This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TTEoWdSUJlLwABtdS05QII9U0ko.roa File: TTEoWdSUJlLwABtdS05QII9U0ko.roa (raw, json) Hash identifier: PzxrhHPzllVD96a1wJ1ZwKkZ6yMrnvgTH//Jigk4cAw= Subject key identifier: 4D:31:28:59:D4:94:26:52:F0:00:1B:5D:4B:4E:50:20:8F:54:D2:4A Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019A6D4DD6D1F87266FE4128B4C161157E36 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TTEoWdSUJlLwABtdS05QII9U0ko.roa Signing time: Mon 10 Nov 2025 10:26:49 +0000 ROA not before: Mon 10 Nov 2025 10:26:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50917 IP address blocks: 212.38.89.0/24 maxlen: 24 213.218.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6d:4d:d6:d1:f8:72:66:fe:41:28:b4:c1:61:15:7e:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 10 10:26:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4d312859d4942652f0001b5d4b4e50208f54d24a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:24:5d:81:7c:73:25:b8:5b:24:fa:2a:b4:c0: 80:ba:ff:eb:9b:61:e8:96:6e:1b:6d:71:0a:e6:3d: ee:bd:1b:3f:92:55:09:df:09:83:ca:82:ea:22:e3: 61:02:86:b6:14:d0:45:a2:cb:f6:11:ad:6e:97:c6: d8:15:76:3f:2a:68:49:76:1f:fd:a5:0c:f6:26:57: 26:cd:32:62:57:99:e9:6b:c3:5e:db:0e:b5:74:1a: f6:ce:67:97:92:77:81:b3:36:12:e7:95:0b:29:50: 95:7e:91:47:b8:0b:89:56:b5:d8:c2:47:69:f6:82: 36:9e:2e:70:e9:28:60:e8:73:f1:9e:6a:cb:fb:a3: 8d:6d:91:b7:cf:85:af:38:8e:c7:bc:54:23:f8:11: 68:8d:bb:f0:14:1e:be:ec:e5:b1:c3:9e:bc:5d:bd: ad:e1:ba:3f:8d:b4:6e:d4:03:9d:fc:b3:90:a6:f5: a5:b4:07:2d:c2:61:70:c9:c1:3c:d5:86:30:9e:80: 9d:eb:2d:0e:2a:e9:d1:de:f9:65:2c:9e:c1:aa:0d: 58:38:2e:d2:a6:24:19:e5:1a:6b:3e:4f:bb:9d:d9: 9c:3d:17:d2:82:c3:58:33:36:19:a2:68:22:13:b0: 2e:28:72:89:12:fa:d0:b4:f7:a9:c8:de:0e:61:09: a8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:31:28:59:D4:94:26:52:F0:00:1B:5D:4B:4E:50:20:8F:54:D2:4A X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TTEoWdSUJlLwABtdS05QII9U0ko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.38.89.0/24 213.218.209.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:b2:94:a9:55:53:f5:43:66:b1:90:a0:09:4f:75:f3:9e:de: 7d:ed:8d:6d:89:e4:d9:0a:16:a9:81:13:9f:63:8e:e5:b9:ec: 2c:1b:75:df:d2:d1:43:28:1a:9e:30:50:df:52:9d:5f:df:69: a5:0f:21:cd:47:95:1b:ab:5e:8a:10:b3:c3:2a:60:3b:53:cf: 75:eb:5e:4b:5d:ea:6a:bd:49:4c:00:37:2d:76:3f:e6:ae:1d: 55:7c:88:f5:82:96:75:c2:bc:19:9b:a2:eb:0d:2c:58:7c:c6: 00:4a:eb:77:50:43:c6:31:fd:de:e9:12:f3:1e:51:90:81:ed: 21:95:b6:44:ac:d1:d8:06:67:eb:6f:25:86:d4:f2:40:74:4b: 17:02:1c:d8:a2:11:82:e6:6c:77:01:eb:b2:e7:13:a6:0b:65: df:98:0e:83:07:87:ec:db:8a:40:a6:a7:0c:36:cd:62:01:b8: 50:b3:aa:0a:a7:0c:e3:02:76:12:92:47:ff:92:4a:43:36:b9: 4b:87:98:d2:61:ac:0a:cf:4f:57:91:46:7f:a1:e6:0e:e0:74: 48:4f:b3:92:f8:c0:61:79:16:c9:c1:f1:e5:69:5d:a4:0d:5c: 0b:23:b0:0e:50:b1:4d:2c:92:ab:bc:0c:76:08:5e:b8:30:0f: 20:4d:38:53 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZptTdbR+HJm/kEotMFhFX42MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTEwMTAyNjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDMxMjg1OWQ0OTQyNjUyZjAwMDFiNWQ0YjRlNTAyMDhmNTRkMjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCRdgXxzJbhbJPoqtMCAuv/rm2Ho lm4bbXEK5j3uvRs/klUJ3wmDyoLqIuNhAoa2FNBFosv2Ea1ul8bYFXY/KmhJdh/9 pQz2JlcmzTJiV5npa8Ne2w61dBr2zmeXkneBszYS55ULKVCVfpFHuAuJVrXYwkdp 9oI2ni5w6Shg6HPxnmrL+6ONbZG3z4WvOI7HvFQj+BFojbvwFB6+7OWxw568Xb2t 4bo/jbRu1AOd/LOQpvWltActwmFwycE81YYwnoCd6y0OKunR3vllLJ7Bqg1YOC7S piQZ5RprPk+7ndmcPRfSgsNYMzYZomgiE7AuKHKJEvrQtPepyN4OYQmotQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE0xKFnUlCZS8AAbXUtOUCCPVNJKMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvVFRFb1dkU1VKbEx3QUJ0ZFMwNVFJSTlVMGtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1CZZAwQA 1drRMA0GCSqGSIb3DQEBCwUAA4IBAQCKspSpVVP1Q2axkKAJT3Xznt597Y1tieTZ ChapgROfY47luewsG3Xf0tFDKBqeMFDfUp1f32mlDyHNR5Ubq16KELPDKmA7U891 615LXepqvUlMADctdj/mrh1VfIj1gpZ1wrwZm6LrDSxYfMYASut3UEPGMf3e6RLz HlGQge0hlbZErNHYBmfrbyWG1PJAdEsXAhzYohGC5mx3Aeuy5xOmC2XfmA6DB4fs 24pApqcMNs1iAbhQs6oKpwzjAnYSkkf/kkpDNrlLh5jSYawKz09XkUZ/oeYO4HRI T7OS+MBheRbJwfHlaV2kDVwLI7AOULFNLJKrvAx2CF64MA8gTThT -----END CERTIFICATE-----Generated at Sun Nov 23 12:07:17 2025 by rpki-client