This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SnnAfb2ElZSLZAM1BYrMwb9Bnu0.roa File: SnnAfb2ElZSLZAM1BYrMwb9Bnu0.roa (raw, json) Hash identifier: xge8oqbOCq8IsxIw93yw8iShQC6mAsQ4BO6eJo0COSU= Subject key identifier: 4A:79:C0:7D:BD:84:95:94:8B:64:03:35:05:8A:CC:C1:BF:41:9E:ED Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019A59B0EB24B9D5577851FAD18B82D3025C Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SnnAfb2ElZSLZAM1BYrMwb9Bnu0.roa Signing time: Thu 06 Nov 2025 15:02:38 +0000 ROA not before: Thu 06 Nov 2025 15:02:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 33185 IP address blocks: 89.125.4.0/22 maxlen: 22 89.125.12.0/22 maxlen: 22 89.125.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:59:b0:eb:24:b9:d5:57:78:51:fa:d1:8b:82:d3:02:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Nov 6 15:02:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4a79c07dbd8495948b640335058accc1bf419eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2f:42:a2:d3:9a:7b:92:73:82:a9:af:99:db: 5f:0e:75:e0:39:d5:77:36:e4:20:23:d4:ce:cf:4c: 5c:03:83:43:5d:34:05:91:3c:41:72:9c:44:0d:d0: 24:e3:30:9d:82:fd:97:87:5a:af:bf:a2:68:a2:15: 5a:9f:d2:0c:eb:0e:2c:1a:00:59:e6:cf:27:32:69: 77:c6:c0:2c:e1:37:12:bc:41:fb:aa:51:cc:01:a6: bf:79:1f:0e:2e:0d:94:47:1e:15:fb:d9:5f:f5:fb: db:3e:4f:87:0a:9b:19:e0:57:5c:46:7c:19:b7:37: e5:75:9c:da:74:1e:22:71:5d:36:6b:e9:f2:4d:17: cc:2f:85:95:ed:02:ff:c6:ba:f5:ba:dd:e9:11:57: 03:db:08:35:5f:2d:a6:e0:5a:db:81:ff:76:9e:44: 36:e1:fe:4c:e3:d8:c3:03:31:ab:c1:96:ed:98:7d: bc:30:78:9d:80:99:e0:15:75:1c:40:b9:47:96:31: 7f:9d:23:7f:14:40:31:ee:25:64:e1:c8:ca:5e:40: b9:a7:c3:0a:74:6e:05:fd:ed:d0:9c:19:89:f1:82: 5d:9c:71:3e:a0:44:32:1b:52:bb:a9:35:7b:b5:bd: 0e:a9:27:ee:57:13:47:d8:6e:bc:22:8a:bd:19:1e: 2c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:79:C0:7D:BD:84:95:94:8B:64:03:35:05:8A:CC:C1:BF:41:9E:ED X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SnnAfb2ElZSLZAM1BYrMwb9Bnu0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.125.4.0/22 89.125.12.0/22 89.125.28.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:a6:f6:f6:9b:45:56:5f:2d:35:6d:2d:55:42:ed:c3:2f:f8: 83:02:38:57:da:0c:56:bf:67:18:d2:f4:b1:b6:f5:60:42:f5: 1e:50:b8:29:f6:c1:49:2e:49:5d:da:2d:fb:c0:e8:97:ae:d3: 8b:78:f7:3e:e6:df:21:0c:df:e8:67:ab:5f:0e:81:53:14:f4: e7:7f:4b:eb:5b:fe:a1:cb:8f:0e:a9:c2:c8:74:cb:28:01:02: c1:d3:3b:5b:7b:a1:db:1c:09:58:a2:23:e6:ad:74:5f:ac:e8: fd:e3:57:e6:16:59:06:2e:42:71:d2:77:4b:ce:bf:8f:f9:aa: 64:93:2a:4d:09:30:b1:b0:88:51:c6:cf:c5:50:11:83:7f:20: 4e:c3:3b:72:4a:71:89:ff:fa:2b:86:ef:34:d6:c1:41:f4:d1: b6:e6:3b:c5:30:53:f5:75:9d:05:0e:17:89:1a:2f:de:08:8f: 96:20:9c:f1:95:56:c3:d3:be:db:bb:95:e1:f5:f5:be:24:29: f8:6d:f1:74:5e:ef:e9:ee:9d:34:40:a5:70:d1:56:a8:d0:c2: 08:07:e8:fb:75:0b:53:86:5a:04:a3:52:dc:02:3c:99:5b:ee: d9:ca:75:69:2f:c0:f2:19:bc:85:9b:23:f5:03:6f:fd:82:c5: 43:44:12:8a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZpZsOskudVXeFH60YuC0wJcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjUxMTA2MTUwMjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTc5YzA3ZGJkODQ5NTk0OGI2NDAzMzUwNThhY2NjMWJmNDE5ZWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3C9CotOae5JzgqmvmdtfDnXgOdV3 NuQgI9TOz0xcA4NDXTQFkTxBcpxEDdAk4zCdgv2Xh1qvv6JoohVan9IM6w4sGgBZ 5s8nMml3xsAs4TcSvEH7qlHMAaa/eR8OLg2URx4V+9lf9fvbPk+HCpsZ4FdcRnwZ tzfldZzadB4icV02a+nyTRfML4WV7QL/xrr1ut3pEVcD2wg1Xy2m4Frbgf92nkQ2 4f5M49jDAzGrwZbtmH28MHidgJngFXUcQLlHljF/nSN/FEAx7iVk4cjKXkC5p8MK dG4F/e3QnBmJ8YJdnHE+oEQyG1K7qTV7tb0OqSfuVxNH2G68Ioq9GR4s7wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEp5wH29hJWUi2QDNQWKzMG/QZ7tMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvU25uQWZiMkVsWlNMWkFNMUJZck13YjlCbnUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCWX0EAwQC WX0MAwQCWX0cMA0GCSqGSIb3DQEBCwUAA4IBAQBKpvb2m0VWXy01bS1VQu3DL/iD AjhX2gxWv2cY0vSxtvVgQvUeULgp9sFJLkld2i37wOiXrtOLePc+5t8hDN/oZ6tf DoFTFPTnf0vrW/6hy48OqcLIdMsoAQLB0ztbe6HbHAlYoiPmrXRfrOj941fmFlkG LkJx0ndLzr+P+apkkypNCTCxsIhRxs/FUBGDfyBOwztySnGJ//orhu801sFB9NG2 5jvFMFP1dZ0FDheJGi/eCI+WIJzxlVbD077bu5Xh9fW+JCn4bfF0Xu/p7p00QKVw 0Vao0MIIB+j7dQtThloEo1LcAjyZW+7ZynVpL8DyGbyFmyP1A2/9gsVDRBKK -----END CERTIFICATE-----Generated at Fri Dec 5 07:58:52 2025 by rpki-client