This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Rx64Xli7HT_ailie5Z1qU4HbO1k.roa File: Rx64Xli7HT_ailie5Z1qU4HbO1k.roa (raw, json) Hash identifier: xuuOE+WGpCLfQOhlmy9kgTdueIuRNoELydBu/TZ5hMg= Subject key identifier: 47:1E:B8:5E:58:BB:1D:3F:DA:8A:58:9E:E5:9D:6A:53:81:DB:3B:59 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019A5E4D0899DD246324C976F68D1795B115 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Rx64Xli7HT_ailie5Z1qU4HbO1k.roa Signing time: Fri 07 Nov 2025 12:31:38 +0000 ROA not before: Fri 07 Nov 2025 12:31:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 399646 IP address blocks: 89.106.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5e:4d:08:99:dd:24:63:24:c9:76:f6:8d:17:95:b1:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 7 12:31:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=471eb85e58bb1d3fda8a589ee59d6a5381db3b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:36:9f:a1:d0:b4:49:c3:2b:51:43:05:b1:4d: 71:7f:e7:03:b8:14:d9:b0:9f:f0:25:17:a5:ac:b7: ea:27:e9:03:66:6e:40:ad:50:ff:5d:46:23:50:d7: 32:45:ef:cf:2c:d2:bf:99:d9:f4:44:29:fe:2a:95: 09:06:cb:08:f5:d2:47:b5:27:9c:7a:ee:5c:8d:b5: 4d:5e:cb:0c:6c:d8:48:cd:37:06:21:5e:59:75:98: 79:33:7d:d9:f3:8c:29:7d:6a:d2:49:fc:05:55:2e: f4:53:4b:4d:60:f9:11:b3:c0:82:10:41:85:95:90: 85:ce:be:30:11:a7:6f:5c:7e:77:db:eb:78:9d:79: 13:da:a8:07:01:00:e3:57:0f:4b:c2:3f:a3:10:cd: b2:85:71:6a:74:0b:ab:21:6e:75:89:14:59:78:75: 8f:58:8f:b0:04:7e:6c:87:63:7e:0d:9d:26:4c:f3: e0:58:84:d0:71:96:54:47:8e:9d:36:3c:55:1f:d8: e2:94:40:54:f9:ff:31:97:bf:0b:00:b6:34:dc:a4: 5d:af:c8:2f:a2:e7:bf:e2:39:2e:36:8a:47:72:44: b4:06:55:ef:a8:86:80:2a:91:7a:c6:52:e3:2a:05: 69:23:b9:b9:c2:2a:04:50:3c:60:08:5f:98:23:ee: b2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1E:B8:5E:58:BB:1D:3F:DA:8A:58:9E:E5:9D:6A:53:81:DB:3B:59 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Rx64Xli7HT_ailie5Z1qU4HbO1k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.84.0/24 Signature Algorithm: sha256WithRSAEncryption e5:65:a3:d2:d8:20:d1:3b:a8:d0:f0:a4:1d:48:04:58:56:ce: 79:38:82:42:e3:bb:fe:f2:fe:60:32:81:18:cb:4d:42:2f:86: 8d:47:91:09:96:fc:e8:5d:b8:c8:94:3d:68:96:32:a0:5b:11: f8:d2:98:cb:70:29:bd:1b:ef:1c:24:f3:41:84:2c:af:df:a2: 92:9f:c3:63:d4:e9:1f:7d:8a:3c:a9:15:d9:0c:df:99:12:72: 34:47:dd:25:a3:c3:c3:98:62:2a:23:61:13:f3:81:a8:d1:6c: d1:0b:ba:06:94:31:95:73:7a:13:22:1c:dd:93:a7:2f:fa:db: 90:db:c0:fc:48:d5:00:11:f2:58:b8:65:87:35:7c:38:e8:9d: c0:2b:56:a8:7f:94:09:f0:2a:51:fa:cf:a2:42:72:ce:3b:50: 1d:60:00:6e:28:c1:67:20:df:0c:6b:4c:9a:0f:27:74:20:b1: b4:83:ad:9f:99:0d:8e:b4:bc:de:c8:db:73:88:9f:5e:eb:a2: af:6c:08:f3:3b:b3:c7:05:21:6c:d5:c2:b7:1f:9e:e7:76:d0: a6:af:38:b5:31:01:8d:90:ab:f6:9d:a6:d5:61:da:0f:93:a3: 47:c9:d3:ab:b0:5e:a9:77:b9:a8:ad:69:7f:30:2c:fb:d9:1d: 6f:6b:4d:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpeTQiZ3SRjJMl29o0XlbEVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTA3MTIzMTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzFlYjg1ZTU4YmIxZDNmZGE4YTU4OWVlNTlkNmE1MzgxZGIzYjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjafodC0ScMrUUMFsU1xf+cDuBTZ sJ/wJRelrLfqJ+kDZm5ArVD/XUYjUNcyRe/PLNK/mdn0RCn+KpUJBssI9dJHtSec eu5cjbVNXssMbNhIzTcGIV5ZdZh5M33Z84wpfWrSSfwFVS70U0tNYPkRs8CCEEGF lZCFzr4wEadvXH532+t4nXkT2qgHAQDjVw9Lwj+jEM2yhXFqdAurIW51iRRZeHWP WI+wBH5sh2N+DZ0mTPPgWITQcZZUR46dNjxVH9jilEBU+f8xl78LALY03KRdr8gv oue/4jkuNopHckS0BlXvqIaAKpF6xlLjKgVpI7m5wioEUDxgCF+YI+6yXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEceuF5Yux0/2opYnuWdalOB2ztZMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvUng2NFhsaTdIVF9haWxpZTVaMXFVNEhiTzFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWpUMA0G CSqGSIb3DQEBCwUAA4IBAQDlZaPS2CDRO6jQ8KQdSARYVs55OIJC47v+8v5gMoEY y01CL4aNR5EJlvzoXbjIlD1oljKgWxH40pjLcCm9G+8cJPNBhCyv36KSn8Nj1Okf fYo8qRXZDN+ZEnI0R90lo8PDmGIqI2ET84Go0WzRC7oGlDGVc3oTIhzdk6cv+tuQ 28D8SNUAEfJYuGWHNXw46J3AK1aof5QJ8CpR+s+iQnLOO1AdYABuKMFnIN8Ma0ya Dyd0ILG0g62fmQ2OtLzeyNtziJ9e66KvbAjzO7PHBSFs1cK3H57ndtCmrzi1MQGN kKv2nabVYdoPk6NHydOrsF6pd7morWl/MCz72R1va026 -----END CERTIFICATE-----Generated at Fri Dec 5 17:03:51 2025 by rpki-client