This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/IiRUAz4hSIV7OUEiVfrgvucqsUU.roa File: IiRUAz4hSIV7OUEiVfrgvucqsUU.roa (raw, json) Hash identifier: T/7LHAq2EL6EwhYPqc8JG0TPs56tuDIUkENf+F5W/z8= Subject key identifier: 22:24:54:03:3E:21:48:85:7B:39:41:22:55:FA:E0:BE:E7:2A:B1:45 Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8 Certificate serial: 019AFDED7764BDF562F6C980353C897CB188 Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/IiRUAz4hSIV7OUEiVfrgvucqsUU.roa Signing time: Mon 08 Dec 2025 12:26:29 +0000 ROA not before: Mon 08 Dec 2025 12:26:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9123 IP address blocks: 64.188.56.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 12:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:ed:77:64:bd:f5:62:f6:c9:80:35:3c:89:7c:b1:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8 Validity Not Before: Dec 8 12:26:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=222454033e2148857b39412255fae0bee72ab145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:38:72:eb:eb:bb:ad:06:01:5e:6b:5c:9b:45: 63:d8:ba:dd:06:f3:d0:6d:95:17:a8:ad:f6:dc:5d: 7c:b6:27:89:6a:2a:5b:b6:59:ce:95:c6:d1:a7:f4: d5:74:eb:38:b0:96:58:12:2a:31:49:39:5e:99:8c: 5d:a8:fe:fe:1a:1d:81:98:cc:5a:63:ac:0f:2a:60: a6:af:fb:69:dd:96:de:80:82:1c:ae:49:dc:4f:6a: da:bf:df:c1:94:ec:57:09:ff:3f:d0:1a:b8:82:31: 46:15:39:2b:b5:c7:67:d8:dc:26:7d:7d:eb:11:5e: ac:38:71:4d:0e:dc:e6:22:93:d0:64:b2:a0:53:bd: e9:7a:e1:22:61:12:e6:bb:ce:f0:4c:58:af:ae:b8: 5a:f4:e0:a4:9c:d4:82:45:b2:61:6b:1b:d3:04:d4: 56:11:de:19:10:c2:60:8c:d5:59:d2:39:cb:b6:d7: 7b:f3:4e:ce:25:38:0c:8f:a2:c8:9c:c7:ab:e6:74: 5a:0d:a9:25:2d:63:26:93:f3:90:b4:88:ca:49:34: 7c:b8:a7:29:45:f7:96:ab:2e:e1:df:bf:16:18:2a: 4e:ae:f4:e9:af:c1:11:3d:85:d8:e6:9c:cd:e8:7a: d8:a0:59:60:02:ea:49:4c:75:8a:f2:63:81:f2:5b: 29:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:24:54:03:3E:21:48:85:7B:39:41:22:55:FA:E0:BE:E7:2A:B1:45 X509v3 Authority Key Identifier: keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/IiRUAz4hSIV7OUEiVfrgvucqsUU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.188.56.0/21 Signature Algorithm: sha256WithRSAEncryption 69:85:01:cb:c2:d7:0a:d7:fa:aa:68:5b:6b:9a:50:7c:c0:8a: 6f:25:12:56:8c:12:af:2f:b3:cd:35:bf:3b:64:b0:26:ff:b0: 15:73:58:22:2d:1c:2d:37:4c:f6:a0:12:45:6c:d9:85:ca:48: b8:9b:f4:4d:7f:63:7c:df:f4:38:90:ee:7b:76:2b:7c:ba:18: 0c:7f:7f:b9:df:7e:0f:54:05:1a:8f:a6:18:37:3a:02:e8:2d: 65:38:7c:29:99:a4:9a:3f:36:99:b6:88:9f:df:18:9c:4d:a3: 9d:5d:76:4a:1d:57:28:9d:e7:17:00:cd:21:b9:8a:64:8c:ee: 3c:20:a7:de:19:17:fd:db:ef:c6:3c:11:12:68:61:12:a5:1d: db:df:f9:19:08:63:e9:af:3a:d4:32:fe:79:8e:9e:75:7a:24: 42:c2:6f:44:71:87:be:8e:5b:2f:fe:08:dc:45:30:e4:3f:91: ef:70:b2:60:14:4b:3c:fc:3c:40:e4:6e:06:40:ba:16:10:57: 80:40:f2:a1:72:bd:ef:5f:2d:9a:7a:b8:99:66:8a:ee:72:b8: 90:00:31:51:81:df:4e:da:12:2a:35:86:6b:1a:7c:7b:20:f5: a6:95:16:ae:40:98:d1:f9:f2:5e:3d:a9:05:a8:ad:70:1e:36: 56:40:6a:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr97XdkvfVi9smANTyJfLGIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NzJiOWZiNTQ2YjM2NWUzMjMyMzBkY2VhOWJhOGM5ZmJl ZGZlYjgwHhcNMjUxMjA4MTIyNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjI0NTQwMzNlMjE0ODg1N2IzOTQxMjI1NWZhZTBiZWU3MmFiMTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDhy6+u7rQYBXmtcm0Vj2LrdBvPQ bZUXqK323F18tieJaipbtlnOlcbRp/TVdOs4sJZYEioxSTlemYxdqP7+Gh2BmMxa Y6wPKmCmr/tp3ZbegIIcrkncT2rav9/BlOxXCf8/0Bq4gjFGFTkrtcdn2NwmfX3r EV6sOHFNDtzmIpPQZLKgU73peuEiYRLmu87wTFivrrha9OCknNSCRbJhaxvTBNRW Ed4ZEMJgjNVZ0jnLttd7807OJTgMj6LInMer5nRaDaklLWMmk/OQtIjKSTR8uKcp RfeWqy7h378WGCpOrvTpr8ERPYXY5pzN6HrYoFlgAupJTHWK8mOB8lspcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCIkVAM+IUiFezlBIlX64L7nKrFFMB8GA1UdIwQY MBaAFCZyuftUazZeMjIw3OqbqMn77f64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm5LNS0xUnJObDR5TWpEYzZwdW95ZnZ0X3JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9iMTNiNTUtMTI4OC00NWU2LTg4NzYt YTcwZGI1ODI4MGZjLzEvSWlSVUF6NGhTSVY3T1VFaVZmcmd2dWNxc1VVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9iMTNiNTUtMTI4OC00NWU2LTg4NzYtYTcwZGI1ODI4MGZj LzEvSm5LNS0xUnJObDR5TWpEYzZwdW95ZnZ0X3JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQLw4MA0G CSqGSIb3DQEBCwUAA4IBAQBphQHLwtcK1/qqaFtrmlB8wIpvJRJWjBKvL7PNNb87 ZLAm/7AVc1giLRwtN0z2oBJFbNmFyki4m/RNf2N83/Q4kO57dit8uhgMf3+5334P VAUaj6YYNzoC6C1lOHwpmaSaPzaZtoif3xicTaOdXXZKHVconecXAM0huYpkjO48 IKfeGRf92+/GPBESaGESpR3b3/kZCGPprzrUMv55jp51eiRCwm9EcYe+jlsv/gjc RTDkP5HvcLJgFEs8/DxA5G4GQLoWEFeAQPKhcr3vXy2aeriZZorucriQADFRgd9O 2hIqNYZrGnx7IPWmlRauQJjR+fJePakFqK1wHjZWQGpQ -----END CERTIFICATE-----Generated at Mon Dec 8 16:29:07 2025 by rpki-client