This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/C2IxqD9Db9EhU4ZFXkVHCTA_iaI.roa File: C2IxqD9Db9EhU4ZFXkVHCTA_iaI.roa (raw, json) Hash identifier: 8cUqtE8+EC0oRQ3tS/3RE17VjmYwvnsQ9N5G26NJi60= Subject key identifier: 0B:62:31:A8:3F:43:6F:D1:21:53:86:45:5E:45:47:09:30:3F:89:A2 Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Certificate serial: 019B2B82C78FEAA166599700E4CD5CE42A5E Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/C2IxqD9Db9EhU4ZFXkVHCTA_iaI.roa Signing time: Wed 17 Dec 2025 08:52:29 +0000 ROA not before: Wed 17 Dec 2025 08:52:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 34535 IP address blocks: 178.250.184.0/23 maxlen: 24 178.250.188.0/24 maxlen: 24 178.250.190.0/23 maxlen: 24 193.0.227.0/24 maxlen: 24 193.0.230.0/24 maxlen: 24 2a0f:cdc0::/32 maxlen: 32 2a0f:cdc1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:82:c7:8f:ea:a1:66:59:97:00:e4:cd:5c:e4:2a:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Validity Not Before: Dec 17 08:52:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0b6231a83f436fd1215386455e454709303f89a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9f:8a:db:79:6e:36:42:5a:60:47:c9:84:3d: d0:6d:b9:56:69:80:65:20:89:3b:93:cd:1b:df:16: f2:b7:26:50:db:b6:c6:f0:d6:2a:db:c4:ed:d1:c4: de:a5:06:23:c1:ff:b2:bb:c9:28:ac:d2:9f:5f:ff: 57:58:7e:02:49:d0:24:ce:32:20:54:11:09:29:50: 2e:97:a7:09:b8:f2:b7:d8:b1:8a:4c:f2:5e:df:5f: fe:35:32:d3:88:a3:e3:c9:94:ef:c0:82:f5:24:cb: 2e:cc:b3:f6:64:8d:21:59:15:e8:c4:a7:90:ec:3b: 85:17:28:9a:1a:cd:5d:2c:2a:99:c0:c6:8b:60:b4: fc:e7:17:a8:50:14:66:29:b2:22:39:f8:a1:6c:f6: 95:a6:8d:9b:3e:4b:3d:7c:46:59:e2:50:a5:29:65: fc:20:b4:33:73:c4:bd:0b:37:43:86:6c:f7:5c:82: 54:41:12:22:c4:50:09:ff:44:de:41:18:6b:00:ba: df:9e:e1:2a:ea:3d:13:36:18:c2:1e:0a:6d:74:16: 1a:08:8a:fd:2d:e2:50:ac:32:12:41:17:e5:5d:35: 4e:1c:72:f1:3b:6a:c4:51:77:0a:64:5e:9c:da:e0: 72:5f:a2:19:93:f1:84:b9:be:72:3f:94:88:38:2d: 9b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:62:31:A8:3F:43:6F:D1:21:53:86:45:5E:45:47:09:30:3F:89:A2 X509v3 Authority Key Identifier: keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/C2IxqD9Db9EhU4ZFXkVHCTA_iaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.250.184.0/23 178.250.188.0/24 178.250.190.0/23 193.0.227.0/24 193.0.230.0/24 IPv6: 2a0f:cdc0::/31 Signature Algorithm: sha256WithRSAEncryption 78:4b:46:92:af:67:a3:ef:37:a2:57:c1:bc:e2:a5:76:b3:de: 0b:d9:97:2c:fd:1f:09:e9:bf:b4:65:72:1c:5a:10:86:ae:17: ac:7c:aa:7a:9d:34:02:92:ec:1b:d7:87:fd:2d:03:97:3d:ce: 63:eb:b7:9a:54:31:22:04:7f:a5:75:b2:4f:0a:2f:65:03:28: 9d:05:2f:54:a2:30:25:51:d8:85:44:dc:5f:90:c8:5b:22:8a: dd:46:0a:fd:6f:51:28:4c:1e:16:16:22:de:65:21:04:79:2a: 00:65:9e:21:33:d1:75:58:86:71:1e:a0:b5:b4:ef:71:43:0b: 06:d0:66:54:e2:16:72:bd:6d:a7:c7:14:68:3b:fe:6b:38:ea: 92:65:a3:f6:8a:da:a1:7c:6d:4c:71:6d:5a:d8:74:00:b1:ba: a5:48:7f:da:53:2f:0d:2a:ee:9e:fd:eb:51:dd:e9:f7:45:bf: 26:94:9c:0c:e1:c4:60:f9:98:f7:3e:4d:e3:cc:43:c0:46:32: 40:78:c5:ab:bb:59:df:e1:7f:74:73:db:82:63:bb:fb:05:8a: 91:8e:c0:bf:08:ff:03:ae:04:14:a4:92:35:9e:c5:62:1f:e0: f9:ca:eb:af:10:6f:3a:b0:a1:fd:17:ae:56:1b:b7:c1:df:11: 76:87:ca:dd -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZsrgseP6qFmWZcA5M1c5CpeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi ZjA2OTIwHhcNMjUxMjE3MDg1MjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjYyMzFhODNmNDM2ZmQxMjE1Mzg2NDU1ZTQ1NDcwOTMwM2Y4OWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp+K23luNkJaYEfJhD3QbblWaYBl IIk7k80b3xbytyZQ27bG8NYq28Tt0cTepQYjwf+yu8korNKfX/9XWH4CSdAkzjIg VBEJKVAul6cJuPK32LGKTPJe31/+NTLTiKPjyZTvwIL1JMsuzLP2ZI0hWRXoxKeQ 7DuFFyiaGs1dLCqZwMaLYLT85xeoUBRmKbIiOfihbPaVpo2bPks9fEZZ4lClKWX8 ILQzc8S9CzdDhmz3XIJUQRIixFAJ/0TeQRhrALrfnuEq6j0TNhjCHgptdBYaCIr9 LeJQrDISQRflXTVOHHLxO2rEUXcKZF6c2uByX6IZk/GEub5yP5SIOC2bfQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFAtiMag/Q2/RIVOGRV5FRwkwP4miMB8GA1UdIwQY MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt YWE5ZDY5MTgxMWU3LzEvQzJJeHFEOURiOUVoVTRaRlhrVkhDVEFfaWFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3 LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQBsvq4AwQA svq8AwQBsvq+AwQAwQDjAwQAwQDmMA0EAgACMAcDBQEqD83AMA0GCSqGSIb3DQEB CwUAA4IBAQB4S0aSr2ej7zeiV8G84qV2s94L2Zcs/R8J6b+0ZXIcWhCGrhesfKp6 nTQCkuwb14f9LQOXPc5j67eaVDEiBH+ldbJPCi9lAyidBS9UojAlUdiFRNxfkMhb IordRgr9b1EoTB4WFiLeZSEEeSoAZZ4hM9F1WIZxHqC1tO9xQwsG0GZU4hZyvW2n xxRoO/5rOOqSZaP2itqhfG1McW1a2HQAsbqlSH/aUy8NKu6e/etR3en3Rb8mlJwM 4cRg+Zj3Pk3jzEPARjJAeMWru1nf4X90c9uCY7v7BYqRjsC/CP8DrgQUpJI1nsVi H+D5yuuvEG86sKH9F65WG7fB3xF2h8rd -----END CERTIFICATE-----Generated at Sat Dec 20 12:04:23 2025 by rpki-client