This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/I0JGk-vn4UlNwWznZgHQdvnCeHs.roa File: I0JGk-vn4UlNwWznZgHQdvnCeHs.roa (raw, json) Hash identifier: G/0kozk2QW1ygCyJusGL2SPSHBkcGDwXRq8941RZcrk= Subject key identifier: 23:42:46:93:EB:E7:E1:49:4D:C1:6C:E7:66:01:D0:76:F9:C2:78:7B Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 019B088C9540AC99571C8550920ED40437D8 Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/I0JGk-vn4UlNwWznZgHQdvnCeHs.roa Signing time: Wed 10 Dec 2025 13:56:29 +0000 ROA not before: Wed 10 Dec 2025 13:56:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35758 IP address blocks: 147.78.2.0/24 maxlen: 24 2a11:840:30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:8c:95:40:ac:99:57:1c:85:50:92:0e:d4:04:37:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Dec 10 13:56:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=23424693ebe7e1494dc16ce76601d076f9c2787b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7a:32:c4:48:51:ef:96:05:cb:89:2a:5a:fb: 16:5e:92:c2:a8:8e:ec:af:5c:fc:2e:c9:71:df:bc: 61:5c:02:91:a0:68:83:47:cb:7f:2a:a5:a8:22:71: a4:5e:fb:90:a0:86:d3:34:a1:59:e9:09:6c:c5:0a: f7:37:09:ca:cf:09:10:7b:7e:01:b2:0e:7b:53:7a: 1d:47:c6:0b:96:2f:24:c9:6e:61:ae:5f:ae:bc:1b: 09:3d:90:5c:48:d6:bc:b8:b7:6b:1a:63:3a:6a:91: 51:0a:4a:ac:af:e9:ca:c1:f0:6f:ba:81:96:2b:79: ee:09:a3:f1:8d:06:5e:ce:11:0c:d5:b7:a3:6f:33: 64:6c:08:e6:fa:09:95:20:42:ff:7b:15:91:c8:0c: 74:88:96:2c:41:17:30:70:1e:d2:92:89:27:75:4e: 3a:a3:b9:af:44:ef:e8:eb:82:90:f0:3a:3e:eb:16: aa:16:c3:94:ed:7c:3a:b3:e9:01:c9:03:4c:2c:61: b2:44:e7:ce:d7:8a:7d:6f:ba:ed:4f:0f:92:31:5e: b5:65:83:9d:97:52:3b:0a:fc:50:e6:d3:17:44:7b: 71:d1:06:90:86:ab:b1:7d:bf:cd:c7:28:71:78:1c: 92:b9:df:81:85:ea:f8:92:d3:ed:bb:20:21:25:a4: 24:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:42:46:93:EB:E7:E1:49:4D:C1:6C:E7:66:01:D0:76:F9:C2:78:7B X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/I0JGk-vn4UlNwWznZgHQdvnCeHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.2.0/24 IPv6: 2a11:840:30::/48 Signature Algorithm: sha256WithRSAEncryption 3b:b1:8c:33:8f:d9:41:ef:28:6c:41:be:00:d8:31:82:85:85: 07:76:ab:19:c9:03:7a:81:2e:60:fc:95:70:bd:79:70:c9:fb: 2c:bc:96:68:58:5b:24:ed:6a:9a:05:eb:50:49:56:f9:f5:b3: 8a:f1:9a:e6:b7:ab:0c:cb:37:bb:21:8d:ee:78:e1:82:88:14: b0:53:92:77:4f:06:83:20:00:f4:a2:ac:be:8f:ab:85:24:64: ad:c8:e2:c5:a1:41:76:4d:8a:08:5a:22:7b:71:e8:8f:c5:56: 2b:f5:4c:2a:1a:f2:f4:4c:c4:85:31:81:ea:44:a9:84:ba:8f: 6d:d2:7d:c6:05:f4:ef:aa:30:56:45:4a:53:80:98:ae:e9:01: bd:8a:58:0c:54:8a:31:f0:1b:ba:f4:7d:a5:48:7d:6d:d4:03: a3:c8:aa:7d:79:2b:8d:b7:61:60:f9:58:2d:38:5d:3a:0b:14: 8b:fe:40:7f:eb:10:66:82:61:b9:1f:e7:6c:4f:0f:a1:5c:e7: 8f:37:0c:06:49:0d:0f:9f:94:95:7b:f6:b6:ac:4a:2a:07:36: 18:06:10:ba:90:02:63:92:91:6d:ea:d3:58:74:72:de:e2:2e: af:f0:77:11:f7:e8:01:a0:2c:69:d2:fa:f3:d2:e8:f3:7f:f0: bd:41:24:45 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZsIjJVArJlXHIVQkg7UBDfYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjUxMjEwMTM1NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzQyNDY5M2ViZTdlMTQ5NGRjMTZjZTc2NjAxZDA3NmY5YzI3ODdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnoyxEhR75YFy4kqWvsWXpLCqI7s r1z8Lslx37xhXAKRoGiDR8t/KqWoInGkXvuQoIbTNKFZ6QlsxQr3NwnKzwkQe34B sg57U3odR8YLli8kyW5hrl+uvBsJPZBcSNa8uLdrGmM6apFRCkqsr+nKwfBvuoGW K3nuCaPxjQZezhEM1bejbzNkbAjm+gmVIEL/exWRyAx0iJYsQRcwcB7SkokndU46 o7mvRO/o64KQ8Do+6xaqFsOU7Xw6s+kByQNMLGGyROfO14p9b7rtTw+SMV61ZYOd l1I7CvxQ5tMXRHtx0QaQhquxfb/NxyhxeBySud+Bher4ktPtuyAhJaQkiwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCNCRpPr5+FJTcFs52YB0Hb5wnh7MB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvSTBKR2stdm40VWxOd1d6blpnSFFkdm5DZUhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAk04CMA8E AgACMAkDBwAqEQhAADAwDQYJKoZIhvcNAQELBQADggEBADuxjDOP2UHvKGxBvgDY MYKFhQd2qxnJA3qBLmD8lXC9eXDJ+yy8lmhYWyTtapoF61BJVvn1s4rxmua3qwzL N7shje544YKIFLBTkndPBoMgAPSirL6Pq4UkZK3I4sWhQXZNighaIntx6I/FViv1 TCoa8vRMxIUxgepEqYS6j23SfcYF9O+qMFZFSlOAmK7pAb2KWAxUijHwG7r0faVI fW3UA6PIqn15K423YWD5WC04XToLFIv+QH/rEGaCYbkf52xPD6Fc5483DAZJDQ+f lJV79rasSioHNhgGELqQAmOSkW3q01h0ct7iLq/wdxH36AGgLGnS+vPS6PN/8L1B JEU= -----END CERTIFICATE-----Generated at Sat Dec 20 05:59:56 2025 by rpki-client