This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/n-N_VMIbVKw4HqHJAqZ7jXPlP3E.roa File: n-N_VMIbVKw4HqHJAqZ7jXPlP3E.roa (raw, json) Hash identifier: 8fp3nO+yITWe/BguDCe+vQ/qXfxs+Ei/5PPsqOGCIPs= Subject key identifier: 9F:E3:7F:54:C2:1B:54:AC:38:1E:A1:C9:02:A6:7B:8D:73:E5:3F:71 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019A5CFDF20CCB4AA70EA7A9BFE4D267A6AB Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/n-N_VMIbVKw4HqHJAqZ7jXPlP3E.roa Signing time: Fri 07 Nov 2025 06:25:37 +0000 ROA not before: Fri 07 Nov 2025 06:25:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 89.34.106.0/24 maxlen: 24 93.114.183.0/24 maxlen: 24 93.115.106.0/24 maxlen: 24 185.212.119.0/24 maxlen: 24 194.58.47.0/24 maxlen: 24 206.245.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5c:fd:f2:0c:cb:4a:a7:0e:a7:a9:bf:e4:d2:67:a6:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Nov 7 06:25:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9fe37f54c21b54ac381ea1c902a67b8d73e53f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a3:d1:b6:f2:b2:24:b6:11:7f:0d:78:e8:4f: 70:cd:b9:6f:52:14:3e:fb:d9:b5:37:de:ab:2e:60: c1:20:40:19:cf:99:14:77:d1:ab:34:78:b8:5d:46: 52:86:ac:9d:64:aa:78:a7:92:a6:53:98:69:33:09: 66:f7:01:b6:3d:2b:d6:a0:8c:07:d2:ab:8d:d0:42: 5f:5e:ab:50:30:57:da:72:95:e3:11:03:fa:f6:db: d4:88:e3:62:e5:9d:a8:4e:50:0b:af:a8:ed:1b:9b: 0e:b7:b4:df:1d:e9:c5:33:d7:0c:62:0f:a9:de:42: eb:f8:03:a9:0f:d2:ba:20:f7:4e:aa:9e:9e:a5:f6: 89:31:3e:37:8d:20:38:36:05:83:34:1f:3b:31:3c: 79:b8:47:3d:16:ea:80:70:f2:0b:79:8e:ae:da:e4: b9:f1:a4:ee:77:7a:0d:c9:11:e3:cb:2c:ec:95:c7: 00:3d:b7:05:fa:6a:c7:be:e7:5d:9c:f4:7d:31:2b: 5e:56:65:2b:a3:b7:81:5d:99:c4:3c:5f:17:eb:6b: d3:45:23:36:8e:9d:33:c4:60:4c:1f:44:2e:ae:47: 21:96:43:3f:ec:73:86:30:7b:91:2e:7c:79:58:6e: 98:28:99:a1:f1:41:3a:d0:d1:b0:0e:c3:a3:17:65: 97:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E3:7F:54:C2:1B:54:AC:38:1E:A1:C9:02:A6:7B:8D:73:E5:3F:71 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/n-N_VMIbVKw4HqHJAqZ7jXPlP3E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.106.0/24 93.114.183.0/24 93.115.106.0/24 185.212.119.0/24 194.58.47.0/24 206.245.158.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:c8:d1:93:53:8e:0e:6c:21:8f:64:af:95:c2:41:79:11:2d: 2f:16:81:e4:b4:9a:91:59:18:49:4f:e5:c1:48:06:f6:cd:3f: 7b:93:81:63:0c:4e:13:17:03:3b:61:94:19:9b:3e:30:c2:25: 33:c9:9a:cc:17:ec:3a:b5:ab:e7:6b:cf:5b:f8:8d:42:d4:9c: 26:70:6a:a4:06:6f:2c:07:b2:de:cd:d4:6e:69:4f:1e:86:d2: a6:35:0f:48:5a:03:2a:9b:21:d5:0a:0c:e3:97:04:46:8a:59: 0d:66:4d:d2:ff:71:29:86:6b:07:72:92:5a:ed:cf:72:ab:f3: d9:93:c4:80:9c:b4:e1:25:23:b0:12:e7:2e:59:5c:fd:39:26: aa:5c:48:68:be:77:ff:39:f2:2d:97:43:3d:67:99:9c:be:be: b8:11:b8:fc:5b:ac:47:0e:e6:55:da:bc:b8:25:c0:90:a5:09: 9e:b6:3d:73:73:6b:be:98:8b:25:b4:8b:88:b4:04:39:d8:03: aa:74:e2:d9:d5:c4:6f:99:ff:ce:3b:a9:e6:fb:db:3f:08:47: ce:6f:08:bf:c6:0d:0f:23:5e:d5:42:52:c0:93:bc:18:e5:4f: 1c:b3:73:bf:84:ce:6e:a1:7d:60:00:0a:1e:fd:53:f3:dc:74: de:c4:c2:4a -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZpc/fIMy0qnDqepv+TSZ6arMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjUxMTA3MDYyNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmUzN2Y1NGMyMWI1NGFjMzgxZWExYzkwMmE2N2I4ZDczZTUzZjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaPRtvKyJLYRfw146E9wzblvUhQ+ +9m1N96rLmDBIEAZz5kUd9GrNHi4XUZShqydZKp4p5KmU5hpMwlm9wG2PSvWoIwH 0quN0EJfXqtQMFfacpXjEQP69tvUiONi5Z2oTlALr6jtG5sOt7TfHenFM9cMYg+p 3kLr+AOpD9K6IPdOqp6epfaJMT43jSA4NgWDNB87MTx5uEc9FuqAcPILeY6u2uS5 8aTud3oNyRHjyyzslccAPbcF+mrHvuddnPR9MSteVmUro7eBXZnEPF8X62vTRSM2 jp0zxGBMH0QurkchlkM/7HOGMHuRLnx5WG6YKJmh8UE60NGwDsOjF2WXhwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFJ/jf1TCG1SsOB6hyQKme41z5T9xMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvbi1OX1ZNSWJWS3c0SHFISkFxWjdqWFBsUDNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAWSJqAwQA XXK3AwQAXXNqAwQAudR3AwQAwjovAwQAzvWeMA0GCSqGSIb3DQEBCwUAA4IBAQA6 yNGTU44ObCGPZK+VwkF5ES0vFoHktJqRWRhJT+XBSAb2zT97k4FjDE4TFwM7YZQZ mz4wwiUzyZrMF+w6tavna89b+I1C1JwmcGqkBm8sB7LezdRuaU8ehtKmNQ9IWgMq myHVCgzjlwRGilkNZk3S/3EphmsHcpJa7c9yq/PZk8SAnLThJSOwEucuWVz9OSaq XEhovnf/OfItl0M9Z5mcvr64Ebj8W6xHDuZV2ry4JcCQpQmetj1zc2u+mIsltIuI tAQ52AOqdOLZ1cRvmf/OO6nm+9s/CEfObwi/xg0PI17VQlLAk7wY5U8cs3O/hM5u oX1gAAoe/VPz3HTexMJK -----END CERTIFICATE-----Generated at Sat Nov 22 21:34:53 2025 by rpki-client