This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/3kG9tlFkZme-04FoMXboT3qnw_g.roa File: 3kG9tlFkZme-04FoMXboT3qnw_g.roa (raw, json) Hash identifier: jO5jijgSnE71ErjuRQp0hLZiUZ1EBGxtwmVQKKwJy9s= Subject key identifier: DE:41:BD:B6:51:64:66:67:BE:D3:81:68:31:76:E8:4F:7A:A7:C3:F8 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019B17F0191567BEE01A11B182A078033976 Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/3kG9tlFkZme-04FoMXboT3qnw_g.roa Signing time: Sat 13 Dec 2025 13:39:29 +0000 ROA not before: Sat 13 Dec 2025 13:39:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203997 IP address blocks: 89.23.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:f0:19:15:67:be:e0:1a:11:b1:82:a0:78:03:39:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Dec 13 13:39:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=de41bdb651646667bed381683176e84f7aa7c3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ec:7c:dc:91:89:6f:43:fa:f1:49:17:66:9f: aa:0f:40:c7:e4:9d:3c:d3:5e:28:da:d6:9f:71:2c: f9:e2:db:92:b9:28:00:0b:8f:df:87:1c:5b:67:e3: 1d:72:3e:8e:2f:31:3b:cb:55:0b:98:38:1f:7b:ac: 44:36:16:2e:bb:41:12:12:ec:18:e0:e1:b4:fd:49: dc:6f:56:27:eb:09:56:c8:26:79:3a:4d:5a:46:ea: 78:1c:7f:77:b1:3e:2e:de:4f:03:98:22:ba:f3:b3: 07:60:eb:08:c2:62:17:5f:58:8d:90:76:56:04:57: 39:c5:7e:21:38:de:8f:e1:bb:ed:3a:4f:e2:4f:c4: 7c:d7:d2:e5:90:2b:59:fe:ff:ee:2e:08:53:ed:da: 37:9f:12:ec:96:6b:bc:4f:50:f6:89:b0:f9:2e:b8: 06:d6:2f:18:22:d2:9a:fd:85:14:2a:8a:25:4a:ea: 30:f5:6c:a8:64:a8:b5:5b:06:ea:31:06:f4:08:5d: 62:09:83:49:0a:04:38:0e:4f:3a:fd:be:ac:85:b6: 35:a8:b6:05:6d:06:0e:9f:fa:cf:87:79:fe:7b:a2: 40:33:ad:9f:fa:7d:ae:85:ad:6b:29:70:f8:41:0c: 64:27:5a:f8:a1:ca:03:1e:b4:2b:42:c0:24:20:fc: 57:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:41:BD:B6:51:64:66:67:BE:D3:81:68:31:76:E8:4F:7A:A7:C3:F8 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/3kG9tlFkZme-04FoMXboT3qnw_g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.23.94.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:87:b6:e9:f8:3c:aa:54:7a:73:bc:4d:e9:17:27:0f:7a:c5: d4:00:fd:c0:cc:db:7b:90:6f:66:48:bf:2b:b5:d7:a6:c3:e5: 2e:ad:43:78:e4:16:6a:87:e9:a2:43:01:0d:da:c4:0b:30:f1: 71:79:56:e1:51:b8:62:59:d0:84:ca:03:e3:e2:97:dc:f7:41: 53:78:c2:1c:e4:e2:de:8b:b7:fa:c4:1f:44:26:5d:1f:96:dd: 43:f4:49:29:0c:dd:5b:16:15:dc:dc:19:d4:82:1a:e4:88:43: e4:8c:db:47:52:b9:96:2c:66:23:17:49:41:f2:9a:20:2e:3d: ba:4c:63:3b:7b:9e:b9:dc:e1:0b:82:23:9c:45:57:2e:15:64: df:4a:90:00:63:68:dc:53:48:72:d6:15:57:69:f1:f7:7e:4e: fa:fb:12:8e:13:44:28:ca:a6:17:12:db:4b:e3:a4:6f:ae:0c: 4e:c1:01:a5:4c:3a:54:e4:5a:84:e6:74:8a:07:54:a9:c2:75: 62:ce:ef:34:dd:eb:c3:1f:f9:0d:8d:8a:ad:c1:3c:1e:14:d6: 3f:89:03:42:ef:af:c8:5e:26:50:d5:ea:da:55:ef:f1:ca:22: 45:0c:9c:22:50:ee:43:26:70:83:bd:e0:d1:71:ea:65:18:e0: e7:cb:3f:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsX8BkVZ77gGhGxgqB4Azl2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjUxMjEzMTMzOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTQxYmRiNjUxNjQ2NjY3YmVkMzgxNjgzMTc2ZTg0ZjdhYTdjM2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtex83JGJb0P68UkXZp+qD0DH5J08 014o2tafcSz54tuSuSgAC4/fhxxbZ+Mdcj6OLzE7y1ULmDgfe6xENhYuu0ESEuwY 4OG0/Uncb1Yn6wlWyCZ5Ok1aRup4HH93sT4u3k8DmCK687MHYOsIwmIXX1iNkHZW BFc5xX4hON6P4bvtOk/iT8R819LlkCtZ/v/uLghT7do3nxLslmu8T1D2ibD5LrgG 1i8YItKa/YUUKoolSuow9WyoZKi1WwbqMQb0CF1iCYNJCgQ4Dk86/b6shbY1qLYF bQYOn/rPh3n+e6JAM62f+n2uha1rKXD4QQxkJ1r4ocoDHrQrQsAkIPxX0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN5BvbZRZGZnvtOBaDF26E96p8P4MB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvM2tHOXRsRmtabWUtMDRGb01YYm9UM3Fud19nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRdeMA0G CSqGSIb3DQEBCwUAA4IBAQA/h7bp+DyqVHpzvE3pFycPesXUAP3AzNt7kG9mSL8r tdemw+UurUN45BZqh+miQwEN2sQLMPFxeVbhUbhiWdCEygPj4pfc90FTeMIc5OLe i7f6xB9EJl0flt1D9EkpDN1bFhXc3BnUghrkiEPkjNtHUrmWLGYjF0lB8pogLj26 TGM7e5653OELgiOcRVcuFWTfSpAAY2jcU0hy1hVXafH3fk76+xKOE0QoyqYXEttL 46RvrgxOwQGlTDpU5FqE5nSKB1SpwnVizu803evDH/kNjYqtwTweFNY/iQNC76/I XiZQ1eraVe/xyiJFDJwiUO5DJnCDveDRceplGODnyz8t -----END CERTIFICATE-----Generated at Wed Dec 17 03:35:39 2025 by rpki-client