This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/C9ZicXvmxm567EBbHhNa__2fy_I.roa File: C9ZicXvmxm567EBbHhNa__2fy_I.roa (raw, json) Hash identifier: spPgfi0xUOfFyLJbLIvDF9/eSBXOXpmeRtI5V43B54I= Subject key identifier: 0B:D6:62:71:7B:E6:C6:6E:7A:EC:40:5B:1E:13:5A:FF:FD:9F:CB:F2 Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0 Certificate serial: 019A7F0F1FF9071B87351BD10C37FECBD805 Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/C9ZicXvmxm567EBbHhNa__2fy_I.roa Signing time: Thu 13 Nov 2025 21:11:28 +0000 ROA not before: Thu 13 Nov 2025 21:11:28 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200019 IP address blocks: 87.120.244.0/24 maxlen: 24 185.113.8.0/24 maxlen: 24 213.111.160.0/22 maxlen: 22 213.111.164.0/22 maxlen: 22 213.111.168.0/22 maxlen: 22 213.111.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7f:0f:1f:f9:07:1b:87:35:1b:d1:0c:37:fe:cb:d8:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0 Validity Not Before: Nov 13 21:11:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0bd662717be6c66e7aec405b1e135afffd9fcbf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:98:a6:a5:9a:15:93:fb:ad:d8:61:bf:c4:bc: 12:88:0d:0e:53:41:51:50:2f:83:88:3d:54:d1:9b: b5:68:e3:b0:9a:d7:6c:12:cc:3d:90:9e:8c:04:33: 4e:2c:2e:4e:06:67:93:d1:95:71:22:07:1c:86:9c: 9d:1c:35:38:4c:70:13:be:04:0f:87:5c:8e:fe:20: c5:04:8f:d7:26:f0:b1:21:44:5b:d6:37:92:2e:8c: d9:06:e4:00:f4:a9:a3:d8:19:c6:b4:52:df:71:4e: c8:c1:26:b4:2e:8e:7d:d2:f0:ea:81:1e:59:43:46: f4:ef:fd:7b:94:97:21:3d:72:8c:38:e6:2b:a3:48: a8:0c:ac:64:90:77:bc:d2:e0:a7:52:ff:01:6b:b0: 94:40:14:78:c9:7d:91:c8:f0:46:2f:55:56:4a:c1: c0:82:2c:de:84:e9:b3:96:25:0c:64:01:3e:93:a1: 29:c5:8f:cf:67:ae:64:38:cb:02:2d:0c:8c:84:42: fc:f0:39:95:72:99:a7:25:ca:33:5d:3b:a5:6f:68: b1:f5:c7:05:b9:83:2a:8a:c1:e5:27:b4:a6:3a:da: c7:1c:76:f6:d9:b1:69:11:aa:38:33:60:46:fe:65: 49:b6:a8:1d:c4:fc:63:12:aa:ec:fa:85:e0:97:5c: 00:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D6:62:71:7B:E6:C6:6E:7A:EC:40:5B:1E:13:5A:FF:FD:9F:CB:F2 X509v3 Authority Key Identifier: keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/C9ZicXvmxm567EBbHhNa__2fy_I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.244.0/24 185.113.8.0/24 213.111.160.0/20 Signature Algorithm: sha256WithRSAEncryption 39:f3:36:d4:eb:d5:04:a6:63:d7:62:23:fd:35:71:17:0c:fe: e5:65:cf:7d:c3:e5:1c:cf:c1:aa:1d:39:1c:2b:84:65:5c:3e: 5c:3c:c0:8b:ca:ac:ff:43:9a:fe:8e:be:46:cb:6c:c6:1c:51: 76:c7:21:e8:69:89:46:8b:b3:e7:3a:48:44:9b:8e:08:f9:e4: eb:69:9c:42:15:66:6b:8d:45:3b:00:0f:48:d0:43:c4:29:72: 00:89:42:c0:79:9f:0a:53:6b:58:b0:0e:0c:34:af:dc:34:00: 45:0f:c3:9e:8a:fe:8d:88:33:e6:41:76:b4:77:8f:8c:4c:11: 96:58:86:f2:14:19:46:cf:bc:90:7e:60:39:45:88:f8:5d:c7: c8:63:3b:02:10:56:e3:ee:9b:75:1d:4b:34:6f:1d:6c:89:e7: 2d:07:0b:1d:d2:1e:a6:cd:24:6e:9c:f1:68:39:4a:29:b5:c8: e7:5f:32:ff:3a:79:91:54:0f:fc:2b:5f:c7:a5:89:ed:08:5e: 2f:a9:7b:90:ee:64:58:ce:37:3b:4b:dc:b9:90:db:b9:71:a2: aa:d9:80:ca:55:29:da:f9:fa:6c:e9:53:f1:52:70:12:e7:48: 90:bd:a8:00:a9:36:53:eb:e8:81:37:ef:6e:68:32:1b:e6:5d: d5:c7:5f:a1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZp/Dx/5BxuHNRvRDDf+y9gFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMWQ2ZWJhNDYzYjc1NjRhYmZhZTkzOGI0NmVkNDcxODdk ZTBlYzAwHhcNMjUxMTEzMjExMTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmQ2NjI3MTdiZTZjNjZlN2FlYzQwNWIxZTEzNWFmZmZkOWZjYmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpimpZoVk/ut2GG/xLwSiA0OU0FR UC+DiD1U0Zu1aOOwmtdsEsw9kJ6MBDNOLC5OBmeT0ZVxIgcchpydHDU4THATvgQP h1yO/iDFBI/XJvCxIURb1jeSLozZBuQA9Kmj2BnGtFLfcU7IwSa0Lo590vDqgR5Z Q0b07/17lJchPXKMOOYro0ioDKxkkHe80uCnUv8Ba7CUQBR4yX2RyPBGL1VWSsHA gizehOmzliUMZAE+k6EpxY/PZ65kOMsCLQyMhEL88DmVcpmnJcozXTulb2ix9ccF uYMqisHlJ7SmOtrHHHb22bFpEao4M2BG/mVJtqgdxPxjEqrs+oXgl1wAUQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAvWYnF75sZueuxAWx4TWv/9n8vyMB8GA1UdIwQY MBaAFNsdbrpGO3Vkq/rpOLRu1HGH3g7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAt NmYyY2Y0ZjAzY2ViLzEvQzlaaWNYdm14bTU2N0VCYkhoTmFfXzJmeV9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAtNmYyY2Y0ZjAzY2Vi LzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAV3j0AwQA uXEIAwQE1W+gMA0GCSqGSIb3DQEBCwUAA4IBAQA58zbU69UEpmPXYiP9NXEXDP7l Zc99w+Ucz8GqHTkcK4RlXD5cPMCLyqz/Q5r+jr5Gy2zGHFF2xyHoaYlGi7PnOkhE m44I+eTraZxCFWZrjUU7AA9I0EPEKXIAiULAeZ8KU2tYsA4MNK/cNABFD8Oeiv6N iDPmQXa0d4+MTBGWWIbyFBlGz7yQfmA5RYj4XcfIYzsCEFbj7pt1HUs0bx1siect Bwsd0h6mzSRunPFoOUoptcjnXzL/OnmRVA/8K1/HpYntCF4vqXuQ7mRYzjc7S9y5 kNu5caKq2YDKVSna+fps6VPxUnAS50iQvagAqTZT6+iBN+9uaDIb5l3Vx1+h -----END CERTIFICATE-----Generated at Fri Dec 5 17:25:31 2025 by rpki-client