This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1NDowO7RpJUieU5vWIV_aLZZ18U.roa File: 1NDowO7RpJUieU5vWIV_aLZZ18U.roa (raw, json) Hash identifier: IAP2lBJ/evBC6rPmB3qyGN7rmThaVfGE7nKYn38svDQ= Subject key identifier: D4:D0:E8:C0:EE:D1:A4:95:22:79:4E:6F:58:85:7F:68:B6:59:D7:C5 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019A59AF79953048DAE2448ED20E5677BFC2 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1NDowO7RpJUieU5vWIV_aLZZ18U.roa Signing time: Thu 06 Nov 2025 15:01:03 +0000 ROA not before: Thu 06 Nov 2025 15:01:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6939 IP address blocks: 89.125.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:59:af:79:95:30:48:da:e2:44:8e:d2:0e:56:77:bf:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Nov 6 15:01:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d4d0e8c0eed1a49522794e6f58857f68b659d7c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6d:41:9e:af:e6:24:8c:db:3d:7f:82:97:ac: dc:2a:ed:76:94:7b:0b:49:5e:4c:03:f2:62:c3:2a: 15:47:ea:00:16:c5:4e:f0:e0:21:c5:af:05:a6:14: 76:b8:30:34:bd:af:2e:83:59:9c:c8:e0:0c:bf:aa: a8:ef:a7:a0:30:40:02:ae:dc:df:df:a2:06:be:d6: d2:e2:fe:21:7f:3b:96:ad:0c:ac:00:d2:b7:22:8b: 77:ec:5a:78:ab:bc:7e:4e:69:f8:6e:df:3f:bf:0c: 6c:5e:55:28:a4:be:59:66:94:da:5d:15:92:19:58: 18:79:bd:cd:f9:eb:91:db:1b:e8:8f:24:39:68:60: f9:ed:20:9b:71:b3:e9:83:79:0c:b1:de:3f:3b:52: a6:84:d7:f6:80:77:54:53:20:c3:2f:1d:33:0d:0b: fc:14:2b:90:77:a4:1b:3a:73:1b:1b:b2:a6:f3:12: 19:51:28:3c:16:d2:3a:90:f6:42:fb:42:bf:27:3a: ed:23:59:ea:16:17:36:5c:05:8e:4a:8f:8d:d7:dd: b8:94:8a:d9:06:01:42:0b:89:98:e5:d8:b1:f9:98: 9b:12:60:f8:fd:75:54:18:df:66:8c:05:07:20:16: b0:9a:5f:5a:cd:38:8a:1e:55:50:da:ab:21:39:ef: 96:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D0:E8:C0:EE:D1:A4:95:22:79:4E:6F:58:85:7F:68:B6:59:D7:C5 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1NDowO7RpJUieU5vWIV_aLZZ18U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.125.16.0/22 Signature Algorithm: sha256WithRSAEncryption 46:6f:32:d1:0c:0e:d4:a2:48:bf:75:a7:49:9b:10:e2:35:18: e8:9e:b4:e2:8a:da:2a:f0:e0:c2:10:11:4e:e7:5d:81:ea:e0: af:7b:82:33:12:75:34:1a:15:5c:fa:65:4c:e5:2c:a0:df:40: d2:0e:41:94:79:59:e1:30:1a:00:a5:8b:14:ea:a6:e8:cf:e2: 22:e6:b4:a7:20:e3:8f:b9:1f:5a:d0:5a:c0:61:9a:26:ad:6c: 16:a4:b1:9f:5c:ed:9e:e5:f8:36:ea:fc:f7:fe:f4:ce:46:a1: d9:79:61:b5:3d:93:a3:38:f8:c1:ae:fd:b4:47:9d:bd:74:53: c2:75:f2:80:3f:1a:c8:bc:79:48:a9:32:f0:b6:1c:d7:11:a5: 99:df:13:22:01:83:50:55:db:3d:b2:e9:c4:ae:82:dd:78:7e: 28:c0:50:d0:71:b4:b2:3c:57:ac:46:a5:94:98:47:9d:16:4c: 83:63:19:43:35:6f:89:7e:cf:84:de:30:fd:b0:d8:86:b3:d4: d6:91:6c:fb:81:e0:2a:c3:02:0d:74:f5:36:42:59:9e:60:f5: 23:17:e2:fc:51:cd:c6:7b:b4:55:08:dc:ba:f7:47:60:04:d6: 0f:a7:10:81:d6:72:4d:ec:db:82:3f:92:50:84:0b:b8:e0:e7: 9e:cc:b0:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpZr3mVMEja4kSO0g5Wd7/CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjUxMTA2MTUwMTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGQwZThjMGVlZDFhNDk1MjI3OTRlNmY1ODg1N2Y2OGI2NTlkN2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA121Bnq/mJIzbPX+Cl6zcKu12lHsL SV5MA/JiwyoVR+oAFsVO8OAhxa8FphR2uDA0va8ug1mcyOAMv6qo76egMEACrtzf 36IGvtbS4v4hfzuWrQysANK3Iot37Fp4q7x+Tmn4bt8/vwxsXlUopL5ZZpTaXRWS GVgYeb3N+euR2xvojyQ5aGD57SCbcbPpg3kMsd4/O1KmhNf2gHdUUyDDLx0zDQv8 FCuQd6QbOnMbG7Km8xIZUSg8FtI6kPZC+0K/JzrtI1nqFhc2XAWOSo+N1924lIrZ BgFCC4mY5dix+ZibEmD4/XVUGN9mjAUHIBawml9azTiKHlVQ2qshOe+WHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNTQ6MDu0aSVInlOb1iFf2i2WdfFMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvMU5Eb3dPN1JwSlVpZVU1dldJVl9hTFpaMThVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWX0QMA0G CSqGSIb3DQEBCwUAA4IBAQBGbzLRDA7Uoki/dadJmxDiNRjonrTiitoq8ODCEBFO 512B6uCve4IzEnU0GhVc+mVM5Syg30DSDkGUeVnhMBoApYsU6qboz+Ii5rSnIOOP uR9a0FrAYZomrWwWpLGfXO2e5fg26vz3/vTORqHZeWG1PZOjOPjBrv20R529dFPC dfKAPxrIvHlIqTLwthzXEaWZ3xMiAYNQVds9sunEroLdeH4owFDQcbSyPFesRqWU mEedFkyDYxlDNW+Jfs+E3jD9sNiGs9TWkWz7geAqwwINdPU2QlmeYPUjF+L8Uc3G e7RVCNy690dgBNYPpxCB1nJN7NuCP5JQhAu44OeezLCc -----END CERTIFICATE-----Generated at Fri Dec 5 07:56:51 2025 by rpki-client