This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/gGO9icMrdD7N9uiJnKWR-Ueytgo.roa File: gGO9icMrdD7N9uiJnKWR-Ueytgo.roa (raw, json) Hash identifier: 1RTOeLDADO5dBwjjbWYNNQtq640SgJeezRVf2Hcyp3A= Subject key identifier: 80:63:BD:89:C3:2B:74:3E:CD:F6:E8:89:9C:A5:91:F9:47:B2:B6:0A Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d Certificate serial: 019A9BBEB4653ED39F4448DD5D761943CCBB Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/gGO9icMrdD7N9uiJnKWR-Ueytgo.roa Signing time: Wed 19 Nov 2025 10:52:37 +0000 ROA not before: Wed 19 Nov 2025 10:52:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 201201 IP address blocks: 89.117.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:be:b4:65:3e:d3:9f:44:48:dd:5d:76:19:43:cc:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d Validity Not Before: Nov 19 10:52:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8063bd89c32b743ecdf6e8899ca591f947b2b60a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:07:30:62:5d:03:e9:57:d3:93:8a:08:d2:68: 7f:88:9b:0e:ed:43:79:77:bf:a6:ed:59:5e:50:1d: 4c:95:d5:88:3a:23:1a:20:09:3f:99:d2:4a:68:53: 5c:af:53:7a:fb:2d:9c:91:7f:48:b1:29:a1:cb:75: f6:60:79:5d:d1:87:fa:57:77:ca:95:9d:59:11:71: a8:f2:48:b9:18:cc:12:44:39:0a:c9:7c:5b:94:dd: 26:08:d8:0a:14:5d:fe:bc:1a:02:66:e7:8a:48:9a: 61:55:d7:4b:09:b6:fd:d3:60:ae:b6:43:30:d8:59: 8f:fd:0c:81:db:ab:30:19:7c:de:9d:12:aa:79:14: a3:2d:e6:c7:2c:a8:f4:f3:bc:5b:ed:b6:65:8e:f0: 2a:2c:c2:30:69:be:61:5b:58:e9:85:e8:4f:ac:d0: b1:55:52:06:50:b6:36:7d:b4:fe:2b:99:a8:23:f1: 8c:f0:ad:1a:9f:3a:63:b2:a0:f8:b8:ad:9e:40:f7: 8d:e0:c2:91:57:af:19:7e:1b:d8:c2:c9:d8:b0:d2: f7:5d:4f:5d:bd:46:cb:63:ca:a5:cb:ad:64:23:75: 67:91:29:a6:61:18:00:31:ae:c7:45:85:07:b2:2f: 27:e0:f4:de:31:9c:f8:8f:7f:a3:60:8d:6e:b0:70: 81:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:63:BD:89:C3:2B:74:3E:CD:F6:E8:89:9C:A5:91:F9:47:B2:B6:0A X509v3 Authority Key Identifier: keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/gGO9icMrdD7N9uiJnKWR-Ueytgo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.117.241.0/24 Signature Algorithm: sha256WithRSAEncryption 06:51:e9:31:80:79:fa:2e:de:df:9d:e9:79:93:7c:fe:be:33: bc:e5:03:3b:e9:cb:f3:a3:60:7c:e2:e8:fe:6d:73:f4:fb:89: e3:a0:f2:02:82:df:30:f3:4c:15:7c:b6:c1:2f:73:93:23:90: 5f:3a:b0:ee:f5:13:c1:52:44:1e:ab:34:a7:58:7c:a4:af:e7: 56:ac:3f:6f:9d:0b:bb:f1:44:eb:f7:cc:e6:33:e2:4d:73:5d: e6:bd:ab:03:d7:47:2d:0f:7e:1c:13:1b:36:4e:e4:fd:79:47: 68:1f:18:76:1a:1b:0e:c4:d7:7f:45:d0:40:1d:fc:c9:1f:c4: 5d:9f:cd:c3:c2:28:34:a6:08:e0:b4:f4:00:a3:8a:aa:e1:9d: 5a:da:e0:92:18:b2:25:2f:16:bd:cb:14:67:a6:db:90:54:81: 78:58:77:f2:df:8f:ae:78:36:ff:af:ff:19:b0:3a:2e:86:ee: 32:a6:30:3b:78:2b:7e:af:6a:f9:e8:b0:95:3a:81:f8:7a:a0: 06:72:4d:96:4c:45:24:4c:0b:2c:c2:00:5f:be:19:9e:c9:06: 15:4d:5c:0c:11:ff:b3:bf:bc:c4:d3:a2:87:45:06:83:0e:2b: a6:ae:a6:57:51:bb:d5:87:52:36:68:ad:af:8e:e3:ea:21:73: 4d:35:d7:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqbvrRlPtOfREjdXXYZQ8y7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3 MTE4MGQwHhcNMjUxMTE5MTA1MjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDYzYmQ4OWMzMmI3NDNlY2RmNmU4ODk5Y2E1OTFmOTQ3YjJiNjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAcwYl0D6VfTk4oI0mh/iJsO7UN5 d7+m7VleUB1MldWIOiMaIAk/mdJKaFNcr1N6+y2ckX9IsSmhy3X2YHld0Yf6V3fK lZ1ZEXGo8ki5GMwSRDkKyXxblN0mCNgKFF3+vBoCZueKSJphVddLCbb902CutkMw 2FmP/QyB26swGXzenRKqeRSjLebHLKj087xb7bZljvAqLMIwab5hW1jphehPrNCx VVIGULY2fbT+K5moI/GM8K0anzpjsqD4uK2eQPeN4MKRV68ZfhvYwsnYsNL3XU9d vUbLY8qly61kI3VnkSmmYRgAMa7HRYUHsi8n4PTeMZz4j3+jYI1usHCBQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIBjvYnDK3Q+zfboiZylkflHsrYKMB8GA1UdIwQY MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt MDQ2ODA0MjQ4NmRjLzEvZ0dPOWljTXJkRDdOOXVpSm5LV1ItVWV5dGdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXXxMA0G CSqGSIb3DQEBCwUAA4IBAQAGUekxgHn6Lt7fnel5k3z+vjO85QM76cvzo2B84uj+ bXP0+4njoPICgt8w80wVfLbBL3OTI5BfOrDu9RPBUkQeqzSnWHykr+dWrD9vnQu7 8UTr98zmM+JNc13mvasD10ctD34cExs2TuT9eUdoHxh2GhsOxNd/RdBAHfzJH8Rd n83Dwig0pgjgtPQAo4qq4Z1a2uCSGLIlLxa9yxRnptuQVIF4WHfy34+ueDb/r/8Z sDouhu4ypjA7eCt+r2r56LCVOoH4eqAGck2WTEUkTAsswgBfvhmeyQYVTVwMEf+z v7zE06KHRQaDDiumrqZXUbvVh1I2aK2vjuPqIXNNNdca -----END CERTIFICATE-----Generated at Fri Dec 5 10:07:35 2025 by rpki-client