This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/iXueNLg2YHA4AtVuNk2-_05ruYc.roa File: iXueNLg2YHA4AtVuNk2-_05ruYc.roa (raw, json) Hash identifier: HtBZN3M7Ui+z2EtcVA5dF8igPoxnEs2Z1A040xU05DY= Subject key identifier: 89:7B:9E:34:B8:36:60:70:38:02:D5:6E:36:4D:BE:FF:4E:6B:B9:87 Certificate issuer: /CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0 Certificate serial: 019ABF6E687FBACEFB793DEC4C7390FA049E Authority key identifier: DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/iXueNLg2YHA4AtVuNk2-_05ruYc.roa Signing time: Wed 26 Nov 2025 09:11:15 +0000 ROA not before: Wed 26 Nov 2025 09:11:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51647 IP address blocks: 194.104.80.0/22 maxlen: 22 194.104.84.0/24 maxlen: 24 2a04:9fc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:6e:68:7f:ba:ce:fb:79:3d:ec:4c:73:90:fa:04:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0 Validity Not Before: Nov 26 09:11:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=897b9e34b83660703802d56e364dbeff4e6bb987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bc:69:08:8d:75:7b:c1:08:53:f7:41:01:da: c2:65:5a:08:98:59:bb:fc:01:2f:53:39:85:71:e1: 79:d7:ba:4d:56:c2:ad:c8:fb:32:74:48:b0:66:c2: b2:37:bc:84:c4:ad:2d:38:3c:cf:84:57:70:9a:53: 74:2f:65:ad:2f:5c:33:8e:be:3b:cc:27:87:f6:de: 17:ce:2e:36:f2:e7:c8:c0:5d:b4:cf:55:e4:fd:ce: 55:8a:36:b7:77:18:20:a9:82:9e:56:66:04:85:e6: e0:a8:23:09:c5:dc:8b:82:77:d9:4a:2d:0e:bb:60: 4a:90:3b:51:e7:b6:eb:87:36:8c:c1:f2:5a:bd:03: cd:1c:70:bd:92:38:70:b4:ef:3c:d1:54:e9:8a:50: d3:f3:25:c9:1c:ea:22:a2:39:17:e5:dd:0d:ee:84: 30:d0:ff:3a:93:b6:63:9d:ad:59:2a:f0:33:23:1f: 14:e6:6d:c2:d3:42:13:b5:c8:5c:55:cf:a1:63:42: 74:7f:65:33:9c:4c:79:77:34:13:ff:f7:e5:9b:9e: 8e:66:c1:a8:45:32:ec:59:dc:f0:4c:23:c7:5d:86: 26:ae:91:4d:98:2d:de:76:ed:f4:ff:2f:08:f0:cd: 9a:87:c8:49:bc:eb:fc:43:0a:35:4d:4f:85:c4:f1: 2a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7B:9E:34:B8:36:60:70:38:02:D5:6E:36:4D:BE:FF:4E:6B:B9:87 X509v3 Authority Key Identifier: keyid:DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/iXueNLg2YHA4AtVuNk2-_05ruYc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.104.80.0-194.104.84.255 IPv6: 2a04:9fc0::/29 Signature Algorithm: sha256WithRSAEncryption 11:ec:ec:d3:8a:d2:0c:59:74:53:e5:8c:a8:68:63:a8:06:b4: a6:e7:95:8a:22:b1:ae:a0:d8:bf:c4:7c:d9:c1:9a:10:fa:d4: f0:99:c1:d1:12:2c:97:cd:6f:d6:a4:92:f4:f4:58:1e:69:c6: fc:c6:8b:9b:0f:b4:b2:9b:44:8f:b8:ab:d3:a1:ad:b0:5d:13: e7:6c:22:ad:2f:29:7e:f6:99:dc:b0:2f:fd:6d:e8:77:28:14: d2:bb:36:4d:91:97:23:a2:54:6d:2d:6d:05:9d:da:ef:d9:64: 87:0b:14:83:4a:ad:9d:d0:f9:e8:4a:96:89:51:85:d3:a6:7e: e3:f1:10:0c:11:7b:d8:7d:55:69:20:ec:13:16:63:fe:c8:25: 99:79:1a:11:a9:cc:80:40:b4:c5:ce:3f:1a:b9:ab:96:3c:fa: df:f5:12:ed:aa:4e:d6:0e:7b:b3:c5:94:f2:12:03:49:1f:28: 9c:ba:5e:28:6b:f0:bc:a5:c1:ec:6d:1f:58:f5:24:a0:92:68: c5:47:95:15:2a:58:6b:b4:be:e7:06:95:6f:07:62:65:fa:5e: 40:6e:50:54:59:08:ab:41:9f:bc:82:46:c1:9e:fe:46:61:f8: 95:77:ea:79:70:cc:ae:d3:d7:8c:6c:aa:6f:e7:cb:f3:7c:52: 93:aa:09:23 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZq/bmh/us77eT3sTHOQ+gSeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMDMwYWY4Yzc1MzhiOWM1YWY4NTJmMWM0MmExNzVhYWY0 NmY3ZTAwHhcNMjUxMTI2MDkxMTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTdiOWUzNGI4MzY2MDcwMzgwMmQ1NmUzNjRkYmVmZjRlNmJiOTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLxpCI11e8EIU/dBAdrCZVoImFm7 /AEvUzmFceF517pNVsKtyPsydEiwZsKyN7yExK0tODzPhFdwmlN0L2WtL1wzjr47 zCeH9t4Xzi428ufIwF20z1Xk/c5Vija3dxggqYKeVmYEhebgqCMJxdyLgnfZSi0O u2BKkDtR57brhzaMwfJavQPNHHC9kjhwtO880VTpilDT8yXJHOoiojkX5d0N7oQw 0P86k7Zjna1ZKvAzIx8U5m3C00ITtchcVc+hY0J0f2UznEx5dzQT//flm56OZsGo RTLsWdzwTCPHXYYmrpFNmC3edu30/y8I8M2ah8hJvOv8Qwo1TU+FxPEqTwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFIl7njS4NmBwOALVbjZNvv9Oa7mHMB8GA1UdIwQY MBaAFNwDCvjHU4ucWvhS8cQqF1qvRvfgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0FNSy1NZFRpNXhhLUZMeHhDb1hXcTlHOS1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84ZjVlNzUtMTMzNC00ZmIwLTlmNmEt YmRkYzE4YzdhM2YzLzEvaVh1ZU5MZzJZSEE0QXRWdU5rMi1fMDVydVljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My84ZjVlNzUtMTMzNC00ZmIwLTlmNmEtYmRkYzE4YzdhM2Yz LzEvM0FNSy1NZFRpNXhhLUZMeHhDb1hXcTlHOS1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBATCaFAD BADCaFQwDQQCAAIwBwMFAyoEn8AwDQYJKoZIhvcNAQELBQADggEBABHs7NOK0gxZ dFPljKhoY6gGtKbnlYoisa6g2L/EfNnBmhD61PCZwdESLJfNb9akkvT0WB5pxvzG i5sPtLKbRI+4q9OhrbBdE+dsIq0vKX72mdywL/1t6HcoFNK7Nk2RlyOiVG0tbQWd 2u/ZZIcLFINKrZ3Q+ehKlolRhdOmfuPxEAwRe9h9VWkg7BMWY/7IJZl5GhGpzIBA tMXOPxq5q5Y8+t/1Eu2qTtYOe7PFlPISA0kfKJy6Xihr8LylwextH1j1JKCSaMVH lRUqWGu0vucGlW8HYmX6XkBuUFRZCKtBn7yCRsGe/kZh+JV36nlwzK7T14xsqm/n y/N8UpOqCSM= -----END CERTIFICATE-----Generated at Sat Dec 6 01:49:50 2025 by rpki-client