This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sc5QDTcJ9WhnF1mT7xETMHDKfMk.roa File: sc5QDTcJ9WhnF1mT7xETMHDKfMk.roa (raw, json) Hash identifier: /2OsNIfC/p3pLmR0VSkS1CNfdYuGRjFUMnAa6ZI1mHs= Subject key identifier: B1:CE:50:0D:37:09:F5:68:67:17:59:93:EF:11:13:30:70:CA:7C:C9 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019A73BADF65BFEE199CF647F2C5487B5829 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sc5QDTcJ9WhnF1mT7xETMHDKfMk.roa Signing time: Tue 11 Nov 2025 16:23:37 +0000 ROA not before: Tue 11 Nov 2025 16:23:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47869 IP address blocks: 89.213.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:ba:df:65:bf:ee:19:9c:f6:47:f2:c5:48:7b:58:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 11 16:23:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b1ce500d3709f56867175993ef11133070ca7cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5f:91:41:7f:37:ba:09:13:78:be:73:ea:3f: 1a:d5:a4:f9:1a:00:bb:d4:59:b4:b9:c7:cc:9a:0b: a2:8e:ca:41:5a:19:50:7f:1e:02:dc:4a:7c:d3:20: a6:a4:5c:de:28:de:0a:de:1e:e5:09:b6:06:ec:f8: 3c:d2:cc:d3:11:aa:11:be:88:b4:85:dc:c5:44:89: 1a:4d:09:3b:04:bb:2f:f9:11:54:53:99:5f:af:c9: 8c:8b:b2:46:a4:46:53:02:c3:07:0f:36:46:dc:78: 9c:cf:14:cd:9e:6c:9a:00:16:ab:80:d4:50:75:7f: e1:6b:98:b8:ec:c1:0c:38:bd:8a:03:31:a0:26:09: a9:a1:91:92:46:c6:ed:03:56:dc:0d:27:86:e8:cc: 18:7c:e7:ce:ca:55:03:59:41:38:a8:79:0e:90:5b: 53:6d:05:91:0f:66:7e:c9:78:e3:93:39:1a:0f:ff: ff:f7:4a:21:68:5b:1e:aa:d8:19:ed:e0:70:80:2a: 64:fd:f7:bc:56:76:63:96:1c:da:8a:23:09:1c:55: be:52:ec:c6:52:13:f7:5c:b2:ba:37:23:b6:5f:2c: c8:6d:d0:f5:e3:7f:bb:78:58:73:d8:ae:a6:f0:51: 82:34:8d:f0:d4:97:72:18:5b:c4:40:6a:2e:52:6a: 11:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CE:50:0D:37:09:F5:68:67:17:59:93:EF:11:13:30:70:CA:7C:C9 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sc5QDTcJ9WhnF1mT7xETMHDKfMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.213.165.0/24 Signature Algorithm: sha256WithRSAEncryption ad:b7:ca:01:c7:22:80:94:62:ec:dd:a8:26:6b:56:49:21:53: e8:ad:d7:a5:47:2d:b9:90:0e:d5:61:25:63:7b:26:dc:ef:4c: 9b:1f:61:ef:a2:58:17:84:6b:42:ab:cc:0e:e3:a1:a6:c4:bb: ec:ff:5c:c6:45:d1:d9:d5:1b:2e:95:3b:83:a6:b8:d0:a7:5e: e0:ca:90:9a:a9:a5:ef:b2:69:4f:b3:56:11:5f:b0:0b:98:28: 9f:c8:12:44:5c:5d:c4:7d:7a:56:6d:41:c3:24:59:a0:65:5a: 5f:0c:73:ec:15:08:f9:ca:2b:c4:fe:0c:0e:56:0e:ed:d2:65: 7c:2f:8b:9d:75:e0:9a:be:8b:59:52:65:12:5e:b1:7c:b9:df: 8e:c1:8d:22:34:bd:0d:4e:53:98:2e:9c:8b:3d:ca:d7:76:56: 52:a3:e5:03:5a:ef:41:8a:eb:be:11:14:02:56:4b:1b:0d:75: 10:1e:93:a7:cd:d8:09:6f:54:56:85:6a:4e:cc:f4:10:66:6b: 15:ea:a3:47:ac:05:8d:5b:7d:3f:14:8c:94:60:09:29:2c:6b: 9f:14:f1:43:9b:de:66:21:d0:94:ef:5d:68:dd:e2:21:77:7b: 85:b9:59:9a:c0:ea:b8:4c:c1:a2:7c:57:43:96:c9:b2:e0:83: 33:04:84:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpzut9lv+4ZnPZH8sVIe1gpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTExMTYyMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWNlNTAwZDM3MDlmNTY4NjcxNzU5OTNlZjExMTMzMDcwY2E3Y2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV+RQX83ugkTeL5z6j8a1aT5GgC7 1Fm0ucfMmguijspBWhlQfx4C3Ep80yCmpFzeKN4K3h7lCbYG7Pg80szTEaoRvoi0 hdzFRIkaTQk7BLsv+RFUU5lfr8mMi7JGpEZTAsMHDzZG3HiczxTNnmyaABargNRQ dX/ha5i47MEMOL2KAzGgJgmpoZGSRsbtA1bcDSeG6MwYfOfOylUDWUE4qHkOkFtT bQWRD2Z+yXjjkzkaD///90ohaFseqtgZ7eBwgCpk/fe8VnZjlhzaiiMJHFW+UuzG UhP3XLK6NyO2XyzIbdD143+7eFhz2K6m8FGCNI3w1JdyGFvEQGouUmoR3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLHOUA03CfVoZxdZk+8REzBwynzJMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvc2M1UURUY0o5V2huRjFtVDd4RVRNSERLZk1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdWlMA0G CSqGSIb3DQEBCwUAA4IBAQCtt8oBxyKAlGLs3agma1ZJIVPordelRy25kA7VYSVj eybc70ybH2HvolgXhGtCq8wO46GmxLvs/1zGRdHZ1RsulTuDprjQp17gypCaqaXv smlPs1YRX7ALmCifyBJEXF3EfXpWbUHDJFmgZVpfDHPsFQj5yivE/gwOVg7t0mV8 L4uddeCavotZUmUSXrF8ud+OwY0iNL0NTlOYLpyLPcrXdlZSo+UDWu9Biuu+ERQC VksbDXUQHpOnzdgJb1RWhWpOzPQQZmsV6qNHrAWNW30/FIyUYAkpLGufFPFDm95m IdCU711o3eIhd3uFuVmawOq4TMGifFdDlsmy4IMzBISP -----END CERTIFICATE-----Generated at Sun Nov 23 12:07:16 2025 by rpki-client