This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/ji8mgP3HaP5YwCtbSswxHq5RkcI.roa File: ji8mgP3HaP5YwCtbSswxHq5RkcI.roa (raw, json) Hash identifier: 7Q+Cg2MRI/aftnl1dS18dRJiyUzgRYmnJMQKtspw+W8= Subject key identifier: 8E:2F:26:80:FD:C7:68:FE:58:C0:2B:5B:4A:CC:31:1E:AE:51:91:C2 Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c Certificate serial: 019A9A1C4E4CD74F39590E2681B54DF32D20 Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/ji8mgP3HaP5YwCtbSswxHq5RkcI.roa Signing time: Wed 19 Nov 2025 03:15:37 +0000 ROA not before: Wed 19 Nov 2025 03:15:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5650 IP address blocks: 213.177.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9a:1c:4e:4c:d7:4f:39:59:0e:26:81:b5:4d:f3:2d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c Validity Not Before: Nov 19 03:15:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8e2f2680fdc768fe58c02b5b4acc311eae5191c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f6:e6:97:c8:16:c9:ad:16:63:9f:e8:5a:0c: dc:6b:d1:f2:70:c4:63:43:83:22:d8:5b:f4:b0:5e: d0:18:3a:73:93:63:d8:c0:0b:a0:46:6b:d1:0b:8b: 49:12:f1:56:93:d9:36:6d:8a:0f:c2:48:5d:0c:cb: 54:c2:c4:1e:27:4e:93:bb:64:91:d9:06:77:7a:77: cd:2d:4b:ae:18:c9:e7:4d:9a:60:02:97:c0:0c:8c: 6f:9e:c0:df:76:81:9a:29:e5:7e:4b:eb:be:3d:ce: 03:ed:bb:4d:51:0b:46:9a:66:8e:2a:cd:f1:5a:4a: 58:c2:cf:0a:5a:4e:28:c1:87:62:38:05:22:05:61: 00:eb:ca:d6:1c:3f:5e:dc:25:25:a2:b6:ed:16:76: f1:72:85:b8:b8:b1:a2:29:b8:ef:b4:0e:c8:35:c0: 6c:16:eb:ed:93:eb:78:84:53:aa:40:20:60:de:4a: eb:1d:bb:2b:e6:20:86:23:a1:2c:57:ff:14:38:e4: 6c:3b:5f:a6:ec:55:6f:a0:2a:c5:ed:65:11:fe:be: f7:8b:c8:86:4d:0d:72:39:8d:e1:c6:d6:7b:bd:fc: 80:43:b2:13:19:ec:6a:54:f5:e7:6a:09:3b:6e:f0: d4:11:f8:d5:41:ef:fb:4a:81:05:1d:43:e8:2f:99: c0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2F:26:80:FD:C7:68:FE:58:C0:2B:5B:4A:CC:31:1E:AE:51:91:C2 X509v3 Authority Key Identifier: keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/ji8mgP3HaP5YwCtbSswxHq5RkcI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.177.174.0/24 Signature Algorithm: sha256WithRSAEncryption 68:5b:aa:e4:58:60:e3:42:f6:96:69:29:de:2a:c4:66:ec:c0: 47:11:55:c4:bf:6a:79:dd:34:a2:c5:8b:55:52:98:41:c7:f8: 5d:4c:95:4a:da:73:42:d9:0a:ea:65:5c:ae:aa:cd:cc:35:a9: ad:9a:95:df:c7:b3:ea:b1:06:81:a2:54:e9:5a:d4:e4:68:51: 1a:31:ee:77:02:e8:93:43:4f:8a:53:f4:8a:81:10:65:45:31: b8:b1:d0:57:ae:a0:3f:60:52:aa:76:a4:95:85:2c:82:de:14: a3:df:38:07:89:94:1d:f4:1a:6b:c6:2d:e9:1f:ee:78:fd:c8: d0:90:39:87:29:0c:60:19:5f:27:2f:80:e1:59:7f:41:19:6b: c7:4e:73:1d:f3:05:d5:ce:c7:e9:8c:49:32:cc:65:f3:05:15: 34:fd:4c:47:9e:4e:6a:74:1e:7d:4d:e1:04:64:62:04:1f:b2: 6c:c1:f2:ab:ad:04:a0:84:75:46:24:dd:4e:08:68:db:c0:c1: 39:bd:03:ce:63:c0:a9:2e:38:dd:39:60:77:58:b7:13:93:a6: 59:87:d4:47:f5:a9:b6:c9:ed:48:1a:0f:5d:5c:cc:c6:37:1f: e9:dc:04:45:0d:5e:69:3c:70:c2:05:4b:ce:24:96:df:c4:69: fb:dd:f3:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqaHE5M1085WQ4mgbVN8y0gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNmJkMWE2YjA0NjI1YzU3MWQ4MzBmODc4YjFjMDIzODI0 NzQwOGMwHhcNMjUxMTE5MDMxNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTJmMjY4MGZkYzc2OGZlNThjMDJiNWI0YWNjMzExZWFlNTE5MWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vbml8gWya0WY5/oWgzca9HycMRj Q4Mi2Fv0sF7QGDpzk2PYwAugRmvRC4tJEvFWk9k2bYoPwkhdDMtUwsQeJ06Tu2SR 2QZ3enfNLUuuGMnnTZpgApfADIxvnsDfdoGaKeV+S+u+Pc4D7btNUQtGmmaOKs3x WkpYws8KWk4owYdiOAUiBWEA68rWHD9e3CUlorbtFnbxcoW4uLGiKbjvtA7INcBs Fuvtk+t4hFOqQCBg3krrHbsr5iCGI6EsV/8UOORsO1+m7FVvoCrF7WUR/r73i8iG TQ1yOY3hxtZ7vfyAQ7ITGexqVPXnagk7bvDUEfjVQe/7SoEFHUPoL5nA7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI4vJoD9x2j+WMArW0rMMR6uUZHCMB8GA1UdIwQY MBaAFH9r0aawRiXFcdgw+HixwCOCR0CMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEt ODliNmMzMjMxNWMyLzEvamk4bWdQM0hhUDVZd0N0YlNzd3hIcTVSa2NJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEtODliNmMzMjMxNWMy LzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1bGuMA0G CSqGSIb3DQEBCwUAA4IBAQBoW6rkWGDjQvaWaSneKsRm7MBHEVXEv2p53TSixYtV UphBx/hdTJVK2nNC2QrqZVyuqs3MNamtmpXfx7PqsQaBolTpWtTkaFEaMe53AuiT Q0+KU/SKgRBlRTG4sdBXrqA/YFKqdqSVhSyC3hSj3zgHiZQd9Bprxi3pH+54/cjQ kDmHKQxgGV8nL4DhWX9BGWvHTnMd8wXVzsfpjEkyzGXzBRU0/UxHnk5qdB59TeEE ZGIEH7JswfKrrQSghHVGJN1OCGjbwME5vQPOY8CpLjjdOWB3WLcTk6ZZh9RH9am2 ye1IGg9dXMzGNx/p3ARFDV5pPHDCBUvOJJbfxGn73fP0 -----END CERTIFICATE-----Generated at Thu Dec 4 07:38:27 2025 by rpki-client