This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YsEOIaevonNGB7COcqniEIWn2iI.roa File: YsEOIaevonNGB7COcqniEIWn2iI.roa (raw, json) Hash identifier: f+cvNjTLbhWljKY5IuPIkEAKuO92bEE7Flb1vgsktTA= Subject key identifier: 62:C1:0E:21:A7:AF:A2:73:46:07:B0:8E:72:A9:E2:10:85:A7:DA:22 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019AC4B12C76D63E89D70E95450B3F5F4C46 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YsEOIaevonNGB7COcqniEIWn2iI.roa Signing time: Thu 27 Nov 2025 09:42:16 +0000 ROA not before: Thu 27 Nov 2025 09:42:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213690 IP address blocks: 89.213.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c4:b1:2c:76:d6:3e:89:d7:0e:95:45:0b:3f:5f:4c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 27 09:42:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=62c10e21a7afa2734607b08e72a9e21085a7da22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b5:3e:05:73:ae:4b:eb:a8:61:92:a1:58:f9: f7:6c:fb:1a:7e:fe:cf:7e:38:d1:10:28:e7:bb:23: 30:b8:33:aa:80:d8:a6:3c:f4:6d:01:cc:d2:9c:c7: 0e:46:05:5f:61:f2:87:27:b9:83:4b:5e:02:dc:1f: 4d:8c:51:3a:8a:03:6e:7f:a6:72:1c:58:80:8a:32: 35:98:3c:7d:3b:bf:6b:e7:a8:7d:d4:e5:23:38:fc: b7:c9:97:25:f9:2c:5d:6d:af:4b:b4:a9:7a:33:5f: 94:05:63:9d:47:32:1c:3e:a5:4c:5f:76:54:f9:42: 85:55:49:c5:d0:0a:08:37:22:be:aa:d0:35:6f:63: 00:32:b6:11:fd:b1:9f:b6:42:78:1b:31:30:b3:c4: ba:44:8a:77:f0:26:6f:dd:bb:1b:3d:30:81:3c:d1: d3:ec:6d:f1:34:b8:1a:66:44:bf:0d:a7:86:41:0b: 92:1e:6e:5e:8b:a1:81:8f:d4:46:df:32:57:6f:78: be:88:23:b0:72:28:29:76:52:ca:de:2c:00:7c:f7: d5:97:d3:dd:15:b1:68:8b:b7:f8:0c:b2:5b:62:1d: c3:6f:57:9e:28:4e:d5:d0:ec:9f:c3:21:20:2c:9a: 6b:cb:e3:7d:50:b2:e4:bd:08:49:cc:40:07:47:dc: 96:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C1:0E:21:A7:AF:A2:73:46:07:B0:8E:72:A9:E2:10:85:A7:DA:22 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YsEOIaevonNGB7COcqniEIWn2iI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.213.134.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:41:89:fd:2e:c2:fb:74:c0:a4:c8:44:83:22:10:5d:7e:5b: ab:04:21:04:db:15:ac:5b:5f:6f:e5:be:8f:7a:8e:14:24:bb: 57:97:4f:2c:ec:89:0f:03:a4:f4:39:06:a1:84:b9:66:35:3d: 02:96:8e:bf:04:0b:98:27:c5:a4:b8:38:bd:45:4a:a4:e4:77: 53:5a:57:10:1a:b8:75:e5:d2:e3:03:b2:ec:92:e9:f3:59:03: 0b:bb:95:e9:29:6e:ee:a0:cb:9e:37:9e:dd:52:6c:0f:be:65: 98:3e:0f:ee:fa:cf:fc:6e:dc:72:79:72:71:96:97:cc:e8:b8: e7:1a:3d:29:ab:63:d5:45:06:97:00:5e:6e:26:23:ea:22:f8: 7d:19:a0:cf:7f:24:44:38:ac:5f:67:eb:35:7b:06:e2:3b:06: e0:7e:91:39:6e:0f:af:4c:6d:86:40:b3:13:42:0f:bb:e8:ad: 9a:9c:bb:21:03:30:9e:48:cb:e0:49:db:eb:eb:e2:52:ca:08: 39:3f:4d:c2:dd:19:f5:c0:c5:f3:15:77:bc:96:d2:ce:41:82: 75:dd:c8:27:ac:bf:ce:05:f2:be:47:cc:4a:dc:a1:71:3b:4d: a7:42:9e:63:a7:3d:b9:36:e9:6b:fa:36:91:42:43:df:d0:f5: f0:95:04:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrEsSx21j6J1w6VRQs/X0xGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTI3MDk0MjE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmMxMGUyMWE3YWZhMjczNDYwN2IwOGU3MmE5ZTIxMDg1YTdkYTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurU+BXOuS+uoYZKhWPn3bPsafv7P fjjRECjnuyMwuDOqgNimPPRtAczSnMcORgVfYfKHJ7mDS14C3B9NjFE6igNuf6Zy HFiAijI1mDx9O79r56h91OUjOPy3yZcl+Sxdba9LtKl6M1+UBWOdRzIcPqVMX3ZU +UKFVUnF0AoINyK+qtA1b2MAMrYR/bGftkJ4GzEws8S6RIp38CZv3bsbPTCBPNHT 7G3xNLgaZkS/DaeGQQuSHm5ei6GBj9RG3zJXb3i+iCOwcigpdlLK3iwAfPfVl9Pd FbFoi7f4DLJbYh3Db1eeKE7V0OyfwyEgLJpry+N9ULLkvQhJzEAHR9yWdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGLBDiGnr6JzRgewjnKp4hCFp9oiMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvWXNFT0lhZXZvbk5HQjdDT2NxbmlFSVduMmlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdWGMA0G CSqGSIb3DQEBCwUAA4IBAQAOQYn9LsL7dMCkyESDIhBdflurBCEE2xWsW19v5b6P eo4UJLtXl08s7IkPA6T0OQahhLlmNT0Clo6/BAuYJ8WkuDi9RUqk5HdTWlcQGrh1 5dLjA7LskunzWQMLu5XpKW7uoMueN57dUmwPvmWYPg/u+s/8btxyeXJxlpfM6Ljn Gj0pq2PVRQaXAF5uJiPqIvh9GaDPfyREOKxfZ+s1ewbiOwbgfpE5bg+vTG2GQLMT Qg+76K2anLshAzCeSMvgSdvr6+JSygg5P03C3Rn1wMXzFXe8ltLOQYJ13cgnrL/O BfK+R8xK3KFxO02nQp5jpz25Nulr+jaRQkPf0PXwlQTv -----END CERTIFICATE-----Generated at Fri Dec 5 22:10:43 2025 by rpki-client