This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/_rhuyZgMOp9zzA057cW0BQ1Kskc.roa File: _rhuyZgMOp9zzA057cW0BQ1Kskc.roa (raw, json) Hash identifier: P5WJKPd3wLZ54MwtYxwE6Fi6XEPzsZG3/jOg5PHahKk= Subject key identifier: FE:B8:6E:C9:98:0C:3A:9F:73:CC:0D:39:ED:C5:B4:05:0D:4A:B2:47 Certificate issuer: /CN=a7e05eeda36b1d86c5a3a3f0c0515bec4822e5f4 Certificate serial: 019B2C2DFC5462BDE1929318632F465C514D Authority key identifier: A7:E0:5E:ED:A3:6B:1D:86:C5:A3:A3:F0:C0:51:5B:EC:48:22:E5:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/_rhuyZgMOp9zzA057cW0BQ1Kskc.roa Signing time: Wed 17 Dec 2025 11:59:29 +0000 ROA not before: Wed 17 Dec 2025 11:59:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213804 IP address blocks: 89.186.23.0/24 maxlen: 24 89.186.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.mft rsync://rpki.ripe.net/repository/DEFAULT/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2d:fc:54:62:bd:e1:92:93:18:63:2f:46:5c:51:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7e05eeda36b1d86c5a3a3f0c0515bec4822e5f4 Validity Not Before: Dec 17 11:59:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=feb86ec9980c3a9f73cc0d39edc5b4050d4ab247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3f:43:42:c4:57:d8:01:a5:ba:3b:06:c7:08: dd:e2:8b:5b:c8:00:ed:14:08:60:09:e4:6a:ed:c0: 41:ff:22:e4:dd:91:00:34:82:95:9a:df:bc:80:8d: d9:bd:a4:64:10:1a:53:ed:36:eb:f7:11:e1:45:25: b0:54:3d:35:f6:0d:b2:cf:a9:e3:fe:71:2b:33:07: 7f:28:44:e1:b8:d7:c4:c4:0d:0c:d7:4b:a7:2e:e0: 02:f3:d1:15:d0:a1:a1:d2:bd:24:b1:9b:d1:6d:c2: 6f:e6:6b:16:c2:ff:4a:e0:43:9f:6b:0e:57:a1:bc: 1b:7e:9d:d9:7d:1c:9c:e6:69:40:a3:3e:3f:5e:6e: 36:76:53:cd:37:02:75:5a:16:b9:91:1e:ac:2c:1d: 57:f5:da:f8:a7:10:1d:7d:ab:2f:d3:70:d3:17:2c: ce:a5:2e:58:2b:63:aa:29:e5:15:51:f5:91:bf:2e: c2:1f:d2:40:1b:00:ce:0b:9c:e2:bc:0d:c8:07:ee: 0b:6c:47:b3:56:5f:fe:26:fc:39:23:c2:d1:46:ba: dd:d0:34:be:cb:89:f8:cd:a2:e3:87:68:3e:5e:4a: 51:b8:d6:04:b1:ad:25:74:7e:e1:94:3a:2f:6e:9a: 9d:3c:aa:56:f0:80:8a:ba:95:f9:e7:cb:77:af:e3: b8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B8:6E:C9:98:0C:3A:9F:73:CC:0D:39:ED:C5:B4:05:0D:4A:B2:47 X509v3 Authority Key Identifier: keyid:A7:E0:5E:ED:A3:6B:1D:86:C5:A3:A3:F0:C0:51:5B:EC:48:22:E5:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/_rhuyZgMOp9zzA057cW0BQ1Kskc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.186.23.0/24 89.186.28.0/23 Signature Algorithm: sha256WithRSAEncryption 03:bc:84:3e:db:04:81:f7:6f:21:48:76:2e:76:25:8d:30:e2: 50:14:c0:be:da:f2:b0:4d:b2:7d:a6:79:4d:c6:02:4d:30:05: 25:6a:13:33:a8:33:ac:23:8d:9b:58:34:a1:cc:67:66:99:8c: 5c:f5:5f:5f:f0:5c:1b:09:62:c0:96:12:73:4f:73:ee:8b:a9: 80:18:b4:8e:2e:29:15:23:aa:19:89:6d:91:ff:81:ce:81:67: 02:c0:ed:79:35:68:80:66:d1:91:3f:5b:ae:2d:51:1b:de:28: c4:6f:4e:bc:b9:40:77:3b:64:64:be:00:97:5f:32:c9:09:cd: 6b:70:9d:06:f7:c4:3a:e6:ac:74:0e:76:9b:58:04:7e:0f:93: 01:30:82:bc:69:53:92:80:b7:9e:04:13:a3:a8:a2:e9:ef:57: f5:8f:81:fa:3f:e6:cd:b0:81:1c:76:66:89:53:10:e4:33:d5: 62:b5:17:b2:ef:76:5b:eb:08:08:44:96:4e:c1:bd:12:d3:0d: 6c:2b:0e:79:3f:e6:63:19:1b:dc:92:d8:b9:60:34:b7:95:de: a9:91:99:bd:a9:ff:37:a9:a1:79:3d:38:54:fb:e2:39:20:2f: 63:bc:24:71:53:23:9b:be:c2:87:21:34:9e:c3:0d:62:dd:a3: 75:15:32:6d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZssLfxUYr3hkpMYYy9GXFFNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZTA1ZWVkYTM2YjFkODZjNWEzYTNmMGMwNTE1YmVjNDgy MmU1ZjQwHhcNMjUxMjE3MTE1OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWI4NmVjOTk4MGMzYTlmNzNjYzBkMzllZGM1YjQwNTBkNGFiMjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD9DQsRX2AGlujsGxwjd4otbyADt FAhgCeRq7cBB/yLk3ZEANIKVmt+8gI3ZvaRkEBpT7Tbr9xHhRSWwVD019g2yz6nj /nErMwd/KEThuNfExA0M10unLuAC89EV0KGh0r0ksZvRbcJv5msWwv9K4EOfaw5X obwbfp3ZfRyc5mlAoz4/Xm42dlPNNwJ1Wha5kR6sLB1X9dr4pxAdfasv03DTFyzO pS5YK2OqKeUVUfWRvy7CH9JAGwDOC5zivA3IB+4LbEezVl/+Jvw5I8LRRrrd0DS+ y4n4zaLjh2g+XkpRuNYEsa0ldH7hlDovbpqdPKpW8ICKupX558t3r+O4nwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP64bsmYDDqfc8wNOe3FtAUNSrJHMB8GA1UdIwQY MBaAFKfgXu2jax2GxaOj8MBRW+xIIuX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC1CZTdhTnJIWWJGbzZQd3dGRmI3RWdpNWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9mYTYwODAtM2NkZC00YjM0LThmMTMt MGRiMjk2ZDU0NTc4LzEvX3JodXlaZ01PcDl6ekEwNTdjVzBCUTFLc2tjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9mYTYwODAtM2NkZC00YjM0LThmMTMtMGRiMjk2ZDU0NTc4 LzEvcC1CZTdhTnJIWWJGbzZQd3dGRmI3RWdpNWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWboXAwQB WbocMA0GCSqGSIb3DQEBCwUAA4IBAQADvIQ+2wSB928hSHYudiWNMOJQFMC+2vKw TbJ9pnlNxgJNMAUlahMzqDOsI42bWDShzGdmmYxc9V9f8FwbCWLAlhJzT3Pui6mA GLSOLikVI6oZiW2R/4HOgWcCwO15NWiAZtGRP1uuLVEb3ijEb068uUB3O2RkvgCX XzLJCc1rcJ0G98Q65qx0DnabWAR+D5MBMIK8aVOSgLeeBBOjqKLp71f1j4H6P+bN sIEcdmaJUxDkM9VitRey73Zb6wgIRJZOwb0S0w1sKw55P+ZjGRvckti5YDS3ld6p kZm9qf83qaF5PThU++I5IC9jvCRxUyObvsKHITSeww1i3aN1FTJt -----END CERTIFICATE-----Generated at Fri Dec 26 17:20:16 2025 by rpki-client