This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/12pFkbgb1TbVNtQfqEKZmvafrVo.roa File: 12pFkbgb1TbVNtQfqEKZmvafrVo.roa (raw, json) Hash identifier: uoAqTNsmcXIKsyE91SNcKGdygNa2QtaETtgeRGxOGh8= Subject key identifier: D7:6A:45:91:B8:1B:D5:36:D5:36:D4:1F:A8:42:99:9A:F6:9F:AD:5A Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019AB0FC98CE680655CE595D21D95E61EF59 Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/12pFkbgb1TbVNtQfqEKZmvafrVo.roa Signing time: Sun 23 Nov 2025 13:52:15 +0000 ROA not before: Sun 23 Nov 2025 13:52:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 207.244.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b0:fc:98:ce:68:06:55:ce:59:5d:21:d9:5e:61:ef:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Nov 23 13:52:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d76a4591b81bd536d536d41fa842999af69fad5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e6:4d:fa:9a:10:0c:1d:a1:56:fb:cb:e1:1a: f3:41:90:f5:79:7b:74:c6:e8:b9:6f:40:94:7f:48: 08:3f:03:e0:de:1b:41:d0:bf:f6:18:ac:ec:89:d4: 0e:50:b7:54:ba:98:70:d3:43:48:c4:61:32:16:47: d5:ce:ab:cb:c3:e6:09:fb:6d:67:a0:20:0b:07:df: a0:c4:93:20:08:34:f2:87:c4:94:68:6d:02:b1:c4: 9c:6a:a0:7a:07:26:f3:a3:75:af:53:24:51:74:a5: 7b:94:3f:ed:bd:6b:66:c5:48:e5:56:42:63:6d:e7: e4:13:19:f9:ec:11:f7:61:45:5c:d5:f4:ba:24:c6: fc:89:49:7f:24:ed:c0:89:25:05:ba:2c:20:be:3e: 41:07:e3:b7:4d:d0:0f:0a:f9:ba:e8:98:2c:df:68: 86:0b:2c:bf:62:7e:82:8e:2b:a0:1f:85:62:3b:86: af:c0:63:20:d8:2b:d0:42:1c:7d:27:77:47:82:c0: 57:ff:81:3e:e3:5c:22:1f:a1:93:1d:a2:ce:1c:e2: f0:c5:8f:f0:91:7f:56:ea:ee:e6:b1:a4:37:d7:11: b6:3f:22:1e:b8:09:84:f1:f4:04:5a:2e:f5:46:66: f9:a4:2b:ac:58:36:fa:2f:f4:07:9f:d1:1b:9d:25: dd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:6A:45:91:B8:1B:D5:36:D5:36:D4:1F:A8:42:99:9A:F6:9F:AD:5A X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/12pFkbgb1TbVNtQfqEKZmvafrVo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.244.198.0/24 Signature Algorithm: sha256WithRSAEncryption 84:84:ca:2e:63:6d:5a:49:79:9a:14:41:b5:61:25:c2:87:3e: 30:53:b3:0e:80:71:eb:e7:c1:a1:eb:0f:23:8d:bf:e5:7c:42: f4:03:62:2e:c2:c8:4e:63:30:50:25:e3:b8:07:cb:85:47:cc: 53:0d:92:ab:a9:39:67:2b:27:52:2c:a4:66:b8:cb:85:7a:3e: 31:75:de:70:61:46:6b:15:19:62:f9:b6:d5:74:a3:d3:98:16: 41:c7:fe:ad:8b:44:53:86:ad:d2:09:34:bc:f9:f8:66:3d:5b: 03:00:e0:37:50:50:94:3b:17:e5:ee:f1:d8:03:04:1e:9c:71: d2:b7:8c:62:95:87:40:bc:97:40:de:90:ca:ee:37:3c:65:d1: c8:76:4c:ba:c4:93:02:ad:5c:9a:27:91:40:cb:a1:29:7b:56: 1e:ec:8a:be:43:dd:2a:23:2c:8c:b4:b4:70:4f:ef:11:8f:a6: 8a:c7:06:03:3a:6d:73:d0:63:ef:22:c2:d2:f8:86:9c:53:d0: c3:bf:af:2f:b9:da:56:5c:bc:bd:ac:88:1f:10:81:90:0a:36: 5f:de:6a:41:c0:35:0a:68:18:3d:de:aa:da:e3:9c:b5:02:d4: 55:05:fa:86:8c:08:26:7a:a3:b3:f5:84:d5:e4:c2:77:17:8b: 1d:67:ff:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqw/JjOaAZVzlldIdleYe9ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjUxMTIzMTM1MjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzZhNDU5MWI4MWJkNTM2ZDUzNmQ0MWZhODQyOTk5YWY2OWZhZDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eZN+poQDB2hVvvL4RrzQZD1eXt0 xui5b0CUf0gIPwPg3htB0L/2GKzsidQOULdUuphw00NIxGEyFkfVzqvLw+YJ+21n oCALB9+gxJMgCDTyh8SUaG0CscScaqB6Bybzo3WvUyRRdKV7lD/tvWtmxUjlVkJj befkExn57BH3YUVc1fS6JMb8iUl/JO3AiSUFuiwgvj5BB+O3TdAPCvm66Jgs32iG Cyy/Yn6CjiugH4ViO4avwGMg2CvQQhx9J3dHgsBX/4E+41wiH6GTHaLOHOLwxY/w kX9W6u7msaQ31xG2PyIeuAmE8fQEWi71Rmb5pCusWDb6L/QHn9EbnSXdHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNdqRZG4G9U21TbUH6hCmZr2n61aMB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvMTJwRmtiZ2IxVGJWTnRRZnFFS1ptdmFmclZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/TGMA0G CSqGSIb3DQEBCwUAA4IBAQCEhMouY21aSXmaFEG1YSXChz4wU7MOgHHr58Gh6w8j jb/lfEL0A2IuwshOYzBQJeO4B8uFR8xTDZKrqTlnKydSLKRmuMuFej4xdd5wYUZr FRli+bbVdKPTmBZBx/6ti0RThq3SCTS8+fhmPVsDAOA3UFCUOxfl7vHYAwQenHHS t4xilYdAvJdA3pDK7jc8ZdHIdky6xJMCrVyaJ5FAy6Epe1Ye7Iq+Q90qIyyMtLRw T+8Rj6aKxwYDOm1z0GPvIsLS+IacU9DDv68vudpWXLy9rIgfEIGQCjZf3mpBwDUK aBg93qra45y1AtRVBfqGjAgmeqOz9YTV5MJ3F4sdZ//C -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:29 2025 by rpki-client