This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/1-D2cui4tZiMCizVPg7lDJMsAGaQ.roa File: 1-D2cui4tZiMCizVPg7lDJMsAGaQ.roa (raw, json) Hash identifier: 1EWDfSyRhC9pZi+vu1K5RNn6sr1VlSocSjW/XC0/t1E= Subject key identifier: F8:3D:9C:BA:2E:2D:66:23:02:8B:35:4F:83:B9:43:24:CB:00:19:A4 Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2 Certificate serial: 019A50CD4D64FB5A73939E33D6A5DD059459 Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/1-D2cui4tZiMCizVPg7lDJMsAGaQ.roa Signing time: Tue 04 Nov 2025 21:37:03 +0000 ROA not before: Tue 04 Nov 2025 21:37:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60807 IP address blocks: 89.29.206.0/23 maxlen: 23 89.29.225.0/24 maxlen: 24 185.250.196.0/24 maxlen: 24 213.181.89.0/24 maxlen: 24 213.181.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:cd:4d:64:fb:5a:73:93:9e:33:d6:a5:dd:05:94:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2 Validity Not Before: Nov 4 21:37:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f83d9cba2e2d6623028b354f83b94324cb0019a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f5:d0:2c:c5:5a:44:5a:e2:43:3a:28:3a:bc: 8b:ed:90:a9:0e:c4:26:b9:28:46:f4:e3:8a:d5:89: e9:a8:46:ca:fa:51:93:ca:d6:24:76:ef:a3:cf:83: e0:1f:39:a2:df:73:2d:0f:0d:05:ee:16:5a:48:31: 70:13:51:2c:50:39:67:2c:00:1a:63:29:46:2c:5d: b0:f0:5e:9c:13:41:74:0e:f7:41:ec:48:fe:cf:15: 49:00:a9:24:65:7f:ea:2c:60:ea:98:04:71:a7:10: fc:6b:1a:31:10:a2:93:3b:17:25:96:63:15:76:77: 1c:bf:89:62:3b:97:5e:eb:b5:d9:29:f6:63:b1:e9: 6e:0c:a3:bd:4b:41:73:b2:f3:b0:47:95:d5:f6:3f: 6b:e3:92:ff:b0:1f:f9:31:60:6a:6c:47:47:7f:49: e1:fd:99:be:07:5c:a7:d2:52:09:5d:85:da:01:82: 84:f3:4d:6d:40:b3:a6:8c:a6:41:45:d8:c2:d4:94: 8e:f0:4d:28:a6:fb:ed:23:d4:9f:5b:5a:ad:84:78: 92:c5:13:0e:6e:00:89:91:19:7b:c7:5a:8a:9c:4f: 9f:33:5b:96:d8:33:4e:df:77:7b:42:4d:df:df:aa: 2f:86:f2:e0:97:5f:e2:17:c6:d2:84:5c:31:27:41: e8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3D:9C:BA:2E:2D:66:23:02:8B:35:4F:83:B9:43:24:CB:00:19:A4 X509v3 Authority Key Identifier: keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/1-D2cui4tZiMCizVPg7lDJMsAGaQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.29.206.0/23 89.29.225.0/24 185.250.196.0/24 213.181.89.0-213.181.91.255 Signature Algorithm: sha256WithRSAEncryption 9d:c0:f8:1d:84:af:85:85:2c:51:da:d2:24:5b:9e:79:3a:02: 39:f1:57:b8:6c:77:c9:14:16:36:4c:f6:44:63:a9:00:6f:3b: da:35:9b:8b:a0:e3:2a:2b:0f:ba:d5:b3:46:88:76:17:dc:89: b1:d6:56:07:60:e8:95:cc:7c:fd:6d:17:63:da:2a:4a:ec:d4: 86:57:bb:26:6b:fd:81:15:28:8b:a8:23:1c:4e:64:e1:2a:55: cf:00:07:0a:3e:f2:5f:d0:82:cb:f2:6c:4a:44:ab:2d:2a:cb: 0d:66:6a:7d:fd:6d:a5:1e:84:e9:8f:a4:b4:4b:82:e3:b2:6a: ec:d5:b3:8b:91:c0:06:e8:5c:42:d8:d2:ff:26:0e:48:37:f2: 86:12:3a:c3:08:27:c0:91:52:7b:f5:7a:5f:d8:3d:c6:16:dd: 52:bc:17:4c:1e:d2:3d:82:7a:33:80:b3:d3:c0:ce:42:55:0f: 70:f5:89:86:14:15:81:49:ba:a7:96:d7:af:a3:7c:f6:df:bc: 04:72:04:49:28:a7:fa:63:87:7b:05:3a:d0:e2:9b:43:5f:5d: 23:28:0a:1a:3c:ae:88:ca:7d:ed:01:6a:d9:57:72:94:c9:0e: 6a:7d:51:e5:46:19:39:c6:34:5b:b2:60:d7:fa:d1:24:1a:92: 6a:79:88:36 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZpQzU1k+1pzk54z1qXdBZRZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MmM0MTVkMTc3NWFlOTk5M2U5MDBhNzUzNmI0NmFiMTQ0 YTlhYTIwHhcNMjUxMTA0MjEzNzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODNkOWNiYTJlMmQ2NjIzMDI4YjM1NGY4M2I5NDMyNGNiMDAxOWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPXQLMVaRFriQzooOryL7ZCpDsQm uShG9OOK1YnpqEbK+lGTytYkdu+jz4PgHzmi33MtDw0F7hZaSDFwE1EsUDlnLAAa YylGLF2w8F6cE0F0DvdB7Ej+zxVJAKkkZX/qLGDqmARxpxD8axoxEKKTOxcllmMV dnccv4liO5de67XZKfZjseluDKO9S0FzsvOwR5XV9j9r45L/sB/5MWBqbEdHf0nh /Zm+B1yn0lIJXYXaAYKE801tQLOmjKZBRdjC1JSO8E0opvvtI9SfW1qthHiSxRMO bgCJkRl7x1qKnE+fM1uW2DNO33d7Qk3f36ovhvLgl1/iF8bShFwxJ0HonwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFPg9nLouLWYjAos1T4O5QyTLABmkMB8GA1UdIwQY MBaAFOksQV0Xda6Zk+kAp1NrRqsUSpqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQt MWQ5MzRhMDQ4NDc0LzEvMS1EMmN1aTR0WmlNQ2l6VlBnN2xESk1zQUdhUS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTEvMDg5OGJlLWIwMzctNDI5Zi1iNTA0LTFkOTM0YTA0ODQ3 NC8xLzZTeEJYUmQxcnBtVDZRQ25VMnRHcXhSS21xSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQqMCgwJgQCAAEwIAMEAVkdzgME AFkd4QMEALn6xDAMAwQA1bVZAwQC1bVYMA0GCSqGSIb3DQEBCwUAA4IBAQCdwPgd hK+FhSxR2tIkW555OgI58Ve4bHfJFBY2TPZEY6kAbzvaNZuLoOMqKw+61bNGiHYX 3Imx1lYHYOiVzHz9bRdj2ipK7NSGV7sma/2BFSiLqCMcTmThKlXPAAcKPvJf0ILL 8mxKRKstKssNZmp9/W2lHoTpj6S0S4Ljsmrs1bOLkcAG6FxC2NL/Jg5IN/KGEjrD CCfAkVJ79Xpf2D3GFt1SvBdMHtI9gnozgLPTwM5CVQ9w9YmGFBWBSbqnltevo3z2 37wEcgRJKKf6Y4d7BTrQ4ptDX10jKAoaPK6Iyn3tAWrZV3KUyQ5qfVHlRhk5xjRb smDX+tEkGpJqeYg2 -----END CERTIFICATE-----Generated at Fri Dec 12 01:01:11 2025 by rpki-client