This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/RnQlmWewYcD_0IYUAev31XaR7bM.roa File: RnQlmWewYcD_0IYUAev31XaR7bM.roa (raw, json) Hash identifier: /LH5202pepZD0I2qOYltd4lGFUEFOBGQjgBfXeqrh7Y= Subject key identifier: 46:74:25:99:67:B0:61:C0:FF:D0:86:14:01:EB:F7:D5:76:91:ED:B3 Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7 Certificate serial: 019AB517F5DF2A330B9FFB115649F44A124F Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/RnQlmWewYcD_0IYUAev31XaR7bM.roa Signing time: Mon 24 Nov 2025 09:00:37 +0000 ROA not before: Mon 24 Nov 2025 09:00:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 46475 IP address blocks: 89.34.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:17:f5:df:2a:33:0b:9f:fb:11:56:49:f4:4a:12:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7 Validity Not Before: Nov 24 09:00:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4674259967b061c0ffd0861401ebf7d57691edb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:f5:77:50:41:ab:87:75:9a:5e:33:7b:21:d2: 1c:71:1f:89:2c:cb:4c:79:35:10:e6:40:8b:59:0b: c2:f2:a3:a3:bc:29:8e:36:3d:e5:3f:cb:95:d5:6e: b7:66:ac:cd:22:8b:5c:0b:cc:06:86:32:53:af:2f: 07:ce:9c:3a:71:34:25:ca:d3:ce:cc:fa:2a:a7:f1: 51:40:5e:40:d5:e2:4f:d7:20:01:57:87:11:03:14: 63:9f:cf:03:f2:1b:0c:5a:a9:ad:e2:1a:89:30:68: 0b:5b:cf:04:a8:98:26:86:57:ac:92:2c:59:3d:78: 22:5f:5d:5a:cf:4c:1b:dc:5e:05:71:c0:69:25:60: fc:0a:74:eb:a8:78:2a:a9:78:2a:e0:14:ba:4f:ab: e0:37:09:7d:d1:e1:26:4d:67:ef:f5:d0:c8:d0:11: 7a:45:3a:d0:4f:13:42:85:2c:a5:54:d2:1b:55:1d: 7c:60:d2:74:65:9a:75:4a:9e:ac:e9:ea:2e:2d:15: d8:6b:64:db:b3:57:e3:ea:41:7b:ee:19:91:f3:6f: 08:9c:67:cd:eb:e0:ae:70:06:a7:fa:4b:67:f4:f9: e2:9e:6a:b8:ad:28:96:ac:bc:51:28:fe:ad:b7:d7: 2a:5c:89:98:1c:37:2b:e7:d9:19:09:6e:56:e9:fb: 59:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:74:25:99:67:B0:61:C0:FF:D0:86:14:01:EB:F7:D5:76:91:ED:B3 X509v3 Authority Key Identifier: keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/RnQlmWewYcD_0IYUAev31XaR7bM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.64.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:de:33:68:9b:34:05:6b:de:93:37:45:5c:52:a7:97:01:66: 90:04:f1:f4:ec:8f:5c:a5:f7:17:e1:7d:05:de:3d:7a:94:b6: 90:a9:6a:cb:c0:bc:bb:4c:73:38:61:ec:f3:2e:fa:9a:6e:16: 3f:95:fd:f9:1f:60:b4:86:55:fd:ed:4f:e7:b3:cb:5d:aa:b6: 40:b3:19:d4:b8:26:ca:09:36:25:84:6b:d0:86:9a:4b:91:76: 23:a3:0a:43:25:78:a5:b0:d0:bf:91:1f:f3:09:58:f6:d7:04: 01:42:ba:5f:04:71:20:a0:3c:fa:45:8c:8b:8e:65:8d:5b:a2: ff:b2:59:9b:16:9b:68:7f:2c:cc:58:5d:d6:b9:1a:00:c5:b1: 71:e5:53:be:8c:65:7c:de:f7:c8:b7:9c:92:bc:d6:62:a6:8b: ae:20:cc:cd:64:9b:e3:ca:49:ec:71:9b:67:26:b8:e6:7b:db: 9e:9c:c6:b3:5a:4f:40:93:35:4a:b3:34:a1:6a:bb:4f:93:da: 62:77:73:15:8b:cb:0d:14:2b:a5:97:9d:41:cd:1d:53:02:47: 7c:d9:47:8e:ca:7a:c0:10:98:e3:9e:1d:38:41:3c:6d:76:63: f9:41:e9:a0:9a:7a:e0:99:77:8f:66:b5:fa:4e:60:f7:7b:31: 62:6f:9c:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq1F/XfKjMLn/sRVkn0ShJPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk OGIyZjcwHhcNMjUxMTI0MDkwMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Njc0MjU5OTY3YjA2MWMwZmZkMDg2MTQwMWViZjdkNTc2OTFlZGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/V3UEGrh3WaXjN7IdIccR+JLMtM eTUQ5kCLWQvC8qOjvCmONj3lP8uV1W63ZqzNIotcC8wGhjJTry8Hzpw6cTQlytPO zPoqp/FRQF5A1eJP1yABV4cRAxRjn88D8hsMWqmt4hqJMGgLW88EqJgmhleskixZ PXgiX11az0wb3F4FccBpJWD8CnTrqHgqqXgq4BS6T6vgNwl90eEmTWfv9dDI0BF6 RTrQTxNChSylVNIbVR18YNJ0ZZp1Sp6s6eouLRXYa2Tbs1fj6kF77hmR828InGfN 6+CucAan+ktn9Pninmq4rSiWrLxRKP6tt9cqXImYHDcr59kZCW5W6ftZpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEZ0JZlnsGHA/9CGFAHr99V2ke2zMB8GA1UdIwQY MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct YmJlYTI5MThlMTAyLzEvUm5RbG1XZXdZY0RfMElZVUFldjMxWGFSN2JNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSJAMA0G CSqGSIb3DQEBCwUAA4IBAQAs3jNomzQFa96TN0VcUqeXAWaQBPH07I9cpfcX4X0F 3j16lLaQqWrLwLy7THM4YezzLvqabhY/lf35H2C0hlX97U/ns8tdqrZAsxnUuCbK CTYlhGvQhppLkXYjowpDJXilsNC/kR/zCVj21wQBQrpfBHEgoDz6RYyLjmWNW6L/ slmbFptofyzMWF3WuRoAxbFx5VO+jGV83vfIt5ySvNZipouuIMzNZJvjyknscZtn Jrjme9uenMazWk9AkzVKszShartPk9pid3MVi8sNFCull51BzR1TAkd82UeOynrA EJjjnh04QTxtdmP5QemgmnrgmXePZrX6TmD3ezFib5zY -----END CERTIFICATE-----Generated at Sun Dec 7 05:31:02 2025 by rpki-client