This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iVImkcoTL6lLoD6x2G4yqtcbovk.roa File: iVImkcoTL6lLoD6x2G4yqtcbovk.roa (raw, json) Hash identifier: 15A5WdYLwj8xP3bzuxNiRItTERS4j0CQGahxRH+80hI= Subject key identifier: 89:52:26:91:CA:13:2F:A9:4B:A0:3E:B1:D8:6E:32:AA:D7:1B:A2:F9 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B07B536E7D482142BF930D444681A86CD Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iVImkcoTL6lLoD6x2G4yqtcbovk.roa Signing time: Wed 10 Dec 2025 10:01:15 +0000 ROA not before: Wed 10 Dec 2025 10:01:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213282 IP address blocks: 93.88.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b5:36:e7:d4:82:14:2b:f9:30:d4:44:68:1a:86:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Dec 10 10:01:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=89522691ca132fa94ba03eb1d86e32aad71ba2f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4e:5b:75:ef:e2:1c:16:5c:bb:00:a1:38:c8: 2c:17:33:71:05:4f:08:d1:11:79:e1:3d:67:0c:b7: 16:dc:1e:e7:e9:fa:3c:bb:56:d9:0f:85:9a:44:73: 1d:54:42:90:97:a5:43:21:58:3e:6f:1b:d9:8e:80: e4:ef:7e:95:d0:f3:9f:62:f8:b7:b0:97:59:08:f6: 5c:44:ec:a4:16:ef:c7:18:a3:b4:b3:d6:f4:35:ca: 39:ec:fa:e7:f3:e2:a5:bd:79:a3:6c:dd:6e:ce:54: 98:4d:1c:9b:71:70:b9:0b:99:0d:c7:f8:e7:b8:b1: 68:9c:fe:fd:61:d8:55:87:54:70:3e:3a:21:58:d5: ec:63:1a:9f:05:5b:7e:3a:29:82:33:0c:4f:fc:e6: 91:36:9e:f5:80:4b:ce:00:43:75:ed:de:37:d1:92: cc:9d:b5:99:88:1a:13:67:22:41:85:19:a2:f7:5f: ba:f6:4d:e0:85:c0:e5:d6:a7:fc:cc:68:90:af:fc: 48:9d:2b:dc:0b:4b:3c:f5:d1:32:d0:c1:fa:62:82: dd:dd:ac:d0:7f:28:c4:b2:24:b4:60:b0:d8:a1:b7: 3a:2d:08:3e:a1:70:5d:7f:fd:6e:71:d7:a2:78:08: ed:bf:83:43:8f:5f:12:34:a6:46:73:f2:69:a9:28: d8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:52:26:91:CA:13:2F:A9:4B:A0:3E:B1:D8:6E:32:AA:D7:1B:A2:F9 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iVImkcoTL6lLoD6x2G4yqtcbovk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.88.201.0/24 Signature Algorithm: sha256WithRSAEncryption 52:9d:86:3b:7a:c1:8a:c8:2a:18:c2:27:ec:2a:f8:6b:17:04: 55:d4:62:3d:6c:44:f3:e5:4d:51:51:cf:d3:15:3f:e4:24:b0: 3b:06:63:66:97:60:d5:d3:8c:5d:3a:5e:74:13:52:26:9b:f1: 23:ba:3b:0e:2e:a2:de:60:3e:7d:9a:68:ad:84:76:ba:f8:40: 9a:dd:cc:78:03:b1:cd:5d:a6:9f:54:e2:dc:9f:36:7c:7a:80: 5e:4a:37:e7:60:3c:15:c2:ee:a6:84:45:cf:ce:9f:aa:81:1e: 25:09:b0:b8:a1:fd:16:d6:da:7d:da:a9:2d:97:17:83:e3:58: fb:2a:79:6e:23:82:fd:21:f9:cb:87:03:b5:f4:c9:7c:3a:5b: ff:5f:79:64:ba:35:a9:52:f5:ea:bc:62:c8:42:45:3c:8b:52: ab:9f:e0:c5:0d:d8:2a:c9:b5:83:88:e2:c2:1f:10:7a:34:41: 5d:89:dd:a0:b7:4e:e6:fb:71:75:51:c0:f3:4c:a4:92:f7:54: 55:a2:37:88:be:6c:12:53:29:91:ad:f6:cf:64:cd:e9:21:a8: cd:ca:4b:06:2c:97:88:34:4b:42:bf:ef:24:fa:ba:fe:f5:32: af:f4:a3:56:19:1c:46:6f:5a:70:4d:b9:2c:06:b7:5b:89:06: 47:df:bb:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsHtTbn1IIUK/kw1ERoGobNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjUxMjEwMTAwMTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTUyMjY5MWNhMTMyZmE5NGJhMDNlYjFkODZlMzJhYWQ3MWJhMmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgk5bde/iHBZcuwChOMgsFzNxBU8I 0RF54T1nDLcW3B7n6fo8u1bZD4WaRHMdVEKQl6VDIVg+bxvZjoDk736V0POfYvi3 sJdZCPZcROykFu/HGKO0s9b0Nco57Prn8+KlvXmjbN1uzlSYTRybcXC5C5kNx/jn uLFonP79YdhVh1RwPjohWNXsYxqfBVt+OimCMwxP/OaRNp71gEvOAEN17d430ZLM nbWZiBoTZyJBhRmi91+69k3ghcDl1qf8zGiQr/xInSvcC0s89dEy0MH6YoLd3azQ fyjEsiS0YLDYobc6LQg+oXBdf/1ucdeieAjtv4NDj18SNKZGc/JpqSjY6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIlSJpHKEy+pS6A+sdhuMqrXG6L5MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvaVZJbWtjb1RMNmxMb0Q2eDJHNHlxdGNib3ZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXVjJMA0G CSqGSIb3DQEBCwUAA4IBAQBSnYY7esGKyCoYwifsKvhrFwRV1GI9bETz5U1RUc/T FT/kJLA7BmNml2DV04xdOl50E1Imm/EjujsOLqLeYD59mmithHa6+ECa3cx4A7HN XaafVOLcnzZ8eoBeSjfnYDwVwu6mhEXPzp+qgR4lCbC4of0W1tp92qktlxeD41j7 KnluI4L9IfnLhwO19Ml8Olv/X3lkujWpUvXqvGLIQkU8i1Krn+DFDdgqybWDiOLC HxB6NEFdid2gt07m+3F1UcDzTKSS91RVojeIvmwSUymRrfbPZM3pIajNyksGLJeI NEtCv+8k+rr+9TKv9KNWGRxGb1pwTbksBrdbiQZH37sc -----END CERTIFICATE-----Generated at Thu Dec 11 23:18:06 2025 by rpki-client