This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/9Iobs21TrhznByva2SlSF67h2-k.roa File: 9Iobs21TrhznByva2SlSF67h2-k.roa (raw, json) Hash identifier: aVVkV0PfZtBqaGt7A0dU8/KqJayapE1G90tqMVuDo5o= Subject key identifier: F4:8A:1B:B3:6D:53:AE:1C:E7:07:2B:DA:D9:29:52:17:AE:E1:DB:E9 Certificate issuer: /CN=a5d94c40470c6db98801f7bd060dac941e9dd316 Certificate serial: 019B2814CACF0517C66D01FE31839AE37AA2 Authority key identifier: A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/9Iobs21TrhznByva2SlSF67h2-k.roa Signing time: Tue 16 Dec 2025 16:53:29 +0000 ROA not before: Tue 16 Dec 2025 16:53:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39305 IP address blocks: 89.40.176.0/22 maxlen: 22 94.24.24.0/22 maxlen: 22 94.24.30.0/23 maxlen: 23 158.247.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:14:ca:cf:05:17:c6:6d:01:fe:31:83:9a:e3:7a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5d94c40470c6db98801f7bd060dac941e9dd316 Validity Not Before: Dec 16 16:53:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f48a1bb36d53ae1ce7072bdad9295217aee1dbe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e4:2a:ed:8d:54:de:e0:e4:fd:4d:cb:37:f2: e6:6e:bb:8a:e4:1b:84:75:d4:a2:f8:65:e5:61:30: 69:4d:b5:8a:3e:87:d8:28:9f:71:ab:de:51:76:2e: 02:d0:9b:1e:91:4d:d3:ca:a9:93:be:a9:cf:7b:4a: 34:ae:9d:7b:df:4e:3e:69:91:92:35:ba:b5:ac:3c: f8:43:8c:24:d6:24:82:c8:78:0b:b3:f6:c9:65:58: 42:84:97:2b:27:35:9c:90:9b:7f:f9:e6:90:26:34: 79:2c:3b:67:25:c1:4a:3f:b7:14:1a:01:82:1f:76: 64:4a:40:1b:e5:67:55:18:be:75:76:81:d6:23:4f: ba:95:f8:a5:1b:1a:e8:7c:dd:fa:b4:a8:ba:21:14: 3b:93:e5:85:b9:1b:de:f0:8c:2a:b6:76:63:dc:e6: 8c:50:b3:de:f3:2a:18:cc:ed:06:fa:e1:32:83:ad: d1:4c:69:be:af:62:14:b6:ab:55:26:08:ea:3e:92: f6:76:a6:01:b0:ac:75:22:56:11:94:1e:29:ce:cb: c3:c5:93:43:d4:70:4e:57:69:3c:46:6b:79:96:89: 81:76:ea:ac:a3:32:d0:4d:be:ed:f4:31:bb:79:5a: 23:74:b1:1e:5d:98:99:82:dc:67:f6:e2:61:a5:0c: 58:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8A:1B:B3:6D:53:AE:1C:E7:07:2B:DA:D9:29:52:17:AE:E1:DB:E9 X509v3 Authority Key Identifier: keyid:A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/9Iobs21TrhznByva2SlSF67h2-k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.40.176.0/22 94.24.24.0/22 94.24.30.0/23 158.247.56.0/22 Signature Algorithm: sha256WithRSAEncryption 54:34:c9:e3:c5:f3:55:a3:78:f3:f0:78:6e:1b:94:3b:64:60: b1:ce:5d:0b:18:67:2d:53:f9:20:bc:eb:42:ae:f9:ca:2e:2f: f2:74:3d:99:a3:f0:33:07:75:c2:1f:0d:42:56:ec:aa:be:04: 92:9e:76:da:a9:a0:ae:0c:1d:17:b4:fe:a4:cf:33:ce:45:ce: 75:bd:74:6e:ec:d3:45:6e:78:0c:e0:aa:92:0f:0f:54:f3:ec: fa:f2:6e:c0:aa:71:a8:c5:07:62:81:b7:e5:bd:01:ff:a2:52: a4:64:8b:1e:59:57:02:9b:e2:44:07:b7:d9:f1:7f:88:62:f8: e1:0f:3e:81:3d:0d:50:b6:91:c6:f2:36:f7:f0:8b:e4:f3:33: 01:64:08:13:0f:c0:ee:3e:ac:b1:4c:50:69:6a:33:fa:9a:24: 69:36:4d:5f:c2:17:dc:b9:2a:72:20:e7:ff:0b:2c:38:5c:cc: 6e:4c:ca:de:74:20:fc:8d:87:37:03:f4:c6:77:6f:1e:a5:51: 17:e4:fd:47:5e:2b:2f:25:0c:82:17:0a:4f:39:7d:47:56:3c: 63:93:ad:6a:d1:59:6e:54:ac:4b:97:81:1d:fd:cb:07:73:1f: ac:78:2f:fa:40:0b:1a:7b:ff:f1:46:9f:44:f7:c1:63:1f:e6: b9:f2:91:26 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZsoFMrPBRfGbQH+MYOa43qiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZDk0YzQwNDcwYzZkYjk4ODAxZjdiZDA2MGRhYzk0MWU5 ZGQzMTYwHhcNMjUxMjE2MTY1MzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDhhMWJiMzZkNTNhZTFjZTcwNzJiZGFkOTI5NTIxN2FlZTFkYmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOQq7Y1U3uDk/U3LN/LmbruK5BuE ddSi+GXlYTBpTbWKPofYKJ9xq95Rdi4C0JsekU3TyqmTvqnPe0o0rp17304+aZGS Nbq1rDz4Q4wk1iSCyHgLs/bJZVhChJcrJzWckJt/+eaQJjR5LDtnJcFKP7cUGgGC H3ZkSkAb5WdVGL51doHWI0+6lfilGxrofN36tKi6IRQ7k+WFuRve8IwqtnZj3OaM ULPe8yoYzO0G+uEyg63RTGm+r2IUtqtVJgjqPpL2dqYBsKx1IlYRlB4pzsvDxZND 1HBOV2k8Rmt5lomBduqsozLQTb7t9DG7eVojdLEeXZiZgtxn9uJhpQxYqwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPSKG7NtU64c5wcr2tkpUheu4dvpMB8GA1UdIwQY MBaAFKXZTEBHDG25iAH3vQYNrJQendMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGRsTVFFY01iYm1JQWZlOUJnMnNsQjZkMHhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy82ZTU5MmYtOGJjYy00MGMzLWIyNTgt NTY2MzFmZjY3MmQxLzEvOUlvYnMyMVRyaHpuQnl2YTJTbFNGNjdoMi1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy82ZTU5MmYtOGJjYy00MGMzLWIyNTgtNTY2MzFmZjY3MmQx LzEvcGRsTVFFY01iYm1JQWZlOUJnMnNsQjZkMHhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCWSiwAwQC XhgYAwQBXhgeAwQCnvc4MA0GCSqGSIb3DQEBCwUAA4IBAQBUNMnjxfNVo3jz8Hhu G5Q7ZGCxzl0LGGctU/kgvOtCrvnKLi/ydD2Zo/AzB3XCHw1CVuyqvgSSnnbaqaCu DB0XtP6kzzPORc51vXRu7NNFbngM4KqSDw9U8+z68m7AqnGoxQdigbflvQH/olKk ZIseWVcCm+JEB7fZ8X+IYvjhDz6BPQ1QtpHG8jb38Ivk8zMBZAgTD8DuPqyxTFBp ajP6miRpNk1fwhfcuSpyIOf/Cyw4XMxuTMredCD8jYc3A/TGd28epVEX5P1HXisv JQyCFwpPOX1HVjxjk61q0VluVKxLl4Ed/csHcx+seC/6QAsae//xRp9E98FjH+a5 8pEm -----END CERTIFICATE-----Generated at Sat Dec 20 22:44:51 2025 by rpki-client