This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/iQmz1GXtR8FJneQ1KYDioUsH4MI.roa File: iQmz1GXtR8FJneQ1KYDioUsH4MI.roa (raw, json) Hash identifier: fMw497lccTPDr8T36zAVKc2Ro0KWYpfFsYM8v+oLdmY= Subject key identifier: 89:09:B3:D4:65:ED:47:C1:49:9D:E4:35:29:80:E2:A1:4B:07:E0:C2 Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019AB9E09821E3037B4D2EB7DA2A103F5E1E Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/iQmz1GXtR8FJneQ1KYDioUsH4MI.roa Signing time: Tue 25 Nov 2025 07:18:15 +0000 ROA not before: Tue 25 Nov 2025 07:18:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214045 IP address blocks: 194.143.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 02 Dec 2025 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b9:e0:98:21:e3:03:7b:4d:2e:b7:da:2a:10:3f:5e:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Nov 25 07:18:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8909b3d465ed47c1499de4352980e2a14b07e0c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:21:06:e0:8d:dd:c5:a7:bc:41:1b:40:1d:15: da:05:4e:ce:74:b3:f9:30:cc:ed:6c:25:e5:f7:8c: d2:5f:ad:e3:22:d8:e8:12:e6:88:f2:1d:9d:63:08: dd:60:a0:d4:3e:12:b0:24:40:bc:60:3a:85:d4:b6: af:6a:78:5a:72:d9:76:24:20:e6:29:a7:e0:f1:bd: 14:3b:f6:4d:6e:33:6f:28:1f:9b:ec:86:45:63:15: a2:af:40:b4:a8:d9:34:22:11:8b:af:d6:79:8a:89: a8:8d:c9:c8:77:8f:00:b1:9d:2d:99:b0:10:7c:9a: a7:9f:ac:22:be:03:c6:c0:37:c5:f4:63:36:1d:c2: f2:50:b0:52:36:06:e3:52:fa:5a:fc:5f:ce:c4:1c: e4:65:fb:96:7b:7c:5e:5e:8f:6f:9b:58:12:41:a9: a0:12:55:ae:87:41:53:2c:50:51:39:1f:9a:9c:50: 05:34:bd:ef:f7:7f:de:22:ea:3e:e6:8d:30:96:f3: 1d:73:b0:81:5f:5d:2a:96:3a:df:6f:eb:52:3d:6e: 8a:26:c3:e3:95:72:0a:9a:98:1f:ed:05:46:2f:b8: 4c:12:6e:9b:35:a1:4e:c6:c6:c1:bc:b9:cf:20:31: 23:47:e2:28:ac:d7:ed:3c:c0:7b:66:dc:df:43:60: 57:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:09:B3:D4:65:ED:47:C1:49:9D:E4:35:29:80:E2:A1:4B:07:E0:C2 X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/iQmz1GXtR8FJneQ1KYDioUsH4MI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.143.205.0/24 Signature Algorithm: sha256WithRSAEncryption 22:e2:dc:d9:69:09:00:21:db:17:33:b7:91:a5:6f:4c:18:44: 72:26:8d:23:ae:d6:e5:e5:e0:19:39:aa:6c:eb:5a:af:c8:eb: 4a:ed:9a:bb:e3:68:6e:7a:bd:40:20:31:ea:c1:0b:b8:ea:d3: c0:fc:df:07:f3:12:43:7d:50:12:6b:29:85:b7:de:46:e8:6c: 91:cc:19:6b:c8:7e:d5:42:8b:a8:7b:ba:f2:03:ee:d4:03:ef: 21:f4:b5:ca:49:49:7b:2d:e3:87:47:71:55:f1:49:9b:c3:44: df:83:68:16:fd:08:7d:44:49:38:9c:97:37:41:61:d0:62:18: 35:c7:9e:e7:5c:f3:69:64:e7:e7:47:68:3d:c8:4e:cc:ea:7b: c7:f2:72:eb:66:6d:ac:23:9f:ef:b6:a0:98:70:ce:3a:72:77: 99:93:1d:4a:31:ae:27:7a:61:2a:03:dc:dc:03:d4:15:82:5c: 1e:b0:92:0c:81:44:b6:0d:76:5b:c2:77:ad:70:36:cc:01:50: 0f:51:64:b8:3a:9a:d6:79:bc:87:b4:91:4f:2e:52:f5:85:1b: ad:2f:bd:16:e5:bb:b6:1b:b5:c5:b1:ec:65:37:71:a0:93:be: 0e:ee:8d:c4:01:19:63:a3:f6:1f:d8:f7:7d:69:e3:a3:ca:8d: e5:28:a2:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq54Jgh4wN7TS632ioQP14eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjUxMTI1MDcxODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTA5YjNkNDY1ZWQ0N2MxNDk5ZGU0MzUyOTgwZTJhMTRiMDdlMGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CEG4I3dxae8QRtAHRXaBU7OdLP5 MMztbCXl94zSX63jItjoEuaI8h2dYwjdYKDUPhKwJEC8YDqF1Lavanhactl2JCDm Kafg8b0UO/ZNbjNvKB+b7IZFYxWir0C0qNk0IhGLr9Z5iomojcnId48AsZ0tmbAQ fJqnn6wivgPGwDfF9GM2HcLyULBSNgbjUvpa/F/OxBzkZfuWe3xeXo9vm1gSQamg ElWuh0FTLFBROR+anFAFNL3v93/eIuo+5o0wlvMdc7CBX10qljrfb+tSPW6KJsPj lXIKmpgf7QVGL7hMEm6bNaFOxsbBvLnPIDEjR+IorNftPMB7ZtzfQ2BX9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIkJs9Rl7UfBSZ3kNSmA4qFLB+DCMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvaVFtejFHWHRSOEZKbmVRMUtZRGlvVXNINE1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwo/NMA0G CSqGSIb3DQEBCwUAA4IBAQAi4tzZaQkAIdsXM7eRpW9MGERyJo0jrtbl5eAZOaps 61qvyOtK7Zq742huer1AIDHqwQu46tPA/N8H8xJDfVASaymFt95G6GyRzBlryH7V Qouoe7ryA+7UA+8h9LXKSUl7LeOHR3FV8Umbw0Tfg2gW/Qh9REk4nJc3QWHQYhg1 x57nXPNpZOfnR2g9yE7M6nvH8nLrZm2sI5/vtqCYcM46cneZkx1KMa4nemEqA9zc A9QVglwesJIMgUS2DXZbwnetcDbMAVAPUWS4OprWebyHtJFPLlL1hRutL70W5bu2 G7XFsexlN3Ggk74O7o3EARljo/Yf2Pd9aeOjyo3lKKKi -----END CERTIFICATE-----Generated at Mon Dec 1 23:39:57 2025 by rpki-client