This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/b7-x69RLcylp8Ja0uxhaTvaMQzE.roa File: b7-x69RLcylp8Ja0uxhaTvaMQzE.roa (raw, json) Hash identifier: 6m1uN6n+lWQhjotSNaprQpSKN+juNjQcHlJNrv5e7Vs= Subject key identifier: 6F:BF:B1:EB:D4:4B:73:29:69:F0:96:B4:BB:18:5A:4E:F6:8C:43:31 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019AA8323AF37D9911C1FFDA7689277B6023 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/b7-x69RLcylp8Ja0uxhaTvaMQzE.roa Signing time: Fri 21 Nov 2025 20:54:15 +0000 ROA not before: Fri 21 Nov 2025 20:54:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44592 IP address blocks: 89.125.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a8:32:3a:f3:7d:99:11:c1:ff:da:76:89:27:7b:60:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Nov 21 20:54:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6fbfb1ebd44b732969f096b4bb185a4ef68c4331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:43:59:02:ad:be:9d:f2:00:0c:a0:9a:e1:a7: 5f:e4:3c:1c:98:d1:82:72:4d:49:93:ae:ca:39:24: 2f:98:13:23:a1:4e:94:13:46:70:6f:34:d0:c4:3b: 5e:44:af:0c:e8:35:6c:1a:59:d3:e8:a6:5b:38:eb: 7b:4a:9d:04:11:e4:c7:88:b4:76:2b:e3:d2:b2:28: d9:aa:3b:98:dd:a3:42:77:6b:db:02:b8:ec:23:52: 90:46:06:02:c5:e2:e2:84:bd:81:6f:d9:64:fa:d9: 34:c0:1a:77:40:b1:57:fb:42:8b:01:12:06:57:dd: 12:d0:53:c8:76:30:5c:41:d0:93:0b:34:df:1f:5d: a4:b2:42:f2:ab:a7:37:dc:40:40:18:63:7b:8c:1b: 2c:54:af:43:9e:8d:0d:ed:0a:56:62:3d:c2:c3:af: 0e:f0:74:cf:5f:79:69:8b:9d:6d:38:d6:41:0f:1c: 93:95:43:20:a8:3d:6a:e7:06:f4:79:f9:9b:50:2e: dc:9f:b6:19:03:44:a5:0d:de:c2:ef:c4:ac:9d:86: 26:05:d7:ca:dd:44:40:4d:5e:3d:b6:f3:43:60:a7: 14:c2:cc:bb:1d:53:be:b9:dc:26:6f:69:80:6a:00: 9b:b2:a7:f1:cf:e6:25:4b:5a:ad:fc:e5:11:21:3a: 90:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:BF:B1:EB:D4:4B:73:29:69:F0:96:B4:BB:18:5A:4E:F6:8C:43:31 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/b7-x69RLcylp8Ja0uxhaTvaMQzE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.125.69.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:72:49:9e:5d:a7:b9:f7:71:29:d0:16:3c:3b:04:8a:89:86: 55:9b:f5:13:c6:3b:5e:2c:fa:96:b6:7d:a5:03:e4:68:6d:a7: 5d:d5:04:b6:74:e6:3e:52:58:f4:fd:79:e0:74:90:5e:4b:50: 69:dd:9d:b1:9d:e5:38:f5:87:19:1f:8f:a9:a9:ea:9c:25:ab: 0f:7c:15:9f:de:10:e2:5e:04:3c:28:f4:8b:fc:ca:11:8f:ac: b4:99:d5:05:02:57:61:33:d6:6f:18:d1:db:6d:0e:07:b7:fd: 7b:a8:7e:ca:57:46:69:83:d4:2d:0d:a6:db:4c:39:f1:e9:0d: d2:9b:e0:5a:1f:e8:11:ec:5e:1d:e1:34:a8:0c:43:7f:94:0f: 3f:f6:83:b6:47:ad:cf:0d:c8:9e:17:9e:13:af:f6:3e:f3:18: bc:51:2b:78:1d:52:09:c6:1f:d8:0a:7d:fb:24:79:37:0a:4c: 98:4c:b0:7b:dc:d4:f5:95:4a:b0:a4:59:07:89:4f:a9:c6:f6: f5:58:18:81:81:8a:69:90:72:e2:25:32:94:5d:bc:44:0b:95: af:25:0e:2e:da:3e:42:48:0c:c5:14:28:c4:1b:dc:78:2a:fe: 9c:8e:02:4c:72:48:a3:01:d6:3a:4e:36:17:a0:e7:c5:fa:85: 33:28:50:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqoMjrzfZkRwf/adokne2AjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjUxMTIxMjA1NDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmJmYjFlYmQ0NGI3MzI5NjlmMDk2YjRiYjE4NWE0ZWY2OGM0MzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvENZAq2+nfIADKCa4adf5DwcmNGC ck1Jk67KOSQvmBMjoU6UE0ZwbzTQxDteRK8M6DVsGlnT6KZbOOt7Sp0EEeTHiLR2 K+PSsijZqjuY3aNCd2vbArjsI1KQRgYCxeLihL2Bb9lk+tk0wBp3QLFX+0KLARIG V90S0FPIdjBcQdCTCzTfH12kskLyq6c33EBAGGN7jBssVK9Dno0N7QpWYj3Cw68O 8HTPX3lpi51tONZBDxyTlUMgqD1q5wb0efmbUC7cn7YZA0SlDd7C78SsnYYmBdfK 3URATV49tvNDYKcUwsy7HVO+udwmb2mAagCbsqfxz+YlS1qt/OURITqQmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG+/sevUS3MpafCWtLsYWk72jEMxMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvYjcteDY5UkxjeWxwOEphMHV4aGFUdmFNUXpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWX1FMA0G CSqGSIb3DQEBCwUAA4IBAQBqckmeXae593Ep0BY8OwSKiYZVm/UTxjteLPqWtn2l A+Robadd1QS2dOY+Ulj0/XngdJBeS1Bp3Z2xneU49YcZH4+pqeqcJasPfBWf3hDi XgQ8KPSL/MoRj6y0mdUFAldhM9ZvGNHbbQ4Ht/17qH7KV0Zpg9QtDabbTDnx6Q3S m+BaH+gR7F4d4TSoDEN/lA8/9oO2R63PDcieF54Tr/Y+8xi8USt4HVIJxh/YCn37 JHk3CkyYTLB73NT1lUqwpFkHiU+pxvb1WBiBgYppkHLiJTKUXbxEC5WvJQ4u2j5C SAzFFCjEG9x4Kv6cjgJMckijAdY6TjYXoOfF+oUzKFAo -----END CERTIFICATE-----Generated at Fri Dec 5 07:02:16 2025 by rpki-client