This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/I-NZs8WYPSA5UC8G9GGdOl2ZiLc.roa File: I-NZs8WYPSA5UC8G9GGdOl2ZiLc.roa (raw, json) Hash identifier: xb+hM6AYsk826Y/t4uJIPiU2upg2Fe6cMAbbmsP687Y= Subject key identifier: 23:E3:59:B3:C5:98:3D:20:39:50:2F:06:F4:61:9D:3A:5D:99:88:B7 Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1 Certificate serial: 019B2BDE5687F8F913963846A20816AAFCF0 Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/I-NZs8WYPSA5UC8G9GGdOl2ZiLc.roa Signing time: Wed 17 Dec 2025 10:32:29 +0000 ROA not before: Wed 17 Dec 2025 10:32:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56740 IP address blocks: 87.252.234.0/24 maxlen: 24 87.252.237.0/24 maxlen: 24 87.252.238.0/24 maxlen: 24 91.149.155.0/24 maxlen: 24 91.149.167.0/24 maxlen: 24 91.149.178.0/24 maxlen: 24 93.125.18.0/24 maxlen: 24 93.125.60.0/23 maxlen: 23 93.125.114.0/24 maxlen: 24 178.172.164.0/24 maxlen: 24 178.172.165.0/24 maxlen: 24 178.172.212.0/24 maxlen: 24 178.172.220.0/24 maxlen: 24 178.172.247.0/24 maxlen: 24 178.172.251.0/24 maxlen: 24 178.172.252.0/24 maxlen: 24 178.172.255.0/24 maxlen: 24 213.184.236.0/24 maxlen: 24 213.184.240.0/24 maxlen: 24 217.21.44.0/24 maxlen: 24 217.21.52.0/24 maxlen: 24 217.21.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:de:56:87:f8:f9:13:96:38:46:a2:08:16:aa:fc:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1 Validity Not Before: Dec 17 10:32:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=23e359b3c5983d2039502f06f4619d3a5d9988b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:22:1f:35:1f:4c:a7:44:93:e5:03:d9:cd:4b: fd:48:f3:25:e6:34:d7:e5:00:e7:1b:5b:75:f1:fb: f4:50:01:38:f3:cb:da:93:a3:e2:b5:04:5a:c6:8b: f6:32:2e:2b:74:b6:3c:f3:f1:7a:24:a5:d4:11:d7: f4:27:5e:4d:73:19:29:fa:19:fd:5b:08:3e:01:fc: f8:f0:5e:8f:36:c5:4f:24:1f:ec:bb:c9:2c:17:76: ae:65:4a:3e:33:1c:84:30:6b:5c:7f:8b:14:92:2a: 53:d2:cf:86:63:08:55:5d:be:4f:42:b0:45:ae:f4: 77:5e:da:c2:af:84:9f:d9:6e:ef:4b:30:27:5c:01: 15:0b:17:9d:40:b0:b2:91:c6:80:07:1f:4e:8d:1b: 85:2b:f3:8c:09:74:b5:a5:5b:23:d2:5f:3e:04:34: 88:7d:ac:15:ec:56:22:f4:db:3f:f1:44:54:79:86: 22:57:a2:72:3a:42:08:c1:58:6a:c6:48:bc:49:07: 59:ec:52:8d:4b:52:7f:28:0c:51:6b:8c:b0:de:f3: c6:ca:26:9c:2e:be:44:03:f1:5f:7e:a3:e3:dd:0f: fb:05:63:9f:29:9a:53:66:35:68:ad:ef:6e:c1:ea: 44:1c:86:a7:7e:96:ae:0e:2b:6a:2d:84:37:05:df: 3e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E3:59:B3:C5:98:3D:20:39:50:2F:06:F4:61:9D:3A:5D:99:88:B7 X509v3 Authority Key Identifier: keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/I-NZs8WYPSA5UC8G9GGdOl2ZiLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.252.234.0/24 87.252.237.0-87.252.238.255 91.149.155.0/24 91.149.167.0/24 91.149.178.0/24 93.125.18.0/24 93.125.60.0/23 93.125.114.0/24 178.172.164.0/23 178.172.212.0/24 178.172.220.0/24 178.172.247.0/24 178.172.251.0-178.172.252.255 178.172.255.0/24 213.184.236.0/24 213.184.240.0/24 217.21.44.0/24 217.21.52.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:7d:47:68:f9:79:af:37:bb:de:4c:62:51:17:de:20:31:50: 0c:56:8c:31:06:23:5c:5d:71:e8:6d:55:9a:66:d7:43:3d:b5: 6b:ff:5e:ec:ca:24:91:fa:e5:52:12:87:65:32:7d:ff:c9:a5: 3c:94:ee:c8:bc:20:69:43:82:70:f3:30:b8:60:93:c5:35:6f: d6:ec:b1:b0:b6:ed:ec:81:17:a3:85:89:22:f1:65:4b:f8:cf: ed:f7:ad:fc:c5:85:ad:05:82:8e:b0:c1:91:da:c3:50:00:69: f6:72:33:7a:af:5e:32:64:5e:7e:ce:b8:d5:6d:cf:cd:34:b5: 3d:2b:d8:cd:b5:bf:58:04:5b:b0:11:29:8b:1f:55:d6:f9:be: 97:68:f6:44:e8:37:64:b5:36:55:d6:56:bc:f1:10:5f:a9:27: 46:57:76:60:c3:0b:33:86:13:40:43:c0:81:26:64:ac:6d:bd: 80:a8:4d:8f:e9:e2:9a:ee:23:ce:24:53:5d:6f:d3:f7:94:7a: 42:d6:70:bd:34:da:65:52:0f:ca:c0:ea:45:01:e9:6f:1b:8f: 86:f6:c0:9e:ca:f8:52:6e:5b:da:b3:73:0d:47:d9:2e:a9:8d: 0d:2e:3c:d9:65:89:8f:e2:1e:1a:f6:8d:f8:9d:e6:a8:89:0c: 05:9c:cf:d4 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZsr3laH+PkTljhGoggWqvzwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj ZmViYzEwHhcNMjUxMjE3MTAzMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2UzNTliM2M1OTgzZDIwMzk1MDJmMDZmNDYxOWQzYTVkOTk4OGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSIfNR9Mp0ST5QPZzUv9SPMl5jTX 5QDnG1t18fv0UAE488vak6PitQRaxov2Mi4rdLY88/F6JKXUEdf0J15Ncxkp+hn9 Wwg+Afz48F6PNsVPJB/su8ksF3auZUo+MxyEMGtcf4sUkipT0s+GYwhVXb5PQrBF rvR3XtrCr4Sf2W7vSzAnXAEVCxedQLCykcaABx9OjRuFK/OMCXS1pVsj0l8+BDSI fawV7FYi9Ns/8URUeYYiV6JyOkIIwVhqxki8SQdZ7FKNS1J/KAxRa4yw3vPGyiac Lr5EA/FffqPj3Q/7BWOfKZpTZjVore9uwepEHIanfpauDitqLYQ3Bd8+AwIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFCPjWbPFmD0gOVAvBvRhnTpdmYi3MB8GA1UdIwQY MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct YWFiMGU0MTRjYzYzLzEvSS1OWnM4V1lQU0E1VUM4RzlHR2RPbDJaaUxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTctYWFiMGU0MTRjYzYz LzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTCBggQCAAEwfAMEAFf8 6jAMAwQAV/ztAwQAV/zuAwQAW5WbAwQAW5WnAwQAW5WyAwQAXX0SAwQBXX08AwQA XX1yAwQBsqykAwQAsqzUAwQAsqzcAwQAsqz3MAwDBACyrPsDBACyrPwDBACyrP8D BADVuOwDBADVuPADBADZFSwDBAHZFTQwDQYJKoZIhvcNAQELBQADggEBAA99R2j5 ea83u95MYlEX3iAxUAxWjDEGI1xdcehtVZpm10M9tWv/XuzKJJH65VISh2Uyff/J pTyU7si8IGlDgnDzMLhgk8U1b9bssbC27eyBF6OFiSLxZUv4z+33rfzFha0Fgo6w wZHaw1AAafZyM3qvXjJkXn7OuNVtz800tT0r2M21v1gEW7ARKYsfVdb5vpdo9kTo N2S1NlXWVrzxEF+pJ0ZXdmDDCzOGE0BDwIEmZKxtvYCoTY/p4pruI84kU11v0/eU ekLWcL002mVSD8rA6kUB6W8bj4b2wJ7K+FJuW9qzcw1H2S6pjQ0uPNlliY/iHhr2 jfid5qiJDAWcz9Q= -----END CERTIFICATE-----Generated at Fri Dec 19 11:45:04 2025 by rpki-client