This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/tTaIEuNhDsWfSGBVJoH_1fvOdfI.roa File: tTaIEuNhDsWfSGBVJoH_1fvOdfI.roa (raw, json) Hash identifier: VT3DnvWCB9neNDoyETNfDyp0hytuoc0dOGs+b9s3uIQ= Subject key identifier: B5:36:88:12:E3:61:0E:C5:9F:48:60:55:26:81:FF:D5:FB:CE:75:F2 Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019A98C577209F9B6C3F3128436C79CBAD66 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/tTaIEuNhDsWfSGBVJoH_1fvOdfI.roa Signing time: Tue 18 Nov 2025 21:01:08 +0000 ROA not before: Tue 18 Nov 2025 21:01:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 89.21.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 00:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:98:c5:77:20:9f:9b:6c:3f:31:28:43:6c:79:cb:ad:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Nov 18 21:01:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b5368812e3610ec59f4860552681ffd5fbce75f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:22:4d:a2:a1:e3:dd:34:3a:5f:98:cd:68:26: 88:32:01:16:6e:c8:44:9a:ec:35:95:de:1b:52:e1: fb:04:c9:99:50:12:10:a5:0d:70:93:a4:f7:6b:8b: 5d:5a:58:ea:0c:58:e4:9c:e7:02:74:6e:a3:53:65: 47:94:fb:00:28:27:75:c5:27:3b:d4:e9:fd:79:63: 56:8a:e8:15:4a:a8:fa:4b:b2:3b:f7:d9:09:61:16: fa:21:a4:6a:7f:13:77:05:98:3e:39:fc:98:0a:b9: 88:c4:db:24:fa:ae:0c:9a:5f:9e:70:b6:9c:59:fd: d2:05:3b:fa:be:f4:54:a0:e4:3c:27:c7:2c:8b:bf: a3:c9:db:15:35:33:59:86:b9:3e:ee:53:04:3a:d7: f0:4d:3c:2c:05:74:fd:c7:f7:cc:79:7c:46:94:61: 1e:c4:01:95:09:dc:79:9b:b5:85:32:e3:b0:95:f3: 49:df:d7:86:8c:94:15:dc:20:35:5f:14:c3:4c:88: 58:af:8d:73:c5:14:ec:b6:e3:cb:52:fa:5a:87:3a: 0d:c6:6d:d9:bd:49:a4:08:f9:d0:eb:d1:cd:c2:ac: 67:92:3f:68:a7:b1:df:f4:12:1c:8b:14:33:86:4c: 90:58:e8:9d:be:4c:ee:7f:a7:be:24:99:e7:b3:bd: 06:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:36:88:12:E3:61:0E:C5:9F:48:60:55:26:81:FF:D5:FB:CE:75:F2 X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/tTaIEuNhDsWfSGBVJoH_1fvOdfI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.21.87.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:aa:ad:d9:52:c1:8b:88:4c:2e:93:0b:e1:24:82:26:e1:dd: 4c:a9:68:0a:95:a9:44:a2:1e:7f:80:d1:c9:52:ff:0f:0a:d3: 36:99:e0:1c:86:c1:2d:ad:b0:3b:78:98:99:ad:19:bd:8c:04: 75:e9:5e:3d:ae:d9:e2:e1:d2:93:2b:eb:a3:07:83:fd:65:b3: e6:64:40:a1:a7:5d:74:75:51:a2:49:aa:8a:63:e5:74:a9:ac: 60:bc:45:9d:47:27:09:10:2c:36:4c:86:52:3f:a2:82:f0:a2: 73:e2:59:f8:e0:48:af:8d:7c:b9:30:b0:bc:31:77:6b:99:60: 0b:4a:74:7b:3a:80:86:e7:ff:3b:82:a6:55:20:97:b3:a1:ef: 37:db:d6:29:23:e6:a7:f0:5a:15:32:54:a4:35:73:49:c8:87: 49:bc:4f:e3:88:81:0e:bb:18:c0:2e:15:6a:ba:b0:61:0a:45: ec:ee:f6:21:14:f5:4d:e9:7a:21:8d:de:36:ec:a5:7b:d4:73: 8c:44:14:74:0b:1e:8a:f6:b0:e4:9f:d9:03:e1:f9:e2:af:ff: 53:8c:b6:9d:cf:6c:12:45:61:d2:8c:eb:08:86:a8:5b:58:06: 7d:a0:ad:88:90:4d:c8:87:b3:fc:ac:6e:a5:c4:3b:e7:1c:2d: 59:82:e7:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqYxXcgn5tsPzEoQ2x5y61mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjUxMTE4MjEwMTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTM2ODgxMmUzNjEwZWM1OWY0ODYwNTUyNjgxZmZkNWZiY2U3NWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSJNoqHj3TQ6X5jNaCaIMgEWbshE muw1ld4bUuH7BMmZUBIQpQ1wk6T3a4tdWljqDFjknOcCdG6jU2VHlPsAKCd1xSc7 1On9eWNWiugVSqj6S7I799kJYRb6IaRqfxN3BZg+OfyYCrmIxNsk+q4Mml+ecLac Wf3SBTv6vvRUoOQ8J8csi7+jydsVNTNZhrk+7lMEOtfwTTwsBXT9x/fMeXxGlGEe xAGVCdx5m7WFMuOwlfNJ39eGjJQV3CA1XxTDTIhYr41zxRTstuPLUvpahzoNxm3Z vUmkCPnQ69HNwqxnkj9op7Hf9BIcixQzhkyQWOidvkzuf6e+JJnns70G3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLU2iBLjYQ7Fn0hgVSaB/9X7znXyMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvdFRhSUV1TmhEc1dmU0dCVkpvSF8xZnZPZGZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRVXMA0G CSqGSIb3DQEBCwUAA4IBAQBLqq3ZUsGLiEwukwvhJIIm4d1MqWgKlalEoh5/gNHJ Uv8PCtM2meAchsEtrbA7eJiZrRm9jAR16V49rtni4dKTK+ujB4P9ZbPmZEChp110 dVGiSaqKY+V0qaxgvEWdRycJECw2TIZSP6KC8KJz4ln44EivjXy5MLC8MXdrmWAL SnR7OoCG5/87gqZVIJezoe8329YpI+an8FoVMlSkNXNJyIdJvE/jiIEOuxjALhVq urBhCkXs7vYhFPVN6Xohjd427KV71HOMRBR0Cx6K9rDkn9kD4fnir/9TjLadz2wS RWHSjOsIhqhbWAZ9oK2IkE3Ih7P8rG6lxDvnHC1Zguey -----END CERTIFICATE-----Generated at Fri Dec 5 09:28:44 2025 by rpki-client