This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/tY0RTrnwdeHFozdlTByKvXK-HOE.roa File: tY0RTrnwdeHFozdlTByKvXK-HOE.roa (raw, json) Hash identifier: Sxd1viKUAgFQojN/S49L+nnSyHy1YvWaHrdPVirkqCU= Subject key identifier: B5:8D:11:4E:B9:F0:75:E1:C5:A3:37:65:4C:1C:8A:BD:72:BE:1C:E1 Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Certificate serial: 019A9839D4197E29241FA661058E37981226 Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/tY0RTrnwdeHFozdlTByKvXK-HOE.roa Signing time: Tue 18 Nov 2025 18:28:37 +0000 ROA not before: Tue 18 Nov 2025 18:28:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 31715 IP address blocks: 89.187.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 16:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:98:39:d4:19:7e:29:24:1f:a6:61:05:8e:37:98:12:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Validity Not Before: Nov 18 18:28:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b58d114eb9f075e1c5a337654c1c8abd72be1ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fa:90:56:1a:7e:87:b8:51:88:5e:fb:60:b7: 5b:a4:c9:13:a4:2d:fc:ca:fe:fa:b9:ba:1c:57:6f: 36:7c:b7:6d:9c:c0:f0:b0:f5:69:a8:0d:02:71:b7: c5:70:40:e6:e3:f9:49:d4:93:90:73:9a:64:b6:93: d4:4c:a2:4b:4d:67:32:41:52:ee:1d:ba:d9:14:f6: 1b:e2:6e:da:c0:0d:a8:4f:87:62:55:34:7f:11:18: c1:6d:73:7e:70:a8:a7:dc:90:97:3c:e6:22:be:b5: 96:8a:ba:cc:5f:c4:3a:e6:1a:c1:49:af:1f:2a:64: a6:17:bd:d3:77:79:e9:de:f7:79:d7:c7:82:6f:fc: ea:28:94:16:38:b9:1a:ba:e4:e5:13:2b:7c:4b:8a: 84:8c:75:47:0e:b3:84:ef:cc:15:52:9e:9c:b5:36: bc:96:50:35:0c:2f:21:78:13:9a:dd:76:3f:8c:7b: b2:32:1d:b9:bc:86:36:03:d3:32:de:e9:0a:9e:27: 9d:67:fb:98:46:c6:f0:b2:16:49:df:24:0c:a3:64: 54:de:b6:3a:eb:21:42:33:00:8c:57:f5:56:c2:ed: 77:5c:73:02:a3:81:a7:7b:24:6f:c6:3e:7b:2d:67: dd:a1:ec:68:99:f6:98:ba:1c:fd:2b:62:e3:14:f1: 5e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:8D:11:4E:B9:F0:75:E1:C5:A3:37:65:4C:1C:8A:BD:72:BE:1C:E1 X509v3 Authority Key Identifier: keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/tY0RTrnwdeHFozdlTByKvXK-HOE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.187.30.0/24 Signature Algorithm: sha256WithRSAEncryption 69:d5:4e:51:f5:2c:2b:0f:a6:3f:61:d9:3d:f2:0c:92:65:70: d5:2d:dd:58:3c:25:2e:9d:f4:2e:3b:f1:2a:2e:d3:31:8a:2d: 68:cc:01:8f:e5:e6:c3:e1:41:af:11:d1:fc:03:e8:ba:d1:4c: 4d:4d:58:86:6e:9b:f7:48:10:d5:3d:4c:17:0b:37:cc:b8:dd: 70:a4:68:65:71:06:cc:1c:47:37:3e:cf:92:24:b1:7f:d4:99: d5:43:c7:aa:7c:bd:99:ed:80:7e:1a:25:36:c8:c5:be:02:95: 17:3b:0c:4e:a0:a0:9a:66:b4:76:ee:12:44:d2:9b:31:da:85: b8:ba:7b:96:1e:26:5e:de:40:1d:1f:1d:e3:c9:69:29:66:7b: d6:2b:cf:73:c6:2a:07:60:6b:31:cd:52:68:b9:2e:ed:17:f5: 0b:9b:e8:3b:92:d8:9a:77:25:e2:73:8e:8b:d7:a0:51:98:06: f5:a0:c5:f1:cc:60:2e:4d:07:30:15:a4:1b:7f:8a:58:45:64: 5c:6f:4b:1c:2e:01:46:da:b6:f4:ff:77:63:12:18:41:8d:47: 12:9f:4b:d3:a2:b6:e2:07:32:47:d2:95:42:1a:89:ef:c0:a2: 14:5c:c0:69:88:ab:e3:a6:a2:75:c2:ca:24:1b:1e:3b:b6:10: e7:53:f1:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqYOdQZfikkH6ZhBY43mBImMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw YmYwNTUwHhcNMjUxMTE4MTgyODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNThkMTE0ZWI5ZjA3NWUxYzVhMzM3NjU0YzFjOGFiZDcyYmUxY2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fqQVhp+h7hRiF77YLdbpMkTpC38 yv76ubocV282fLdtnMDwsPVpqA0CcbfFcEDm4/lJ1JOQc5pktpPUTKJLTWcyQVLu HbrZFPYb4m7awA2oT4diVTR/ERjBbXN+cKin3JCXPOYivrWWirrMX8Q65hrBSa8f KmSmF73Td3np3vd518eCb/zqKJQWOLkauuTlEyt8S4qEjHVHDrOE78wVUp6ctTa8 llA1DC8heBOa3XY/jHuyMh25vIY2A9My3ukKniedZ/uYRsbwshZJ3yQMo2RU3rY6 6yFCMwCMV/VWwu13XHMCo4GneyRvxj57LWfdoexomfaYuhz9K2LjFPFe9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLWNEU658HXhxaM3ZUwcir1yvhzhMB8GA1UdIwQY MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt NDVjZmM4NTdkZGRkLzEvdFkwUlRybndkZUhGb3pkbFRCeUt2WEstSE9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbseMA0G CSqGSIb3DQEBCwUAA4IBAQBp1U5R9SwrD6Y/Ydk98gySZXDVLd1YPCUunfQuO/Eq LtMxii1ozAGP5ebD4UGvEdH8A+i60UxNTViGbpv3SBDVPUwXCzfMuN1wpGhlcQbM HEc3Ps+SJLF/1JnVQ8eqfL2Z7YB+GiU2yMW+ApUXOwxOoKCaZrR27hJE0psx2oW4 unuWHiZe3kAdHx3jyWkpZnvWK89zxioHYGsxzVJouS7tF/ULm+g7ktiadyXic46L 16BRmAb1oMXxzGAuTQcwFaQbf4pYRWRcb0scLgFG2rb0/3djEhhBjUcSn0vTorbi BzJH0pVCGonvwKIUXMBpiKvjpqJ1wsokGx47thDnU/HO -----END CERTIFICATE-----Generated at Thu Dec 4 18:04:41 2025 by rpki-client