This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/bI_aK2hci7tPIK7FWJHlqQwqabI.roa File: bI_aK2hci7tPIK7FWJHlqQwqabI.roa (raw, json) Hash identifier: 8xuZnSl/z8C+4ax7j1HfAdvif1S7Fr4q9UmegGElPS8= Subject key identifier: 6C:8F:DA:2B:68:5C:8B:BB:4F:20:AE:C5:58:91:E5:A9:0C:2A:69:B2 Certificate issuer: /CN=a7e05eeda36b1d86c5a3a3f0c0515bec4822e5f4 Certificate serial: 019B2C2DFB91307F85C3F756803D78CE0420 Authority key identifier: A7:E0:5E:ED:A3:6B:1D:86:C5:A3:A3:F0:C0:51:5B:EC:48:22:E5:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/bI_aK2hci7tPIK7FWJHlqQwqabI.roa Signing time: Wed 17 Dec 2025 11:59:29 +0000 ROA not before: Wed 17 Dec 2025 11:59:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39716 IP address blocks: 89.186.0.0/23 maxlen: 23 89.186.4.0/22 maxlen: 22 89.186.8.0/22 maxlen: 22 89.186.12.0/23 maxlen: 23 89.186.15.0/24 maxlen: 24 89.186.16.0/24 maxlen: 24 89.186.17.0/24 maxlen: 24 89.186.21.0/24 maxlen: 24 89.186.22.0/24 maxlen: 24 89.186.24.0/22 maxlen: 22 89.186.30.0/23 maxlen: 23 195.242.124.0/24 maxlen: 24 195.242.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.mft rsync://rpki.ripe.net/repository/DEFAULT/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2d:fb:91:30:7f:85:c3:f7:56:80:3d:78:ce:04:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7e05eeda36b1d86c5a3a3f0c0515bec4822e5f4 Validity Not Before: Dec 17 11:59:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6c8fda2b685c8bbb4f20aec55891e5a90c2a69b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:47:d3:58:11:9c:09:e4:5c:63:05:a8:73:f3: d2:5a:b0:42:b0:54:16:4a:c5:3d:83:e6:d1:f5:c5: 65:66:8d:d4:0b:51:e9:df:5e:7e:47:42:9b:88:3d: a1:3c:7e:aa:11:50:f0:18:99:98:7e:50:4f:b8:26: c1:9c:34:c1:6b:f8:3d:50:25:25:c2:7e:51:b8:bd: ac:3a:9b:42:a7:2f:79:11:aa:6d:e8:ed:0b:64:16: 06:e1:eb:78:8f:be:31:40:7b:0b:39:4f:b7:ee:87: 48:64:d6:04:38:58:3f:f1:c8:36:15:d1:9f:d4:d7: 0b:a9:7a:f3:10:04:76:95:1d:f3:f2:9b:75:91:60: 38:2f:f0:12:4b:ea:1f:d0:6a:cc:23:aa:cc:7f:1d: af:08:c1:de:ae:f7:49:16:6e:30:12:8d:72:48:a1: ff:12:42:8a:25:00:6e:57:a3:6f:5d:c4:43:81:e1: 5f:35:47:f5:e7:b5:63:e2:8c:82:29:3c:7d:98:e1: 6d:15:24:58:e8:4a:07:9f:79:57:fb:8c:a5:17:27: e0:4e:3f:e0:a5:87:55:f3:8c:2e:e6:8c:a2:76:2a: 8e:da:27:f8:29:ff:20:22:4d:75:1a:30:8f:99:85: 1c:73:67:04:5d:ff:df:9b:34:ec:85:cf:c4:87:78: f9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8F:DA:2B:68:5C:8B:BB:4F:20:AE:C5:58:91:E5:A9:0C:2A:69:B2 X509v3 Authority Key Identifier: keyid:A7:E0:5E:ED:A3:6B:1D:86:C5:A3:A3:F0:C0:51:5B:EC:48:22:E5:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/bI_aK2hci7tPIK7FWJHlqQwqabI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.186.0.0/23 89.186.4.0-89.186.13.255 89.186.15.0-89.186.17.255 89.186.21.0-89.186.22.255 89.186.24.0/22 89.186.30.0/23 195.242.124.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:bc:5f:54:d5:61:ff:12:c3:5c:ca:14:e5:3c:8f:a0:bb:de: 9a:39:ba:85:44:17:af:bf:6e:18:da:fa:65:0d:fa:46:03:4a: e7:3e:b8:cd:51:57:0b:2a:52:1f:98:ea:4b:4f:75:32:91:56: 67:5a:b9:a8:2f:d6:06:c6:d9:b5:93:9b:d9:ce:16:5c:05:c0: 7d:9d:e2:bc:d2:23:a3:bd:8e:8e:7c:ab:df:1d:cc:ba:8b:9c: 7c:15:c7:e3:4b:84:41:6c:c6:f5:0b:9e:1d:6d:8f:8a:aa:5e: 1b:b6:b6:38:9d:42:bf:09:8f:7d:af:4a:c4:d8:36:47:93:6a: 45:b1:b5:85:5c:e2:5f:2d:18:00:3d:01:c9:ba:3e:13:e9:df: a2:54:cc:28:c5:29:cc:a7:88:10:ef:f9:3d:46:89:dd:e0:1e: 7f:4e:68:66:02:5b:e6:5f:ad:00:06:5e:7c:04:a1:5c:c3:27: 3f:b0:37:bf:e5:0f:ab:cd:50:df:c1:c9:b8:00:ab:86:6b:64: 4e:a6:bd:76:5d:66:72:20:fe:96:23:f7:02:f7:48:74:c3:2d: db:41:e9:bf:2b:32:53:af:4a:77:b1:4d:aa:e4:df:ce:e0:3d: 33:bf:b0:dc:50:41:15:b4:40:7f:75:52:2d:4c:66:1c:a7:9f: 1d:cd:53:29 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZssLfuRMH+Fw/dWgD14zgQgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZTA1ZWVkYTM2YjFkODZjNWEzYTNmMGMwNTE1YmVjNDgy MmU1ZjQwHhcNMjUxMjE3MTE1OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzhmZGEyYjY4NWM4YmJiNGYyMGFlYzU1ODkxZTVhOTBjMmE2OWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUfTWBGcCeRcYwWoc/PSWrBCsFQW SsU9g+bR9cVlZo3UC1Hp315+R0KbiD2hPH6qEVDwGJmYflBPuCbBnDTBa/g9UCUl wn5RuL2sOptCpy95Eapt6O0LZBYG4et4j74xQHsLOU+37odIZNYEOFg/8cg2FdGf 1NcLqXrzEAR2lR3z8pt1kWA4L/ASS+of0GrMI6rMfx2vCMHervdJFm4wEo1ySKH/ EkKKJQBuV6NvXcRDgeFfNUf157Vj4oyCKTx9mOFtFSRY6EoHn3lX+4ylFyfgTj/g pYdV84wu5oyidiqO2if4Kf8gIk11GjCPmYUcc2cEXf/fmzTshc/Eh3j5hQIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFGyP2itoXIu7TyCuxViR5akMKmmyMB8GA1UdIwQY MBaAFKfgXu2jax2GxaOj8MBRW+xIIuX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC1CZTdhTnJIWWJGbzZQd3dGRmI3RWdpNWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9mYTYwODAtM2NkZC00YjM0LThmMTMt MGRiMjk2ZDU0NTc4LzEvYklfYUsyaGNpN3RQSUs3RldKSGxxUXdxYWJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9mYTYwODAtM2NkZC00YjM0LThmMTMtMGRiMjk2ZDU0NTc4 LzEvcC1CZTdhTnJIWWJGbzZQd3dGRmI3RWdpNWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQBWboAMAwD BAJZugQDBAFZugwwDAMEAFm6DwMEAVm6EDAMAwQAWboVAwQAWboWAwQCWboYAwQB WboeAwQBw/J8MA0GCSqGSIb3DQEBCwUAA4IBAQA8vF9U1WH/EsNcyhTlPI+gu96a ObqFRBevv24Y2vplDfpGA0rnPrjNUVcLKlIfmOpLT3UykVZnWrmoL9YGxtm1k5vZ zhZcBcB9neK80iOjvY6OfKvfHcy6i5x8FcfjS4RBbMb1C54dbY+Kql4btrY4nUK/ CY99r0rE2DZHk2pFsbWFXOJfLRgAPQHJuj4T6d+iVMwoxSnMp4gQ7/k9Rond4B5/ TmhmAlvmX60ABl58BKFcwyc/sDe/5Q+rzVDfwcm4AKuGa2ROpr12XWZyIP6WI/cC 90h0wy3bQem/KzJTr0p3sU2q5N/O4D0zv7DcUEEVtEB/dVItTGYcp58dzVMp -----END CERTIFICATE-----Generated at Fri Dec 26 17:23:26 2025 by rpki-client