This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/1-IwPe-i1cPF2UOTcwnAaTafkpKE.roa File: 1-IwPe-i1cPF2UOTcwnAaTafkpKE.roa (raw, json) Hash identifier: C+s08kE7H/iYDOi2RIoW/em2Fwc3Cw5Ncha5/IZtNds= Subject key identifier: F8:8C:0F:7B:E8:B5:70:F1:76:50:E4:DC:C2:70:1A:4D:A7:E4:A4:A1 Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Certificate serial: 019B0C3098A3BB33B8DBB6D9584C0F2E921E Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/1-IwPe-i1cPF2UOTcwnAaTafkpKE.roa Signing time: Thu 11 Dec 2025 06:54:29 +0000 ROA not before: Thu 11 Dec 2025 06:54:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51540 IP address blocks: 84.17.64.0/24 maxlen: 24 84.17.77.0/24 maxlen: 24 84.17.78.0/24 maxlen: 24 84.17.80.0/24 maxlen: 24 84.17.81.0/24 maxlen: 24 84.17.82.0/24 maxlen: 24 84.17.85.0/24 maxlen: 24 84.17.92.0/24 maxlen: 24 84.17.94.0/24 maxlen: 24 193.254.252.0/24 maxlen: 24 193.254.253.0/24 maxlen: 24 195.128.32.0/24 maxlen: 24 195.128.33.0/24 maxlen: 24 195.128.34.0/24 maxlen: 24 195.128.36.0/24 maxlen: 24 195.128.38.0/24 maxlen: 24 195.128.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 02:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:30:98:a3:bb:33:b8:db:b6:d9:58:4c:0f:2e:92:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Validity Not Before: Dec 11 06:54:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f88c0f7be8b570f17650e4dcc2701a4da7e4a4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:79:dd:3d:f1:7f:68:7a:d8:00:f3:08:15:6a: 6f:71:d9:24:72:2a:b0:e0:c6:7a:75:78:00:13:1f: 45:c4:0f:5d:08:5e:e1:36:f3:f6:ec:97:69:3a:7b: 65:83:e8:c2:17:f5:cc:08:65:4d:77:45:bc:61:14: a7:96:b9:c9:16:33:c0:f9:15:c8:c7:84:38:de:05: af:70:ec:56:16:99:b1:39:02:00:b9:e3:90:f6:d7: ad:32:5d:a9:4d:8b:75:d8:2b:83:40:96:e2:65:a4: 2c:5c:bd:d5:7d:2e:54:a4:97:bb:94:c6:c8:8d:35: da:62:72:ef:e9:52:b2:a0:17:06:31:c7:6a:e0:a9: 9f:bc:7c:46:f9:4b:1b:d9:b5:1d:0f:8f:54:f9:d6: 4e:c1:3e:4a:33:fe:ea:58:a4:0c:89:2b:27:de:0f: dd:6e:41:5d:84:89:0d:cf:f4:7b:c1:a2:58:95:ef: 15:a9:3f:d3:6e:d5:83:42:c0:2b:19:23:55:aa:e6: 7e:6a:55:63:59:3f:fa:57:4d:52:f5:48:e5:19:82: c4:52:69:f1:27:3e:6c:e9:ef:6a:91:64:43:86:92: 98:44:72:0d:59:d7:9c:49:ae:48:31:ed:fe:28:28: 2b:95:56:58:7f:08:51:52:26:6b:2f:d9:4d:87:ae: e6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8C:0F:7B:E8:B5:70:F1:76:50:E4:DC:C2:70:1A:4D:A7:E4:A4:A1 X509v3 Authority Key Identifier: keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/1-IwPe-i1cPF2UOTcwnAaTafkpKE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.17.64.0/24 84.17.77.0-84.17.78.255 84.17.80.0-84.17.82.255 84.17.85.0/24 84.17.92.0/24 84.17.94.0/24 193.254.252.0/23 195.128.32.0-195.128.34.255 195.128.36.0/24 195.128.38.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:5f:b3:d8:f4:e0:f0:ae:47:d2:89:07:5d:67:90:46:45:d3: 5c:45:8a:94:fb:64:0d:c8:8d:16:b7:54:c1:c5:18:f1:ad:34: 2e:29:42:99:32:5e:76:39:09:70:11:15:a4:5c:f1:e7:7a:88: d2:4c:7e:43:af:f7:82:72:c9:e6:70:4d:6b:f7:09:5d:39:b2: f2:66:1f:6e:4e:ae:1f:bc:e6:9b:b8:88:bb:af:61:08:d8:42: 4b:92:8f:fd:d9:51:9a:67:a4:e6:97:12:f9:91:bb:8a:a9:c6: bb:b8:02:34:31:83:9f:50:34:af:91:48:c7:d2:8f:45:28:dd: 77:5d:0d:a5:8d:51:7c:13:ae:b0:67:bd:fb:c0:28:89:50:49: d0:c7:70:38:d7:74:3f:5c:9f:d8:37:bc:80:80:54:cf:5c:59: a7:fe:43:e4:6a:92:bb:76:f4:23:ed:e2:d5:fc:d8:90:26:30: 9b:e6:82:f1:56:37:24:d5:67:cf:1e:fb:59:a5:22:98:cd:d6: d8:02:f7:e8:e5:b7:4b:8d:a5:f6:22:26:6b:5a:d7:b5:3c:c6: d2:c0:a6:36:be:81:dd:fb:b6:84:0c:6a:29:c8:de:08:99:57: da:1b:48:e4:8c:18:74:a9:95:e8:2f:21:9f:bd:95:71:80:fc: a7:7e:e5:66 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgISAZsMMJijuzO427bZWEwPLpIeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2Mjk1MGViNzkxNjY2OGJiZmE4ZDFiODcwNTYwYjFj YTc3MzkwHhcNMjUxMjExMDY1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODhjMGY3YmU4YjU3MGYxNzY1MGU0ZGNjMjcwMWE0ZGE3ZTRhNGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXndPfF/aHrYAPMIFWpvcdkkciqw 4MZ6dXgAEx9FxA9dCF7hNvP27JdpOntlg+jCF/XMCGVNd0W8YRSnlrnJFjPA+RXI x4Q43gWvcOxWFpmxOQIAueOQ9tetMl2pTYt12CuDQJbiZaQsXL3VfS5UpJe7lMbI jTXaYnLv6VKyoBcGMcdq4KmfvHxG+Usb2bUdD49U+dZOwT5KM/7qWKQMiSsn3g/d bkFdhIkNz/R7waJYle8VqT/TbtWDQsArGSNVquZ+alVjWT/6V01S9UjlGYLEUmnx Jz5s6e9qkWRDhpKYRHINWdecSa5IMe3+KCgrlVZYfwhRUiZrL9lNh67mFQIDAQAB o4ICWDCCAlQwHQYDVR0OBBYEFPiMD3votXDxdlDk3MJwGk2n5KShMB8GA1UdIwQY MBaAFPS3YpUOt5FmaLv6jRuHBWCxync5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAt MmY4ZGYxODdmOThiLzEvMS1Jd1BlLWkxY1BGMlVPVGN3bkFhVGFma3BLRS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZDIvMGIyM2M1LTIxYjUtNGFiMy05N2EwLTJmOGRmMTg3Zjk4 Yi8xLzlMZGlsUTYza1dab3VfcU5HNGNGWUxIS2R6ay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBtBggrBgEFBQcBBwEB/wReMFwwWgQCAAEwVAMEAFQRQDAM AwQAVBFNAwQAVBFOMAwDBARUEVADBABUEVIDBABUEVUDBABUEVwDBABUEV4DBAHB /vwwDAMEBcOAIAMEAMOAIgMEAMOAJAMEAcOAJjANBgkqhkiG9w0BAQsFAAOCAQEA Kl+z2PTg8K5H0okHXWeQRkXTXEWKlPtkDciNFrdUwcUY8a00LilCmTJedjkJcBEV pFzx53qI0kx+Q6/3gnLJ5nBNa/cJXTmy8mYfbk6uH7zmm7iIu69hCNhCS5KP/dlR mmek5pcS+ZG7iqnGu7gCNDGDn1A0r5FIx9KPRSjdd10NpY1RfBOusGe9+8AoiVBJ 0MdwONd0P1yf2De8gIBUz1xZp/5D5GqSu3b0I+3i1fzYkCYwm+aC8VY3JNVnzx77 WaUimM3W2AL36OW3S42l9iIma1rXtTzG0sCmNr6B3fu2hAxqKcjeCJlX2htI5IwY dKmV6C8hn72VcYD8p37lZg== -----END CERTIFICATE-----Generated at Sat Dec 20 11:47:24 2025 by rpki-client