This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/NKw_vsNrbMsCA0_pcgVwjXnZieM.roa File: NKw_vsNrbMsCA0_pcgVwjXnZieM.roa (raw, json) Hash identifier: xwbSIXjWrAhxQaTT//cTdoIuzeMg3Lchz2r99pK3cEk= Subject key identifier: 34:AC:3F:BE:C3:6B:6C:CB:02:03:4F:E9:72:05:70:8D:79:D9:89:E3 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B028EF6C7799ADFBE8024D0B20702F6D8 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/NKw_vsNrbMsCA0_pcgVwjXnZieM.roa Signing time: Tue 09 Dec 2025 10:01:22 +0000 ROA not before: Tue 09 Dec 2025 10:01:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6939 IP address blocks: 89.125.16.0/22 maxlen: 22 89.125.64.0/22 maxlen: 22 89.125.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:8e:f6:c7:79:9a:df:be:80:24:d0:b2:07:02:f6:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Dec 9 10:01:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=34ac3fbec36b6ccb02034fe97205708d79d989e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:21:80:ec:fd:39:13:14:d6:75:18:92:d6:78: 84:fd:98:28:bf:50:46:6d:3d:a3:fd:ee:4d:59:9c: 9b:44:64:af:84:eb:41:ee:d9:dd:b7:49:e0:f8:06: a4:44:47:2f:3e:cb:8a:a4:72:02:9f:9e:f1:11:f1: 14:d9:23:92:59:0a:4a:60:67:f0:b6:6a:a6:f8:4f: 09:74:74:be:be:45:5d:68:e1:8e:4f:1a:52:9c:97: b6:fa:d5:95:12:c1:b8:63:0a:b5:e6:d6:ce:9c:91: fc:5a:81:3e:b1:79:bc:41:3c:53:3e:bb:b0:ad:b1: 88:f8:b1:57:c9:f0:4d:91:5f:51:1b:3a:8b:38:72: 2d:c1:8c:c3:58:df:2c:42:8f:4b:35:72:30:5a:0c: 16:74:1f:12:1d:77:7e:d4:4b:0f:9f:81:f5:ad:2f: 40:05:98:66:0c:9f:81:f0:a7:d1:a7:17:15:f9:a7: 47:88:05:23:c5:53:d9:61:9b:05:bb:c6:bf:b9:21: ec:9f:61:24:59:23:62:85:f7:5b:5a:59:cf:90:d9: 8b:ec:5e:8b:7f:ab:2b:99:dd:eb:0c:f0:c7:47:56: 57:ac:e1:da:fd:78:cb:33:12:58:ec:90:3a:0c:d7: 28:3f:a0:a1:58:ee:fc:a6:44:f6:bb:6a:af:2f:1b: 2d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:AC:3F:BE:C3:6B:6C:CB:02:03:4F:E9:72:05:70:8D:79:D9:89:E3 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/NKw_vsNrbMsCA0_pcgVwjXnZieM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.125.16.0/22 89.125.64.0/22 89.125.80.0/22 Signature Algorithm: sha256WithRSAEncryption 17:ad:92:f8:5f:8c:7c:91:12:f0:ac:a2:51:6b:76:83:4b:a6: 84:4d:6d:33:b3:25:f1:fa:7f:40:b9:c7:a6:d8:0a:9d:94:e1: ea:87:3d:25:77:2f:93:2a:79:4e:81:c6:3d:91:f5:a0:cc:a3: 27:94:fb:09:a6:d8:a4:40:e8:b4:61:19:4e:3c:b2:8d:e7:cf: a7:fe:c8:d2:14:0f:b3:85:14:7e:e4:a1:5e:48:85:4b:e4:ad: cf:67:40:6d:c9:76:3f:d4:65:08:c3:46:bd:fa:d0:5b:7f:a1: 45:c3:6e:25:ab:1b:8d:02:d5:95:10:08:db:8f:b0:92:3c:c1: ee:6f:8d:da:02:77:e4:5b:9c:8d:10:ea:0c:bd:44:33:9c:2f: a3:d1:35:e5:ec:16:ce:51:5c:84:4f:73:15:6d:c1:93:d2:6d: a6:dd:a5:c0:a5:58:11:5c:e7:36:8c:eb:bd:92:70:e7:6f:f4: be:36:0b:b0:93:a8:36:97:26:1f:fa:3e:ec:28:af:df:7b:10: cf:cf:f9:ea:aa:64:33:74:40:ef:5d:28:0b:b4:cd:ce:6e:31: 7d:6b:55:c7:fa:31:6d:78:fe:e3:42:71:af:2c:c2:8e:d4:be: a7:75:60:be:6d:1f:9f:ad:64:1d:45:f9:1c:27:8a:4c:fa:6a: 9c:ad:6d:c5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsCjvbHeZrfvoAk0LIHAvbYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjUxMjA5MTAwMTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGFjM2ZiZWMzNmI2Y2NiMDIwMzRmZTk3MjA1NzA4ZDc5ZDk4OWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSGA7P05ExTWdRiS1niE/Zgov1BG bT2j/e5NWZybRGSvhOtB7tndt0ng+AakREcvPsuKpHICn57xEfEU2SOSWQpKYGfw tmqm+E8JdHS+vkVdaOGOTxpSnJe2+tWVEsG4Ywq15tbOnJH8WoE+sXm8QTxTPruw rbGI+LFXyfBNkV9RGzqLOHItwYzDWN8sQo9LNXIwWgwWdB8SHXd+1EsPn4H1rS9A BZhmDJ+B8KfRpxcV+adHiAUjxVPZYZsFu8a/uSHsn2EkWSNihfdbWlnPkNmL7F6L f6srmd3rDPDHR1ZXrOHa/XjLMxJY7JA6DNcoP6ChWO78pkT2u2qvLxst6wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDSsP77Da2zLAgNP6XIFcI152YnjMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvTkt3X3ZzTnJiTXNDQTBfcGNnVndqWG5aaWVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCWX0QAwQC WX1AAwQCWX1QMA0GCSqGSIb3DQEBCwUAA4IBAQAXrZL4X4x8kRLwrKJRa3aDS6aE TW0zsyXx+n9Aucem2AqdlOHqhz0ldy+TKnlOgcY9kfWgzKMnlPsJptikQOi0YRlO PLKN58+n/sjSFA+zhRR+5KFeSIVL5K3PZ0BtyXY/1GUIw0a9+tBbf6FFw24lqxuN AtWVEAjbj7CSPMHub43aAnfkW5yNEOoMvUQznC+j0TXl7BbOUVyET3MVbcGT0m2m 3aXApVgRXOc2jOu9knDnb/S+Nguwk6g2lyYf+j7sKK/fexDPz/nqqmQzdEDvXSgL tM3ObjF9a1XH+jFteP7jQnGvLMKO1L6ndWC+bR+frWQdRfkcJ4pM+mqcrW3F -----END CERTIFICATE-----Generated at Fri Dec 19 13:45:53 2025 by rpki-client