This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/i6n7cabzcI74U852jgXuOHMBOJA.roa File: i6n7cabzcI74U852jgXuOHMBOJA.roa (raw, json) Hash identifier: pEATekddwJoHDO52qVW77elDRZN916X3bk1BDKu0ZPA= Subject key identifier: 8B:A9:FB:71:A6:F3:70:8E:F8:53:CE:76:8E:05:EE:38:73:01:38:90 Certificate issuer: /CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e Certificate serial: 019B022E103C5F84832D80026EBDDC9F5A70 Authority key identifier: 2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/i6n7cabzcI74U852jgXuOHMBOJA.roa Signing time: Tue 09 Dec 2025 08:15:31 +0000 ROA not before: Tue 09 Dec 2025 08:15:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58096 IP address blocks: 45.93.4.0/22 maxlen: 22 91.213.168.0/24 maxlen: 24 91.220.69.0/24 maxlen: 24 94.141.124.0/22 maxlen: 24 185.33.228.0/22 maxlen: 32 185.154.72.0/22 maxlen: 32 185.216.192.0/23 maxlen: 32 193.105.114.0/24 maxlen: 32 193.160.204.0/23 maxlen: 32 195.170.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.crl rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:2e:10:3c:5f:84:83:2d:80:02:6e:bd:dc:9f:5a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e Validity Not Before: Dec 9 08:15:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8ba9fb71a6f3708ef853ce768e05ee3873013890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3e:59:7e:c3:7b:23:31:ee:45:5e:20:59:d3: 1a:29:c1:b3:13:10:b1:a1:53:87:28:50:ca:3d:07: a2:e2:c6:2e:2d:e3:84:6c:c3:60:0f:ef:23:a1:5f: 05:31:f6:0c:f9:b0:9a:87:ba:7c:c2:a1:1d:6e:23: fe:1d:ad:fb:35:23:67:99:f9:b5:86:f5:70:bf:2e: 12:6f:89:07:48:08:af:af:f6:46:e4:24:1b:4f:ef: 41:fd:08:ee:8c:6a:3f:97:c4:20:23:9e:f1:a4:7a: e0:6c:da:d1:87:ff:2c:87:98:2e:4f:88:b3:04:3f: 65:58:73:d8:83:42:ed:0b:ca:9f:bb:36:f9:f4:c9: ab:0a:f6:3b:e0:77:31:70:93:94:00:8a:16:b7:5c: 44:9b:d7:f4:54:70:d2:97:a6:75:aa:5a:67:7e:96: 62:b4:a9:59:3c:3c:64:54:b2:44:89:98:d1:3e:bf: 5c:15:0d:e0:70:34:18:73:18:bd:2f:f6:fc:f1:d5: 38:3f:b6:6a:c5:15:5a:70:71:bf:23:48:2c:ef:f5: 05:65:cd:df:14:11:e0:39:99:a9:85:db:bc:29:11: 13:f5:ac:8a:a3:61:6c:70:82:3e:67:96:6c:8b:45: f4:94:41:f1:17:81:f4:1b:ce:c1:99:a8:8c:a2:a7: d8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A9:FB:71:A6:F3:70:8E:F8:53:CE:76:8E:05:EE:38:73:01:38:90 X509v3 Authority Key Identifier: keyid:2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/i6n7cabzcI74U852jgXuOHMBOJA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.4.0/22 91.213.168.0/24 91.220.69.0/24 94.141.124.0/22 185.33.228.0/22 185.154.72.0/22 185.216.192.0/23 193.105.114.0/24 193.160.204.0/23 195.170.204.0/22 Signature Algorithm: sha256WithRSAEncryption a3:a0:6a:68:60:33:7f:95:14:08:08:ea:7b:af:d7:f0:9b:fe: ba:a8:fe:de:a0:71:30:4b:91:8d:46:09:b6:4e:54:79:16:24: 08:f0:46:1c:d1:bd:12:18:aa:f6:3c:03:da:62:0f:d6:2a:78: 6d:82:1d:6e:d1:7d:3e:b5:8a:fc:47:14:83:e1:e5:1e:60:17: a9:b1:86:ff:8d:f3:be:41:b4:9f:77:24:6f:be:42:5e:f1:bc: 58:b5:75:27:b0:1a:9a:c1:f1:d7:db:54:ab:d4:a5:a0:fe:ad: 8f:50:94:04:23:7a:2e:2b:e0:15:b1:3a:81:76:1c:6a:2d:cb: 65:7e:26:79:8e:07:65:98:fc:95:6f:77:4a:af:29:82:e2:c3: 98:94:62:73:87:e3:c8:8e:01:c1:a5:0b:1f:02:90:21:96:e7: 83:8b:aa:59:2a:72:c8:ab:f8:04:21:40:71:8a:9d:94:ed:f3: 74:b3:f0:5f:83:d5:4e:47:32:65:46:2a:aa:0f:3c:63:d5:62: 95:78:0a:92:78:e3:38:e9:ce:e6:4b:47:35:c6:a7:9d:ec:31: d0:b1:18:cd:3a:f0:54:e1:4f:18:12:93:89:7c:f4:66:5f:4d: 5a:38:ef:11:8c:20:57:90:4c:1f:0e:48:21:35:6a:da:17:ff: d5:dd:53:73 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZsCLhA8X4SDLYACbr3cn1pwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjODhkYjgxZmRmYmVjY2VlNzVmNGE5ZjY5OGEzYzFiM2E4 NDYyNmUwHhcNMjUxMjA5MDgxNTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmE5ZmI3MWE2ZjM3MDhlZjg1M2NlNzY4ZTA1ZWUzODczMDEzODkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1T5ZfsN7IzHuRV4gWdMaKcGzExCx oVOHKFDKPQei4sYuLeOEbMNgD+8joV8FMfYM+bCah7p8wqEdbiP+Ha37NSNnmfm1 hvVwvy4Sb4kHSAivr/ZG5CQbT+9B/QjujGo/l8QgI57xpHrgbNrRh/8sh5guT4iz BD9lWHPYg0LtC8qfuzb59MmrCvY74HcxcJOUAIoWt1xEm9f0VHDSl6Z1qlpnfpZi tKlZPDxkVLJEiZjRPr9cFQ3gcDQYcxi9L/b88dU4P7ZqxRVacHG/I0gs7/UFZc3f FBHgOZmphdu8KRET9ayKo2FscII+Z5Zsi0X0lEHxF4H0G87BmaiMoqfYVQIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFIup+3Gm83CO+FPOdo4F7jhzATiQMB8GA1UdIwQY MBaAFCyI24H9++zO519Kn2mKPBs6hGJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTElqYmdmMzc3TTduWDBxZmFZbzhHenFFWW00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hOGUwNGItMGRiYS00MGVjLWIxMjYt ZjQ1N2Q0MDRhZTJmLzEvaTZuN2NhYnpjSTc0VTg1MmpnWHVPSE1CT0pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9hOGUwNGItMGRiYS00MGVjLWIxMjYtZjQ1N2Q0MDRhZTJm LzEvTElqYmdmMzc3TTduWDBxZmFZbzhHenFFWW00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQCLV0EAwQA W9WoAwQAW9xFAwQCXo18AwQCuSHkAwQCuZpIAwQBudjAAwQAwWlyAwQBwaDMAwQC w6rMMA0GCSqGSIb3DQEBCwUAA4IBAQCjoGpoYDN/lRQICOp7r9fwm/66qP7eoHEw S5GNRgm2TlR5FiQI8EYc0b0SGKr2PAPaYg/WKnhtgh1u0X0+tYr8RxSD4eUeYBep sYb/jfO+QbSfdyRvvkJe8bxYtXUnsBqawfHX21Sr1KWg/q2PUJQEI3ouK+AVsTqB dhxqLctlfiZ5jgdlmPyVb3dKrymC4sOYlGJzh+PIjgHBpQsfApAhlueDi6pZKnLI q/gEIUBxip2U7fN0s/Bfg9VORzJlRiqqDzxj1WKVeAqSeOM46c7mS0c1xqed7DHQ sRjNOvBU4U8YEpOJfPRmX01aOO8RjCBXkEwfDkghNWraF//V3VNz -----END CERTIFICATE-----Generated at Sun Dec 14 21:34:26 2025 by rpki-client