This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/ieBhaLZSJiSWNe_MbQZfNADZy6E.roa File: ieBhaLZSJiSWNe_MbQZfNADZy6E.roa (raw, json) Hash identifier: 3mz08LDklCeZ9mIpbTxryN4+AVNtEhwVwwyZV27owGQ= Subject key identifier: 89:E0:61:68:B6:52:26:24:96:35:EF:CC:6D:06:5F:34:00:D9:CB:A1 Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Certificate serial: 019B2E517795743D645CD5854F88EC15722C Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/ieBhaLZSJiSWNe_MbQZfNADZy6E.roa Signing time: Wed 17 Dec 2025 21:57:29 +0000 ROA not before: Wed 17 Dec 2025 21:57:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 89.187.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:51:77:95:74:3d:64:5c:d5:85:4f:88:ec:15:72:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Validity Not Before: Dec 17 21:57:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=89e06168b65226249635efcc6d065f3400d9cba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bc:ff:89:84:2a:32:e8:da:5d:f6:21:d5:3a: 44:73:32:a7:96:2b:7f:80:c8:e1:07:0f:93:00:52: a4:cf:6d:a5:80:50:55:9b:71:01:a0:58:5a:51:d4: 1b:1c:e9:5c:9e:e7:1e:40:28:6e:3d:98:50:26:23: 4e:a1:1b:2e:4d:24:d5:e5:38:81:7e:2d:34:5a:7a: 3f:c5:26:58:1e:f7:a0:b8:e6:de:c2:d6:0e:a5:a6: aa:83:39:d3:01:2f:83:aa:cf:10:6d:d9:d3:8c:e1: f3:aa:e4:9c:0a:79:8c:2a:16:47:f6:bc:6a:6b:1c: 88:7f:7d:fa:3c:c3:86:3e:20:61:cc:8c:25:76:1b: 82:8f:d3:77:f9:68:33:f6:1d:9d:c1:12:8d:6f:cd: 41:6c:fd:a5:23:12:a7:0d:31:9a:15:63:b6:25:c4: 41:95:f2:c9:5b:45:78:74:6b:bd:b5:99:d8:82:ff: 77:6c:0c:94:29:e1:90:74:09:94:30:9f:fc:2f:76: ab:98:4d:06:73:c6:76:12:d4:ae:68:62:82:71:db: d8:db:b2:dd:b4:1b:d2:f5:eb:53:47:84:97:a4:7b: 2b:07:e9:2b:17:4f:83:7b:5e:c2:a8:10:0e:ec:fd: f4:8f:84:4b:56:0e:bd:e0:5b:50:16:74:e0:9f:a9: 30:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E0:61:68:B6:52:26:24:96:35:EF:CC:6D:06:5F:34:00:D9:CB:A1 X509v3 Authority Key Identifier: keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/ieBhaLZSJiSWNe_MbQZfNADZy6E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.187.30.0/24 Signature Algorithm: sha256WithRSAEncryption b8:67:23:a0:d2:b6:7f:57:9d:2a:99:ca:2e:53:01:2c:54:7d: 16:9d:be:6a:95:06:81:a3:eb:aa:98:ee:72:97:96:8c:5d:cf: d4:ae:c1:74:16:54:4c:70:32:51:c8:73:69:48:62:7c:46:db: c5:23:c9:79:c1:a6:a7:5e:7f:7b:68:82:cf:e2:75:6f:5f:ee: c3:ea:6e:44:fc:92:c4:21:76:45:17:82:0e:8b:ec:3f:f7:2d: c3:18:1d:74:fc:83:7b:83:fc:44:f8:ea:0c:06:64:42:d7:20: 5d:63:1b:97:6d:ab:cc:c8:12:09:54:29:99:0d:e3:38:99:3d: e3:5c:42:5f:07:22:af:95:72:9c:14:85:e3:52:95:7b:ca:09: a8:05:e6:ad:81:5b:ba:7e:39:cb:db:cb:89:cc:bc:ea:b6:66: d2:50:b5:d8:e6:d3:ea:8b:ff:88:f6:3b:7c:08:19:37:5f:80: 0c:ee:d8:62:97:3a:ab:64:2e:f4:1e:22:1f:5e:bb:52:45:02: a7:8a:75:c0:01:21:43:ce:3b:af:59:1e:48:65:2b:24:6a:45: 20:47:3a:10:10:08:66:2b:ff:5e:48:f1:37:9e:ea:38:24:59: ca:72:93:3e:59:f3:d4:99:22:a0:89:f1:77:30:ea:0b:3c:52: dd:dc:dc:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsuUXeVdD1kXNWFT4jsFXIsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw YmYwNTUwHhcNMjUxMjE3MjE1NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWUwNjE2OGI2NTIyNjI0OTYzNWVmY2M2ZDA2NWYzNDAwZDljYmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbz/iYQqMujaXfYh1TpEczKnlit/ gMjhBw+TAFKkz22lgFBVm3EBoFhaUdQbHOlcnuceQChuPZhQJiNOoRsuTSTV5TiB fi00Wno/xSZYHveguObewtYOpaaqgznTAS+Dqs8QbdnTjOHzquScCnmMKhZH9rxq axyIf336PMOGPiBhzIwldhuCj9N3+Wgz9h2dwRKNb81BbP2lIxKnDTGaFWO2JcRB lfLJW0V4dGu9tZnYgv93bAyUKeGQdAmUMJ/8L3armE0Gc8Z2EtSuaGKCcdvY27Ld tBvS9etTR4SXpHsrB+krF0+De17CqBAO7P30j4RLVg694FtQFnTgn6kwlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIngYWi2UiYkljXvzG0GXzQA2cuhMB8GA1UdIwQY MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt NDVjZmM4NTdkZGRkLzEvaWVCaGFMWlNKaVNXTmVfTWJRWmZOQURaeTZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbseMA0G CSqGSIb3DQEBCwUAA4IBAQC4ZyOg0rZ/V50qmcouUwEsVH0Wnb5qlQaBo+uqmO5y l5aMXc/UrsF0FlRMcDJRyHNpSGJ8RtvFI8l5waanXn97aILP4nVvX+7D6m5E/JLE IXZFF4IOi+w/9y3DGB10/IN7g/xE+OoMBmRC1yBdYxuXbavMyBIJVCmZDeM4mT3j XEJfByKvlXKcFIXjUpV7ygmoBeatgVu6fjnL28uJzLzqtmbSULXY5tPqi/+I9jt8 CBk3X4AM7thilzqrZC70HiIfXrtSRQKninXAASFDzjuvWR5IZSskakUgRzoQEAhm K/9eSPE3nuo4JFnKcpM+WfPUmSKgifF3MOoLPFLd3Nx5 -----END CERTIFICATE-----Generated at Tue Dec 30 21:05:25 2025 by rpki-client