This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/8RmtFz3Rq55Fg4owmHHgG1BV5oU.roa File: 8RmtFz3Rq55Fg4owmHHgG1BV5oU.roa (raw, json) Hash identifier: ei1m2AbBqXEdjX/DRI3ctvEArwsDGs3MvsU4iJV6kEM= Subject key identifier: F1:19:AD:17:3D:D1:AB:9E:45:83:8A:30:98:71:E0:1B:50:55:E6:85 Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 019AB508F8F359822BF7EE53D1E05F91F919 Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/8RmtFz3Rq55Fg4owmHHgG1BV5oU.roa Signing time: Mon 24 Nov 2025 08:44:15 +0000 ROA not before: Mon 24 Nov 2025 08:44:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203674 IP address blocks: 195.216.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:08:f8:f3:59:82:2b:f7:ee:53:d1:e0:5f:91:f9:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: Nov 24 08:44:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f119ad173dd1ab9e45838a309871e01b5055e685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d5:3e:3f:b3:ce:79:1e:81:bb:7a:bf:54:f4: bb:b9:0d:69:04:4c:2a:ec:3d:5a:70:e6:d2:2a:31: db:37:cd:90:ab:bf:16:b9:24:cf:ea:a4:5c:4e:f0: 64:4c:80:8d:16:1a:eb:a0:ab:09:04:be:34:0d:ac: 85:25:8a:39:82:49:28:a4:f0:48:35:f4:aa:dd:5d: 35:06:92:7c:4c:eb:d5:c7:7e:ec:5c:80:11:e7:2d: 4a:b3:8a:37:e3:0a:13:12:8d:e2:3e:86:15:4d:0d: 8c:62:1b:b6:67:7b:b3:72:0e:12:fb:97:5b:9b:a5: a0:47:9d:e6:da:e0:1f:0e:6a:48:21:de:f9:f6:d4: 5a:2e:39:91:3a:47:32:8a:d9:e8:28:dd:5d:0e:c8: 5e:c4:b3:b0:83:d8:3c:9b:4e:36:76:28:8c:57:8a: 27:0b:f7:5e:ed:ad:0d:a8:86:d6:2d:8e:d3:db:c9: 97:57:9a:5a:9c:76:e8:8b:c7:94:56:b4:c1:42:c8: 52:ae:7a:51:77:b8:38:70:3f:1f:86:f5:63:f5:23: 66:44:a3:47:ab:bc:62:73:4c:a4:cc:6e:ef:d9:b8: af:0e:52:5e:c8:b5:f9:c6:34:a1:e3:96:ce:68:ab: 85:2f:62:80:bf:db:6c:b4:59:4b:38:7b:05:8b:bf: eb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:19:AD:17:3D:D1:AB:9E:45:83:8A:30:98:71:E0:1B:50:55:E6:85 X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/8RmtFz3Rq55Fg4owmHHgG1BV5oU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.187.0/24 Signature Algorithm: sha256WithRSAEncryption 32:06:2a:93:33:48:d4:6b:8e:25:a6:20:a4:5c:0a:c1:7b:13: 67:fb:09:de:9c:7e:bc:27:68:d5:a7:00:8d:ac:7c:3a:ce:d0: af:01:73:6d:ed:f0:7d:2d:7d:73:db:05:f6:35:2b:c8:e3:11: ea:a0:f8:45:61:a4:25:6e:c3:79:bf:56:77:d5:2e:be:4e:46: 4f:14:e3:b9:e9:d4:8e:62:31:5e:c0:ee:a7:1a:5e:61:3b:80: 92:6c:17:f2:47:7c:b0:29:43:42:5b:85:39:11:8c:59:eb:d0: 68:80:7e:da:ad:f6:a2:d8:16:bb:2e:08:a4:ef:10:18:3e:ef: c1:dc:66:6e:47:05:35:2a:8d:cb:6f:dd:96:71:ed:0d:4a:75: 6b:34:e6:7f:ef:df:08:32:8f:ad:f2:61:79:2e:43:81:18:d3: 02:71:d4:27:c4:1b:cc:29:5c:f9:34:6b:ee:a5:50:94:6a:b2: 63:c5:fe:fb:83:7c:b8:45:af:ac:51:6f:e1:b9:57:71:72:8a: 5c:c6:57:d3:da:66:b7:ed:1e:ac:f6:83:07:17:f9:47:e6:ce: e5:20:8d:8e:63:85:e2:c7:b2:ad:66:ad:cc:69:cd:6f:95:23: 28:db:f4:d2:ba:b7:0d:8e:06:3a:dd:c3:5e:2f:c3:37:5e:53: 05:97:0c:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq1CPjzWYIr9+5T0eBfkfkZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjUxMTI0MDg0NDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTE5YWQxNzNkZDFhYjllNDU4MzhhMzA5ODcxZTAxYjUwNTVlNjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9U+P7POeR6Bu3q/VPS7uQ1pBEwq 7D1acObSKjHbN82Qq78WuSTP6qRcTvBkTICNFhrroKsJBL40DayFJYo5gkkopPBI NfSq3V01BpJ8TOvVx37sXIAR5y1Ks4o34woTEo3iPoYVTQ2MYhu2Z3uzcg4S+5db m6WgR53m2uAfDmpIId759tRaLjmROkcyitnoKN1dDshexLOwg9g8m042diiMV4on C/de7a0NqIbWLY7T28mXV5panHboi8eUVrTBQshSrnpRd7g4cD8fhvVj9SNmRKNH q7xic0ykzG7v2bivDlJeyLX5xjSh45bOaKuFL2KAv9tstFlLOHsFi7/rAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPEZrRc90aueRYOKMJhx4BtQVeaFMB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvOFJtdEZ6M1JxNTVGZzRvd21ISGdHMUJWNW9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9i7MA0G CSqGSIb3DQEBCwUAA4IBAQAyBiqTM0jUa44lpiCkXArBexNn+wnenH68J2jVpwCN rHw6ztCvAXNt7fB9LX1z2wX2NSvI4xHqoPhFYaQlbsN5v1Z31S6+TkZPFOO56dSO YjFewO6nGl5hO4CSbBfyR3ywKUNCW4U5EYxZ69BogH7arfai2Ba7Lgik7xAYPu/B 3GZuRwU1Ko3Lb92Wce0NSnVrNOZ/798IMo+t8mF5LkOBGNMCcdQnxBvMKVz5NGvu pVCUarJjxf77g3y4Ra+sUW/huVdxcopcxlfT2ma37R6s9oMHF/lH5s7lII2OY4Xi x7KtZq3Mac1vlSMo2/TSurcNjgY63cNeL8M3XlMFlwwQ -----END CERTIFICATE-----Generated at Fri Dec 5 22:00:47 2025 by rpki-client