This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1PP1H4UotTthbUDcE1fKPhPlS2o.roa File: 1PP1H4UotTthbUDcE1fKPhPlS2o.roa (raw, json) Hash identifier: MrBnps613/R1ZDVQKxAV8CjPtPjr70O1alPBslzfcT8= Subject key identifier: D4:F3:F5:1F:85:28:B5:3B:61:6D:40:DC:13:57:CA:3E:13:E5:4B:6A Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019AB5447E7300D9E919B521C26C8543CFB3 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1PP1H4UotTthbUDcE1fKPhPlS2o.roa Signing time: Mon 24 Nov 2025 09:49:16 +0000 ROA not before: Mon 24 Nov 2025 09:49:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20473 IP address blocks: 89.213.128.0/24 maxlen: 24 89.213.169.0/24 maxlen: 24 89.213.176.0/24 maxlen: 24 213.130.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 20:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:44:7e:73:00:d9:e9:19:b5:21:c2:6c:85:43:cf:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 24 09:49:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d4f3f51f8528b53b616d40dc1357ca3e13e54b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:af:21:78:4b:3e:e5:72:7a:57:1e:41:13:1f: 08:03:b1:f8:17:b5:49:53:e9:52:c6:9a:45:4d:88: 58:da:20:65:7b:67:f2:84:e8:62:9d:35:6f:ff:8f: 22:4f:e1:f8:ba:25:4e:b9:fc:40:45:3c:02:eb:92: 7c:61:ea:dc:52:f3:94:82:59:22:aa:cc:b6:f6:c7: ad:45:91:8b:19:20:e8:68:88:f8:eb:b3:a8:5a:2e: 1f:db:68:42:bd:18:ce:87:a5:8f:af:ce:e1:d9:dc: 53:cd:a3:57:7a:ba:eb:4d:7c:39:80:1f:93:61:e5: c7:7e:ad:dd:40:ec:af:a9:6d:65:94:78:d0:15:b1: 29:c8:97:85:33:bf:9b:de:d0:ee:1d:58:8d:31:fc: c4:55:b2:df:ad:88:37:e0:c2:18:ee:e1:7a:84:86: 7b:1b:be:7f:68:6b:e2:1a:2a:85:0f:06:17:2f:94: ff:24:b2:62:d7:b1:e7:b8:c0:a7:c2:76:30:66:7d: 82:de:4c:5a:5e:80:d1:8e:e6:cd:bb:12:20:6e:38: 1d:ab:98:32:cd:87:9b:a8:ec:75:51:e0:0c:46:63: b3:02:e7:f2:0b:88:1c:6e:5e:1e:e7:91:2b:9f:ab: 25:ba:71:b7:da:73:7c:33:f0:db:ad:c3:14:37:17: 01:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F3:F5:1F:85:28:B5:3B:61:6D:40:DC:13:57:CA:3E:13:E5:4B:6A X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/1PP1H4UotTthbUDcE1fKPhPlS2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.213.128.0/24 89.213.169.0/24 89.213.176.0/24 213.130.156.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:32:fd:a2:d6:7d:e6:e9:9a:3e:a8:2d:a1:0d:3e:ac:39:66: 15:02:52:6a:a6:ce:ee:c1:1f:66:cc:8d:08:2e:98:c8:b0:e3: 58:0b:04:73:99:d3:2f:22:ae:24:05:da:1e:cf:66:61:c2:2d: 10:de:d9:5a:f6:29:49:d2:f4:c9:67:76:68:a6:1e:d6:28:55: f9:fb:65:50:39:8d:26:25:1f:5a:3b:29:f9:60:15:38:9b:0f: b2:51:ae:ea:8c:90:75:c3:c0:62:9e:66:c9:49:f4:6f:73:29: be:c7:53:66:7b:be:35:c2:3e:39:ee:6c:9f:fe:1c:32:b6:29: d9:7b:28:27:46:86:6d:28:fd:c2:69:a4:5a:05:44:2f:82:02: 52:8b:16:62:4a:08:7e:ce:09:d9:62:42:23:fd:6a:d5:68:e9: 80:f7:f9:4b:b6:58:ac:5c:b5:ad:df:c5:99:e6:49:9a:6a:96: 08:47:fa:d9:87:7a:1c:b5:97:3d:ed:14:88:c5:5e:12:7c:7a: 54:2c:06:5b:4d:ce:31:2a:f1:5a:4c:81:9c:ad:4f:99:38:68: ec:d6:e2:06:31:65:90:76:b4:0c:52:f0:0b:e1:2a:5d:39:2d: c7:71:92:19:a9:a2:cd:ab:c1:85:8a:b0:90:f6:c3:d5:ac:65: a1:0b:49:da -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZq1RH5zANnpGbUhwmyFQ8+zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTI0MDk0OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGYzZjUxZjg1MjhiNTNiNjE2ZDQwZGMxMzU3Y2EzZTEzZTU0YjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna8heEs+5XJ6Vx5BEx8IA7H4F7VJ U+lSxppFTYhY2iBle2fyhOhinTVv/48iT+H4uiVOufxARTwC65J8YercUvOUglki qsy29setRZGLGSDoaIj467OoWi4f22hCvRjOh6WPr87h2dxTzaNXerrrTXw5gB+T YeXHfq3dQOyvqW1llHjQFbEpyJeFM7+b3tDuHViNMfzEVbLfrYg34MIY7uF6hIZ7 G75/aGviGiqFDwYXL5T/JLJi17HnuMCnwnYwZn2C3kxaXoDRjubNuxIgbjgdq5gy zYebqOx1UeAMRmOzAufyC4gcbl4e55Ern6slunG32nN8M/DbrcMUNxcBeQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFNTz9R+FKLU7YW1A3BNXyj4T5UtqMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvMVBQMUg0VW90VHRoYlVEY0UxZktQaFBsUzJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWdWAAwQA WdWpAwQAWdWwAwQA1YKcMA0GCSqGSIb3DQEBCwUAA4IBAQANMv2i1n3m6Zo+qC2h DT6sOWYVAlJqps7uwR9mzI0ILpjIsONYCwRzmdMvIq4kBdoez2Zhwi0Q3tla9ilJ 0vTJZ3Zoph7WKFX5+2VQOY0mJR9aOyn5YBU4mw+yUa7qjJB1w8BinmbJSfRvcym+ x1Nme741wj457myf/hwytinZeygnRoZtKP3CaaRaBUQvggJSixZiSgh+zgnZYkIj /WrVaOmA9/lLtlisXLWt38WZ5kmaapYIR/rZh3octZc97RSIxV4SfHpULAZbTc4x KvFaTIGcrU+ZOGjs1uIGMWWQdrQMUvAL4SpdOS3HcZIZqaLNq8GFirCQ9sPVrGWh C0na -----END CERTIFICATE-----Generated at Fri Nov 28 05:00:24 2025 by rpki-client