This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/I3ZsWHPzmULplf9TtDsmYcxh8xs.roa File: I3ZsWHPzmULplf9TtDsmYcxh8xs.roa (raw, json) Hash identifier: EQaaI3wdcWSqDtw+V+uD1aY1XAs3w6aMxS9bQ2p9Afc= Subject key identifier: 23:76:6C:58:73:F3:99:42:E9:95:FF:53:B4:3B:26:61:CC:61:F3:1B Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Certificate serial: 019A73553DBC63216EBB5971E9ACCCBC7EC7 Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/I3ZsWHPzmULplf9TtDsmYcxh8xs.roa Signing time: Tue 11 Nov 2025 14:32:37 +0000 ROA not before: Tue 11 Nov 2025 14:32:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198584 IP address blocks: 87.248.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:55:3d:bc:63:21:6e:bb:59:71:e9:ac:cc:bc:7e:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Validity Not Before: Nov 11 14:32:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=23766c5873f39942e995ff53b43b2661cc61f31b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8e:4f:d2:55:31:31:22:92:25:3f:8b:51:44: d1:9f:4d:79:b1:83:b3:66:30:af:fb:47:2c:be:04: 1b:58:7d:f6:ef:12:0c:a7:9e:e7:60:ad:b3:e7:0a: fe:e4:8a:23:54:db:ae:c7:f0:a4:0e:9d:d4:7b:b6: 57:34:ef:73:c0:96:c1:ef:1d:9e:fe:be:d4:e7:8b: 08:1e:20:6b:c8:5c:c2:3c:5f:8c:f4:6b:73:15:5e: 37:d0:38:38:7e:0c:85:a6:93:b4:a1:37:67:22:82: c5:0c:4e:8e:3f:a6:8e:18:bc:8a:7c:94:61:8c:0c: 8d:f4:a7:7a:27:d6:f2:39:91:be:69:3b:45:75:c0: 92:6e:3c:ef:3b:bc:48:cd:09:7b:07:77:9d:1b:ff: 2c:27:ee:0a:0d:05:55:8c:e1:30:72:a1:0c:b1:e5: 7e:aa:8e:3a:ca:a6:bd:53:ec:b5:52:06:a8:2d:78: 13:6c:36:46:a1:6a:9d:df:b0:aa:88:fd:de:66:ae: e2:08:a0:27:30:37:ba:f8:1b:56:2b:4c:50:b4:99: 1d:38:6c:3a:b7:93:93:03:60:f9:3e:63:5c:5f:11: 82:3e:bb:11:c8:89:91:2b:c4:b6:24:a4:50:95:21: 23:9d:94:45:87:bf:fe:43:0b:87:5f:0f:96:b7:b3: 49:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:76:6C:58:73:F3:99:42:E9:95:FF:53:B4:3B:26:61:CC:61:F3:1B X509v3 Authority Key Identifier: keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/I3ZsWHPzmULplf9TtDsmYcxh8xs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.248.134.0/24 Signature Algorithm: sha256WithRSAEncryption 37:df:5c:e6:98:d8:9e:d3:14:9a:a5:53:7d:49:32:e2:57:ca: c3:c2:91:d6:31:c8:33:1b:29:df:c8:78:0c:9c:74:3c:d7:d9: 35:34:20:70:b8:72:89:0e:d9:5b:74:98:ab:05:97:a9:27:d4: a5:aa:90:ec:fc:6d:87:10:71:9a:18:9d:5c:35:b3:6e:69:83: c3:99:5e:1d:7e:43:08:9d:81:7d:d7:d7:59:28:71:ff:a2:b6: 4f:a7:0a:69:92:8b:89:80:0b:a1:ae:f0:e7:e5:39:1c:97:27: 93:d5:53:f0:ca:dd:17:e7:e9:42:79:00:33:b3:c4:6e:0a:17: aa:71:d2:02:88:bd:c8:5f:00:b5:4e:5d:5d:1f:e0:6b:67:4a: e1:67:f1:ae:b3:0d:2f:34:64:8d:0a:5d:e9:52:c2:8a:c8:87: 3b:e3:82:42:9e:a6:c7:bc:ee:24:af:70:d9:a7:f2:b6:da:63: 36:81:41:e7:a0:6c:30:e1:92:bf:70:70:de:f9:85:8f:06:2e: 78:00:98:64:ba:67:9b:a3:f7:1c:37:39:99:a0:bc:c6:cd:9f: c5:22:66:04:eb:08:29:9b:e0:94:0a:1a:7a:d2:8c:99:0a:d1: 82:e9:66:54:bb:1a:d3:89:70:18:a7:2e:e9:bd:33:f1:01:ae: bf:9b:fe:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpzVT28YyFuu1lx6azMvH7HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy ZmM4YjQwHhcNMjUxMTExMTQzMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzc2NmM1ODczZjM5OTQyZTk5NWZmNTNiNDNiMjY2MWNjNjFmMzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Y5P0lUxMSKSJT+LUUTRn015sYOz ZjCv+0csvgQbWH327xIMp57nYK2z5wr+5IojVNuux/CkDp3Ue7ZXNO9zwJbB7x2e /r7U54sIHiBryFzCPF+M9GtzFV430Dg4fgyFppO0oTdnIoLFDE6OP6aOGLyKfJRh jAyN9Kd6J9byOZG+aTtFdcCSbjzvO7xIzQl7B3edG/8sJ+4KDQVVjOEwcqEMseV+ qo46yqa9U+y1UgaoLXgTbDZGoWqd37CqiP3eZq7iCKAnMDe6+BtWK0xQtJkdOGw6 t5OTA2D5PmNcXxGCPrsRyImRK8S2JKRQlSEjnZRFh7/+QwuHXw+Wt7NJWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCN2bFhz85lC6ZX/U7Q7JmHMYfMbMB8GA1UdIwQY MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct ZDNiMzhjZTlkYzM0LzEvSTNac1dIUHptVUxwbGY5VHREc21ZY3hoOHhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0 LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/iGMA0G CSqGSIb3DQEBCwUAA4IBAQA331zmmNie0xSapVN9STLiV8rDwpHWMcgzGynfyHgM nHQ819k1NCBwuHKJDtlbdJirBZepJ9SlqpDs/G2HEHGaGJ1cNbNuaYPDmV4dfkMI nYF919dZKHH/orZPpwppkouJgAuhrvDn5TkclyeT1VPwyt0X5+lCeQAzs8RuCheq cdICiL3IXwC1Tl1dH+BrZ0rhZ/Gusw0vNGSNCl3pUsKKyIc744JCnqbHvO4kr3DZ p/K22mM2gUHnoGww4ZK/cHDe+YWPBi54AJhkumebo/ccNzmZoLzGzZ/FImYE6wgp m+CUChp60oyZCtGC6WZUuxrTiXAYpy7pvTPxAa6/m/4j -----END CERTIFICATE-----Generated at Fri Dec 5 06:34:29 2025 by rpki-client