This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/4wF809lrlF9SBWkrHIGrmIKOuXM.roa File: 4wF809lrlF9SBWkrHIGrmIKOuXM.roa (raw, json) Hash identifier: lr6faN8SW0WyZfWKnUQ/YMYEjVUChfqkreBJY6s71TY= Subject key identifier: E3:01:7C:D3:D9:6B:94:5F:52:05:69:2B:1C:81:AB:98:82:8E:B9:73 Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a Certificate serial: 019AC9324CB31E7DE03C9BC6865E9EC1F135 Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/4wF809lrlF9SBWkrHIGrmIKOuXM.roa Signing time: Fri 28 Nov 2025 06:41:48 +0000 ROA not before: Fri 28 Nov 2025 06:41:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 174 IP address blocks: 163.171.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:32:4c:b3:1e:7d:e0:3c:9b:c6:86:5e:9e:c1:f1:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a Validity Not Before: Nov 28 06:41:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e3017cd3d96b945f5205692b1c81ab98828eb973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a9:0a:f6:01:12:06:55:67:8b:50:b9:e0:20: e2:4b:cc:42:43:bc:0c:c3:35:7a:c2:ce:9e:72:c6: 6d:96:c0:e7:e5:aa:4d:f8:40:22:53:45:07:0c:94: 6d:bd:2b:93:8f:e9:5b:bf:d8:bb:ba:1d:ac:c3:b9: 9e:ac:71:5f:c4:e0:2e:84:90:7b:8f:69:75:5e:82: 75:51:16:80:6d:19:88:11:58:9e:8d:39:88:cd:3b: f0:6a:c8:87:14:b5:f2:fb:ad:39:1e:55:42:f9:9c: 7e:f6:25:3e:7a:a3:13:44:bd:6f:30:7a:86:e2:c1: e6:6a:32:8b:d1:c3:4d:5d:7e:e6:fd:a2:be:2b:27: d1:c5:2d:9f:bf:7d:ec:4a:68:f9:8b:b0:02:4e:b6: 90:2b:a1:e5:27:d4:5c:51:9e:27:a7:f1:26:59:8d: 34:fa:13:ff:b9:b8:a1:0f:31:76:15:2c:e8:87:84: 51:54:90:ca:2a:33:81:1a:f7:34:11:a4:1f:d8:74: 0a:77:eb:8d:5d:ef:59:e4:50:37:a7:4e:52:fc:80: be:c2:61:39:71:90:0a:b7:26:86:d0:e4:5a:ac:f2: f0:e3:8d:60:d8:98:6d:97:4f:e2:97:e8:49:44:12: b1:86:2e:3f:3f:5d:91:77:ba:04:02:49:2b:3e:3d: 4a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:01:7C:D3:D9:6B:94:5F:52:05:69:2B:1C:81:AB:98:82:8E:B9:73 X509v3 Authority Key Identifier: keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/4wF809lrlF9SBWkrHIGrmIKOuXM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.171.89.0/24 Signature Algorithm: sha256WithRSAEncryption 52:0a:1d:fb:22:26:c2:2f:97:25:8b:79:85:49:75:a9:fd:7c: 23:72:2f:24:cd:45:40:cb:3a:11:4e:a3:e8:2a:72:21:35:a4: ac:84:77:d3:0d:e3:7c:94:b9:be:43:8d:5c:ac:b1:65:ef:9c: 77:4f:40:99:bd:a1:52:43:35:80:4b:57:a6:f7:8d:a1:22:d6: 11:5d:ac:64:9c:ac:83:47:52:d2:2b:a7:11:44:02:25:42:0a: f6:25:a5:0f:54:29:7d:96:ec:87:7a:f4:29:57:46:67:7d:e5: 9e:1f:ab:18:b3:74:d0:3c:7f:e8:79:8c:93:dc:4e:f6:b1:89: 61:b0:79:25:9b:7e:96:a6:a4:e3:f3:a3:ab:06:14:20:53:a9: c2:8f:d0:ad:91:5f:eb:db:fa:3b:e4:7c:42:37:d6:25:e1:de: ab:5c:cd:66:5d:59:ee:2d:54:d8:c3:eb:fa:8f:50:b7:ca:64: 4d:ab:53:b1:6c:20:7f:ec:33:e1:cf:bf:12:59:c2:58:84:27: a2:e5:9a:2d:80:01:75:05:ba:26:ce:2e:92:2a:e0:bb:c4:bd: ae:7c:ce:01:48:0f:2d:07:df:94:4e:fc:f0:74:a1:63:1c:12: 71:7e:99:33:69:e4:45:16:b9:34:5c:31:13:6d:32:64:51:6c: e4:b0:08:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrJMkyzHn3gPJvGhl6ewfE1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YjViMDJkYzQwMTY2NmVlMDQ1YWI5MGNjODg4MTdmZTA5 ZDcwNmEwHhcNMjUxMTI4MDY0MTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzAxN2NkM2Q5NmI5NDVmNTIwNTY5MmIxYzgxYWI5ODgyOGViOTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKkK9gESBlVni1C54CDiS8xCQ7wM wzV6ws6ecsZtlsDn5apN+EAiU0UHDJRtvSuTj+lbv9i7uh2sw7merHFfxOAuhJB7 j2l1XoJ1URaAbRmIEViejTmIzTvwasiHFLXy+605HlVC+Zx+9iU+eqMTRL1vMHqG 4sHmajKL0cNNXX7m/aK+KyfRxS2fv33sSmj5i7ACTraQK6HlJ9RcUZ4np/EmWY00 +hP/ubihDzF2FSzoh4RRVJDKKjOBGvc0EaQf2HQKd+uNXe9Z5FA3p05S/IC+wmE5 cZAKtyaG0ORarPLw441g2Jhtl0/il+hJRBKxhi4/P12Rd7oEAkkrPj1KIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOMBfNPZa5RfUgVpKxyBq5iCjrlzMB8GA1UdIwQY MBaAFGe1sC3EAWZu4EWrkMyIgX/gnXBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQt YjVkODg4YWRmZDM3LzEvNHdGODA5bHJsRjlTQldrckhJR3JtSUtPdVhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQtYjVkODg4YWRmZDM3 LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo6tZMA0G CSqGSIb3DQEBCwUAA4IBAQBSCh37IibCL5cli3mFSXWp/Xwjci8kzUVAyzoRTqPo KnIhNaSshHfTDeN8lLm+Q41crLFl75x3T0CZvaFSQzWAS1em942hItYRXaxknKyD R1LSK6cRRAIlQgr2JaUPVCl9luyHevQpV0ZnfeWeH6sYs3TQPH/oeYyT3E72sYlh sHklm36WpqTj86OrBhQgU6nCj9CtkV/r2/o75HxCN9Yl4d6rXM1mXVnuLVTYw+v6 j1C3ymRNq1OxbCB/7DPhz78SWcJYhCei5ZotgAF1Bbomzi6SKuC7xL2ufM4BSA8t B9+UTvzwdKFjHBJxfpkzaeRFFrk0XDETbTJkUWzksAjr -----END CERTIFICATE-----Generated at Sun Dec 7 03:27:00 2025 by rpki-client