This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/i2yAgFstU1xTuiGIRWj_e6Noluk.roa File: i2yAgFstU1xTuiGIRWj_e6Noluk.roa (raw, json) Hash identifier: XOaEJ5pn9DkIBhZJujfClqxVAgpFNcUhCx4QyWEne60= Subject key identifier: 8B:6C:80:80:5B:2D:53:5C:53:BA:21:88:45:68:FF:7B:A3:68:96:E9 Certificate issuer: /CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2 Certificate serial: 019ADF72B69A433FEF9EC9B5E3ADA0BED164 Authority key identifier: CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/i2yAgFstU1xTuiGIRWj_e6Noluk.roa Signing time: Tue 02 Dec 2025 14:23:48 +0000 ROA not before: Tue 02 Dec 2025 14:23:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9092 IP address blocks: 213.156.224.0/20 maxlen: 20 213.156.240.0/21 maxlen: 21 213.156.245.0/24 maxlen: 24 2a00:db0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 09:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:72:b6:9a:43:3f:ef:9e:c9:b5:e3:ad:a0:be:d1:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2 Validity Not Before: Dec 2 14:23:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8b6c80805b2d535c53ba21884568ff7ba36896e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3d:c5:a9:63:b5:5d:0c:74:65:2a:ac:a1:0a: 6d:5c:bb:00:a6:17:22:4b:9f:56:91:f1:9d:d3:fc: d2:4a:c9:09:24:9d:f4:a1:99:51:02:5c:f7:d2:de: ae:3b:ca:02:2c:49:05:43:8e:6c:63:84:fb:55:6a: 89:94:3f:67:f4:9d:16:cc:45:e7:76:9b:35:00:14: a1:72:b2:af:78:1e:9d:09:b2:1f:d2:d1:f8:35:41: a9:ba:04:0b:9e:69:a9:55:c7:f3:74:65:ff:c4:20: 7b:af:8e:e5:9b:48:ba:71:6e:ca:5d:94:14:19:93: 38:c6:85:a5:04:ff:b0:66:b3:41:ae:93:fb:96:97: f4:24:16:5a:bc:83:43:06:31:a5:92:fc:47:ca:ca: 9b:ee:2f:03:11:87:0f:5e:15:e5:39:77:b5:50:fa: 15:cd:2b:85:00:62:f5:f5:34:81:b5:e6:18:45:ff: fd:e7:e0:01:d1:1b:16:b6:b7:3e:40:17:25:26:64: 01:44:c5:52:74:44:ba:5c:a6:6f:32:de:d7:65:1b: 9f:e6:22:cb:a3:5c:36:68:54:87:02:33:a1:41:39: e2:0c:0e:03:0f:44:55:7a:b1:9d:59:3b:a2:a7:f7: c1:6e:d1:27:03:50:6a:13:67:44:52:d7:fa:70:24: fa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:6C:80:80:5B:2D:53:5C:53:BA:21:88:45:68:FF:7B:A3:68:96:E9 X509v3 Authority Key Identifier: keyid:CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/i2yAgFstU1xTuiGIRWj_e6Noluk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.156.224.0-213.156.247.255 IPv6: 2a00:db0::/32 Signature Algorithm: sha256WithRSAEncryption 28:b8:b0:49:47:5f:52:a2:c6:3f:95:7e:16:fd:7e:57:08:57: 65:25:49:02:7e:f2:89:52:10:e3:b0:63:58:e1:81:22:25:e2: 0a:6e:fe:87:95:d0:c8:06:5f:9f:c8:2e:17:69:04:9b:a2:44: 2d:96:7f:2a:ff:41:c5:87:64:32:e2:d3:29:29:2c:66:37:94: 6e:b7:7a:60:36:cd:82:76:7e:16:a5:f9:4e:11:7d:8a:d6:88: ca:6a:fa:d8:6c:8e:b5:d1:2c:a5:e7:b9:a7:ba:a2:1a:88:1c: f6:5d:24:05:80:d2:43:44:74:87:6a:f2:18:a3:07:c3:e0:6e: 5e:6b:20:3d:26:6e:76:d9:92:b3:2a:e8:08:31:fc:90:f8:f2: 7e:37:2f:1f:f0:f1:d0:0d:6e:c4:b4:94:0c:cb:44:f9:b7:89: 45:09:1f:7a:fa:27:24:36:24:bc:bf:a8:f8:b2:73:17:df:2c: 24:3b:96:5e:e4:8c:20:f5:58:b3:5e:c1:b9:a9:64:72:4c:60: 14:0c:f2:04:63:8f:ac:26:fb:b4:65:d1:22:bf:93:b1:b1:e6: 64:c7:c3:9d:83:59:97:55:69:9e:69:01:e1:d6:ae:97:3b:a0: 65:38:24:d6:d5:3e:b7:8e:1a:f7:c9:1b:7b:e3:a7:06:83:8a: 59:0f:ab:6b -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZrfcraaQz/vnsm1462gvtFkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzRiMTMzODdmYWIxZGNmOGI2N2YxNmEwYTQzNzYwODYw MGM0YzIwHhcNMjUxMjAyMTQyMzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjZjODA4MDViMmQ1MzVjNTNiYTIxODg0NTY4ZmY3YmEzNjg5NmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT3FqWO1XQx0ZSqsoQptXLsAphci S59WkfGd0/zSSskJJJ30oZlRAlz30t6uO8oCLEkFQ45sY4T7VWqJlD9n9J0WzEXn dps1ABShcrKveB6dCbIf0tH4NUGpugQLnmmpVcfzdGX/xCB7r47lm0i6cW7KXZQU GZM4xoWlBP+wZrNBrpP7lpf0JBZavINDBjGlkvxHysqb7i8DEYcPXhXlOXe1UPoV zSuFAGL19TSBteYYRf/95+AB0RsWtrc+QBclJmQBRMVSdES6XKZvMt7XZRuf5iLL o1w2aFSHAjOhQTniDA4DD0RVerGdWTuip/fBbtEnA1BqE2dEUtf6cCT6zQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFItsgIBbLVNcU7ohiEVo/3ujaJbpMB8GA1UdIwQY MBaAFMo0sTOH+rHc+LZ/FqCkN2CGAMTCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpTeE00ZjZzZHo0dG44V29LUTNZSVlBeE1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xMTdjYTMtYjYwMy00ZGI4LTk2MjYt MDQwNTIzNGFiM2YxLzEvaTJ5QWdGc3RVMXhUdWlHSVJXal9lNk5vbHVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8xMTdjYTMtYjYwMy00ZGI4LTk2MjYtMDQwNTIzNGFiM2Yx LzEveWpTeE00ZjZzZHo0dG44V29LUTNZSVlBeE1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAXVnOAD BAPVnPAwDQQCAAIwBwMFACoADbAwDQYJKoZIhvcNAQELBQADggEBACi4sElHX1Ki xj+Vfhb9flcIV2UlSQJ+8olSEOOwY1jhgSIl4gpu/oeV0MgGX5/ILhdpBJuiRC2W fyr/QcWHZDLi0ykpLGY3lG63emA2zYJ2fhal+U4RfYrWiMpq+thsjrXRLKXnuae6 ohqIHPZdJAWA0kNEdIdq8hijB8Pgbl5rID0mbnbZkrMq6Agx/JD48n43Lx/w8dAN bsS0lAzLRPm3iUUJH3r6JyQ2JLy/qPiycxffLCQ7ll7kjCD1WLNewbmpZHJMYBQM 8gRjj6wm+7Rl0SK/k7Gx5mTHw52DWZdVaZ5pAeHWrpc7oGU4JNbVPreOGvfJG3vj pwaDilkPq2s= -----END CERTIFICATE-----Generated at Thu Dec 4 13:47:05 2025 by rpki-client