This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/iI0xJWiiKKg47j1BbOpuFVTDI4Q.roa File: iI0xJWiiKKg47j1BbOpuFVTDI4Q.roa (raw, json) Hash identifier: yH7jkiJqUFQwZGfRfwZf6K3F352BuafwDzi8n2IlGMk= Subject key identifier: 88:8D:31:25:68:A2:28:A8:38:EE:3D:41:6C:EA:6E:15:54:C3:23:84 Certificate issuer: /CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea Certificate serial: 019AE95966B18BE3C90DFF67135084A2D8AB Authority key identifier: 65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/iI0xJWiiKKg47j1BbOpuFVTDI4Q.roa Signing time: Thu 04 Dec 2025 12:32:21 +0000 ROA not before: Thu 04 Dec 2025 12:32:21 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207567 IP address blocks: 213.165.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:59:66:b1:8b:e3:c9:0d:ff:67:13:50:84:a2:d8:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea Validity Not Before: Dec 4 12:32:21 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=888d312568a228a838ee3d416cea6e1554c32384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:50:24:2a:ff:cc:ef:c9:26:1d:1b:a2:ac:2e: f7:66:f5:07:81:c9:ec:da:a6:36:b1:19:d1:36:3b: f7:66:b9:64:f7:b6:06:1a:0d:00:05:29:7d:40:10: e6:5c:94:45:54:d6:c6:2a:cd:30:19:01:26:a7:1d: 98:9e:fe:44:76:0e:09:10:3a:4c:5f:0d:d7:9f:d5: 6d:4a:fb:88:76:c9:73:56:46:11:b0:52:05:74:4f: 98:f3:64:50:b3:32:36:db:32:6c:8b:9d:5c:d2:10: 3d:c8:89:9d:03:93:2c:a3:4b:4d:68:58:e9:eb:0f: 44:df:1a:a5:71:c6:76:89:88:68:a8:5f:a8:8e:ba: c2:30:69:ec:d6:9d:dc:42:65:ad:ce:b2:58:79:c6: 24:c3:f6:a2:39:09:7c:ea:b1:b9:03:43:86:59:8c: a1:16:4f:ac:ca:2d:a2:c1:30:cd:89:56:53:9f:c7: d3:09:7d:b7:bd:36:d6:73:f4:20:50:39:21:79:e0: 94:17:2c:5e:6f:90:56:05:b0:4b:94:ed:61:6f:cd: f8:76:88:d1:e2:a1:ff:09:d7:3b:ee:57:c7:5e:6f: 68:74:71:bc:59:1a:69:bd:d1:b0:27:f6:1d:8d:0b: a5:27:1c:23:b3:03:f0:a0:f4:0c:e7:8d:ac:05:d9: 15:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8D:31:25:68:A2:28:A8:38:EE:3D:41:6C:EA:6E:15:54:C3:23:84 X509v3 Authority Key Identifier: keyid:65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/iI0xJWiiKKg47j1BbOpuFVTDI4Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.165.53.0/24 Signature Algorithm: sha256WithRSAEncryption 92:a2:16:33:dd:4d:53:38:f8:3f:2c:94:42:44:cb:c9:ed:fe: f2:3d:e6:78:38:f0:11:92:ea:a1:c7:52:a5:bb:09:ac:9f:25: 3b:43:d8:23:90:0a:94:fd:1d:70:5e:02:b6:00:05:86:5d:d5: b2:fd:e9:6d:7e:34:c4:e6:4a:d8:68:6a:d8:bc:1e:06:b5:8c: 5b:26:0d:2f:43:d9:42:73:fc:46:2f:3f:80:dd:09:3f:0a:c9: a7:0a:42:59:b1:fa:6e:a2:5a:d9:d5:4d:02:3d:4e:78:3f:53: 85:a1:5b:9b:99:7d:df:f1:e5:fb:fc:9e:62:db:15:f8:13:9f: ea:2d:ad:66:27:0f:bb:1b:9c:b9:a5:b4:38:94:ab:af:c3:8a: 1d:b0:a1:0b:15:8b:78:60:c2:e2:c7:bf:e2:34:38:fb:08:b6: 77:e6:0a:b5:74:46:6f:f8:e0:af:3a:6f:f1:9d:ef:89:5a:1e: 14:ca:28:ca:a7:c6:52:e9:6c:39:2d:97:99:30:b9:34:27:51: 08:bc:5b:8c:f6:db:4a:7f:6a:c9:2f:0f:12:40:42:12:da:ba: e5:d9:c8:b7:8a:2d:11:3f:ca:31:34:dd:97:e8:1b:29:ea:c5: 04:c3:e8:c6:d3:b9:12:99:c0:32:8a:73:76:c6:68:63:2a:33: 74:c5:30:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrpWWaxi+PJDf9nE1CEotirMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZWE5M2Q4OGEyMDJkNTFkMzRkMmE5MDM1OTdlNzZiOGYx N2YwZWEwHhcNMjUxMjA0MTIzMjIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODhkMzEyNTY4YTIyOGE4MzhlZTNkNDE2Y2VhNmUxNTU0YzMyMzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFAkKv/M78kmHRuirC73ZvUHgcns 2qY2sRnRNjv3Zrlk97YGGg0ABSl9QBDmXJRFVNbGKs0wGQEmpx2Ynv5Edg4JEDpM Xw3Xn9VtSvuIdslzVkYRsFIFdE+Y82RQszI22zJsi51c0hA9yImdA5Mso0tNaFjp 6w9E3xqlccZ2iYhoqF+ojrrCMGns1p3cQmWtzrJYecYkw/aiOQl86rG5A0OGWYyh Fk+syi2iwTDNiVZTn8fTCX23vTbWc/QgUDkheeCUFyxeb5BWBbBLlO1hb834dojR 4qH/Cdc77lfHXm9odHG8WRppvdGwJ/YdjQulJxwjswPwoPQM542sBdkVLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIiNMSVooiioOO49QWzqbhVUwyOEMB8GA1UdIwQY MBaAFGXqk9iKIC1R000qkDWX52uPF/DqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWIt Y2UxYmJhNjkxYjM3LzEvaUkweEpXaWlLS2c0N2oxQmJPcHVGVlRESTRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWItY2UxYmJhNjkxYjM3 LzEvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1aU1MA0G CSqGSIb3DQEBCwUAA4IBAQCSohYz3U1TOPg/LJRCRMvJ7f7yPeZ4OPARkuqhx1Kl uwmsnyU7Q9gjkAqU/R1wXgK2AAWGXdWy/eltfjTE5krYaGrYvB4GtYxbJg0vQ9lC c/xGLz+A3Qk/CsmnCkJZsfpuolrZ1U0CPU54P1OFoVubmX3f8eX7/J5i2xX4E5/q La1mJw+7G5y5pbQ4lKuvw4odsKELFYt4YMLix7/iNDj7CLZ35gq1dEZv+OCvOm/x ne+JWh4UyijKp8ZS6Ww5LZeZMLk0J1EIvFuM9ttKf2rJLw8SQEIS2rrl2ci3ii0R P8oxNN2X6Bsp6sUEw+jG07kSmcAyinN2xmhjKjN0xTDk -----END CERTIFICATE-----Generated at Fri Dec 5 19:34:38 2025 by rpki-client