This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/IEzziaKBgIrh9kJVhylcCFxPtdc.roa File: IEzziaKBgIrh9kJVhylcCFxPtdc.roa (raw, json) Hash identifier: JmDKZPAKRaC7il6iVp9v+Mtsd3vAAyFQDYZVlsSVi5E= Subject key identifier: 20:4C:F3:89:A2:81:80:8A:E1:F6:42:55:87:29:5C:08:5C:4F:B5:D7 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019AB4E9D96E6D390494234B424DDE6B9F15 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/IEzziaKBgIrh9kJVhylcCFxPtdc.roa Signing time: Mon 24 Nov 2025 08:10:15 +0000 ROA not before: Mon 24 Nov 2025 08:10:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21840 IP address blocks: 188.255.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b4:e9:d9:6e:6d:39:04:94:23:4b:42:4d:de:6b:9f:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Nov 24 08:10:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=204cf389a281808ae1f6425587295c085c4fb5d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a3:e4:df:9c:21:7d:9c:50:53:ab:95:d5:b9: b3:48:10:d0:49:be:d8:47:b1:1f:dc:af:18:b6:8f: b8:1c:81:fd:97:9d:73:74:c7:54:a5:c2:d0:a2:76: 8a:3f:09:3a:bc:c8:ce:26:4d:c4:5d:c0:30:76:a3: 28:27:89:79:39:07:0c:a3:30:fb:88:f7:46:ba:fb: c3:95:0e:9c:45:c9:f4:49:de:0b:90:a9:fa:88:2e: 99:be:e3:88:26:ea:fe:7c:16:70:4a:d5:7f:c8:9c: ad:37:17:1b:74:ae:5f:0f:6b:bb:24:60:30:6d:5b: 29:58:5f:ca:11:d8:70:94:51:43:d3:6a:5f:c8:92: 5a:ca:1e:fd:34:0a:31:2f:1c:63:c0:f2:2e:c5:1c: 92:84:92:b8:32:79:93:8b:8f:9e:b4:0d:17:71:08: ea:d6:b2:ed:cc:42:69:47:06:e0:68:68:7f:f3:95: cb:c1:f4:a0:ed:07:62:ad:3b:2a:dd:b0:12:fe:68: 05:71:7f:45:c1:29:10:90:0a:60:93:0e:0f:39:6a: fa:9e:20:4c:f2:2b:a2:ff:62:fd:5d:15:c2:9f:b0: 3d:ae:f9:e9:cc:dd:01:b0:c7:b2:19:73:45:d7:73: bb:f1:f1:84:0d:ad:4d:03:b4:a6:11:8c:fb:36:9e: b4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4C:F3:89:A2:81:80:8A:E1:F6:42:55:87:29:5C:08:5C:4F:B5:D7 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/IEzziaKBgIrh9kJVhylcCFxPtdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.255.236.0/24 Signature Algorithm: sha256WithRSAEncryption 12:70:c5:c5:16:f5:ee:11:3a:90:93:66:f8:89:53:ef:2f:45: 95:4c:d9:88:bd:77:c7:e0:95:3d:7a:0b:31:fd:5c:79:8b:91: 96:ee:fa:72:bf:ad:63:db:cc:64:43:35:f8:a9:07:e9:44:cf: 5a:cd:7f:1f:f3:dc:bb:da:27:55:59:4e:d5:6a:75:14:28:9b: a3:4c:0e:43:96:26:e5:aa:48:9c:b4:10:1c:ac:0a:14:77:85: d0:03:dd:f2:42:af:93:6e:ad:44:39:67:2f:21:a7:99:6d:04: 0d:44:f9:d3:c9:97:74:82:21:2f:8f:1e:f2:6f:e4:44:7a:70: 80:df:7c:5c:fd:fa:55:8c:36:af:78:1b:e4:2d:8d:a9:07:2d: cd:6e:2c:df:78:7f:6c:30:b6:fc:5d:ac:13:a3:86:be:82:e9: 8d:5c:b2:8d:60:d3:45:84:94:c3:59:bb:6b:aa:39:5a:06:14: f3:01:2c:6e:77:2e:eb:4e:62:a2:83:c4:ce:ee:dd:59:a7:d1: 28:ad:70:c6:cd:d8:20:e8:b1:d4:67:c3:02:d7:c0:e2:c5:14: a7:a4:2f:9d:97:dd:d0:24:a3:41:b1:78:57:2c:3f:b4:1d:2a: 34:4e:89:04:0f:86:62:60:6b:e9:a5:58:78:6c:a1:4f:0f:5a: 01:8f:1b:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq06dlubTkElCNLQk3ea58VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMTI0MDgxMDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDRjZjM4OWEyODE4MDhhZTFmNjQyNTU4NzI5NWMwODVjNGZiNWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6Pk35whfZxQU6uV1bmzSBDQSb7Y R7Ef3K8Yto+4HIH9l51zdMdUpcLQonaKPwk6vMjOJk3EXcAwdqMoJ4l5OQcMozD7 iPdGuvvDlQ6cRcn0Sd4LkKn6iC6ZvuOIJur+fBZwStV/yJytNxcbdK5fD2u7JGAw bVspWF/KEdhwlFFD02pfyJJayh79NAoxLxxjwPIuxRyShJK4MnmTi4+etA0XcQjq 1rLtzEJpRwbgaGh/85XLwfSg7QdirTsq3bAS/mgFcX9FwSkQkApgkw4POWr6niBM 8iui/2L9XRXCn7A9rvnpzN0BsMeyGXNF13O78fGEDa1NA7SmEYz7Np60mQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCBM84migYCK4fZCVYcpXAhcT7XXMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvSUV6emlhS0JnSXJoOWtKVmh5bGNDRnhQdGRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvP/sMA0G CSqGSIb3DQEBCwUAA4IBAQAScMXFFvXuETqQk2b4iVPvL0WVTNmIvXfH4JU9egsx /Vx5i5GW7vpyv61j28xkQzX4qQfpRM9azX8f89y72idVWU7VanUUKJujTA5Dlibl qkictBAcrAoUd4XQA93yQq+Tbq1EOWcvIaeZbQQNRPnTyZd0giEvjx7yb+REenCA 33xc/fpVjDaveBvkLY2pBy3NbizfeH9sMLb8XawTo4a+gumNXLKNYNNFhJTDWbtr qjlaBhTzASxudy7rTmKig8TO7t1Zp9EorXDGzdgg6LHUZ8MC18DixRSnpC+dl93Q JKNBsXhXLD+0HSo0TokED4ZiYGvppVh4bKFPD1oBjxut -----END CERTIFICATE-----Generated at Sat Dec 6 06:43:03 2025 by rpki-client