This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/RGcO3bBqUpTVyIxTF7x8-FPFw5M.roa File: RGcO3bBqUpTVyIxTF7x8-FPFw5M.roa (raw, json) Hash identifier: fy8VWnQHzfBE+KdfHFqPBqX0lDoeW5vn0OAgRRlRBfU= Subject key identifier: 44:67:0E:DD:B0:6A:52:94:D5:C8:8C:53:17:BC:7C:F8:53:C5:C3:93 Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019B44E705FE9D7676577CED6D144AF6C56A Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/RGcO3bBqUpTVyIxTF7x8-FPFw5M.roa Signing time: Mon 22 Dec 2025 07:12:29 +0000 ROA not before: Mon 22 Dec 2025 07:12:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401776 IP address blocks: 212.66.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:e7:05:fe:9d:76:76:57:7c:ed:6d:14:4a:f6:c5:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Dec 22 07:12:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=44670eddb06a5294d5c88c5317bc7cf853c5c393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:86:b4:17:03:a2:91:62:81:0e:f6:98:63:dd: f8:9f:7c:67:7e:ac:27:cd:cd:c3:f3:d7:2b:41:61: dc:63:89:46:15:f3:45:ce:81:ac:b8:ab:65:44:f8: 20:9c:11:7a:31:70:5a:32:12:8a:00:43:48:c7:51: 2a:8a:18:56:a9:c1:84:7b:d5:00:23:8b:ec:ad:ad: 99:28:86:a7:44:aa:a7:6b:5b:21:52:e1:f1:41:cf: 8a:db:4f:83:d6:99:48:45:58:22:6d:c8:8a:9a:c1: 04:2f:e5:3d:63:7c:14:35:c9:4e:77:7f:be:b2:06: 4b:d6:5d:88:23:05:e3:bd:a1:df:c7:00:ea:bc:14: 45:2c:fd:1b:71:35:00:7b:9c:5b:51:b3:73:2a:50: 9a:f2:fc:0d:7b:e5:bd:e6:b3:67:41:34:61:69:f0: 13:6a:6c:95:e6:d1:57:59:ce:41:f6:ae:13:4f:ab: 92:c4:71:e0:ac:a4:42:3e:6c:9d:80:34:5e:db:3b: 83:41:c2:ba:4c:74:d6:a8:73:23:f6:1b:a7:b3:ef: c4:96:23:a8:65:33:45:41:b8:25:18:b3:0c:20:83: 66:76:97:73:a3:e6:11:78:73:65:df:e6:02:8f:e6: 6d:24:33:21:af:8e:f5:04:0f:ea:a2:02:72:42:30: ef:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:67:0E:DD:B0:6A:52:94:D5:C8:8C:53:17:BC:7C:F8:53:C5:C3:93 X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/RGcO3bBqUpTVyIxTF7x8-FPFw5M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.66.53.0/24 Signature Algorithm: sha256WithRSAEncryption ef:91:e0:3f:54:5d:f1:0c:cc:9c:f7:20:0b:02:20:97:f4:52: a1:21:97:f3:b8:fc:d8:c8:de:d6:b5:c2:e4:63:f0:79:63:6e: 4f:f7:9d:48:ff:2f:86:b6:69:6a:97:e5:22:13:a4:72:5f:83: 29:fa:f1:05:36:c0:49:2b:47:05:f9:fa:b1:77:79:e9:74:b6: 09:44:d4:ac:20:9d:ab:c8:40:32:4b:7a:ec:68:4b:24:d2:64: 30:cd:d2:0b:63:58:76:87:e6:21:6b:71:09:b7:9e:d0:64:1e: 09:c6:2b:2d:12:45:91:a7:1a:8a:04:0f:30:fd:6f:7b:9d:43: 71:39:ce:2b:b9:0f:47:f0:79:aa:7e:4a:e3:8d:31:18:9c:a0: 3b:b3:8f:f9:83:85:99:44:95:1f:91:f9:83:3a:7c:dd:85:2c: 8a:75:7c:73:8f:4f:7d:f3:4e:7b:8d:48:f8:37:53:72:10:54: ac:f3:4f:36:bc:1d:4d:c8:39:82:9f:fe:50:c5:6e:19:f6:ed: 8a:b1:01:09:9a:c9:dc:52:60:63:ff:9e:0c:dc:c5:dc:19:df: 88:9c:a2:b3:1e:24:b0:08:2e:39:5f:2b:90:35:91:0b:a9:18: ca:bb:5f:eb:9f:c0:0e:b1:35:af:e2:85:31:ed:4b:3d:01:b4: 77:f2:da:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtE5wX+nXZ2V3ztbRRK9sVqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjUxMjIyMDcxMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDY3MGVkZGIwNmE1Mjk0ZDVjODhjNTMxN2JjN2NmODUzYzVjMzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYa0FwOikWKBDvaYY934n3xnfqwn zc3D89crQWHcY4lGFfNFzoGsuKtlRPggnBF6MXBaMhKKAENIx1EqihhWqcGEe9UA I4vsra2ZKIanRKqna1shUuHxQc+K20+D1plIRVgibciKmsEEL+U9Y3wUNclOd3++ sgZL1l2IIwXjvaHfxwDqvBRFLP0bcTUAe5xbUbNzKlCa8vwNe+W95rNnQTRhafAT amyV5tFXWc5B9q4TT6uSxHHgrKRCPmydgDRe2zuDQcK6THTWqHMj9huns+/EliOo ZTNFQbglGLMMIINmdpdzo+YReHNl3+YCj+ZtJDMhr471BA/qogJyQjDvgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFERnDt2walKU1ciMUxe8fPhTxcOTMB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvUkdjTzNiQnFVcFRWeUl4VEY3eDgtRlBGdzVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EI1MA0G CSqGSIb3DQEBCwUAA4IBAQDvkeA/VF3xDMyc9yALAiCX9FKhIZfzuPzYyN7WtcLk Y/B5Y25P951I/y+Gtmlql+UiE6RyX4Mp+vEFNsBJK0cF+fqxd3npdLYJRNSsIJ2r yEAyS3rsaEsk0mQwzdILY1h2h+Yha3EJt57QZB4JxistEkWRpxqKBA8w/W97nUNx Oc4ruQ9H8HmqfkrjjTEYnKA7s4/5g4WZRJUfkfmDOnzdhSyKdXxzj0998057jUj4 N1NyEFSs8082vB1NyDmCn/5QxW4Z9u2KsQEJmsncUmBj/54M3MXcGd+InKKzHiSw CC45XyuQNZELqRjKu1/rn8AOsTWv4oUx7Us9AbR38tox -----END CERTIFICATE-----Generated at Sat Dec 27 08:47:14 2025 by rpki-client