This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/i88zMmXzCBoDMfGPSbM5OiNgXEw.roa File: i88zMmXzCBoDMfGPSbM5OiNgXEw.roa (raw, json) Hash identifier: 6iGdBiaP+5LlV9eR+5c4Z/1rG+HN7bLDtInFrN8ONTs= Subject key identifier: 8B:CF:33:32:65:F3:08:1A:03:31:F1:8F:49:B3:39:3A:23:60:5C:4C Certificate issuer: /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f Certificate serial: 019B212F9F732D003DC33F836A07157A1F66 Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/i88zMmXzCBoDMfGPSbM5OiNgXEw.roa Signing time: Mon 15 Dec 2025 08:45:27 +0000 ROA not before: Mon 15 Dec 2025 08:45:27 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9009 IP address blocks: 2a06:a880:2::/48 maxlen: 48 2a06:a880:3::/48 maxlen: 48 2a06:a880:4::/48 maxlen: 48 2a06:a880:5::/48 maxlen: 48 2a06:a880:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:2f:9f:73:2d:00:3d:c3:3f:83:6a:07:15:7a:1f:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f Validity Not Before: Dec 15 08:45:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8bcf333265f3081a0331f18f49b3393a23605c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:21:29:18:1b:45:0e:5d:88:ec:7f:b7:23:1d: 4e:80:17:e6:9d:3e:d1:f2:44:a5:ac:27:6e:c6:69: 91:54:9f:73:a0:62:62:20:ac:40:1e:c5:77:82:eb: f9:b0:1b:4b:a9:fb:78:94:e2:66:1c:de:b3:ef:18: 99:bc:26:f4:da:82:95:e9:ee:95:f0:1a:61:aa:be: 2b:bf:bf:4b:96:60:5c:8c:52:9d:e7:68:1f:83:0d: 48:f5:c1:ae:83:c0:46:b8:6f:00:aa:2f:0d:b4:4a: fa:0f:79:a2:71:8e:c4:53:f4:9c:81:6a:be:c1:03: db:34:e7:89:05:7d:c8:90:09:5b:da:d7:fe:04:f6: cc:d4:d0:72:b6:ed:d3:e1:f4:d5:85:ea:1a:52:ea: 7c:05:eb:d2:80:ea:c6:1d:64:54:0c:af:ed:e0:e7: f8:77:b3:46:af:61:7c:60:8c:59:72:8c:fd:d2:dc: 90:3a:4d:4a:28:a9:da:18:fa:74:16:a9:7d:a0:b6: 34:4c:fc:39:24:c0:93:04:37:8f:f5:ef:0e:a1:01: 6d:69:60:ca:26:93:74:15:d3:ca:c4:76:c9:3e:c9: 10:98:61:f1:e3:aa:41:c8:5f:2f:03:ae:79:5f:de: 8b:a9:c7:b7:78:8e:0c:1c:5d:23:fb:a8:5b:33:b2: 93:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CF:33:32:65:F3:08:1A:03:31:F1:8F:49:B3:39:3A:23:60:5C:4C X509v3 Authority Key Identifier: keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/i88zMmXzCBoDMfGPSbM5OiNgXEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a880:2::-2a06:a880:6:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 29:06:58:cc:bf:ca:5c:97:a6:9a:02:a8:71:c4:d4:a7:0d:c5: 32:19:f8:2f:25:ff:a1:c6:88:3a:f0:09:75:1f:af:e7:7f:22: 1a:86:f5:cd:6e:a1:56:ac:e5:ae:0f:39:c4:d5:02:3b:b9:e7: 68:0d:ca:54:6c:a9:23:89:b3:e4:e1:a0:b7:94:6b:38:01:8b: 25:41:53:2b:23:da:25:bd:0d:b9:ba:37:3e:2f:4b:9f:b4:78: 56:0a:26:ab:6c:f2:dd:57:b0:e4:c7:e6:e0:41:46:9a:3c:67: ce:f0:59:6d:0e:58:9b:d4:a3:4e:f4:c3:63:2a:52:49:f5:ec: 9e:d2:73:29:ca:90:0c:97:77:55:32:65:ad:45:43:31:55:5b: 15:12:02:57:13:97:1c:6f:02:13:c8:06:2b:fd:7e:7c:ab:8e: 1a:36:0d:d8:38:d2:ba:53:b4:1e:d7:29:cc:ee:ab:b3:49:94: 29:8b:4b:95:b4:54:ec:28:3a:f6:22:35:5c:e9:ad:bd:d8:49: a1:07:0c:bc:7a:60:e3:e3:6c:35:00:a4:f9:c0:30:fb:35:14: 80:9a:d3:6a:ad:7d:86:f5:db:76:40:26:aa:27:4b:81:49:6d: 5c:58:d1:11:52:f5:d0:fc:9f:bf:8a:f3:14:ba:63:8e:83:c8: 33:8a:e8:d5 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZshL59zLQA9wz+DagcVeh9mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzA1OTFlMmViNDlkMDU1OWU2ZmNlN2VlMmFhODFmMGY1 OWJhNmYwHhcNMjUxMjE1MDg0NTI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmNmMzMzMjY1ZjMwODFhMDMzMWYxOGY0OWIzMzkzYTIzNjA1YzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyEpGBtFDl2I7H+3Ix1OgBfmnT7R 8kSlrCduxmmRVJ9zoGJiIKxAHsV3guv5sBtLqft4lOJmHN6z7xiZvCb02oKV6e6V 8Bphqr4rv79LlmBcjFKd52gfgw1I9cGug8BGuG8Aqi8NtEr6D3micY7EU/ScgWq+ wQPbNOeJBX3IkAlb2tf+BPbM1NBytu3T4fTVheoaUup8BevSgOrGHWRUDK/t4Of4 d7NGr2F8YIxZcoz90tyQOk1KKKnaGPp0Fql9oLY0TPw5JMCTBDeP9e8OoQFtaWDK JpN0FdPKxHbJPskQmGHx46pByF8vA655X96Lqce3eI4MHF0j+6hbM7KTiwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFIvPMzJl8wgaAzHxj0mzOTojYFxMMB8GA1UdIwQY MBaAFMPAWR4utJ0FWeb85+4qqB8PWbpvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhCWkhpNjBuUVZaNXZ6bjdpcW9IdzladW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80YjhhYWItMjA5OS00M2FmLWI0MWQt ZTM0MDcxNzQ2NjNiLzEvaTg4ek1tWHpDQm9ETWZHUFNiTTVPaU5nWEV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy80YjhhYWItMjA5OS00M2FmLWI0MWQtZTM0MDcxNzQ2NjNi LzEvdzhCWkhpNjBuUVZaNXZ6bjdpcW9IdzladW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwEqBqiA AAIDBwAqBqiAAAYwDQYJKoZIhvcNAQELBQADggEBACkGWMy/ylyXppoCqHHE1KcN xTIZ+C8l/6HGiDrwCXUfr+d/IhqG9c1uoVas5a4POcTVAju552gNylRsqSOJs+Th oLeUazgBiyVBUysj2iW9Dbm6Nz4vS5+0eFYKJqts8t1XsOTH5uBBRpo8Z87wWW0O WJvUo070w2MqUkn17J7ScynKkAyXd1UyZa1FQzFVWxUSAlcTlxxvAhPIBiv9fnyr jho2Ddg40rpTtB7XKczuq7NJlCmLS5W0VOwoOvYiNVzprb3YSaEHDLx6YOPjbDUA pPnAMPs1FICa02qtfYb123ZAJqonS4FJbVxY0RFS9dD8n7+K8xS6Y46DyDOK6NU= -----END CERTIFICATE-----Generated at Sat Dec 20 07:44:01 2025 by rpki-client