This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/h2ciFwHBRByajg4A3C5BQnvL2O0.roa File: h2ciFwHBRByajg4A3C5BQnvL2O0.roa (raw, json) Hash identifier: ejWacPS5kszb6sTjATtpdEzyGWF31SZfA+pzMv0Tr6g= Subject key identifier: 87:67:22:17:01:C1:44:1C:9A:8E:0E:00:DC:2E:41:42:7B:CB:D8:ED Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f Certificate serial: 019B12F11BE660C03E0A2B2D329B949EF32C Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/h2ciFwHBRByajg4A3C5BQnvL2O0.roa Signing time: Fri 12 Dec 2025 14:22:29 +0000 ROA not before: Fri 12 Dec 2025 14:22:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12322 IP address blocks: 62.147.0.0/16 maxlen: 16 78.192.0.0/10 maxlen: 11 78.240.0.0/12 maxlen: 12 82.64.0.0/14 maxlen: 15 82.224.0.0/11 maxlen: 13 88.160.0.0/11 maxlen: 15 212.27.32.0/19 maxlen: 19 213.228.0.0/18 maxlen: 18 2a01:e00::/26 maxlen: 39 2a01:e08::/32 maxlen: 32 2a01:e08:100::/44 maxlen: 44 2a01:e08:500::/44 maxlen: 44 2a01:e0a:800::/37 maxlen: 45 2a01:e0a:1000::/37 maxlen: 45 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:f1:1b:e6:60:c0:3e:0a:2b:2d:32:9b:94:9e:f3:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f Validity Not Before: Dec 12 14:22:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8767221701c1441c9a8e0e00dc2e41427bcbd8ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:08:03:62:ff:30:44:0a:a3:9a:95:a6:3e:1d: 64:b6:43:eb:47:d0:8c:84:27:8f:1b:06:cc:fd:28: 31:ea:9e:a2:56:3c:e1:7f:85:02:16:48:00:61:fe: 04:8e:20:45:51:8d:89:80:72:9f:07:ba:9b:2d:a7: 83:8e:42:68:7f:91:70:28:d9:ce:d7:e4:95:27:61: 64:d8:95:44:1a:bc:81:dd:41:8f:4a:ee:c4:97:2e: 34:42:3c:e3:03:83:a5:e6:3b:65:4c:c6:9d:71:1f: 80:8b:7d:ee:8f:a0:9d:3a:e8:37:c5:e3:3e:d2:45: 16:96:30:f9:57:40:19:55:ef:17:d2:72:50:3d:82: 26:a6:d8:61:ac:cb:a2:6d:5d:ce:4f:14:9b:fd:bd: e6:16:ba:e4:c2:85:1c:bf:90:56:4e:da:90:0c:89: 70:a2:80:cc:c4:67:97:81:b9:90:64:ab:9e:70:c6: 7f:de:67:ab:11:3f:b4:64:e5:11:c4:32:b3:20:ac: e4:3a:16:c7:ce:ab:f7:17:d6:be:3c:69:36:03:45: 75:91:d0:46:5c:ee:4a:40:3c:eb:91:a4:08:f1:da: 8d:41:99:56:04:22:8f:43:e9:ee:1a:40:c9:6d:55: 35:9e:81:19:92:4f:94:bb:b9:83:b7:8c:4d:71:9f: 50:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:67:22:17:01:C1:44:1C:9A:8E:0E:00:DC:2E:41:42:7B:CB:D8:ED X509v3 Authority Key Identifier: keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/h2ciFwHBRByajg4A3C5BQnvL2O0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.147.0.0/16 78.192.0.0/10 82.64.0.0/14 82.224.0.0/11 88.160.0.0/11 212.27.32.0/19 213.228.0.0/18 IPv6: 2a01:e00::/26 Signature Algorithm: sha256WithRSAEncryption 4f:10:b5:56:ca:c5:7a:e4:39:96:fa:c4:35:a0:49:6f:cd:c4: 6f:5f:08:f3:0c:65:21:d0:91:68:3c:28:ed:e7:b1:5a:47:02: d8:a4:c3:9c:e4:61:f2:c6:73:71:a6:d2:c5:d4:77:72:08:08: 3d:ce:1b:95:1e:36:fe:0f:42:f1:f6:57:c9:ae:c4:2e:36:15: dd:97:b9:5d:cd:13:b5:19:0a:61:1a:d7:cc:2e:87:bf:94:3a: c4:39:6c:3a:7c:97:25:11:8a:d1:b0:59:47:6a:4f:33:7a:a8: ca:fb:fd:5d:05:ca:c3:9a:65:63:45:00:59:26:84:2b:07:ed: 17:ec:af:a8:63:b4:ad:13:65:8b:05:3d:a7:7a:c3:7b:a4:e2: 28:f2:9f:b1:db:4d:75:b3:bb:f2:96:04:11:a4:c9:f5:5a:7f: c0:4d:e3:08:e9:40:f2:46:ab:ca:11:ff:39:61:9f:c3:b2:a0: 03:e3:d2:f6:0a:82:86:ef:3a:cd:15:0a:2b:b8:63:f6:19:95: 54:02:46:30:e9:a8:12:de:ce:e9:ae:e2:70:d6:27:c3:08:e7: 7d:12:66:f7:59:9c:1d:d9:4b:36:ff:04:4e:3f:f1:2f:96:2a: c6:70:18:c3:dc:a7:74:8e:a7:45:48:79:00:ef:2b:be:6e:5f: a2:e8:02:10 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZsS8RvmYMA+CistMpuUnvMsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNGIzMjgxYjA4ZTZiNWVjMWZkZWIwZDA0NDA1MjhlZDkz NGRjM2YwHhcNMjUxMjEyMTQyMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzY3MjIxNzAxYzE0NDFjOWE4ZTBlMDBkYzJlNDE0MjdiY2JkOGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuggDYv8wRAqjmpWmPh1ktkPrR9CM hCePGwbM/Sgx6p6iVjzhf4UCFkgAYf4EjiBFUY2JgHKfB7qbLaeDjkJof5FwKNnO 1+SVJ2Fk2JVEGryB3UGPSu7Ely40QjzjA4Ol5jtlTMadcR+Ai33uj6CdOug3xeM+ 0kUWljD5V0AZVe8X0nJQPYImpthhrMuibV3OTxSb/b3mFrrkwoUcv5BWTtqQDIlw ooDMxGeXgbmQZKuecMZ/3merET+0ZOURxDKzIKzkOhbHzqv3F9a+PGk2A0V1kdBG XO5KQDzrkaQI8dqNQZlWBCKPQ+nuGkDJbVU1noEZkk+Uu7mDt4xNcZ9QVQIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFIdnIhcBwUQcmo4OANwuQUJ7y9jtMB8GA1UdIwQY MBaAFJ5LMoGwjmtewf3rDQRAUo7ZNNw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGIt NmIyZDQ2OTI0YzZmLzEvaDJjaUZ3SEJSQnlhamc0QTNDNUJRbnZMMk8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGItNmIyZDQ2OTI0YzZm LzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDArBAIAATAlAwMAPpMDAwZO wAMDAlJAAwMFUuADAwVYoAMEBdQbIAMEBtXkADANBAIAAjAHAwUGKgEOADANBgkq hkiG9w0BAQsFAAOCAQEATxC1VsrFeuQ5lvrENaBJb83Eb18I8wxlIdCRaDwo7eex WkcC2KTDnORh8sZzcabSxdR3cggIPc4blR42/g9C8fZXya7ELjYV3Ze5Xc0TtRkK YRrXzC6Hv5Q6xDlsOnyXJRGK0bBZR2pPM3qoyvv9XQXKw5plY0UAWSaEKwftF+yv qGO0rRNliwU9p3rDe6TiKPKfsdtNdbO78pYEEaTJ9Vp/wE3jCOlA8karyhH/OWGf w7KgA+PS9gqChu86zRUKK7hj9hmVVAJGMOmoEt7O6a7icNYnwwjnfRJm91mcHdlL Nv8ETj/xL5YqxnAYw9yndI6nRUh5AO8rvm5fougCEA== -----END CERTIFICATE-----Generated at Tue Dec 16 13:38:19 2025 by rpki-client