This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/43ITMqjm9zNwDIyvPhKPJbFoowM.roa File: 43ITMqjm9zNwDIyvPhKPJbFoowM.roa (raw, json) Hash identifier: ItPmOpwL3uCg5y8usfxiTk7wzxxLuNjwWzxccHuTdEI= Subject key identifier: E3:72:13:32:A8:E6:F7:33:70:0C:8C:AF:3E:12:8F:25:B1:68:A3:03 Certificate issuer: /CN=aaab6111e004c2a044f168b8d28273cf6744f3a8 Certificate serial: 019AA5EB0940798C797B0D790AF20EE4A95F Authority key identifier: AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/43ITMqjm9zNwDIyvPhKPJbFoowM.roa Signing time: Fri 21 Nov 2025 10:17:15 +0000 ROA not before: Fri 21 Nov 2025 10:17:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215714 IP address blocks: 176.32.48.0/23 maxlen: 23 176.32.48.0/24 maxlen: 24 176.32.49.0/24 maxlen: 24 176.32.52.0/23 maxlen: 23 176.32.52.0/24 maxlen: 24 176.32.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:eb:09:40:79:8c:79:7b:0d:79:0a:f2:0e:e4:a9:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaab6111e004c2a044f168b8d28273cf6744f3a8 Validity Not Before: Nov 21 10:17:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e3721332a8e6f733700c8caf3e128f25b168a303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:be:df:96:2b:c6:a6:11:b2:13:9d:a4:9b:fd: 09:bb:bc:c7:0c:c6:89:8f:cb:e3:98:69:1e:76:31: a0:51:53:98:49:d4:33:c1:a5:82:e6:56:78:c8:ef: 7c:bc:fc:18:bd:29:eb:17:c3:b3:6b:84:ef:da:bd: 4c:84:18:72:75:44:95:89:ee:f3:9a:00:29:c3:bb: 4f:4a:03:ad:a1:70:46:81:2a:4b:96:f2:ec:0f:88: 9b:67:7c:4b:2c:e0:5b:2a:46:c7:22:12:09:8d:a2: 47:25:a0:d2:f9:bb:da:c9:d3:b5:89:a8:7d:71:a7: da:ed:c4:0d:2e:aa:a0:4a:d9:2a:0d:ba:5c:9b:5e: 93:28:df:fa:e1:63:df:d5:89:a4:ce:71:6d:ad:f7: 04:22:27:fc:3d:67:d4:22:92:cb:7e:8c:6d:21:03: d5:28:86:bc:4c:9e:ed:48:92:95:88:cf:dc:a9:b7: 2e:30:e8:4c:8d:84:c2:20:02:8b:d1:16:41:d7:63: 15:70:ef:70:bb:71:fc:75:80:2e:3b:a8:2f:bf:e2: 51:24:04:16:c8:2e:58:75:55:b7:b1:6f:6d:1a:5e: d2:e4:f0:76:74:fa:9e:8c:5e:05:99:38:7d:02:d2: 5d:87:a6:20:04:08:9c:4b:82:fd:71:a2:b5:f0:5c: 08:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:72:13:32:A8:E6:F7:33:70:0C:8C:AF:3E:12:8F:25:B1:68:A3:03 X509v3 Authority Key Identifier: keyid:AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/43ITMqjm9zNwDIyvPhKPJbFoowM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.32.48.0/23 176.32.52.0/23 Signature Algorithm: sha256WithRSAEncryption 96:87:d4:50:1c:b5:71:ed:d9:bb:ea:5a:8a:be:0c:05:68:26: 6f:bc:2a:bd:65:ec:99:bf:bd:60:45:f4:88:6c:5b:0a:20:22: 72:16:9d:0f:65:0d:2d:17:24:99:d6:95:69:15:11:5e:b7:61: 33:bc:ac:76:89:3e:21:fe:5e:8d:96:65:a8:9f:f4:3d:3f:8c: 06:be:be:d6:8d:82:2d:42:0b:9c:7e:bb:52:49:22:a8:8c:a1: a7:5c:10:c0:a0:1a:89:6c:43:62:06:4c:15:89:cd:75:6a:5c: 8c:a4:98:f9:4a:a8:fc:d1:71:33:1d:40:89:ba:25:28:a9:a5: 35:62:79:4b:86:c2:a3:04:dd:64:67:67:85:e4:05:f5:98:08: b8:34:c7:e4:9e:70:cb:9e:7b:64:60:43:56:e6:17:d3:39:27: 74:66:37:72:83:9f:41:dd:90:07:dd:ca:8c:1d:1a:5e:0f:38: a3:0d:a2:3a:d6:48:ec:cb:84:ec:5b:c2:45:89:7c:20:ed:91: 6b:5d:09:80:5b:9f:e0:fb:7a:f7:31:ee:9d:86:80:52:c2:d2: 4c:05:d9:62:84:7d:cb:ba:2e:f0:85:57:d0:2e:0b:fa:e8:aa: 9e:5a:40:76:11:2b:1f:67:b9:1b:df:cf:86:bb:3d:13:b9:1c: c5:1c:91:ba -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZql6wlAeYx5ew15CvIO5KlfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYWI2MTExZTAwNGMyYTA0NGYxNjhiOGQyODI3M2NmNjc0 NGYzYTgwHhcNMjUxMTIxMTAxNzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzcyMTMzMmE4ZTZmNzMzNzAwYzhjYWYzZTEyOGYyNWIxNjhhMzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi77flivGphGyE52km/0Ju7zHDMaJ j8vjmGkedjGgUVOYSdQzwaWC5lZ4yO98vPwYvSnrF8Oza4Tv2r1MhBhydUSVie7z mgApw7tPSgOtoXBGgSpLlvLsD4ibZ3xLLOBbKkbHIhIJjaJHJaDS+bvaydO1iah9 cafa7cQNLqqgStkqDbpcm16TKN/64WPf1YmkznFtrfcEIif8PWfUIpLLfoxtIQPV KIa8TJ7tSJKViM/cqbcuMOhMjYTCIAKL0RZB12MVcO9wu3H8dYAuO6gvv+JRJAQW yC5YdVW3sW9tGl7S5PB2dPqejF4FmTh9AtJdh6YgBAicS4L9caK18FwIeQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFONyEzKo5vczcAyMrz4SjyWxaKMDMB8GA1UdIwQY MBaAFKqrYRHgBMKgRPFouNKCc89nRPOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXF0aEVlQUV3cUJFOFdpNDBvSnp6MmRFODZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNGFkMGYtMGIzMC00MWZmLWE4ZDkt ODJlZGVkYTdmZTdhLzEvNDNJVE1xam05ek53REl5dlBoS1BKYkZvb3dNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNGFkMGYtMGIzMC00MWZmLWE4ZDktODJlZGVkYTdmZTdh LzEvcXF0aEVlQUV3cUJFOFdpNDBvSnp6MmRFODZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBsCAwAwQB sCA0MA0GCSqGSIb3DQEBCwUAA4IBAQCWh9RQHLVx7dm76lqKvgwFaCZvvCq9ZeyZ v71gRfSIbFsKICJyFp0PZQ0tFySZ1pVpFRFet2EzvKx2iT4h/l6NlmWon/Q9P4wG vr7WjYItQgucfrtSSSKojKGnXBDAoBqJbENiBkwVic11alyMpJj5Sqj80XEzHUCJ uiUoqaU1YnlLhsKjBN1kZ2eF5AX1mAi4NMfknnDLnntkYENW5hfTOSd0Zjdyg59B 3ZAH3cqMHRpeDzijDaI61kjsy4TsW8JFiXwg7ZFrXQmAW5/g+3r3Me6dhoBSwtJM BdlihH3Lui7whVfQLgv66KqeWkB2ESsfZ7kb38+Guz0TuRzFHJG6 -----END CERTIFICATE-----Generated at Sun Dec 14 11:44:30 2025 by rpki-client