This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Go33hxh7otfAo7S7xOYrxznBUtA.roa File: Go33hxh7otfAo7S7xOYrxznBUtA.roa (raw, json) Hash identifier: qk3xB5osJgRWLh9ePr9FdcSojRXMeIpDAbCzcNRuVIk= Subject key identifier: 1A:8D:F7:87:18:7B:A2:D7:C0:A3:B4:BB:C4:E6:2B:C7:39:C1:52:D0 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B267439F8CC52CE2BA97008038F01E93C Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Go33hxh7otfAo7S7xOYrxznBUtA.roa Signing time: Tue 16 Dec 2025 09:18:29 +0000 ROA not before: Tue 16 Dec 2025 09:18:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 399468 IP address blocks: 87.82.48.0/23 maxlen: 23 195.40.156.0/22 maxlen: 24 195.172.122.0/23 maxlen: 24 212.212.0.0/21 maxlen: 24 212.212.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:74:39:f8:cc:52:ce:2b:a9:70:08:03:8f:01:e9:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Dec 16 09:18:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1a8df787187ba2d7c0a3b4bbc4e62bc739c152d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d2:20:48:3e:05:b0:08:1f:b9:93:02:c0:79: 90:93:41:e6:0c:19:6f:1e:94:c2:a6:90:f2:82:5d: 97:3f:b1:57:98:61:cb:48:07:b2:59:16:04:e1:8c: 88:c2:37:bb:3c:7a:7e:14:d4:1d:3e:98:09:6b:76: 24:14:5a:8e:74:ec:0b:38:d2:e5:1b:11:2d:c9:2a: 1a:69:3d:08:a1:40:4d:fd:4d:53:07:7e:0f:53:12: fc:e2:41:92:3e:38:d7:57:9f:d7:7f:3e:4a:5e:cf: e1:37:00:fb:a9:d7:24:53:50:44:3b:16:2a:d1:0e: fa:71:fa:d5:95:54:49:1d:0f:db:d7:4f:7f:ad:0f: d9:c9:ea:8f:4e:33:30:87:8b:3a:e0:67:e8:7a:80: 95:9a:37:3b:95:64:13:8a:f3:66:aa:b0:f0:0e:3c: e4:cc:ae:44:b1:3b:f1:c3:c6:b8:68:ea:64:0f:22: 95:f5:f7:34:7f:03:51:bb:d7:1e:2e:0e:98:bf:ec: d0:b8:d2:b2:ed:5f:df:96:d2:a1:1e:43:17:b9:d3: c0:ca:88:af:97:10:24:41:9e:2a:d9:f0:60:ca:46: 37:ed:de:a4:ec:c6:d1:57:4b:a2:7b:d4:5c:bf:1f: e2:9e:96:36:22:7c:5b:dd:47:79:2e:be:f5:a2:c7: 5a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:8D:F7:87:18:7B:A2:D7:C0:A3:B4:BB:C4:E6:2B:C7:39:C1:52:D0 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Go33hxh7otfAo7S7xOYrxznBUtA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.82.48.0/23 195.40.156.0/22 195.172.122.0/23 212.212.0.0/20 Signature Algorithm: sha256WithRSAEncryption 80:85:56:da:48:74:cf:1f:c5:b4:b3:99:1d:a2:0e:bb:8d:07: 24:16:5e:e3:3e:f2:8f:55:4c:51:90:31:56:a6:84:26:c8:8e: d9:9e:a5:31:64:33:1d:4b:1c:d1:76:1e:1b:10:3e:1c:c8:b7: 30:91:0f:3a:b8:04:98:93:79:35:9e:13:58:27:c4:fe:85:f8: cc:e0:5c:71:d6:2e:f6:6f:26:25:62:ae:cb:9c:51:5b:80:17: 33:51:fe:43:06:58:3c:c6:c2:f8:17:d9:31:e1:4c:4a:88:f4: 80:76:a4:b2:33:b8:17:e9:4c:f8:35:21:0a:3a:ee:3b:92:a7: 03:98:9a:45:da:6e:92:a1:00:fe:61:08:d3:a8:00:3d:2a:27: 26:25:54:77:f0:c3:0e:57:2c:b0:d0:01:23:2b:31:10:04:21: 25:68:b7:ce:98:14:bf:ea:e0:8c:f3:90:9c:14:10:6f:65:35: 36:7a:15:87:17:4a:c9:2d:b2:a1:87:f8:93:37:14:f5:42:cd: 70:d2:ec:3b:68:7b:71:9a:a2:85:f1:44:ca:92:7f:1d:cb:af: d3:5f:c7:74:d1:2f:9f:29:eb:ef:a0:5a:e1:52:cd:9b:e1:bf: 27:9f:a0:39:0a:c6:08:6f:64:bc:73:ee:e9:4f:f0:5f:3f:a5: 5c:85:bf:04 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZsmdDn4zFLOK6lwCAOPAek8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMjE2MDkxODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYThkZjc4NzE4N2JhMmQ3YzBhM2I0YmJjNGU2MmJjNzM5YzE1MmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldIgSD4FsAgfuZMCwHmQk0HmDBlv HpTCppDygl2XP7FXmGHLSAeyWRYE4YyIwje7PHp+FNQdPpgJa3YkFFqOdOwLONLl GxEtySoaaT0IoUBN/U1TB34PUxL84kGSPjjXV5/Xfz5KXs/hNwD7qdckU1BEOxYq 0Q76cfrVlVRJHQ/b109/rQ/ZyeqPTjMwh4s64GfoeoCVmjc7lWQTivNmqrDwDjzk zK5EsTvxw8a4aOpkDyKV9fc0fwNRu9ceLg6Yv+zQuNKy7V/fltKhHkMXudPAyoiv lxAkQZ4q2fBgykY37d6k7MbRV0uie9Rcvx/inpY2Inxb3Ud5Lr71osdakwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFBqN94cYe6LXwKO0u8TmK8c5wVLQMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvR28zM2h4aDdvdGZBbzdTN3hPWXJ4em5CVXRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBV1IwAwQC wyicAwQBw6x6AwQE1NQAMA0GCSqGSIb3DQEBCwUAA4IBAQCAhVbaSHTPH8W0s5kd og67jQckFl7jPvKPVUxRkDFWpoQmyI7ZnqUxZDMdSxzRdh4bED4cyLcwkQ86uASY k3k1nhNYJ8T+hfjM4Fxx1i72byYlYq7LnFFbgBczUf5DBlg8xsL4F9kx4UxKiPSA dqSyM7gX6Uz4NSEKOu47kqcDmJpF2m6SoQD+YQjTqAA9KicmJVR38MMOVyyw0AEj KzEQBCElaLfOmBS/6uCM85CcFBBvZTU2ehWHF0rJLbKhh/iTNxT1Qs1w0uw7aHtx mqKF8UTKkn8dy6/TX8d00S+fKevvoFrhUs2b4b8nn6A5CsYIb2S8c+7pT/BfP6Vc hb8E -----END CERTIFICATE-----Generated at Sat Dec 20 06:50:07 2025 by rpki-client