This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/I8EGaDfKri1_b8-vEs5GOpmEmC0.roa File: I8EGaDfKri1_b8-vEs5GOpmEmC0.roa (raw, json) Hash identifier: zmTLW5tEqjrFz2XoZUnEjei7zo6D5FmGOjsqSGxh6v4= Subject key identifier: 23:C1:06:68:37:CA:AE:2D:7F:6F:CF:AF:12:CE:46:3A:99:84:98:2D Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Certificate serial: 019AFA41386F843BED4932D30A85251C450F Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/I8EGaDfKri1_b8-vEs5GOpmEmC0.roa Signing time: Sun 07 Dec 2025 19:19:29 +0000 ROA not before: Sun 07 Dec 2025 19:19:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12301 IP address blocks: 77.221.32.0/20 maxlen: 20 77.221.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:41:38:6f:84:3b:ed:49:32:d3:0a:85:25:1c:45:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Validity Not Before: Dec 7 19:19:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=23c1066837caae2d7f6fcfaf12ce463a9984982d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:95:82:b2:e4:3a:ee:cb:79:92:20:1c:41:d7: fd:f0:82:a1:41:bc:c5:ed:4c:75:63:99:56:5c:92: 84:d1:17:3a:26:f0:20:06:96:4d:99:4a:80:3b:d0: b5:66:ca:f2:96:4a:bb:00:b7:e7:89:a3:01:cb:1b: 8e:8b:5c:39:b9:13:61:19:08:58:58:a2:dd:8b:e4: 2c:ad:90:cc:2d:11:ce:01:48:b4:1c:9a:9e:6a:25: f8:07:3f:29:59:ae:4d:62:c0:c5:5e:90:e3:29:c9: 1f:e7:bf:a3:22:af:2c:db:82:e6:f5:d2:e5:22:11: f5:dc:34:7b:cc:02:f4:bb:31:bf:6e:e3:c4:34:2b: 98:1e:3c:fb:6b:24:42:b4:a2:14:1f:d8:c3:b3:2d: 1c:80:9e:0b:58:6d:53:94:8e:d2:28:df:d2:3a:e9: e5:f6:9a:96:13:fa:79:35:fd:3f:d2:1b:b1:cf:4c: eb:35:e1:cb:65:5b:57:cf:47:66:98:30:cd:e9:b5: ef:d2:d6:ab:e2:a8:f3:60:cc:18:97:24:bd:c0:cd: 59:27:55:3e:ec:c3:c0:21:80:c0:40:7f:f7:8d:bb: 9b:21:b0:1d:cc:68:86:99:ad:dc:fc:c5:49:91:d3: 8d:fa:58:a9:86:51:d9:cb:0d:1b:1a:f7:36:56:15: 27:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C1:06:68:37:CA:AE:2D:7F:6F:CF:AF:12:CE:46:3A:99:84:98:2D X509v3 Authority Key Identifier: keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/I8EGaDfKri1_b8-vEs5GOpmEmC0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.221.32.0/20 77.221.63.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:cf:ea:91:cd:1b:08:ef:5c:52:10:ce:a5:53:bd:a7:6f:05: 20:67:22:c9:24:72:b6:bc:e5:16:3e:e9:83:d9:c3:be:f3:ec: e9:fe:fe:b8:ec:30:2c:42:21:6f:71:16:f2:c7:73:72:96:a4: 01:b0:43:50:ba:d4:fb:c4:88:83:ca:10:83:30:34:eb:64:a1: a0:2d:d2:14:4a:ad:81:91:32:20:01:9f:66:0b:cf:c8:12:ed: df:c0:58:4e:23:60:d9:3a:6b:31:2e:39:14:ef:73:c5:b1:c2: 2f:4e:2d:28:1b:5e:18:f3:61:14:b7:dd:29:a5:58:bb:af:05: 9c:bc:5d:c8:99:9d:78:b2:52:31:8a:c0:46:45:99:3a:9d:6b: 4e:74:7a:e8:85:6b:fa:39:a4:67:41:6a:88:be:44:97:84:42: af:e6:8a:d5:cd:f7:72:4d:c6:21:9c:a9:40:74:b1:75:b6:3d: ba:55:51:84:ec:ac:79:09:95:62:20:7f:3d:76:b9:d1:08:09: da:1c:d0:3d:d1:c3:24:b2:9a:93:61:f8:8a:75:4a:c7:9e:97: 9b:c2:fa:82:1f:e4:50:40:ee:66:ec:dd:44:ec:78:0f:2f:aa: 80:a4:d6:81:88:46:85:1b:69:70:a3:4f:f6:7c:b4:dc:b4:aa: 6a:8c:03:68 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZr6QThvhDvtSTLTCoUlHEUPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDM2NDIwNzZkMjdlMjUyZmE5MGJmMWE0Mjk2ZjhiY2Q5 ZDBjZjEwHhcNMjUxMjA3MTkxOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2MxMDY2ODM3Y2FhZTJkN2Y2ZmNmYWYxMmNlNDYzYTk5ODQ5ODJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpWCsuQ67st5kiAcQdf98IKhQbzF 7Ux1Y5lWXJKE0Rc6JvAgBpZNmUqAO9C1Zsrylkq7ALfniaMByxuOi1w5uRNhGQhY WKLdi+QsrZDMLRHOAUi0HJqeaiX4Bz8pWa5NYsDFXpDjKckf57+jIq8s24Lm9dLl IhH13DR7zAL0uzG/buPENCuYHjz7ayRCtKIUH9jDsy0cgJ4LWG1TlI7SKN/SOunl 9pqWE/p5Nf0/0huxz0zrNeHLZVtXz0dmmDDN6bXv0tar4qjzYMwYlyS9wM1ZJ1U+ 7MPAIYDAQH/3jbubIbAdzGiGma3c/MVJkdON+liphlHZyw0bGvc2VhUniQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCPBBmg3yq4tf2/PrxLORjqZhJgtMB8GA1UdIwQY MBaAFNcDZCB20n4lL6kL8aQpb4vNnQzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGIt NjU0NTA1YTJkMDQ1LzEvSThFR2FEZktyaTFfYjgtdkVzNUdPcG1FbUMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGItNjU0NTA1YTJkMDQ1 LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQETd0gAwQA Td0/MA0GCSqGSIb3DQEBCwUAA4IBAQBuz+qRzRsI71xSEM6lU72nbwUgZyLJJHK2 vOUWPumD2cO+8+zp/v647DAsQiFvcRbyx3NylqQBsENQutT7xIiDyhCDMDTrZKGg LdIUSq2BkTIgAZ9mC8/IEu3fwFhOI2DZOmsxLjkU73PFscIvTi0oG14Y82EUt90p pVi7rwWcvF3ImZ14slIxisBGRZk6nWtOdHrohWv6OaRnQWqIvkSXhEKv5orVzfdy TcYhnKlAdLF1tj26VVGE7Kx5CZViIH89drnRCAnaHNA90cMkspqTYfiKdUrHnpeb wvqCH+RQQO5m7N1E7HgPL6qApNaBiEaFG2lwo0/2fLTctKpqjANo -----END CERTIFICATE-----Generated at Fri Dec 12 11:45:53 2025 by rpki-client