This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/k4gnU_2dPCi0jge10fEjCBWINeM.roa File: k4gnU_2dPCi0jge10fEjCBWINeM.roa (raw, json) Hash identifier: 3h9HbZ8YKdby4Bf5/VZOyOIIGhjG7hZj8ErvdMCMcdw= Subject key identifier: 93:88:27:53:FD:9D:3C:28:B4:8E:07:B5:D1:F1:23:08:15:88:35:E3 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019A955FEBC53E038308EFC374DE1E1CBFCC Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/k4gnU_2dPCi0jge10fEjCBWINeM.roa Signing time: Tue 18 Nov 2025 05:11:22 +0000 ROA not before: Tue 18 Nov 2025 05:11:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215439 IP address blocks: 89.144.16.0/24 maxlen: 24 94.103.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:95:5f:eb:c5:3e:03:83:08:ef:c3:74:de:1e:1c:bf:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 18 05:11:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=93882753fd9d3c28b48e07b5d1f12308158835e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:18:74:d2:27:8b:83:48:73:ef:bb:24:d8:72: 98:7c:1c:72:b7:98:2f:69:24:38:5f:4f:a0:35:31: 9b:36:ba:3a:fb:3a:64:a0:a1:1f:de:d5:fa:dd:f7: 6c:fc:76:0f:00:0b:d3:4c:f1:6f:5f:cd:e2:93:54: 4c:76:28:cc:e5:65:0f:a9:b1:40:5b:3a:c7:f2:8f: 48:b5:1a:69:57:0d:6b:2e:b8:ec:08:d6:d3:2b:27: 37:f1:bd:62:10:4b:b8:27:97:84:9e:cb:79:52:17: 4b:13:7e:f1:55:2a:b0:5f:2d:0b:03:23:9b:8a:db: ed:d8:5e:e7:ce:91:f4:de:ef:86:cf:c8:71:21:5a: 3f:d2:5e:aa:4f:57:3c:4c:e1:61:96:4d:30:a3:9c: 41:43:50:ae:4f:1b:75:33:44:ec:f9:aa:d0:9b:f9: 67:0a:1d:54:1e:02:c8:71:ca:a6:6b:d4:36:1e:17: 98:0e:82:1b:36:75:08:42:e7:2a:55:b6:ee:f1:39: 6c:af:f0:2b:ec:68:08:e9:11:bf:13:80:ae:3a:c2: 2a:f6:4b:00:ab:31:df:d5:35:7a:85:86:ab:c7:ae: ee:6d:0a:ad:04:f4:d9:79:4b:eb:ea:a9:a5:99:22: 76:1b:83:0f:8c:9f:7a:eb:3b:49:48:81:79:e3:bc: 3f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:88:27:53:FD:9D:3C:28:B4:8E:07:B5:D1:F1:23:08:15:88:35:E3 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/k4gnU_2dPCi0jge10fEjCBWINeM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.144.16.0/24 94.103.169.0/24 Signature Algorithm: sha256WithRSAEncryption 55:cb:85:1b:af:2f:07:52:db:6b:5b:ee:0d:2f:24:e0:82:cf: ee:47:4b:b6:ed:2c:95:28:b0:68:3e:f1:30:0c:e5:88:9e:64: df:71:43:54:9f:f3:ec:6c:b1:b4:b0:7d:c3:a5:d2:39:b9:87: 12:85:18:1b:77:56:61:fe:ef:b8:23:94:09:3c:f5:0c:f1:d2: 79:70:d9:fb:6a:ab:a2:b3:62:41:af:45:7c:7a:75:60:24:ac: 8f:01:71:c5:4a:e7:b6:4e:21:d8:bf:4a:93:4e:83:89:0f:b7: 3b:c7:27:12:39:f2:03:44:da:f4:95:db:4c:d9:dd:34:4e:72: 0b:41:be:59:91:2c:26:28:02:c9:ed:97:69:a1:ed:a7:71:e9: a2:28:6a:3a:72:05:af:a7:3e:b1:c3:84:0c:3c:45:a0:26:df: b1:5d:e3:b9:39:01:19:e9:67:4b:08:0f:c6:82:cd:8d:6b:cc: c4:6a:d9:a0:36:25:56:4e:5d:b0:97:26:5d:96:13:89:37:f5: 4f:9a:91:48:15:cb:09:f4:c2:34:88:5e:27:01:4b:0c:dd:72: 30:0c:3e:c5:9c:cf:ca:81:81:58:94:48:9e:81:97:6a:86:d0: 5c:4c:c9:a7:02:ec:14:4f:4c:72:b8:2a:e2:93:30:02:41:e5: 14:da:62:53 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqVX+vFPgODCO/DdN4eHL/MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTE4MDUxMTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Mzg4Mjc1M2ZkOWQzYzI4YjQ4ZTA3YjVkMWYxMjMwODE1ODgzNWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxh00ieLg0hz77sk2HKYfBxyt5gv aSQ4X0+gNTGbNro6+zpkoKEf3tX63fds/HYPAAvTTPFvX83ik1RMdijM5WUPqbFA WzrH8o9ItRppVw1rLrjsCNbTKyc38b1iEEu4J5eEnst5UhdLE37xVSqwXy0LAyOb itvt2F7nzpH03u+Gz8hxIVo/0l6qT1c8TOFhlk0wo5xBQ1CuTxt1M0Ts+arQm/ln Ch1UHgLIccqma9Q2HheYDoIbNnUIQucqVbbu8Tlsr/Ar7GgI6RG/E4CuOsIq9ksA qzHf1TV6hYarx67ubQqtBPTZeUvr6qmlmSJ2G4MPjJ966ztJSIF547w/BwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJOIJ1P9nTwotI4HtdHxIwgViDXjMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvazRnblVfMmRQQ2kwamdlMTBmRWpDQldJTmVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWZAQAwQA XmepMA0GCSqGSIb3DQEBCwUAA4IBAQBVy4Ubry8HUttrW+4NLyTggs/uR0u27SyV KLBoPvEwDOWInmTfcUNUn/PsbLG0sH3DpdI5uYcShRgbd1Zh/u+4I5QJPPUM8dJ5 cNn7aquis2JBr0V8enVgJKyPAXHFSue2TiHYv0qTToOJD7c7xycSOfIDRNr0ldtM 2d00TnILQb5ZkSwmKALJ7Zdpoe2ncemiKGo6cgWvpz6xw4QMPEWgJt+xXeO5OQEZ 6WdLCA/Ggs2Na8zEatmgNiVWTl2wlyZdlhOJN/VPmpFIFcsJ9MI0iF4nAUsM3XIw DD7FnM/KgYFYlEiegZdqhtBcTMmnAuwUT0xyuCrikzACQeUU2mJT -----END CERTIFICATE-----Generated at Fri Dec 5 17:04:55 2025 by rpki-client