This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/271I9HXEpI9osh7qXhGjVcI_iRI.roa File: 271I9HXEpI9osh7qXhGjVcI_iRI.roa (raw, json) Hash identifier: oSzcsVRpN9EyHR/70wR/fnzBZkGYOBAHnM4UVNH1TlA= Subject key identifier: DB:BD:48:F4:75:C4:A4:8F:68:B2:1E:EA:5E:11:A3:55:C2:3F:89:12 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B0C83EB01BF811AAC9EFD38DE873A3E39 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/271I9HXEpI9osh7qXhGjVcI_iRI.roa Signing time: Thu 11 Dec 2025 08:25:30 +0000 ROA not before: Thu 11 Dec 2025 08:25:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20473 IP address blocks: 89.213.128.0/24 maxlen: 24 89.213.169.0/24 maxlen: 24 89.213.176.0/24 maxlen: 24 213.210.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 08:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:83:eb:01:bf:81:1a:ac:9e:fd:38:de:87:3a:3e:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 11 08:25:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dbbd48f475c4a48f68b21eea5e11a355c23f8912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7e:a8:50:a0:f4:68:9b:8a:07:d4:3a:bc:85: 7e:76:37:4f:d3:c5:1d:0e:53:0f:54:f1:8f:6a:86: d6:97:39:8f:42:6a:6a:e1:46:e8:10:e9:35:a9:e4: 9f:71:cc:8b:91:5c:57:f5:8b:c8:c9:7a:f1:47:e4: 3c:68:d4:41:37:f6:41:7c:0d:3b:2b:d5:36:54:16: 74:b3:5f:ba:f5:00:77:21:35:21:59:8c:68:8a:84: 8b:07:f0:ae:24:70:96:db:6d:f8:0c:eb:5e:56:d2: 47:1f:eb:3f:e4:e8:32:84:59:d4:ce:95:c0:83:b9: 5c:94:53:e2:25:14:c4:b3:9f:ea:f1:69:8a:5e:f8: 77:17:f8:b3:59:b6:1e:89:f4:f6:93:b7:1d:be:0e: 94:b8:64:50:76:b7:ac:84:44:d8:54:3c:c4:90:cc: 8d:f8:dc:56:e5:6d:5f:1d:be:e8:85:a0:50:81:2f: 33:3e:16:ba:ed:af:94:cf:cd:9c:af:30:7a:56:e2: 2c:14:03:d6:a2:7e:01:04:fe:c3:13:01:6f:f2:03: 86:8b:3d:a3:73:c6:b3:0a:f7:9a:ad:ee:b5:5c:cd: 4b:d4:cf:01:07:2e:66:45:5a:4d:a2:f3:34:84:ce: ad:52:49:9b:af:53:69:30:3e:46:20:f2:93:39:5b: ca:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BD:48:F4:75:C4:A4:8F:68:B2:1E:EA:5E:11:A3:55:C2:3F:89:12 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/271I9HXEpI9osh7qXhGjVcI_iRI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.213.128.0/24 89.213.169.0/24 89.213.176.0/24 213.210.11.0/24 Signature Algorithm: sha256WithRSAEncryption a7:08:d0:9f:b6:4d:32:d0:86:62:af:21:49:fc:81:61:8d:e6: cd:bc:b7:5c:85:19:4f:c9:fa:24:e7:80:69:2d:8b:72:98:1d: b8:f4:96:7e:eb:6a:c6:4e:0a:f3:07:36:51:c6:42:43:63:74: 0f:fa:7d:f2:78:ec:71:0f:0f:39:af:fe:12:b2:12:5c:11:bf: ce:17:f2:b8:5f:e9:83:79:b6:1e:58:1f:e0:42:f5:22:37:d3: ad:18:6f:f3:e0:b0:47:9e:92:36:7c:b6:9a:c1:e0:3c:1f:1f: 6a:2e:0e:9f:e3:06:54:1b:7d:5f:99:b8:2a:b0:03:36:44:3f: d4:6d:b8:64:db:bd:c2:18:bd:9c:dd:27:2c:ce:d6:a9:0a:b7: 11:ce:11:57:7f:1d:d2:99:07:92:a3:84:c1:98:80:c6:d5:36: a1:6b:48:0e:ef:98:c9:0b:21:65:9d:d0:89:04:2b:58:6c:c4: 0c:11:7b:34:1a:36:02:ce:8d:f6:b6:89:ff:25:ab:ab:7f:5a: 7d:83:37:09:1f:4c:f9:95:bc:bc:e3:5f:35:3c:09:4f:19:40: 78:09:ae:a7:a7:ea:f8:93:e7:80:2e:bb:f6:3a:21:48:a7:0a: f3:ce:df:6b:f1:56:12:98:08:51:ae:ef:fc:68:60:ae:cc:ab: fd:e8:2b:4f -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZsMg+sBv4EarJ79ON6HOj45MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjExMDgyNTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmJkNDhmNDc1YzRhNDhmNjhiMjFlZWE1ZTExYTM1NWMyM2Y4OTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn6oUKD0aJuKB9Q6vIV+djdP08Ud DlMPVPGPaobWlzmPQmpq4UboEOk1qeSfccyLkVxX9YvIyXrxR+Q8aNRBN/ZBfA07 K9U2VBZ0s1+69QB3ITUhWYxoioSLB/CuJHCW2234DOteVtJHH+s/5OgyhFnUzpXA g7lclFPiJRTEs5/q8WmKXvh3F/izWbYeifT2k7cdvg6UuGRQdreshETYVDzEkMyN +NxW5W1fHb7ohaBQgS8zPha67a+Uz82crzB6VuIsFAPWon4BBP7DEwFv8gOGiz2j c8azCveare61XM1L1M8BBy5mRVpNovM0hM6tUkmbr1NpMD5GIPKTOVvKvQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFNu9SPR1xKSPaLIe6l4Ro1XCP4kSMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvMjcxSTlIWEVwSTlvc2g3cVhoR2pWY0lfaVJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWdWAAwQA WdWpAwQAWdWwAwQA1dILMA0GCSqGSIb3DQEBCwUAA4IBAQCnCNCftk0y0IZiryFJ /IFhjebNvLdchRlPyfok54BpLYtymB249JZ+62rGTgrzBzZRxkJDY3QP+n3yeOxx Dw85r/4SshJcEb/OF/K4X+mDebYeWB/gQvUiN9OtGG/z4LBHnpI2fLaaweA8Hx9q Lg6f4wZUG31fmbgqsAM2RD/Ubbhk273CGL2c3ScsztapCrcRzhFXfx3SmQeSo4TB mIDG1Taha0gO75jJCyFlndCJBCtYbMQMEXs0GjYCzo32ton/Jaurf1p9gzcJH0z5 lby84181PAlPGUB4Ca6np+r4k+eALrv2OiFIpwrzzt9r8VYSmAhRru/8aGCuzKv9 6CtP -----END CERTIFICATE-----Generated at Sat Dec 13 17:30:46 2025 by rpki-client