This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/8XyXEcGJM3fMgb6bYMtvTCeLoBM.roa File: 8XyXEcGJM3fMgb6bYMtvTCeLoBM.roa (raw, json) Hash identifier: q15fZ67r4KPnB5fz/oJpoPeyD9UeqSxS7qne2oUruYE= Subject key identifier: F1:7C:97:11:C1:89:33:77:CC:81:BE:9B:60:CB:6F:4C:27:8B:A0:13 Certificate issuer: /CN=34832317d2544434b659e5692071d8e4c4938b06 Certificate serial: 019B3B6DCA4EB18B4CA0EE7D3487996FAFB0 Authority key identifier: 34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/8XyXEcGJM3fMgb6bYMtvTCeLoBM.roa Signing time: Sat 20 Dec 2025 11:03:29 +0000 ROA not before: Sat 20 Dec 2025 11:03:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 176.28.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6d:ca:4e:b1:8b:4c:a0:ee:7d:34:87:99:6f:af:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34832317d2544434b659e5692071d8e4c4938b06 Validity Not Before: Dec 20 11:03:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f17c9711c1893377cc81be9b60cb6f4c278ba013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:50:64:83:a4:bf:59:fb:53:f7:a9:f5:ba:f0: 3e:42:68:22:f6:86:6f:af:b6:b5:73:00:ae:f1:c0: d8:e4:eb:a2:1a:d4:0f:73:ed:85:10:45:6f:f3:e9: 75:cb:16:28:c5:17:6b:9e:99:6b:27:74:26:90:fe: d4:79:56:95:eb:17:e1:8c:9a:40:39:36:13:16:ff: ad:42:30:ef:86:b2:27:9d:54:1e:72:b2:1e:6f:78: 61:1d:94:36:5c:e5:9d:4e:72:d4:2a:b9:2a:95:86: 0e:92:43:9c:75:d1:90:3f:e1:7f:10:67:9c:fb:6e: fb:97:64:d4:f1:9d:f7:e3:59:52:19:04:6b:80:37: fc:78:a4:e9:c8:ba:91:08:d4:ba:be:bb:98:2c:4e: 08:db:ca:c1:b2:3a:a4:05:a4:db:1c:9a:5d:89:9a: f8:33:51:b8:5e:e8:57:4c:97:cc:c7:fe:e0:e9:b9: 20:22:45:85:de:14:58:ec:dc:d0:78:95:e2:79:33: f9:85:6a:a2:18:2a:8e:e6:62:dc:21:91:0d:95:be: 87:83:98:42:3f:be:26:03:db:c7:3a:99:40:31:96: eb:09:38:8a:30:83:e3:c6:fa:8a:c3:03:d4:5d:31: af:c9:ea:58:0c:31:d4:c0:e0:5a:7b:6b:c6:21:a3: f0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7C:97:11:C1:89:33:77:CC:81:BE:9B:60:CB:6F:4C:27:8B:A0:13 X509v3 Authority Key Identifier: keyid:34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/8XyXEcGJM3fMgb6bYMtvTCeLoBM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.28.76.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:60:aa:a0:39:e8:d9:cd:72:bd:ad:0e:57:21:e7:3f:04:15: c8:66:81:3a:78:af:fc:12:df:73:ff:75:b0:72:c8:ce:98:ed: 5b:1c:8e:37:28:50:e4:1f:7a:a3:b9:65:63:12:ad:df:00:01: da:5f:20:69:7e:08:8a:2e:c1:01:6d:14:e9:3b:eb:cb:6e:f9: cf:22:6d:46:dc:cc:87:ed:c4:fd:0d:a2:1b:29:87:81:c2:fc: 4b:da:97:d5:4b:3c:20:19:30:43:0d:12:88:c9:7a:f7:c4:90: e1:dd:a5:69:cc:23:36:64:d9:1c:a0:a9:9d:37:3f:bd:af:ae: 01:c7:35:26:6a:23:5c:59:30:8e:ab:9f:41:be:6d:7b:62:c9: 0f:f4:16:e4:bf:e4:0e:d9:3b:7b:01:f1:2a:89:d4:66:46:dc: 21:2f:9e:24:3f:18:b3:fe:c0:8d:e0:73:0d:24:cf:60:f7:eb: 75:de:25:9e:0c:6d:c7:d1:22:f4:a4:99:f8:87:90:8c:54:82: 72:76:05:40:ec:b8:2d:6f:ff:dd:bd:f7:42:e5:0f:4b:a6:01: b5:3a:fe:a8:01:44:c7:ed:2e:1d:ef:9e:df:c1:8d:09:8f:50: 57:41:09:bb:b8:59:c8:b9:ae:c1:69:d7:c4:a4:19:d4:aa:1c: 92:15:07:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZs7bcpOsYtMoO59NIeZb6+wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ODMyMzE3ZDI1NDQ0MzRiNjU5ZTU2OTIwNzFkOGU0YzQ5 MzhiMDYwHhcNMjUxMjIwMTEwMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTdjOTcxMWMxODkzMzc3Y2M4MWJlOWI2MGNiNmY0YzI3OGJhMDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FBkg6S/WftT96n1uvA+Qmgi9oZv r7a1cwCu8cDY5OuiGtQPc+2FEEVv8+l1yxYoxRdrnplrJ3QmkP7UeVaV6xfhjJpA OTYTFv+tQjDvhrInnVQecrIeb3hhHZQ2XOWdTnLUKrkqlYYOkkOcddGQP+F/EGec +277l2TU8Z3341lSGQRrgDf8eKTpyLqRCNS6vruYLE4I28rBsjqkBaTbHJpdiZr4 M1G4XuhXTJfMx/7g6bkgIkWF3hRY7NzQeJXieTP5hWqiGCqO5mLcIZENlb6Hg5hC P74mA9vHOplAMZbrCTiKMIPjxvqKwwPUXTGvyepYDDHUwOBae2vGIaPwCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPF8lxHBiTN3zIG+m2DLb0wni6ATMB8GA1UdIwQY MBaAFDSDIxfSVEQ0tlnlaSBx2OTEk4sGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTklNakY5SlVSRFMyV2VWcElISFk1TVNUaXdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81YTJlZDktOGY4ZS00YzFkLWFhZjMt MzBjNjVhZDgzMjkxLzEvOFh5WEVjR0pNM2ZNZ2I2YllNdHZUQ2VMb0JNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81YTJlZDktOGY4ZS00YzFkLWFhZjMtMzBjNjVhZDgzMjkx LzEvTklNakY5SlVSRFMyV2VWcElISFk1TVNUaXdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsBxMMA0G CSqGSIb3DQEBCwUAA4IBAQAeYKqgOejZzXK9rQ5XIec/BBXIZoE6eK/8Et9z/3Ww csjOmO1bHI43KFDkH3qjuWVjEq3fAAHaXyBpfgiKLsEBbRTpO+vLbvnPIm1G3MyH 7cT9DaIbKYeBwvxL2pfVSzwgGTBDDRKIyXr3xJDh3aVpzCM2ZNkcoKmdNz+9r64B xzUmaiNcWTCOq59Bvm17YskP9Bbkv+QO2Tt7AfEqidRmRtwhL54kPxiz/sCN4HMN JM9g9+t13iWeDG3H0SL0pJn4h5CMVIJydgVA7Lgtb//dvfdC5Q9LpgG1Ov6oAUTH 7S4d757fwY0Jj1BXQQm7uFnIua7BadfEpBnUqhySFQdg -----END CERTIFICATE-----Generated at Wed Dec 24 18:37:21 2025 by rpki-client