This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/IXspGN6VJ4LRiPRe1sJmU32gFDE.roa File: IXspGN6VJ4LRiPRe1sJmU32gFDE.roa (raw, json) Hash identifier: pPKajCDoUSNbOhah15jfdIPW7tJPsFMgke/5Qnsu+yM= Subject key identifier: 21:7B:29:18:DE:95:27:82:D1:88:F4:5E:D6:C2:66:53:7D:A0:14:31 Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019B42662870EC675CD35C4FF287E1AB7C85 Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/IXspGN6VJ4LRiPRe1sJmU32gFDE.roa Signing time: Sun 21 Dec 2025 19:32:29 +0000 ROA not before: Sun 21 Dec 2025 19:32:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59432 IP address blocks: 141.98.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:66:28:70:ec:67:5c:d3:5c:4f:f2:87:e1:ab:7c:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Dec 21 19:32:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=217b2918de952782d188f45ed6c266537da01431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8f:16:a8:67:7b:76:2b:50:fc:a7:ff:e6:00: e8:45:cc:fd:e8:6c:92:94:3c:07:0a:1b:59:1a:f9: 6b:8f:fa:3c:12:8e:c0:ff:2c:a7:c0:8e:51:c3:b5: 59:2c:0b:9b:37:21:0e:65:72:95:d2:8a:b3:1b:42: 25:48:da:83:48:a2:9b:de:5f:fd:1c:b0:af:08:86: bb:8b:08:49:03:5b:fe:fc:98:68:dd:cd:c9:a4:16: 50:2f:40:51:0f:09:a4:93:64:95:0f:6f:01:b7:c1: 23:a7:38:bf:87:39:63:3f:d7:b7:f2:9b:f1:25:42: 8b:7d:73:8b:fb:7b:87:ff:2c:61:0d:b1:34:29:80: 6d:e2:33:7c:fd:08:c6:5e:b9:2a:d7:8f:9e:71:bb: 52:d7:9e:7c:8b:3d:85:ef:f9:0d:c7:bf:a4:30:ef: 0f:16:39:af:6b:7f:fe:ab:7b:78:02:ac:bc:2b:2b: eb:ae:1c:40:9f:6b:1e:3b:f3:c6:9e:b3:9c:bc:62: dc:2f:9a:2b:9d:36:48:2d:33:4f:de:ee:62:0f:bd: 63:a1:17:b5:80:ad:a5:7e:aa:92:f5:4b:b8:ce:8d: 1c:2a:4f:5d:81:03:63:a9:f4:2e:95:10:89:32:da: 09:9e:a7:53:34:ed:b4:28:3f:0d:6b:c8:4f:18:13: 4c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7B:29:18:DE:95:27:82:D1:88:F4:5E:D6:C2:66:53:7D:A0:14:31 X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/IXspGN6VJ4LRiPRe1sJmU32gFDE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.149.0/24 Signature Algorithm: sha256WithRSAEncryption 88:f6:74:8c:35:ab:a0:83:29:d0:61:4a:69:0a:63:f5:fd:a8: 8e:09:fe:56:23:80:dc:af:93:9b:b6:9e:6c:18:83:b0:8c:5f: 06:a8:00:f9:b7:7e:8c:09:d3:36:5a:78:58:62:95:6c:7e:42: 0b:cf:64:df:e3:65:17:97:81:6f:68:25:60:fa:6f:ac:56:27: a6:c9:53:fb:66:61:a8:24:29:26:3c:d6:51:90:d3:3a:ad:31: 85:86:5c:15:87:44:a7:19:a4:f3:f3:b5:38:6e:26:41:05:91: 2f:cd:3d:7e:6f:44:ef:53:ef:5e:67:f9:5b:d4:2e:59:ea:8c: 30:14:23:6d:bb:7b:7f:b6:10:e8:a0:74:3f:23:ec:5c:54:33: ca:0b:e9:bf:c5:b7:31:86:95:e3:59:c8:2d:84:f0:a2:34:75: 1d:a1:d0:df:f6:cd:3d:fc:88:0f:12:e7:2b:8b:f1:68:61:e3: e2:e4:52:66:df:55:a6:66:be:b1:01:df:f6:c6:2f:87:51:92: 56:3d:b4:8e:c4:91:b8:63:f5:59:5d:11:50:a0:c4:b6:2e:59: 5f:9b:62:d9:5f:5b:85:40:ce:3a:61:c5:1d:86:a8:7d:71:57: 0c:5d:26:ff:34:8f:c7:0a:07:cd:9c:39:1b:3e:2a:1d:3c:b1: d1:e4:ca:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtCZihw7Gdc01xP8ofhq3yFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjUxMjIxMTkzMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTdiMjkxOGRlOTUyNzgyZDE4OGY0NWVkNmMyNjY1MzdkYTAxNDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Y8WqGd7ditQ/Kf/5gDoRcz96GyS lDwHChtZGvlrj/o8Eo7A/yynwI5Rw7VZLAubNyEOZXKV0oqzG0IlSNqDSKKb3l/9 HLCvCIa7iwhJA1v+/Jho3c3JpBZQL0BRDwmkk2SVD28Bt8Ejpzi/hzljP9e38pvx JUKLfXOL+3uH/yxhDbE0KYBt4jN8/QjGXrkq14+ecbtS1558iz2F7/kNx7+kMO8P Fjmva3/+q3t4Aqy8KyvrrhxAn2seO/PGnrOcvGLcL5ornTZILTNP3u5iD71joRe1 gK2lfqqS9Uu4zo0cKk9dgQNjqfQulRCJMtoJnqdTNO20KD8Na8hPGBNMPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCF7KRjelSeC0Yj0XtbCZlN9oBQxMB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvSVhzcEdONlZKNExSaVBSZTFzSm1VMzJnRkRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWKVMA0G CSqGSIb3DQEBCwUAA4IBAQCI9nSMNauggynQYUppCmP1/aiOCf5WI4Dcr5Obtp5s GIOwjF8GqAD5t36MCdM2WnhYYpVsfkILz2Tf42UXl4FvaCVg+m+sViemyVP7ZmGo JCkmPNZRkNM6rTGFhlwVh0SnGaTz87U4biZBBZEvzT1+b0TvU+9eZ/lb1C5Z6oww FCNtu3t/thDooHQ/I+xcVDPKC+m/xbcxhpXjWcgthPCiNHUdodDf9s09/IgPEucr i/FoYePi5FJm31WmZr6xAd/2xi+HUZJWPbSOxJG4Y/VZXRFQoMS2Lllfm2LZX1uF QM46YcUdhqh9cVcMXSb/NI/HCgfNnDkbPiodPLHR5Mrc -----END CERTIFICATE-----Generated at Sat Dec 27 08:40:27 2025 by rpki-client