This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/ICedpTVv08meK9II1cBPgCJTicI.roa File: ICedpTVv08meK9II1cBPgCJTicI.roa (raw, json) Hash identifier: q6euimSEyHZyFiTMr+so6/V5m+CeZ8G0Nbh+UQRPldU= Subject key identifier: 20:27:9D:A5:35:6F:D3:C9:9E:2B:D2:08:D5:C0:4F:80:22:53:89:C2 Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8 Certificate serial: 019AA2B88E6C0162B3B24A8B3C8016A2220F Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/ICedpTVv08meK9II1cBPgCJTicI.roa Signing time: Thu 20 Nov 2025 19:23:15 +0000 ROA not before: Thu 20 Nov 2025 19:23:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211192 IP address blocks: 168.199.128.0/24 maxlen: 24 168.199.130.0/24 maxlen: 24 168.199.194.0/24 maxlen: 24 168.199.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 30 Nov 2025 16:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a2:b8:8e:6c:01:62:b3:b2:4a:8b:3c:80:16:a2:22:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8 Validity Not Before: Nov 20 19:23:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=20279da5356fd3c99e2bd208d5c04f80225389c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:87:4f:be:e5:27:7a:a8:da:d4:54:43:c5:d8: f4:a1:7e:ab:0f:5b:b2:0e:83:26:2d:44:bb:1e:7c: 8f:9e:09:d0:35:63:21:b7:11:e8:fa:27:bf:d6:48: 7c:f7:80:88:74:f6:ce:ab:e8:25:a0:f8:b1:de:de: e4:0a:9d:65:b3:91:80:bc:76:44:ac:f7:87:f8:7b: 08:f2:87:af:78:c3:83:7f:c5:f5:f3:0a:f3:f0:ce: 15:bf:4b:bb:7f:55:5a:5c:19:4e:71:b2:e8:ba:81: 99:9f:a3:ff:99:ea:39:8c:30:9a:02:f8:90:62:e8: 12:ea:2e:c0:ec:d4:be:04:94:5b:93:32:38:da:f4: bf:c0:3f:63:eb:ad:d2:0e:be:4c:4f:d7:8a:67:f4: b8:41:46:f3:4e:98:39:56:1b:db:01:92:a1:6c:bb: a5:25:ed:03:6c:c8:d9:5d:ff:30:a9:63:72:94:26: 57:97:5b:b7:36:de:a8:61:89:83:c8:37:f5:7d:ce: 8b:c4:bb:75:c9:11:5c:1a:04:22:74:5d:54:c5:aa: 66:ea:a1:dd:11:c7:82:5d:d9:a4:05:51:ef:3d:79: e2:02:a0:a6:5e:5d:89:3d:19:ac:22:61:6f:b4:65: ce:59:eb:92:25:37:81:32:fc:dc:7b:01:90:1f:85: 90:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:27:9D:A5:35:6F:D3:C9:9E:2B:D2:08:D5:C0:4F:80:22:53:89:C2 X509v3 Authority Key Identifier: keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/ICedpTVv08meK9II1cBPgCJTicI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.199.128.0/24 168.199.130.0/24 168.199.194.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:52:5e:a6:17:84:e2:af:11:8f:0d:5f:43:01:a4:56:e2:9c: e4:6d:24:a3:fc:5f:7d:6d:84:dc:48:88:16:96:8f:06:7b:5e: a7:d0:0e:a1:8a:b9:48:d5:8e:74:83:e1:9f:fa:90:03:dd:cf: 21:c7:a7:1c:2e:3d:03:4c:5d:d5:9d:36:d7:e5:e8:82:e0:0f: ba:d2:58:9b:23:70:2f:c5:17:4f:3a:81:3d:71:de:d5:68:78: 1c:8d:ff:40:cd:81:c9:0d:ff:c6:04:74:e8:c7:0d:90:29:57: d6:c8:2e:9a:57:07:fb:9a:64:ab:c8:26:ea:90:00:4c:cf:ff: 78:b1:79:99:0a:3e:22:71:58:25:b3:cd:09:f1:cf:a3:41:c5: 26:07:bf:9c:eb:a1:47:6a:76:ce:4b:1a:53:d7:cf:51:30:17: a0:32:fd:bf:16:d5:ac:36:31:2e:16:e3:30:62:c2:ca:bc:64: e6:90:80:13:9e:38:af:96:bb:fe:52:65:c2:63:3e:25:de:e3: 5c:b9:40:b0:d8:fe:ad:d6:47:b4:ec:f7:a2:7f:cd:d1:54:7a: d8:cd:9d:99:c2:b6:1f:7d:98:6f:a2:ed:b3:49:36:ab:ba:29: 50:38:31:2c:a4:47:55:e8:b1:73:7f:14:4d:0c:cf:a3:c2:d7: 81:cb:d6:4e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqiuI5sAWKzskqLPIAWoiIPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4 ODE3ZDgwHhcNMjUxMTIwMTkyMzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDI3OWRhNTM1NmZkM2M5OWUyYmQyMDhkNWMwNGY4MDIyNTM4OWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4dPvuUneqja1FRDxdj0oX6rD1uy DoMmLUS7HnyPngnQNWMhtxHo+ie/1kh894CIdPbOq+gloPix3t7kCp1ls5GAvHZE rPeH+HsI8oeveMODf8X18wrz8M4Vv0u7f1VaXBlOcbLouoGZn6P/meo5jDCaAviQ YugS6i7A7NS+BJRbkzI42vS/wD9j663SDr5MT9eKZ/S4QUbzTpg5VhvbAZKhbLul Je0DbMjZXf8wqWNylCZXl1u3Nt6oYYmDyDf1fc6LxLt1yRFcGgQidF1Uxapm6qHd EceCXdmkBVHvPXniAqCmXl2JPRmsImFvtGXOWeuSJTeBMvzcewGQH4WQywIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCAnnaU1b9PJnivSCNXAT4AiU4nCMB8GA1UdIwQY MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt MmQxOTE4YmExYzBlLzEvSUNlZHBUVnYwOG1lSzlJSTFjQlBnQ0pUaWNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAqMeAAwQA qMeCAwQBqMfCMA0GCSqGSIb3DQEBCwUAA4IBAQAOUl6mF4TirxGPDV9DAaRW4pzk bSSj/F99bYTcSIgWlo8Ge16n0A6hirlI1Y50g+Gf+pAD3c8hx6ccLj0DTF3VnTbX 5eiC4A+60libI3AvxRdPOoE9cd7VaHgcjf9AzYHJDf/GBHToxw2QKVfWyC6aVwf7 mmSryCbqkABMz/94sXmZCj4icVgls80J8c+jQcUmB7+c66FHanbOSxpT189RMBeg Mv2/FtWsNjEuFuMwYsLKvGTmkIATnjivlrv+UmXCYz4l3uNcuUCw2P6t1ke07Pei f83RVHrYzZ2ZwrYffZhvou2zSTaruilQODEspEdV6LFzfxRNDM+jwteBy9ZO -----END CERTIFICATE-----Generated at Sat Nov 29 23:18:57 2025 by rpki-client