This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/ijhgDrG4PAh5dm_FiU2MYyK1EHo.roa File: ijhgDrG4PAh5dm_FiU2MYyK1EHo.roa (raw, json) Hash identifier: yZiKOLYeFB+QkMKLWFDCfaVVV6Y0ofxXdn/v1jLWMuE= Subject key identifier: 8A:38:60:0E:B1:B8:3C:08:79:76:6F:C5:89:4D:8C:63:22:B5:10:7A Certificate issuer: /CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5 Certificate serial: 019B26A8639BB7148679BEB2356BDFD6A274 Authority key identifier: 71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/ijhgDrG4PAh5dm_FiU2MYyK1EHo.roa Signing time: Tue 16 Dec 2025 10:15:28 +0000 ROA not before: Tue 16 Dec 2025 10:15:28 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13099 IP address blocks: 213.172.64.0/19 maxlen: 19 213.172.65.0/24 maxlen: 24 213.172.70.0/24 maxlen: 24 213.172.71.0/24 maxlen: 24 213.172.83.0/24 maxlen: 24 213.172.84.0/24 maxlen: 24 213.172.92.0/24 maxlen: 24 213.172.94.0/24 maxlen: 24 213.172.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:a8:63:9b:b7:14:86:79:be:b2:35:6b:df:d6:a2:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5 Validity Not Before: Dec 16 10:15:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8a38600eb1b83c0879766fc5894d8c6322b5107a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ca:8c:10:5b:b5:1f:54:e0:68:42:03:46:1c: 4c:75:47:15:f1:0a:b0:af:50:b6:51:65:ff:2e:56: b1:f4:97:3f:63:38:ce:c6:0a:30:6d:9a:5c:b9:ff: 90:ed:d4:53:27:9d:49:98:88:3b:5e:5e:a2:6b:ee: 94:a5:58:f3:01:25:70:41:0f:a8:5f:67:35:06:2c: 32:57:9a:dd:ed:53:ca:d6:df:f5:46:5d:35:64:7d: 46:e0:22:78:e5:6f:ad:5d:98:ed:e6:c8:28:41:6e: 07:50:bc:45:c9:41:37:70:9e:1f:e6:e5:46:80:ff: f4:61:84:e1:ae:3b:db:d8:94:d3:d2:9b:a4:38:41: 4c:35:20:6e:49:0b:86:56:9b:11:30:87:6e:23:ae: c9:75:14:c4:52:ec:6c:a4:b6:21:28:47:9b:fd:0a: 54:b8:d4:c3:10:ef:04:0b:e9:a2:6e:4c:31:57:39: 57:92:72:0e:63:81:7e:82:cc:4d:50:04:dd:49:e1: ee:0a:12:2c:86:fa:db:c4:23:31:4d:15:87:5d:39: b5:b3:55:1a:04:52:37:04:07:db:15:5b:d6:2b:b2: c6:74:96:24:1c:b2:b1:67:97:14:a4:64:73:58:2d: f6:46:10:35:e7:c0:71:f2:02:a5:5c:58:24:58:6a: 85:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:38:60:0E:B1:B8:3C:08:79:76:6F:C5:89:4D:8C:63:22:B5:10:7A X509v3 Authority Key Identifier: keyid:71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/ijhgDrG4PAh5dm_FiU2MYyK1EHo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.172.64.0/19 Signature Algorithm: sha256WithRSAEncryption 2e:7d:61:33:f5:b0:8d:f5:21:21:8d:6d:4c:48:5f:bb:f0:67: 35:bb:ff:ee:56:5a:bf:29:03:8e:00:47:3a:fc:d3:84:5b:b9: 53:02:19:0a:9c:42:8c:d3:68:75:d1:75:b9:5a:b9:94:6c:58: c0:19:62:a7:f2:b5:39:0a:95:3f:99:aa:4a:bb:13:eb:d0:ec: 80:f8:d5:fb:45:8e:94:e4:2f:6d:c5:cc:af:6f:75:86:ac:79: 9c:52:ec:58:68:26:31:8b:29:67:31:5d:44:dd:28:8f:1e:16: 66:7f:f8:35:1b:8f:4c:7c:c1:af:31:9d:9a:63:1a:d6:97:67: 0b:88:fe:47:9f:10:4b:13:b3:43:2d:e7:53:46:ec:49:14:df: 4d:eb:c8:00:43:40:d9:0f:de:ea:41:36:39:04:c5:a5:7e:d1: 7c:c3:6e:99:a2:66:7b:e4:b4:62:a7:94:77:54:e6:ef:6e:b6: 3d:f5:81:a4:6c:b1:7a:b3:3b:e8:d2:30:3c:ba:5a:bb:94:a4: 1d:30:aa:50:5f:b6:bf:37:b0:e5:bc:1a:98:4f:d4:dc:ae:c8: 8e:50:fb:91:c5:b9:2a:28:b9:69:03:0b:26:47:75:06:bb:58: 54:26:05:cf:9d:4b:ec:db:53:18:8c:0e:d7:34:cc:de:71:25: 84:50:1b:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsmqGObtxSGeb6yNWvf1qJ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxODY1NGNiOGVkM2Y1NWQ1YzYwOTcyZDMxMGY1ZWQ2MjA0 YjRmZTUwHhcNMjUxMjE2MTAxNTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTM4NjAwZWIxYjgzYzA4Nzk3NjZmYzU4OTRkOGM2MzIyYjUxMDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsqMEFu1H1TgaEIDRhxMdUcV8Qqw r1C2UWX/Llax9Jc/YzjOxgowbZpcuf+Q7dRTJ51JmIg7Xl6ia+6UpVjzASVwQQ+o X2c1BiwyV5rd7VPK1t/1Rl01ZH1G4CJ45W+tXZjt5sgoQW4HULxFyUE3cJ4f5uVG gP/0YYThrjvb2JTT0pukOEFMNSBuSQuGVpsRMIduI67JdRTEUuxspLYhKEeb/QpU uNTDEO8EC+mibkwxVzlXknIOY4F+gsxNUATdSeHuChIshvrbxCMxTRWHXTm1s1Ua BFI3BAfbFVvWK7LGdJYkHLKxZ5cUpGRzWC32RhA158Bx8gKlXFgkWGqFbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIo4YA6xuDwIeXZvxYlNjGMitRB6MB8GA1UdIwQY MBaAFHGGVMuO0/VdXGCXLTEPXtYgS0/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1laVXk0N1Q5VjFjWUpjdE1ROWUxaUJMVC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9mZmU1NjctMjdlNi00YTY0LWJhZjQt YTI4YmNlNWQ1ZGE1LzEvaWpoZ0RyRzRQQWg1ZG1fRmlVMk1ZeUsxRUhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9mZmU1NjctMjdlNi00YTY0LWJhZjQtYTI4YmNlNWQ1ZGE1 LzEvY1laVXk0N1Q5VjFjWUpjdE1ROWUxaUJMVC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1axAMA0G CSqGSIb3DQEBCwUAA4IBAQAufWEz9bCN9SEhjW1MSF+78Gc1u//uVlq/KQOOAEc6 /NOEW7lTAhkKnEKM02h10XW5WrmUbFjAGWKn8rU5CpU/mapKuxPr0OyA+NX7RY6U 5C9txcyvb3WGrHmcUuxYaCYxiylnMV1E3SiPHhZmf/g1G49MfMGvMZ2aYxrWl2cL iP5HnxBLE7NDLedTRuxJFN9N68gAQ0DZD97qQTY5BMWlftF8w26ZomZ75LRip5R3 VObvbrY99YGkbLF6szvo0jA8ulq7lKQdMKpQX7a/N7DlvBqYT9TcrsiOUPuRxbkq KLlpAwsmR3UGu1hUJgXPnUvs21MYjA7XNMzecSWEUBsi -----END CERTIFICATE-----Generated at Fri Dec 19 09:25:24 2025 by rpki-client