:06:e0:e0: 5e:04:7d:6f:39:73:2f:71:96:32:4d:8c:13:0b:7c: 7c:1b:a3:2f:3b:f3:e6:d2:cb:63:a0:ed:e5:71:17: 22:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EB:B6:0E:0B:08:5B:60:2E:DB:F0:4D:D2:DD:8C:23:8C:C5:A4:64 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ieu2DgsIW2Au2_BN0t2MI4zFpGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.3.0/24 87.121.98.0/24 178.215.239.0/24 194.113.39.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:6c:39:1b:56:2f:57:89:09:20:42:b2:f0:0b:25:28:f5:9b: 5f:ef:44:68:ac:e0:7d:70:61:44:49:e3:93:6e:85:07:88:4b: b5:bf:63:1d:a2:66:f0:cc:48:1d:fe:25:b0:35:00:fb:ca:af: 25:5d:1b:a2:cc:1e:fc:f2:6a:5b:b0:0f:e1:3a:c4:1c:3e:d0: 58:04:25:b7:b4:c2:b7:49:56:6e:5d:f7:73:cb:90:13:e2:92: 55:d4:8e:e3:2c:10:c9:12:d7:b3:dc:dd:dd:61:d6:6f:fa:bc: da:0f:26:8c:f4:be:e7:08:c9:6b:aa:b1:d9:14:2c:5d:04:35: 41:79:0e:2d:73:32:84:d4:62:af:b1:0a:c3:e4:ed:94:27:0e: 27:0e:59:96:dc:fe:b2:f5:b8:ba:66:5d:31:c4:ee:c5:ba:19: 05:94:bc:81:aa:6e:21:85:4b:8f:52:5f:a1:4a:d7:51:fb:8f: af:d1:ae:d4:99:5e:f7:d9:65:59:a9:76:8f:e3:a0:0a:09:cc: b5:98:41:d5:fd:c6:2a:64:36:46:aa:44:7c:4c:33:cb:fd:50: 8b:70:5b:19:dc:67:31:62:ae:b1:68:4d:a5:09:90:b1:c6:a2: 15:25:b5:99:4a:9b:99:c7:f0:d6:1c:b6:09:da:01:99:fe:e0: 99:14:75:92 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZsSeS9LSxfqAFWLXqXi/hPYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMjEyMTIxMTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWViYjYwZTBiMDg1YjYwMmVkYmYwNGRkMmRkOGMyMzhjYzVhNDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zwVtvHykaVhpGAUTYEhBFOky/Vl 7A1apUUXncYPuM5UX3ocN+FWGU9sYY7L/9sOvgCeqGrbTo2QdfBFyDKcV3jRejjV /Uz9EJVuKmSeE8cNkRkZiA/7sz8ZTEzpvtDo/Wpwcpbsf49ZhCjYWWsrvKamkmKY UWjUmRuthZYIFEqso0BaspbQZNjhGVeRhR/doBJKHZvmQbnQK5DkVl8mzri7n6pH Jacw2JWNW6nZKWa51LqS/4r87t+KPYNIADXLbSF3eE4D7rhUs5mUfr2/BcGBDd4t CZUWGhd2GecG4OBeBH1vOXMvcZYyTYwTC3x8G6MvO/Pm0stjoO3lcRcinwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCHrtg4LCFtgLtvwTdLdjCOMxaRkMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvSWV1MkRnc0lXMkF1Ml9CTjB0Mk1JNHpGcEdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALV8DAwQA V3liAwQAstfvAwQAwnEnMA0GCSqGSIb3DQEBCwUAA4IBAQB9bDkbVi9XiQkgQrLw CyUo9Ztf70RorOB9cGFESeOTboUHiEu1v2MdombwzEgd/iWwNQD7yq8lXRuizB78 8mpbsA/hOsQcPtBYBCW3tMK3SVZuXfdzy5AT4pJV1I7jLBDJEtez3N3dYdZv+rza DyaM9L7nCMlrqrHZFCxdBDVBeQ4tczKE1GKvsQrD5O2UJw4nDlmW3P6y9bi6Zl0x xO7FuhkFlLyBqm4hhUuPUl+hStdR+4+v0a7UmV732WVZqXaP46AKCcy1mEHV/cYq ZDZGqkR8TDPL/VCLcFsZ3GcxYq6xaE2lCZCxxqIVJbWZSpuZx/DWHLYJ2gGZ/uCZ FHWS -----END CERTIFICATE-----Generated at Sun Dec 14 17:01:10 2025 by rpki-client