This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8SpW6LDBP20OvYT5u7A9aZh-jxo.roa File: 8SpW6LDBP20OvYT5u7A9aZh-jxo.roa (raw, json) Hash identifier: 9AZ5Hqe9XCrcWbq40lSFwBrEoglnEIZd1IRh8Pqm03U= Subject key identifier: F1:2A:56:E8:B0:C1:3F:6D:0E:BD:84:F9:BB:B0:3D:69:98:7E:8F:1A Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019A6E64E7E73F1196C8D31E443DC6123BE5 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8SpW6LDBP20OvYT5u7A9aZh-jxo.roa Signing time: Mon 10 Nov 2025 15:31:37 +0000 ROA not before: Mon 10 Nov 2025 15:31:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13335 IP address blocks: 89.106.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6e:64:e7:e7:3f:11:96:c8:d3:1e:44:3d:c6:12:3b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 10 15:31:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f12a56e8b0c13f6d0ebd84f9bbb03d69987e8f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e9:73:ba:79:66:a8:15:fb:a1:66:eb:31:96: 0c:41:9c:45:51:fe:85:bd:a1:d9:9b:50:44:eb:b8: 62:ad:47:30:1e:13:a7:76:da:1f:17:70:26:e5:90: ea:7f:54:34:c6:f6:97:79:3e:87:c3:47:12:5b:a4: f2:6d:5b:f1:3a:ee:9a:68:5b:27:33:bb:8d:e1:8f: 74:3a:8e:6d:b3:58:35:77:24:5e:3a:bd:c1:ef:14: d9:23:e2:1e:b8:44:14:d2:3a:7a:a9:17:22:1a:2f: 8b:0f:8b:01:44:de:34:29:61:8d:1b:65:c2:30:a4: bd:fa:27:42:1c:23:b6:f4:cf:66:76:a0:5d:f6:dc: af:12:94:25:fa:3d:8f:bc:53:c8:93:94:6b:4d:d6: 4e:41:af:bf:10:28:b7:0a:c3:64:48:d9:e3:8a:2a: 12:1b:c7:3e:41:5a:1d:cc:10:02:32:74:06:b2:16: 6a:82:0f:f2:98:18:f1:62:3a:8f:e7:a8:22:54:fb: 6d:89:c9:39:b7:0b:43:9c:4a:b0:14:b0:eb:dd:0e: ca:f7:bc:f2:2e:c3:8c:51:f6:70:03:4d:2c:01:08: 89:c4:d0:3f:ed:5d:41:2e:97:24:c9:0c:22:3e:ad: cb:33:32:31:81:da:5f:6d:71:0b:63:aa:7a:c3:06: 85:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:2A:56:E8:B0:C1:3F:6D:0E:BD:84:F9:BB:B0:3D:69:98:7E:8F:1A X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8SpW6LDBP20OvYT5u7A9aZh-jxo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.90.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:d0:e2:6c:29:de:ab:a7:4b:0d:f2:67:fd:5c:45:7b:c8:15: 36:4c:4f:73:b2:f5:2e:f7:df:48:1d:e2:8b:4c:0f:1c:d4:64: 37:dd:a6:50:a0:ba:b9:0d:17:5c:b1:bb:25:a3:9a:0b:5c:5d: b5:ba:f4:3f:23:54:5b:a1:84:2a:ab:ae:b8:0f:bb:c7:c5:b3: e9:b7:c5:02:d0:14:e3:88:c0:19:d7:11:e2:64:4d:9a:e9:b9: 9b:63:b7:a6:0e:0f:6f:45:15:01:54:cf:b8:fe:4d:95:4c:61: 15:bd:3c:b5:5f:f2:10:d1:fa:7b:fd:06:fb:8e:87:6d:eb:a1: 89:9e:3a:05:9d:98:18:3d:d7:05:89:e6:47:6a:bb:89:ea:08: 00:e1:90:8f:5a:d4:a3:b2:e0:af:74:4c:5e:2f:70:8e:3b:3e: ee:4b:a7:1d:95:46:e9:ad:99:00:56:ff:6a:45:c0:e3:35:a9: ca:0b:d5:93:74:a3:32:14:c6:ba:91:a1:8c:bb:cc:be:3e:e5: f4:d8:b3:16:e6:c6:d1:7c:d6:3c:b6:7c:88:d7:4b:6a:b0:2e: d3:09:70:3a:06:88:5b:3d:3a:bb:19:e4:3d:41:a0:cf:c4:f5: b2:36:6e:df:6a:b1:09:b3:10:0c:ea:a1:1c:83:23:1e:df:05: 63:97:2e:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpuZOfnPxGWyNMeRD3GEjvlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTEwMTUzMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTJhNTZlOGIwYzEzZjZkMGViZDg0ZjliYmIwM2Q2OTk4N2U4ZjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2elzunlmqBX7oWbrMZYMQZxFUf6F vaHZm1BE67hirUcwHhOndtofF3Am5ZDqf1Q0xvaXeT6Hw0cSW6TybVvxOu6aaFsn M7uN4Y90Oo5ts1g1dyReOr3B7xTZI+IeuEQU0jp6qRciGi+LD4sBRN40KWGNG2XC MKS9+idCHCO29M9mdqBd9tyvEpQl+j2PvFPIk5RrTdZOQa+/ECi3CsNkSNnjiioS G8c+QVodzBACMnQGshZqgg/ymBjxYjqP56giVPttick5twtDnEqwFLDr3Q7K97zy LsOMUfZwA00sAQiJxNA/7V1BLpckyQwiPq3LMzIxgdpfbXELY6p6wwaF5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPEqVuiwwT9tDr2E+buwPWmYfo8aMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvOFNwVzZMREJQMjBPdllUNXU3QTlhWmgtanhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWpaMA0G CSqGSIb3DQEBCwUAA4IBAQAK0OJsKd6rp0sN8mf9XEV7yBU2TE9zsvUu999IHeKL TA8c1GQ33aZQoLq5DRdcsbslo5oLXF21uvQ/I1RboYQqq664D7vHxbPpt8UC0BTj iMAZ1xHiZE2a6bmbY7emDg9vRRUBVM+4/k2VTGEVvTy1X/IQ0fp7/Qb7jodt66GJ njoFnZgYPdcFieZHaruJ6ggA4ZCPWtSjsuCvdExeL3COOz7uS6cdlUbprZkAVv9q RcDjNanKC9WTdKMyFMa6kaGMu8y+PuX02LMW5sbRfNY8tnyI10tqsC7TCXA6Bohb PTq7GeQ9QaDPxPWyNm7farEJsxAM6qEcgyMe3wVjly74 -----END CERTIFICATE-----Generated at Thu Dec 4 07:32:08 2025 by rpki-client