This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/8I1eDtVP-BJjuty9df9iPdZO8og.roa File: 8I1eDtVP-BJjuty9df9iPdZO8og.roa (raw, json) Hash identifier: ctlsY4aLIdOpF6HpRrpJUTdFYrFZ6RVeAqzfNRH3jQ4= Subject key identifier: F0:8D:5E:0E:D5:4F:F8:12:63:BA:DC:BD:75:FF:62:3D:D6:4E:F2:88 Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Certificate serial: 019AE8F39675E667142986FF9062B68653CC Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/8I1eDtVP-BJjuty9df9iPdZO8og.roa Signing time: Thu 04 Dec 2025 10:41:08 +0000 ROA not before: Thu 04 Dec 2025 10:41:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213967 IP address blocks: 193.163.70.0/24 maxlen: 24 2a05:4144::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:f3:96:75:e6:67:14:29:86:ff:90:62:b6:86:53:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Validity Not Before: Dec 4 10:41:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f08d5e0ed54ff81263badcbd75ff623dd64ef288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:63:25:14:bd:76:07:9a:61:38:42:17:e6:5c: 83:19:dd:45:0b:00:6c:95:b9:75:79:b2:c7:57:e7: 25:99:8e:20:cf:2c:a9:72:57:e8:be:49:0c:a8:94: b2:81:21:e4:68:ac:66:b2:5e:2b:2e:ad:93:b2:d1: ea:38:26:83:d1:c7:49:ba:60:fc:57:4f:1c:92:9a: 15:3d:d3:b5:a5:3f:59:f9:be:65:f0:e0:70:7e:fd: 7f:46:40:db:39:7d:e5:8b:48:88:f0:b3:b6:ad:3f: 2d:48:c0:f7:a6:16:82:b9:5f:a8:29:9d:56:6a:2c: b5:24:01:56:ac:de:1c:84:02:a8:b5:19:c1:76:b0: aa:10:c6:5f:c3:f7:d2:b9:fe:90:3c:22:12:83:33: 3f:1e:54:01:5e:11:bc:ba:13:27:ec:43:5f:33:2a: 81:46:56:26:77:de:0e:6a:a2:33:86:d9:29:54:bf: 52:88:56:48:0b:6a:7f:44:a9:64:e9:c8:00:d6:12: cb:83:49:20:b8:41:35:1a:bd:24:7a:f3:20:0c:55: 64:d7:78:9c:41:ba:b5:45:98:ad:11:39:ec:a0:29: 96:72:41:69:02:80:ad:2b:bf:1e:14:59:dc:79:dc: 34:21:de:4e:18:36:34:8d:69:bf:ce:fe:99:98:26: ec:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:8D:5E:0E:D5:4F:F8:12:63:BA:DC:BD:75:FF:62:3D:D6:4E:F2:88 X509v3 Authority Key Identifier: keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/8I1eDtVP-BJjuty9df9iPdZO8og.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.70.0/24 IPv6: 2a05:4144::/32 Signature Algorithm: sha256WithRSAEncryption 89:0a:96:9b:1d:d2:6b:25:30:2f:0e:4a:c9:d7:8f:db:08:b8: 3e:37:c7:35:43:7f:b8:c5:24:3f:2c:23:7f:c1:dc:6e:0d:aa: 56:5b:1d:08:59:87:40:a4:e3:2c:bd:6d:54:d3:c6:39:a7:21: 20:ae:c2:e2:ff:80:49:53:90:24:12:90:ec:9c:90:a3:d9:db: e2:4f:29:33:22:40:eb:7d:b1:75:c7:84:a4:ca:de:bf:36:0d: a6:71:95:22:26:95:52:61:ab:15:b6:0e:08:4e:5e:ca:d6:01: d2:1b:e9:94:c4:46:06:43:26:38:37:24:47:2a:16:77:52:b4: 04:d0:ac:7c:55:1a:3e:cd:18:5a:84:bb:22:94:86:ab:75:e8: 1b:de:a5:53:49:a7:d8:ca:67:97:aa:f1:30:87:aa:95:e8:0d: 95:dd:12:79:99:50:bc:09:e0:61:96:52:05:81:4e:b6:22:77: 68:6a:f1:b9:a8:f9:75:cc:c2:29:0c:ce:e3:08:96:48:f6:b3: bf:31:0f:83:a5:fb:08:9d:76:28:17:cf:58:df:83:ea:10:e2: 55:27:0c:e3:d0:c8:ef:ec:03:9c:49:4b:3e:2c:ff:16:7e:d8: e0:67:9a:02:a4:f7:2f:64:70:e0:5a:2e:fc:3f:ac:de:7e:92: be:68:ab:b4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZro85Z15mcUKYb/kGK2hlPMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5 YzE4MGEwHhcNMjUxMjA0MTA0MTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDhkNWUwZWQ1NGZmODEyNjNiYWRjYmQ3NWZmNjIzZGQ2NGVmMjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymMlFL12B5phOEIX5lyDGd1FCwBs lbl1ebLHV+clmY4gzyypclfovkkMqJSygSHkaKxmsl4rLq2TstHqOCaD0cdJumD8 V08ckpoVPdO1pT9Z+b5l8OBwfv1/RkDbOX3li0iI8LO2rT8tSMD3phaCuV+oKZ1W aiy1JAFWrN4chAKotRnBdrCqEMZfw/fSuf6QPCISgzM/HlQBXhG8uhMn7ENfMyqB RlYmd94OaqIzhtkpVL9SiFZIC2p/RKlk6cgA1hLLg0kguEE1Gr0kevMgDFVk13ic Qbq1RZitETnsoCmWckFpAoCtK78eFFncedw0Id5OGDY0jWm/zv6ZmCbsBQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPCNXg7VT/gSY7rcvXX/Yj3WTvKIMB8GA1UdIwQY MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt ODg1ZTg0ZTc1MTJlLzEvOEkxZUR0VlAtQkpqdXR5OWRmOWlQZFpPOG9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwaNGMA0E AgACMAcDBQAqBUFEMA0GCSqGSIb3DQEBCwUAA4IBAQCJCpabHdJrJTAvDkrJ14/b CLg+N8c1Q3+4xSQ/LCN/wdxuDapWWx0IWYdApOMsvW1U08Y5pyEgrsLi/4BJU5Ak EpDsnJCj2dviTykzIkDrfbF1x4Skyt6/Ng2mcZUiJpVSYasVtg4ITl7K1gHSG+mU xEYGQyY4NyRHKhZ3UrQE0Kx8VRo+zRhahLsilIardegb3qVTSafYymeXqvEwh6qV 6A2V3RJ5mVC8CeBhllIFgU62IndoavG5qPl1zMIpDM7jCJZI9rO/MQ+DpfsInXYo F89Y34PqEOJVJwzj0Mjv7AOcSUs+LP8WftjgZ5oCpPcvZHDgWi78P6zefpK+aKu0 -----END CERTIFICATE-----Generated at Sun Dec 7 07:41:46 2025 by rpki-client