This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/iwRA7fz_OPxlNBXZQvMgcTVYc6o.roa File: iwRA7fz_OPxlNBXZQvMgcTVYc6o.roa (raw, json) Hash identifier: v0Z3qOqbDqbalYmhXR/vbK8ZHbFth7W9VtS2U87YUeY= Subject key identifier: 8B:04:40:ED:FC:FF:38:FC:65:34:15:D9:42:F3:20:71:35:58:73:AA Certificate issuer: /CN=e37dfa134d3c8d468dce5b37435f99e323dae0e8 Certificate serial: 019B0385889A9482D09F800639D7FF5C8E8D Authority key identifier: E3:7D:FA:13:4D:3C:8D:46:8D:CE:5B:37:43:5F:99:E3:23:DA:E0:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4336E008jUaNzls3Q1-Z4yPa4Og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/iwRA7fz_OPxlNBXZQvMgcTVYc6o.roa Signing time: Tue 09 Dec 2025 14:30:41 +0000 ROA not before: Tue 09 Dec 2025 14:30:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41745 IP address blocks: 185.236.22.0/24 maxlen: 24 185.236.23.0/24 maxlen: 24 193.32.177.0/24 maxlen: 24 193.32.178.0/24 maxlen: 24 193.32.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/4336E008jUaNzls3Q1-Z4yPa4Og.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/4336E008jUaNzls3Q1-Z4yPa4Og.mft rsync://rpki.ripe.net/repository/DEFAULT/4336E008jUaNzls3Q1-Z4yPa4Og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:85:88:9a:94:82:d0:9f:80:06:39:d7:ff:5c:8e:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37dfa134d3c8d468dce5b37435f99e323dae0e8 Validity Not Before: Dec 9 14:30:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8b0440edfcff38fc653415d942f32071355873aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7a:e2:c9:01:e8:2f:62:4c:8d:e0:12:33:9c: 8f:5c:7d:88:b6:96:bd:5a:6c:36:f6:e2:9f:97:7f: 51:88:09:5d:69:99:cd:1d:04:17:73:58:bc:a8:37: 39:c0:f2:3b:ed:30:ae:71:46:e6:17:d4:00:10:c4: 6c:4f:21:69:9e:68:7a:21:1d:ac:c0:4d:59:7d:b9: 1a:38:8d:c1:eb:c2:b4:32:c6:50:24:6e:f0:ef:25: 5c:98:c9:7b:81:cb:00:eb:37:94:95:46:55:01:ff: 54:bd:18:0b:2e:38:a7:67:10:ae:11:09:03:36:3d: 7e:0c:d5:ab:38:d5:42:d2:b4:c5:81:0c:9c:78:7e: 16:58:be:e4:4c:7c:ce:54:a3:23:eb:05:6f:be:f6: e4:3c:f9:92:ab:5b:c0:40:22:95:b4:59:68:bc:75: 54:e0:a4:bf:22:41:c0:c7:ff:20:f6:4f:3f:25:b4: 68:97:fe:7c:2a:bd:13:5b:cc:0f:4d:98:f3:4a:c5: 83:d6:7a:81:98:28:66:0f:0c:6f:13:3b:0d:bc:a9: b9:07:70:c5:44:ad:15:d2:62:24:b3:11:83:09:be: 32:fe:13:4a:55:92:01:7f:67:59:06:06:ba:95:9f: be:db:78:78:98:e7:ef:45:7a:87:9b:6d:9b:c7:2b: be:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:04:40:ED:FC:FF:38:FC:65:34:15:D9:42:F3:20:71:35:58:73:AA X509v3 Authority Key Identifier: keyid:E3:7D:FA:13:4D:3C:8D:46:8D:CE:5B:37:43:5F:99:E3:23:DA:E0:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4336E008jUaNzls3Q1-Z4yPa4Og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/iwRA7fz_OPxlNBXZQvMgcTVYc6o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/4336E008jUaNzls3Q1-Z4yPa4Og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.236.22.0/23 193.32.177.0-193.32.179.255 Signature Algorithm: sha256WithRSAEncryption c3:ca:4c:40:e2:c9:38:e4:5e:ff:8f:e3:8c:b7:f2:ee:ed:fb: f5:23:b0:58:fe:77:4e:b0:8e:c4:46:54:e9:e3:6e:b1:e3:c1: dc:6f:1c:2d:5e:33:d5:bd:94:df:64:a8:69:c9:13:5f:bc:1f: b7:89:60:35:72:81:ca:68:bc:d0:1e:36:ac:0f:49:24:87:4a: a9:78:fd:da:de:e5:2d:a3:e8:b4:26:99:ee:e4:34:6a:cd:5a: a8:02:4e:1f:76:96:ff:85:19:aa:c2:a8:4d:2e:62:6c:05:62: 47:6a:c1:8a:92:04:9d:e3:76:67:14:55:e0:7b:cf:95:03:5b: 38:c4:a2:b7:10:85:84:dc:84:39:6f:36:65:97:bc:23:e6:e1: 09:1b:5a:47:eb:59:d0:db:30:75:0d:3d:ff:8e:bf:dd:55:4f: db:ca:84:34:69:79:24:16:6a:cd:1b:9e:ee:da:77:82:e7:b8: bf:1e:88:75:52:ed:51:41:18:1e:9e:89:8f:5a:b8:48:41:09: 10:1a:f5:0d:db:88:e0:ee:3e:e9:a8:c1:83:f2:d0:47:6e:eb: 03:22:60:1f:d7:50:67:6c:fd:f2:c4:30:dc:7a:c2:6f:72:05: d9:ab:ba:1a:13:ae:ad:3b:94:d2:12:6d:87:a2:79:24:c7:cf: ac:6a:f7:27 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZsDhYialILQn4AGOdf/XI6NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2RmYTEzNGQzYzhkNDY4ZGNlNWIzNzQzNWY5OWUzMjNk YWUwZTgwHhcNMjUxMjA5MTQzMDQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjA0NDBlZGZjZmYzOGZjNjUzNDE1ZDk0MmYzMjA3MTM1NTg3M2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHriyQHoL2JMjeASM5yPXH2Itpa9 Wmw29uKfl39RiAldaZnNHQQXc1i8qDc5wPI77TCucUbmF9QAEMRsTyFpnmh6IR2s wE1ZfbkaOI3B68K0MsZQJG7w7yVcmMl7gcsA6zeUlUZVAf9UvRgLLjinZxCuEQkD Nj1+DNWrONVC0rTFgQyceH4WWL7kTHzOVKMj6wVvvvbkPPmSq1vAQCKVtFlovHVU 4KS/IkHAx/8g9k8/JbRol/58Kr0TW8wPTZjzSsWD1nqBmChmDwxvEzsNvKm5B3DF RK0V0mIksxGDCb4y/hNKVZIBf2dZBga6lZ++23h4mOfvRXqHm22bxyu+GQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFIsEQO38/zj8ZTQV2ULzIHE1WHOqMB8GA1UdIwQY MBaAFON9+hNNPI1Gjc5bN0NfmeMj2uDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDMzNkUwMDhqVWFOemxzM1ExLVo0eVBhNE9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jMWI0NDctNDM1Mi00ZmQxLTljMjct NWY0YTcwNzEyYzIzLzEvaXdSQTdmel9PUHhsTkJYWlF2TWdjVFZZYzZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9jMWI0NDctNDM1Mi00ZmQxLTljMjctNWY0YTcwNzEyYzIz LzEvNDMzNkUwMDhqVWFOemxzM1ExLVo0eVBhNE9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBuewWMAwD BADBILEDBALBILAwDQYJKoZIhvcNAQELBQADggEBAMPKTEDiyTjkXv+P44y38u7t +/UjsFj+d06wjsRGVOnjbrHjwdxvHC1eM9W9lN9kqGnJE1+8H7eJYDVygcpovNAe NqwPSSSHSql4/dre5S2j6LQmme7kNGrNWqgCTh92lv+FGarCqE0uYmwFYkdqwYqS BJ3jdmcUVeB7z5UDWzjEorcQhYTchDlvNmWXvCPm4QkbWkfrWdDbMHUNPf+Ov91V T9vKhDRpeSQWas0bnu7ad4LnuL8eiHVS7VFBGB6eiY9auEhBCRAa9Q3biODuPumo wYPy0Edu6wMiYB/XUGds/fLEMNx6wm9yBdmruhoTrq07lNISbYeieSTHz6xq9yc= -----END CERTIFICATE-----Generated at Sun Dec 21 11:54:24 2025 by rpki-client