This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CyhVqfC3N8hp9BCz6XKDEfex4dQ.roa File: CyhVqfC3N8hp9BCz6XKDEfex4dQ.roa (raw, json) Hash identifier: mJjLx0FzxNFcpgLdztnI2MRDUu0fnAFaE5OXkm+OUU0= Subject key identifier: 0B:28:55:A9:F0:B7:37:C8:69:F4:10:B3:E9:72:83:11:F7:B1:E1:D4 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019AD0C1BC6483F183911DFD3A5B5058F63E Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CyhVqfC3N8hp9BCz6XKDEfex4dQ.roa Signing time: Sat 29 Nov 2025 17:55:48 +0000 ROA not before: Sat 29 Nov 2025 17:55:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55286 IP address blocks: 89.144.53.0/24 maxlen: 24 89.144.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d0:c1:bc:64:83:f1:83:91:1d:fd:3a:5b:50:58:f6:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 29 17:55:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0b2855a9f0b737c869f410b3e9728311f7b1e1d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7c:a0:37:0b:d6:7d:53:ec:45:7b:2c:52:b9: 82:bc:51:b2:d0:f7:47:c8:eb:89:0e:ee:cc:f7:9d: f3:e0:e4:c4:16:72:8c:2c:16:0b:a1:69:c4:b9:4d: 65:cd:1e:c8:a3:3e:03:39:6b:1e:d6:ba:05:b7:13: b5:26:b6:5d:94:8e:62:d4:9c:35:03:f9:00:c8:a5: 82:02:7a:90:f4:a6:78:91:30:c7:5b:a5:89:a3:f2: 74:a0:1b:d4:60:df:12:0f:3e:23:7f:92:54:be:d8: 6e:5c:c5:55:7a:95:9f:47:5b:1b:0f:1a:6e:af:c9: 79:dc:3b:31:af:94:62:f5:37:5f:ff:00:e2:d2:14: d4:07:80:0f:5b:b4:70:76:d5:73:08:f7:b1:4c:51: b6:db:c4:84:c4:04:36:dd:77:cc:16:c6:e0:45:db: 45:de:c1:b9:aa:c5:fe:b8:5f:00:f1:14:25:f6:80: 3f:e3:63:f0:c4:32:85:19:29:d3:94:26:c4:bc:1e: 12:bc:0c:74:aa:5b:6f:df:a3:36:9a:8e:db:8d:65: ab:75:09:3f:a3:38:1d:8b:36:90:70:99:93:94:14: 3a:1b:9e:ca:3c:f2:1c:57:65:bd:fa:61:d3:bc:b2: 37:6b:84:7d:63:d9:04:c2:fb:8e:1c:72:ab:dd:19: cf:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:28:55:A9:F0:B7:37:C8:69:F4:10:B3:E9:72:83:11:F7:B1:E1:D4 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CyhVqfC3N8hp9BCz6XKDEfex4dQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.144.53.0-89.144.54.255 Signature Algorithm: sha256WithRSAEncryption cd:4f:1c:0d:d9:6c:51:a4:00:19:80:5f:2e:5b:a1:53:bd:af: 22:15:8a:96:2e:60:cb:9d:4f:eb:0b:6f:ac:26:e0:5e:04:da: 0f:36:88:32:d3:87:1c:a4:64:6a:81:be:1e:bd:8f:cd:94:bb: 23:75:9e:f8:0d:9e:56:72:9c:48:a0:a1:7f:a9:81:18:d9:c0: b3:77:27:19:14:f6:bc:9a:3b:fd:f6:e0:35:6b:7f:6c:b0:29: dc:d2:c7:f5:eb:ad:5c:d9:ad:95:3e:de:86:57:b6:1d:fe:3c: 04:43:75:ef:10:22:52:eb:87:2d:4e:90:50:08:61:3b:3c:71: 10:39:24:ce:ce:1d:5c:9d:fb:02:6e:3e:e6:a5:a7:5f:08:d9: 5c:02:e3:d7:d4:21:e3:25:56:e3:ae:58:1a:2e:f0:34:6a:a0: 7b:9a:ed:9c:6b:fd:12:77:25:c9:68:90:e8:23:57:62:30:e0: 3d:b6:ea:19:09:0e:92:7c:42:eb:64:a7:3a:0f:79:84:0c:6b: 26:d5:e5:07:05:79:01:af:69:77:1c:d1:eb:57:22:f7:ae:4a: 25:2f:13:37:e0:54:5d:5d:09:6f:ac:a8:f6:87:39:7d:9d:cc: 4a:ba:03:9c:d0:d5:03:03:83:02:af:0e:3d:50:cc:aa:60:f3: f5:f0:bf:ef -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZrQwbxkg/GDkR39OltQWPY+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTI5MTc1NTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjI4NTVhOWYwYjczN2M4NjlmNDEwYjNlOTcyODMxMWY3YjFlMWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHygNwvWfVPsRXssUrmCvFGy0PdH yOuJDu7M953z4OTEFnKMLBYLoWnEuU1lzR7Ioz4DOWse1roFtxO1JrZdlI5i1Jw1 A/kAyKWCAnqQ9KZ4kTDHW6WJo/J0oBvUYN8SDz4jf5JUvthuXMVVepWfR1sbDxpu r8l53Dsxr5Ri9Tdf/wDi0hTUB4APW7RwdtVzCPexTFG228SExAQ23XfMFsbgRdtF 3sG5qsX+uF8A8RQl9oA/42PwxDKFGSnTlCbEvB4SvAx0qltv36M2mo7bjWWrdQk/ ozgdizaQcJmTlBQ6G57KPPIcV2W9+mHTvLI3a4R9Y9kEwvuOHHKr3RnPnwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFAsoVanwtzfIafQQs+lygxH3seHUMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvQ3loVnFmQzNOOGhwOUJDejZYS0RFZmV4NGRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABZkDUD BABZkDYwDQYJKoZIhvcNAQELBQADggEBAM1PHA3ZbFGkABmAXy5boVO9ryIVipYu YMudT+sLb6wm4F4E2g82iDLThxykZGqBvh69j82UuyN1nvgNnlZynEigoX+pgRjZ wLN3JxkU9ryaO/324DVrf2ywKdzSx/XrrVzZrZU+3oZXth3+PARDde8QIlLrhy1O kFAIYTs8cRA5JM7OHVyd+wJuPualp18I2VwC49fUIeMlVuOuWBou8DRqoHua7Zxr /RJ3JclokOgjV2Iw4D226hkJDpJ8QutkpzoPeYQMaybV5QcFeQGvaXcc0etXIveu SiUvEzfgVF1dCW+sqPaHOX2dzEq6A5zQ1QMDgwKvDj1QzKpg8/Xwv+8= -----END CERTIFICATE-----Generated at Fri Dec 5 17:05:20 2025 by rpki-client