This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/gJIqO_6lhXC3PCnPRL3fAlPJXAU.roa File: gJIqO_6lhXC3PCnPRL3fAlPJXAU.roa (raw, json) Hash identifier: J2nKT11+0nuOJ4MtOk2to6Rfr0ahXMoQzEgtBk7niGE= Subject key identifier: 80:92:2A:3B:FE:A5:85:70:B7:3C:29:CF:44:BD:DF:02:53:C9:5C:05 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019A59B0EC384ACB297CE3D2D1BF3713B945 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/gJIqO_6lhXC3PCnPRL3fAlPJXAU.roa Signing time: Thu 06 Nov 2025 15:02:38 +0000 ROA not before: Thu 06 Nov 2025 15:02:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 63018 IP address blocks: 89.125.4.0/22 maxlen: 22 89.125.12.0/22 maxlen: 22 89.125.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:59:b0:ec:38:4a:cb:29:7c:e3:d2:d1:bf:37:13:b9:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Nov 6 15:02:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=80922a3bfea58570b73c29cf44bddf0253c95c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:65:a1:aa:8b:09:45:96:65:c1:c7:c6:17:c3: 31:86:e5:ce:be:03:cb:71:10:d5:2d:8a:32:8d:9b: 82:a0:86:1e:21:f9:92:fc:3a:4e:e8:a6:75:0a:8a: 1b:15:a1:d7:b3:d7:85:e0:2f:79:96:9b:e5:7b:dc: 43:b6:c4:ca:1d:5b:dc:6c:cb:bd:f5:38:5d:59:83: d0:24:56:5d:8a:89:91:e9:b8:b4:f7:e3:7f:97:0e: e1:a2:1e:16:c4:56:6f:a4:63:b3:f6:4a:cd:d0:a2: ac:af:b5:fc:e0:06:ec:10:19:83:94:c2:aa:f5:a1: 6f:2b:72:49:4c:01:33:64:7d:5d:2f:ea:3c:11:2f: 7b:ea:98:5a:7d:76:c2:85:fa:86:45:87:72:72:58: b9:1b:43:0f:d1:56:23:c6:e2:32:14:6d:c1:4d:a8: 37:c5:88:1f:bd:91:49:a3:a5:f4:42:27:d2:c0:c7: ee:bb:d1:a5:65:9b:d9:36:2f:a5:87:eb:d0:3c:6a: e3:79:b0:e6:5c:d4:e0:ea:7a:49:ba:2c:26:f9:fd: 98:90:51:1b:df:c2:f1:5e:4b:03:33:c8:61:dc:9a: fb:75:81:95:8c:e3:9b:ad:b4:49:a2:57:a7:eb:21: 5c:24:18:72:6f:21:28:e6:15:0b:1a:a4:02:43:d5: c9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:92:2A:3B:FE:A5:85:70:B7:3C:29:CF:44:BD:DF:02:53:C9:5C:05 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/gJIqO_6lhXC3PCnPRL3fAlPJXAU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.125.4.0/22 89.125.12.0/22 89.125.28.0/22 Signature Algorithm: sha256WithRSAEncryption 13:ca:a0:5c:3e:d4:e0:cf:cc:86:7e:03:e8:c1:51:d1:5d:b6: b5:b6:78:f8:24:78:af:70:1f:80:8c:9a:d1:c2:32:17:32:bd: dc:f3:c9:17:32:bb:58:7b:61:5d:73:f2:b8:74:49:d2:99:97: fd:66:b0:eb:20:41:4f:50:0d:2c:98:82:7a:3a:96:85:2f:d0: ee:d2:a1:ea:4c:f7:b9:93:15:7c:4e:67:33:64:22:b2:80:bd: 8f:7c:fb:09:fa:70:b7:54:24:b2:e5:db:aa:d2:fd:d6:fd:43: 47:81:96:bc:87:c6:03:b2:44:13:46:cd:49:00:4e:3e:92:d5: 1a:94:6e:62:ad:e1:71:64:c7:c9:82:29:7b:40:5b:a4:f3:97: 81:1a:1f:63:e3:8b:17:8d:74:d7:b3:78:6e:2d:f2:6a:b4:fa: fa:a1:8f:d2:af:97:69:fa:80:f0:71:6f:b0:2a:04:a6:26:d6: 00:98:db:74:c2:ab:2c:c8:8f:02:ea:03:fe:ba:68:6a:ca:31: 49:97:3f:05:cc:ac:a2:bc:a7:ab:af:5e:9f:ea:83:49:55:bc: d1:96:71:a5:70:e4:5b:4b:b5:d7:bf:0f:e7:d8:3e:b7:7a:83: 55:4c:b4:4a:a8:99:00:90:a4:ae:89:e5:ec:d7:c5:6a:21:b5: 4a:da:23:03 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZpZsOw4SsspfOPS0b83E7lFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjUxMTA2MTUwMjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDkyMmEzYmZlYTU4NTcwYjczYzI5Y2Y0NGJkZGYwMjUzYzk1YzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmWhqosJRZZlwcfGF8MxhuXOvgPL cRDVLYoyjZuCoIYeIfmS/DpO6KZ1CoobFaHXs9eF4C95lpvle9xDtsTKHVvcbMu9 9ThdWYPQJFZdiomR6bi09+N/lw7hoh4WxFZvpGOz9krN0KKsr7X84AbsEBmDlMKq 9aFvK3JJTAEzZH1dL+o8ES976phafXbChfqGRYdycli5G0MP0VYjxuIyFG3BTag3 xYgfvZFJo6X0QifSwMfuu9GlZZvZNi+lh+vQPGrjebDmXNTg6npJuiwm+f2YkFEb 38LxXksDM8hh3Jr7dYGVjOObrbRJolen6yFcJBhybyEo5hULGqQCQ9XJmQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFICSKjv+pYVwtzwpz0S93wJTyVwFMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvZ0pJcU9fNmxoWEMzUENuUFJMM2ZBbFBKWEFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCWX0EAwQC WX0MAwQCWX0cMA0GCSqGSIb3DQEBCwUAA4IBAQATyqBcPtTgz8yGfgPowVHRXba1 tnj4JHivcB+AjJrRwjIXMr3c88kXMrtYe2Fdc/K4dEnSmZf9ZrDrIEFPUA0smIJ6 OpaFL9Du0qHqTPe5kxV8TmczZCKygL2PfPsJ+nC3VCSy5duq0v3W/UNHgZa8h8YD skQTRs1JAE4+ktUalG5ireFxZMfJgil7QFuk85eBGh9j44sXjXTXs3huLfJqtPr6 oY/Sr5dp+oDwcW+wKgSmJtYAmNt0wqssyI8C6gP+umhqyjFJlz8FzKyivKerr16f 6oNJVbzRlnGlcORbS7XXvw/n2D63eoNVTLRKqJkAkKSuieXs18VqIbVK2iMD -----END CERTIFICATE-----Generated at Fri Dec 5 07:56:52 2025 by rpki-client