This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/0I9Mpxbw9rY2nv6567T9OnlePXE.roa File: 0I9Mpxbw9rY2nv6567T9OnlePXE.roa (raw, json) Hash identifier: FNX+egBOA1u/y8PX+8PnRV5U1slWHWqeF7gg1PyYBe8= Subject key identifier: D0:8F:4C:A7:16:F0:F6:B6:36:9E:FE:B9:EB:B4:FD:3A:79:5E:3D:71 Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019B4FBB3DA07CFFDF10159F024E3425A4DF Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/0I9Mpxbw9rY2nv6567T9OnlePXE.roa Signing time: Wed 24 Dec 2025 09:40:29 +0000 ROA not before: Wed 24 Dec 2025 09:40:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9457 IP address blocks: 212.66.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:bb:3d:a0:7c:ff:df:10:15:9f:02:4e:34:25:a4:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Dec 24 09:40:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d08f4ca716f0f6b6369efeb9ebb4fd3a795e3d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:59:f4:29:b0:2a:65:e8:f1:dd:1a:39:35:58: 08:87:48:ea:ea:44:c2:88:2b:e1:3c:e4:2b:2f:d4: 0b:30:60:5a:9b:ad:ae:b6:88:39:8b:bc:09:64:85: fb:48:98:e9:ea:c5:df:2b:76:02:eb:d8:2c:fe:fb: ad:d2:89:69:91:85:b9:34:2f:3d:30:08:90:6f:a2: c8:e9:a5:4c:14:73:0b:0e:93:17:e9:9e:a2:89:2b: be:47:e3:f7:d2:6e:df:7c:14:36:70:36:90:53:23: 72:bf:5c:66:45:9d:21:87:fc:5e:f1:09:81:df:c4: 8f:d1:b8:2e:5f:ad:b7:9e:3c:09:83:18:eb:4f:5f: 43:00:ad:2f:86:24:12:09:16:51:02:2d:9c:11:41: c2:ff:2a:6f:b6:52:ac:45:42:d2:ec:a2:7e:a6:27: 7a:2c:65:4c:fd:ad:c8:7a:47:db:31:9d:57:1a:79: 1d:52:e9:04:a2:fc:6b:66:02:f8:67:89:b2:ed:8d: b9:a1:f9:d0:24:a2:cc:19:4f:39:69:13:e3:35:b9: ee:8b:50:0a:f2:9d:42:e7:25:a2:cb:3c:c3:a2:12: 36:19:4e:f5:17:f7:67:f6:82:0f:b5:02:f3:fa:8a: be:62:68:39:55:c8:60:4b:2d:61:9b:50:d9:aa:8e: 85:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:8F:4C:A7:16:F0:F6:B6:36:9E:FE:B9:EB:B4:FD:3A:79:5E:3D:71 X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/0I9Mpxbw9rY2nv6567T9OnlePXE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.66.51.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:11:90:29:46:56:14:30:81:dc:74:9a:c3:5c:30:ea:a4:e3: 00:5f:75:59:98:51:26:5f:29:ee:fe:77:62:85:18:c3:90:9f: bf:3d:da:74:5b:3a:35:aa:11:bf:b1:eb:ca:a9:88:01:6c:f5: 35:24:1d:c8:cc:d0:c1:81:40:72:15:0a:9e:9a:99:5b:65:bd: cb:6f:c4:c1:6d:4a:af:b5:7a:61:a2:66:41:24:2b:d3:dc:a3: 40:28:4d:8e:29:a9:89:62:8e:74:b0:3f:cd:f3:c2:eb:a8:26: ae:a7:5e:fc:62:85:5e:ea:66:1a:77:1d:3a:09:80:12:9e:3d: 12:92:58:56:66:cd:af:5a:a3:1c:b6:be:96:d6:65:08:c3:6f: 94:83:e6:ae:7c:4b:2a:be:d7:56:42:f0:37:7a:8d:53:c8:ce: c8:41:f6:6a:3b:df:c1:f6:bf:5a:30:7e:5a:ee:e1:79:16:66: 8b:f2:ae:bf:bc:1d:48:09:81:4d:03:a4:1d:9c:2d:51:8a:af: fb:55:7e:1f:2e:11:41:d9:80:3e:06:79:42:78:ea:b0:a7:c2: a6:a8:7b:d6:2f:8c:77:85:94:66:9e:94:76:75:a4:47:30:54: 4c:f2:0b:4b:bd:eb:5e:a4:19:8a:7b:a7:57:6e:38:99:14:bb: d0:76:25:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtPuz2gfP/fEBWfAk40JaTfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjUxMjI0MDk0MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDhmNGNhNzE2ZjBmNmI2MzY5ZWZlYjllYmI0ZmQzYTc5NWUzZDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVn0KbAqZejx3Ro5NVgIh0jq6kTC iCvhPOQrL9QLMGBam62utog5i7wJZIX7SJjp6sXfK3YC69gs/vut0olpkYW5NC89 MAiQb6LI6aVMFHMLDpMX6Z6iiSu+R+P30m7ffBQ2cDaQUyNyv1xmRZ0hh/xe8QmB 38SP0bguX623njwJgxjrT19DAK0vhiQSCRZRAi2cEUHC/ypvtlKsRULS7KJ+pid6 LGVM/a3IekfbMZ1XGnkdUukEovxrZgL4Z4my7Y25ofnQJKLMGU85aRPjNbnui1AK 8p1C5yWiyzzDohI2GU71F/dn9oIPtQLz+oq+Ymg5VchgSy1hm1DZqo6FIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNCPTKcW8Pa2Np7+ueu0/Tp5Xj1xMB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvMEk5TXB4Ync5clkybnY2NTY3VDlPbmxlUFhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EIzMA0G CSqGSIb3DQEBCwUAA4IBAQBeEZApRlYUMIHcdJrDXDDqpOMAX3VZmFEmXynu/ndi hRjDkJ+/Pdp0Wzo1qhG/sevKqYgBbPU1JB3IzNDBgUByFQqemplbZb3Lb8TBbUqv tXphomZBJCvT3KNAKE2OKamJYo50sD/N88LrqCaup178YoVe6mYadx06CYASnj0S klhWZs2vWqMctr6W1mUIw2+Ug+aufEsqvtdWQvA3eo1TyM7IQfZqO9/B9r9aMH5a 7uF5FmaL8q6/vB1ICYFNA6QdnC1Riq/7VX4fLhFB2YA+BnlCeOqwp8KmqHvWL4x3 hZRmnpR2daRHMFRM8gtLvetepBmKe6dXbjiZFLvQdiUy -----END CERTIFICATE-----Generated at Sat Dec 27 05:04:31 2025 by rpki-client