This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aF68_929Fue7KTKu0_K82M4OIOs.roa File: aF68_929Fue7KTKu0_K82M4OIOs.roa (raw, json) Hash identifier: BKXp1xCuf21lnt2q8P6iHiFxUicxyS73HomkCqViZTY= Subject key identifier: 68:5E:BC:FF:DD:BD:16:E7:BB:29:32:AE:D3:F2:BC:D8:CE:0E:20:EB Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019A81A242E5B188F3FAE6BB1A835FDD1224 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aF68_929Fue7KTKu0_K82M4OIOs.roa Signing time: Fri 14 Nov 2025 09:11:26 +0000 ROA not before: Fri 14 Nov 2025 09:11:26 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 32132 IP address blocks: 89.213.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:a2:42:e5:b1:88:f3:fa:e6:bb:1a:83:5f:dd:12:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 14 09:11:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=685ebcffddbd16e7bb2932aed3f2bcd8ce0e20eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0e:7c:e5:15:b6:dc:96:8b:bb:14:4a:94:b1: 0d:b2:dd:74:6d:9b:ed:ac:46:02:2c:eb:56:69:18: fe:2b:04:3b:a1:6b:34:95:5c:ee:4b:0f:c8:95:a9: 52:13:31:06:68:60:55:22:46:00:14:58:99:7e:f9: d9:aa:e7:96:da:13:b5:81:5a:61:d7:c0:11:b2:3f: ee:e4:e3:14:a9:61:4f:7c:5c:87:3d:79:48:02:22: 4c:5d:d1:63:b6:63:e1:77:e2:8d:b8:36:ac:f3:c0: ed:ed:07:c4:6c:19:81:c0:de:41:19:ee:09:ea:68: 7b:78:b8:dc:a2:49:d2:a6:a0:4b:b2:07:8c:ae:ad: a4:d2:71:e1:48:22:0d:62:77:b2:a0:83:2d:9e:b7: 8c:59:1a:ae:17:c1:f7:00:f1:7a:ae:d0:7f:d6:d4: e5:37:c0:97:ae:47:de:97:54:ff:64:c4:2e:73:d8: d1:10:0d:c0:c4:56:06:f6:e3:27:6e:cc:47:9a:86: 8b:2c:84:43:63:76:9b:fc:7f:44:9b:b0:fd:64:f3: 52:d0:c0:a5:33:41:2d:11:ed:8c:f5:00:94:8c:a6: 53:5f:7a:10:8a:d0:e3:87:5a:a2:6c:5d:95:23:ec: 12:05:2d:e6:20:aa:38:a5:41:23:4a:01:8d:ba:56: c8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5E:BC:FF:DD:BD:16:E7:BB:29:32:AE:D3:F2:BC:D8:CE:0E:20:EB X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aF68_929Fue7KTKu0_K82M4OIOs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.213.171.0/24 Signature Algorithm: sha256WithRSAEncryption 69:64:ac:f9:f2:f7:2d:eb:14:4f:9d:7e:4c:18:7d:a2:66:6d: c1:87:5c:e9:a5:48:89:64:25:86:f0:27:44:a0:9a:73:f6:1d: 5a:3c:a8:c3:0d:eb:ec:0b:48:66:2f:ca:dc:c7:70:3e:52:0f: 6b:5f:1d:c8:21:94:6d:14:2a:5e:64:c0:4f:62:1d:2d:92:75: 52:90:7c:3d:81:95:89:92:76:c4:81:f9:4d:06:75:5d:b4:7b: 43:36:dc:8a:33:e7:09:83:b8:7e:10:2f:ab:25:c2:72:3b:97: 1a:a3:4d:19:6f:0a:ae:e3:8d:a5:0a:36:92:ca:59:71:2a:d4: f1:b4:ae:4c:bd:2d:e2:b9:5d:71:17:3e:9a:b0:cc:1e:73:32: 97:b6:e2:18:e9:79:4b:b5:e1:0a:55:27:48:ab:a1:3b:5b:c8: b4:e1:7d:c8:88:e0:88:c8:81:14:08:74:e7:05:40:73:a6:61: 20:01:69:68:44:9e:d7:71:4e:e5:61:8e:b3:89:7e:c0:a0:72: 03:15:6d:33:fc:c7:71:47:6d:c9:13:e3:9e:c1:09:54:dd:96: 52:5d:2e:b9:77:e9:e7:6c:2d:aa:f0:64:94:ad:bc:8c:8d:47: 5c:b5:8c:47:2a:3c:0f:2a:f5:71:2b:2b:29:67:5d:92:08:df: bf:12:33:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqBokLlsYjz+ua7GoNf3RIkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTE0MDkxMTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODVlYmNmZmRkYmQxNmU3YmIyOTMyYWVkM2YyYmNkOGNlMGUyMGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ585RW23JaLuxRKlLENst10bZvt rEYCLOtWaRj+KwQ7oWs0lVzuSw/IlalSEzEGaGBVIkYAFFiZfvnZqueW2hO1gVph 18ARsj/u5OMUqWFPfFyHPXlIAiJMXdFjtmPhd+KNuDas88Dt7QfEbBmBwN5BGe4J 6mh7eLjcoknSpqBLsgeMrq2k0nHhSCINYneyoIMtnreMWRquF8H3APF6rtB/1tTl N8CXrkfel1T/ZMQuc9jREA3AxFYG9uMnbsxHmoaLLIRDY3ab/H9Em7D9ZPNS0MCl M0EtEe2M9QCUjKZTX3oQitDjh1qibF2VI+wSBS3mIKo4pUEjSgGNulbINwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGhevP/dvRbnuykyrtPyvNjODiDrMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvYUY2OF85MjlGdWU3S1RLdTBfSzgyTTRPSU9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdWrMA0G CSqGSIb3DQEBCwUAA4IBAQBpZKz58vct6xRPnX5MGH2iZm3Bh1zppUiJZCWG8CdE oJpz9h1aPKjDDevsC0hmL8rcx3A+Ug9rXx3IIZRtFCpeZMBPYh0tknVSkHw9gZWJ knbEgflNBnVdtHtDNtyKM+cJg7h+EC+rJcJyO5cao00Zbwqu442lCjaSyllxKtTx tK5MvS3iuV1xFz6asMweczKXtuIY6XlLteEKVSdIq6E7W8i04X3IiOCIyIEUCHTn BUBzpmEgAWloRJ7XcU7lYY6ziX7AoHIDFW0z/MdxR23JE+OewQlU3ZZSXS65d+nn bC2q8GSUrbyMjUdctYxHKjwPKvVxKyspZ12SCN+/EjP9 -----END CERTIFICATE-----Generated at Sun Nov 23 12:07:09 2025 by rpki-client