This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/sBn7dbjaYVUMaIuzmastb1CEXJQ.roa File: sBn7dbjaYVUMaIuzmastb1CEXJQ.roa (raw, json) Hash identifier: a21kQKL+Ve6X9Lx4MEtGW4DavCa0jYrfIsV0nlOjmOA= Subject key identifier: B0:19:FB:75:B8:DA:61:55:0C:68:8B:B3:99:AB:2D:6F:50:84:5C:94 Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8 Certificate serial: 019A78B54810C2EA33DE274762EA3A0D8524 Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/sBn7dbjaYVUMaIuzmastb1CEXJQ.roa Signing time: Wed 12 Nov 2025 15:35:37 +0000 ROA not before: Wed 12 Nov 2025 15:35:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12741 IP address blocks: 168.199.12.0/24 maxlen: 24 168.199.16.0/24 maxlen: 24 168.199.50.0/24 maxlen: 24 168.199.54.0/24 maxlen: 24 168.199.58.0/24 maxlen: 24 168.199.62.0/24 maxlen: 24 168.199.118.0/24 maxlen: 24 168.199.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 30 Nov 2025 16:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:b5:48:10:c2:ea:33:de:27:47:62:ea:3a:0d:85:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8 Validity Not Before: Nov 12 15:35:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b019fb75b8da61550c688bb399ab2d6f50845c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a9:e6:e9:d1:18:b2:7e:8a:41:66:03:04:49: e3:72:83:37:25:ad:71:65:03:10:e5:62:75:9c:4d: 37:dd:9f:eb:f7:50:d0:6a:c2:f8:9d:fa:8b:d5:a1: bb:25:f5:c1:2a:f8:f4:29:00:19:ba:58:9a:3a:2e: e6:68:91:c7:a9:77:87:bd:b6:ed:56:66:55:b2:98: 06:b0:74:6d:ee:6c:30:63:a7:46:b9:8c:86:74:90: ee:9e:52:90:a7:ee:6d:7f:10:bc:6f:73:53:b8:d0: b6:55:a5:eb:1d:37:96:53:9f:dd:78:b4:fd:aa:4f: f5:66:ed:3e:b0:ab:c5:1b:4e:ee:02:3c:0c:41:81: df:64:f7:4c:c7:5f:52:e8:97:aa:56:8a:6a:a0:2a: b6:c5:fd:20:a7:d5:31:8f:72:03:46:70:62:ae:ab: fb:51:ac:75:8c:ff:79:b8:ce:fc:3d:53:8f:24:32: fe:3f:55:59:22:a2:f3:0b:bb:24:00:e1:bc:3e:1c: 68:73:93:38:7e:94:db:eb:21:78:a6:c4:1d:0c:a5: 5a:c2:32:0f:19:f8:0e:7d:0a:a5:21:77:ec:05:a4: 30:fe:7c:2e:8b:3a:2d:28:01:22:ff:18:88:4e:a0: da:be:7f:94:3e:06:3c:90:6a:af:39:60:e2:40:a3: ae:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:19:FB:75:B8:DA:61:55:0C:68:8B:B3:99:AB:2D:6F:50:84:5C:94 X509v3 Authority Key Identifier: keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/sBn7dbjaYVUMaIuzmastb1CEXJQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.199.12.0/24 168.199.16.0/24 168.199.50.0/24 168.199.54.0/24 168.199.58.0/24 168.199.62.0/24 168.199.118.0/24 168.199.122.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:ce:95:35:eb:b8:7c:9b:51:46:5a:c0:05:97:25:f1:bb:c7: 45:60:b9:b0:95:02:33:ba:b6:77:2e:d9:44:85:f7:74:bb:55: a0:d6:fe:23:d5:83:21:22:fd:6c:ba:28:0c:89:b8:34:9a:ad: 37:e3:82:5e:dc:b1:32:ae:51:1a:54:b7:3b:1b:2b:fe:49:65: 15:0d:03:c3:16:ee:f0:b4:01:39:28:6f:bf:d8:e9:5d:45:39: c8:f7:46:38:a9:c0:ac:a5:70:44:47:ef:5b:ec:5b:36:20:33: 07:86:93:8c:94:04:19:b5:64:8c:85:20:ab:c8:5c:63:28:24: b4:2d:86:6f:e6:f6:8b:50:ee:6a:76:68:f2:a5:c7:ca:e9:b8: 52:e7:5a:b0:b8:d9:76:4d:d4:c0:06:59:c0:ce:5f:40:bb:bb: 8c:c0:08:0d:d6:b6:82:c8:4a:bf:cc:34:c5:02:49:ee:88:43: 4b:d5:50:0f:17:d2:48:9a:04:39:27:d4:03:dd:81:a2:26:91: 9e:23:df:3e:94:e5:ba:e5:ee:d1:1b:d9:3a:db:95:0e:99:e2: 95:b6:54:23:46:22:03:1d:28:e3:39:75:90:82:c4:e7:35:57: 91:af:9b:bd:85:26:6c:b9:9d:d6:11:d4:62:9b:b2:13:66:a1: 6b:ab:7a:c4 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZp4tUgQwuoz3idHYuo6DYUkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4 ODE3ZDgwHhcNMjUxMTEyMTUzNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDE5ZmI3NWI4ZGE2MTU1MGM2ODhiYjM5OWFiMmQ2ZjUwODQ1Yzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqnm6dEYsn6KQWYDBEnjcoM3Ja1x ZQMQ5WJ1nE033Z/r91DQasL4nfqL1aG7JfXBKvj0KQAZuliaOi7maJHHqXeHvbbt VmZVspgGsHRt7mwwY6dGuYyGdJDunlKQp+5tfxC8b3NTuNC2VaXrHTeWU5/deLT9 qk/1Zu0+sKvFG07uAjwMQYHfZPdMx19S6JeqVopqoCq2xf0gp9Uxj3IDRnBirqv7 Uax1jP95uM78PVOPJDL+P1VZIqLzC7skAOG8Phxoc5M4fpTb6yF4psQdDKVawjIP GfgOfQqlIXfsBaQw/nwuizotKAEi/xiITqDavn+UPgY8kGqvOWDiQKOudQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFLAZ+3W42mFVDGiLs5mrLW9QhFyUMB8GA1UdIwQY MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt MmQxOTE4YmExYzBlLzEvc0JuN2RiamFZVlVNYUl1em1hc3RiMUNFWEpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAqMcMAwQA qMcQAwQAqMcyAwQAqMc2AwQAqMc6AwQAqMc+AwQAqMd2AwQAqMd6MA0GCSqGSIb3 DQEBCwUAA4IBAQBvzpU167h8m1FGWsAFlyXxu8dFYLmwlQIzurZ3LtlEhfd0u1Wg 1v4j1YMhIv1suigMibg0mq0344Je3LEyrlEaVLc7Gyv+SWUVDQPDFu7wtAE5KG+/ 2OldRTnI90Y4qcCspXBER+9b7Fs2IDMHhpOMlAQZtWSMhSCryFxjKCS0LYZv5vaL UO5qdmjypcfK6bhS51qwuNl2TdTABlnAzl9Au7uMwAgN1raCyEq/zDTFAknuiENL 1VAPF9JImgQ5J9QD3YGiJpGeI98+lOW65e7RG9k625UOmeKVtlQjRiIDHSjjOXWQ gsTnNVeRr5u9hSZsuZ3WEdRim7ITZqFrq3rE -----END CERTIFICATE-----Generated at Sat Nov 29 23:19:17 2025 by rpki-client