This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/L8_Hiciu_EJrED5cKw6rKtLIHKM.roa File: L8_Hiciu_EJrED5cKw6rKtLIHKM.roa (raw, json) Hash identifier: JdyJZRZAJIQuomVPk5aG0AO5/HvEyb8WafzR9TrUnZk= Subject key identifier: 2F:CF:C7:89:C8:AE:FC:42:6B:10:3E:5C:2B:0E:AB:2A:D2:C8:1C:A3 Certificate issuer: /CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016 Certificate serial: 019B2B55EB036294954B697F8BA30F8A7BE3 Authority key identifier: 66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/L8_Hiciu_EJrED5cKw6rKtLIHKM.roa Signing time: Wed 17 Dec 2025 08:03:29 +0000 ROA not before: Wed 17 Dec 2025 08:03:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207992 IP address blocks: 185.152.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.crl rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:55:eb:03:62:94:95:4b:69:7f:8b:a3:0f:8a:7b:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016 Validity Not Before: Dec 17 08:03:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2fcfc789c8aefc426b103e5c2b0eab2ad2c81ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0c:2c:72:1d:dc:68:8a:21:cb:c5:c0:6c:07: a1:98:ce:86:30:5d:46:ea:10:f6:1e:eb:ba:1c:37: 06:79:24:f7:7f:29:44:ee:f9:b9:dc:27:e3:ea:54: fb:1a:8c:b9:cb:8e:d2:ca:30:79:c6:1f:b4:2e:c9: 04:ac:41:92:ad:f4:ad:15:ca:5a:2a:8d:94:80:bf: 84:e7:e9:ea:a5:76:b3:67:88:43:7b:3c:a0:93:e4: a2:99:17:fe:49:41:1a:96:ae:77:38:07:b0:9f:1a: 55:bf:f2:97:5f:f5:26:8c:90:25:e1:d2:ff:00:22: e6:9f:0a:5b:30:70:97:ba:f5:a0:6a:70:dc:d5:fc: 35:03:a4:f3:63:fd:ee:6c:e1:e6:3f:58:92:67:a7: 43:9e:eb:4d:dc:61:8d:fc:cc:24:19:ae:da:41:29: 9e:11:47:c7:d0:41:ad:8d:ef:5f:09:ac:59:56:e7: 20:d6:76:f0:a5:43:0a:1e:71:33:9d:24:59:02:df: 4b:89:43:07:a3:02:a8:d9:6a:a6:d2:1c:49:16:61: 0d:24:4f:80:d0:06:00:98:91:70:ee:8d:94:0b:77: 2a:16:c0:2a:c1:3a:db:83:6b:50:70:ae:f1:86:58: 83:c6:4c:7d:4d:47:ad:52:01:cb:62:66:ce:ce:6e: 47:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:CF:C7:89:C8:AE:FC:42:6B:10:3E:5C:2B:0E:AB:2A:D2:C8:1C:A3 X509v3 Authority Key Identifier: keyid:66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/L8_Hiciu_EJrED5cKw6rKtLIHKM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.152.52.0/22 Signature Algorithm: sha256WithRSAEncryption 58:5c:bc:06:22:c8:2c:bf:bc:d7:c2:3c:82:13:c0:ad:24:26: 3a:7f:fa:24:5d:0c:22:8f:fa:2b:1d:59:4a:45:5a:c0:6f:9e: 4b:29:79:96:c7:31:aa:70:89:77:66:74:95:e6:0b:ee:3a:95: c6:4b:e2:6d:43:2a:12:06:ae:76:a9:25:25:76:d8:a9:86:e9: 9b:4d:9d:45:e6:e0:38:d0:9b:26:9b:ca:f7:d0:f3:b9:6f:2b: 9c:23:60:85:ba:a6:88:47:0c:d0:87:99:6b:f4:ad:32:89:1d: 3e:51:61:60:e9:1d:d5:bb:ad:6f:ff:1f:74:42:58:0f:83:93: a0:3d:12:aa:da:1d:d0:76:b2:9b:89:2f:10:56:be:b6:3a:6b: cc:f2:df:eb:6e:df:bd:fb:dd:08:ef:5d:af:15:a0:96:9b:a8: d7:a7:b9:ff:46:76:8a:b2:6f:5e:be:c0:25:7a:1d:42:d2:a9: ef:83:bc:2b:61:29:03:c7:f9:2e:01:91:9b:0c:54:31:a5:68: 61:6a:66:1a:f7:c7:84:d2:1f:bc:03:3f:0b:c7:b3:37:3d:14: 89:cf:58:cd:d1:7c:86:64:01:81:e2:4a:f7:44:54:8b:75:7e: 57:99:5b:25:ce:70:bf:c2:cd:18:c9:98:a6:a4:77:1b:32:04: c0:ab:d5:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsrVesDYpSVS2l/i6MPinvjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2Y2QzNTk0NjhjOGJhYTk4ZmMzY2EyZWYyZDkwNTgzYTY5 ZTAwMTYwHhcNMjUxMjE3MDgwMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmNmYzc4OWM4YWVmYzQyNmIxMDNlNWMyYjBlYWIyYWQyYzgxY2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgwsch3caIohy8XAbAehmM6GMF1G 6hD2Huu6HDcGeST3fylE7vm53Cfj6lT7Goy5y47SyjB5xh+0LskErEGSrfStFcpa Ko2UgL+E5+nqpXazZ4hDezygk+SimRf+SUEalq53OAewnxpVv/KXX/UmjJAl4dL/ ACLmnwpbMHCXuvWganDc1fw1A6TzY/3ubOHmP1iSZ6dDnutN3GGN/MwkGa7aQSme EUfH0EGtje9fCaxZVucg1nbwpUMKHnEznSRZAt9LiUMHowKo2Wqm0hxJFmENJE+A 0AYAmJFw7o2UC3cqFsAqwTrbg2tQcK7xhliDxkx9TUetUgHLYmbOzm5HDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC/Px4nIrvxCaxA+XCsOqyrSyByjMB8GA1UdIwQY MBaAFGbNNZRoyLqpj8PKLvLZBYOmngAWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnMwMWxHakl1cW1QdzhvdTh0a0ZnNmFlQUJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83MzcwYzQtZTRjZC00ZGIzLTliODYt ZTM1OWFlMGE2ODM4LzEvTDhfSGljaXVfRUpyRUQ1Y0t3NnJLdExJSEtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni83MzcwYzQtZTRjZC00ZGIzLTliODYtZTM1OWFlMGE2ODM4 LzEvWnMwMWxHakl1cW1QdzhvdTh0a0ZnNmFlQUJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZg0MA0G CSqGSIb3DQEBCwUAA4IBAQBYXLwGIsgsv7zXwjyCE8CtJCY6f/okXQwij/orHVlK RVrAb55LKXmWxzGqcIl3ZnSV5gvuOpXGS+JtQyoSBq52qSUldtiphumbTZ1F5uA4 0Jsmm8r30PO5byucI2CFuqaIRwzQh5lr9K0yiR0+UWFg6R3Vu61v/x90QlgPg5Og PRKq2h3QdrKbiS8QVr62OmvM8t/rbt+9+90I712vFaCWm6jXp7n/RnaKsm9evsAl eh1C0qnvg7wrYSkDx/kuAZGbDFQxpWhhamYa98eE0h+8Az8Lx7M3PRSJz1jN0XyG ZAGB4kr3RFSLdX5XmVslznC/ws0YyZimpHcbMgTAq9WK -----END CERTIFICATE-----Generated at Sat Dec 20 23:35:50 2025 by rpki-client