This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/F-TYi38RbnSmcT-iBPhfD7_Aypc.roa File: F-TYi38RbnSmcT-iBPhfD7_Aypc.roa (raw, json) Hash identifier: NWGkzYhG6vexC4TxYqZHCnEiLwpnvQTP0hcxb9Hq34A= Subject key identifier: 17:E4:D8:8B:7F:11:6E:74:A6:71:3F:A2:04:F8:5F:0F:BF:C0:CA:97 Certificate issuer: /CN=2874e46bf636ea63e5d12362f551b80b27714780 Certificate serial: 019AFE3137A660DBA5B0DBB0F07AF977A0A1 Authority key identifier: 28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/F-TYi38RbnSmcT-iBPhfD7_Aypc.roa Signing time: Mon 08 Dec 2025 13:40:29 +0000 ROA not before: Mon 08 Dec 2025 13:40:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51691 IP address blocks: 37.16.96.0/20 maxlen: 23 37.16.112.0/20 maxlen: 20 178.213.232.0/21 maxlen: 21 178.213.238.0/23 maxlen: 23 178.213.239.0/24 maxlen: 24 2a00:4cc1::/32 maxlen: 48 2a00:4cc1:2501::/64 maxlen: 64 2a00:4cc2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:31:37:a6:60:db:a5:b0:db:b0:f0:7a:f9:77:a0:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2874e46bf636ea63e5d12362f551b80b27714780 Validity Not Before: Dec 8 13:40:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=17e4d88b7f116e74a6713fa204f85f0fbfc0ca97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9b:34:1c:d5:91:65:77:48:37:dc:be:28:57: 82:18:95:bb:71:a2:cf:fa:c0:b1:5c:de:09:ab:0b: f8:22:38:18:46:35:5d:f6:07:2b:5a:99:ee:61:6a: 24:fd:3a:a2:45:fa:1d:7d:7b:5b:a9:19:a3:4a:ac: 14:ee:d3:7e:90:18:3d:6b:7b:16:59:30:ae:be:19: de:1e:ef:81:ee:11:ff:03:af:e3:9f:9e:ce:e1:f0: 89:82:7f:ec:cf:65:42:24:fa:49:86:d0:a4:c4:bc: 2f:ba:c2:df:fa:de:37:80:95:a9:ed:d2:02:75:8f: e0:04:13:37:56:c7:54:71:9e:1d:bf:96:dc:20:b4: bf:5c:35:b7:08:c6:66:7a:11:97:da:2f:9b:fc:2a: 29:30:f7:86:b5:cb:a5:47:4c:3e:62:9f:64:84:2d: b5:00:9e:2b:76:d2:f4:b9:5d:53:30:f8:60:6a:71: 1e:0d:3d:53:20:56:6f:50:5e:f8:b1:7c:80:ac:38: 83:ce:22:34:ac:8e:06:5e:71:00:81:7c:8a:f8:9d: 5f:3f:04:de:56:6e:f0:c1:4c:3f:c8:b5:5a:13:0d: cc:45:e7:26:5e:d5:cf:dc:f3:f7:f1:42:e7:76:36: cd:44:e6:44:57:1e:91:7d:a3:bf:14:c1:43:07:c5: ab:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E4:D8:8B:7F:11:6E:74:A6:71:3F:A2:04:F8:5F:0F:BF:C0:CA:97 X509v3 Authority Key Identifier: keyid:28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/F-TYi38RbnSmcT-iBPhfD7_Aypc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.16.96.0/19 178.213.232.0/21 IPv6: 2a00:4cc1::-2a00:4cc2:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 12:0b:e1:c4:7f:3d:64:6b:cc:95:66:61:03:57:e1:2e:56:6b: e9:31:4e:95:59:b2:ba:87:21:3a:85:a8:b0:51:bd:35:f9:25: 85:1e:47:7e:29:a6:25:08:53:a2:49:40:fa:9c:cd:ec:26:56: 9c:ae:f7:58:32:8e:14:22:44:64:e1:04:a4:ec:60:b0:4a:a4: cf:2a:6f:25:89:4e:6a:52:46:19:4c:7a:94:1a:1e:18:bd:a8: db:be:f8:df:d3:3c:c9:df:73:9c:96:11:54:be:03:78:bb:f7: 61:3a:7c:29:11:64:f5:60:45:bc:b7:6d:cd:00:a6:61:ef:45: e3:46:45:8a:c3:dd:26:de:2c:54:d4:a5:b1:8b:20:5a:f0:e1: 61:c5:3f:af:f6:76:62:20:c8:4c:ad:28:1a:25:77:9c:14:34: 14:1a:63:9f:33:98:75:df:b6:b7:a4:11:a9:ff:b3:f8:a6:d1: 7b:c1:ae:4e:31:e5:22:e9:8c:66:1c:c1:2f:53:96:b4:5c:0b: 60:28:1a:56:e7:89:e3:25:df:88:7d:3f:55:e1:d7:5f:7a:88: 8c:76:fa:cb:ed:12:5f:44:6d:32:76:79:2e:14:54:c1:bf:68: 80:21:da:b0:1c:9b:3d:a6:46:28:2d:f3:85:f6:85:a9:4a:dd: 60:5d:f6:28 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZr+MTemYNulsNuw8Hr5d6ChMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NzRlNDZiZjYzNmVhNjNlNWQxMjM2MmY1NTFiODBiMjc3 MTQ3ODAwHhcNMjUxMjA4MTM0MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2U0ZDg4YjdmMTE2ZTc0YTY3MTNmYTIwNGY4NWYwZmJmYzBjYTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJs0HNWRZXdIN9y+KFeCGJW7caLP +sCxXN4Jqwv4IjgYRjVd9gcrWpnuYWok/TqiRfodfXtbqRmjSqwU7tN+kBg9a3sW WTCuvhneHu+B7hH/A6/jn57O4fCJgn/sz2VCJPpJhtCkxLwvusLf+t43gJWp7dIC dY/gBBM3VsdUcZ4dv5bcILS/XDW3CMZmehGX2i+b/CopMPeGtculR0w+Yp9khC21 AJ4rdtL0uV1TMPhganEeDT1TIFZvUF74sXyArDiDziI0rI4GXnEAgXyK+J1fPwTe Vm7wwUw/yLVaEw3MRecmXtXP3PP38ULndjbNROZEVx6RfaO/FMFDB8WrdQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFBfk2It/EW50pnE/ogT4Xw+/wMqXMB8GA1UdIwQY MBaAFCh05Gv2Nupj5dEjYvVRuAsncUeAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0hUa2FfWTI2bVBsMFNOaTlWRzRDeWR4UjRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lZGRjMDUtNDAyZC00ZGE3LTk3ZWYt YzEwZGE2YWFjMWIxLzEvRi1UWWkzOFJiblNtY1QtaUJQaGZEN19BeXBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9lZGRjMDUtNDAyZC00ZGE3LTk3ZWYtYzEwZGE2YWFjMWIx LzEvS0hUa2FfWTI2bVBsMFNOaTlWRzRDeWR4UjRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQFJRBgAwQD stXoMBYEAgACMBAwDgMFACoATMEDBQAqAEzCMA0GCSqGSIb3DQEBCwUAA4IBAQAS C+HEfz1ka8yVZmEDV+EuVmvpMU6VWbK6hyE6haiwUb01+SWFHkd+KaYlCFOiSUD6 nM3sJlacrvdYMo4UIkRk4QSk7GCwSqTPKm8liU5qUkYZTHqUGh4Yvajbvvjf0zzJ 33OclhFUvgN4u/dhOnwpEWT1YEW8t23NAKZh70XjRkWKw90m3ixU1KWxiyBa8OFh xT+v9nZiIMhMrSgaJXecFDQUGmOfM5h137a3pBGp/7P4ptF7wa5OMeUi6YxmHMEv U5a0XAtgKBpW54njJd+IfT9V4ddfeoiMdvrL7RJfRG0ydnkuFFTBv2iAIdqwHJs9 pkYoLfOF9oWpSt1gXfYo -----END CERTIFICATE-----Generated at Sun Dec 21 07:17:35 2025 by rpki-client