This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/89emf-zQu5cChR3UYQiQV0LCzb8.roa File: 89emf-zQu5cChR3UYQiQV0LCzb8.roa (raw, json) Hash identifier: Gn4bAw93VPtwM8/WqcYl7nEAu6xe7jHHYKNJVu4549g= Subject key identifier: F3:D7:A6:7F:EC:D0:BB:97:02:85:1D:D4:61:08:90:57:42:C2:CD:BF Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019A9D5D7102B9EC908BD3D8AAD1488344BF Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/89emf-zQu5cChR3UYQiQV0LCzb8.roa Signing time: Wed 19 Nov 2025 18:25:37 +0000 ROA not before: Wed 19 Nov 2025 18:25:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215206 IP address blocks: 45.89.60.0/24 maxlen: 24 45.89.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9d:5d:71:02:b9:ec:90:8b:d3:d8:aa:d1:48:83:44:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Nov 19 18:25:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f3d7a67fecd0bb9702851dd46108905742c2cdbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:af:89:13:5a:c3:ee:ad:1f:76:8e:92:33:9f: 9f:fb:e6:6b:bd:a4:95:d8:7c:e7:be:54:23:68:28: 3d:d8:b3:21:08:e9:d6:9e:4e:c7:68:bb:3d:f9:0c: 4c:49:78:7b:aa:ec:8e:a0:3a:46:d6:51:1b:3d:3b: 78:49:0f:a7:41:89:ff:43:33:ba:72:58:93:fb:9b: 85:65:56:41:21:3d:86:c6:5e:76:dd:95:0c:16:bc: 81:c5:9f:1a:bd:60:43:32:bb:9b:9e:8f:5a:df:8b: 40:a1:a2:bf:39:b5:17:cb:ca:b2:62:7b:a9:f9:ef: 14:a9:08:48:e6:48:e8:37:8a:1b:b7:56:0b:c0:96: 90:15:f7:98:df:5a:f8:8f:fc:9c:03:7f:75:a8:a5: b3:0d:aa:74:de:b1:cb:41:e3:aa:c2:7e:d8:6c:0a: 8f:03:5f:eb:01:4e:96:30:fb:2e:81:22:8e:64:02: 93:be:3d:16:f2:74:d1:ce:61:92:83:5e:06:13:0d: d3:d7:26:fe:26:d4:d3:46:32:c7:a8:7b:f9:33:ca: 75:94:c4:c5:98:d4:62:ec:98:67:f7:dc:08:93:85: 54:4c:9f:b4:b5:de:4d:f9:6a:d3:78:d7:a6:0a:05: 41:4c:86:96:ab:3d:a8:76:7a:43:f5:3e:5b:c4:ac: dd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D7:A6:7F:EC:D0:BB:97:02:85:1D:D4:61:08:90:57:42:C2:CD:BF X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/89emf-zQu5cChR3UYQiQV0LCzb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.60.0/23 Signature Algorithm: sha256WithRSAEncryption 38:8a:60:cf:5c:ec:34:f7:95:0c:41:bb:04:27:de:36:9a:f5: 5c:5f:f9:9e:1f:95:6b:08:93:d0:05:13:5f:d4:d5:2b:08:c0: 12:c0:ad:41:c7:b1:2d:47:70:03:ed:a5:02:3b:ef:e4:48:77: e1:7c:52:5d:e3:72:4f:6a:8e:5d:32:ee:27:09:3f:77:07:cd: 86:09:5b:ab:52:50:2c:6e:97:4f:ca:27:94:6d:58:90:bd:34: 42:a7:2d:53:c2:35:52:c8:08:64:49:4c:0e:53:b6:55:7a:c6: e1:a8:cd:80:72:66:d8:1b:e2:81:84:2f:e5:95:79:7f:6e:ef: 06:64:80:18:26:25:a3:7a:66:2a:e7:af:12:e6:26:6d:c6:43: 75:f5:56:b3:d8:c8:a9:90:d6:31:b6:58:b5:93:d9:74:b9:f2: 67:a4:84:5c:27:f8:5e:d6:ed:7a:10:46:a5:0b:60:eb:05:56: 2b:45:51:95:68:05:2d:98:62:d9:73:86:ae:63:0b:e9:63:b4: 9b:5d:bd:d7:56:d4:43:00:eb:86:2b:82:0d:39:4a:79:b3:d2: 04:f9:ea:ae:0c:25:1d:80:89:59:1b:ce:f8:52:0f:c8:5d:1f: dd:d8:df:9b:fd:bb:86:6a:38:73:14:7b:47:cd:71:01:d9:9c: 19:5c:32:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqdXXECueyQi9PYqtFIg0S/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjUxMTE5MTgyNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2Q3YTY3ZmVjZDBiYjk3MDI4NTFkZDQ2MTA4OTA1NzQyYzJjZGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3q+JE1rD7q0fdo6SM5+f++ZrvaSV 2HznvlQjaCg92LMhCOnWnk7HaLs9+QxMSXh7quyOoDpG1lEbPTt4SQ+nQYn/QzO6 cliT+5uFZVZBIT2Gxl523ZUMFryBxZ8avWBDMrubno9a34tAoaK/ObUXy8qyYnup +e8UqQhI5kjoN4obt1YLwJaQFfeY31r4j/ycA391qKWzDap03rHLQeOqwn7YbAqP A1/rAU6WMPsugSKOZAKTvj0W8nTRzmGSg14GEw3T1yb+JtTTRjLHqHv5M8p1lMTF mNRi7Jhn99wIk4VUTJ+0td5N+WrTeNemCgVBTIaWqz2odnpD9T5bxKzdoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPPXpn/s0LuXAoUd1GEIkFdCws2/MB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvODllbWYtelF1NWNDaFIzVVlRaVFWMExDemI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVk8MA0G CSqGSIb3DQEBCwUAA4IBAQA4imDPXOw095UMQbsEJ942mvVcX/meH5VrCJPQBRNf 1NUrCMASwK1Bx7EtR3AD7aUCO+/kSHfhfFJd43JPao5dMu4nCT93B82GCVurUlAs bpdPyieUbViQvTRCpy1TwjVSyAhkSUwOU7ZVesbhqM2AcmbYG+KBhC/llXl/bu8G ZIAYJiWjemYq568S5iZtxkN19Vaz2MipkNYxtli1k9l0ufJnpIRcJ/he1u16EEal C2DrBVYrRVGVaAUtmGLZc4auYwvpY7SbXb3XVtRDAOuGK4INOUp5s9IE+equDCUd gIlZG874Ug/IXR/d2N+b/buGajhzFHtHzXEB2ZwZXDIC -----END CERTIFICATE-----Generated at Sat Dec 6 19:44:06 2025 by rpki-client