This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/nFZSfFIQ603xgAiYBbu-nqbNVvw.roa File: nFZSfFIQ603xgAiYBbu-nqbNVvw.roa (raw, json) Hash identifier: yvvc/LWdA6Kjz8xlAWYVal7+gZa1oCy1Qt7THhkbxAU= Subject key identifier: 9C:56:52:7C:52:10:EB:4D:F1:80:08:98:05:BB:BE:9E:A6:CD:56:FC Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 019AA638DB97C7B64D97A859537A458965F4 Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/nFZSfFIQ603xgAiYBbu-nqbNVvw.roa Signing time: Fri 21 Nov 2025 11:42:15 +0000 ROA not before: Fri 21 Nov 2025 11:42:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6079 IP address blocks: 89.222.88.0/24 maxlen: 24 89.222.89.0/24 maxlen: 24 89.222.91.0/24 maxlen: 24 89.222.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 05:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:38:db:97:c7:b6:4d:97:a8:59:53:7a:45:89:65:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Nov 21 11:42:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9c56527c5210eb4df180089805bbbe9ea6cd56fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:15:92:3a:a4:94:ed:77:a5:44:34:8e:fd:2d: c8:c6:08:be:9c:a3:49:52:55:d6:04:1f:1e:d5:3a: e0:83:4b:09:dd:9e:25:14:22:94:94:8e:e4:38:cc: 60:14:7f:22:bf:15:21:bb:32:f5:cd:43:bf:3e:8a: 68:92:de:ad:eb:4b:b2:bc:9b:ec:2c:26:73:ec:06: ca:c6:94:d2:0c:74:aa:45:52:75:a7:8a:8a:b5:b1: c2:58:cf:b2:b3:81:88:d8:f8:28:51:b5:ad:37:6a: 88:42:8e:6d:d9:fd:1a:61:b5:a3:a3:56:8c:eb:b6: 1e:1b:ee:f1:da:10:9c:cb:84:81:3f:69:11:e5:99: 66:7c:7e:c6:ab:47:ad:a6:b5:68:b8:36:3e:33:52: 93:4f:c4:16:24:45:92:c2:fd:2a:41:68:25:7f:eb: 96:c3:f4:30:07:cc:9f:e1:9b:5b:63:35:55:bd:d3: 2f:d1:ed:9c:6b:ad:5f:e7:7a:6e:ae:70:64:09:72: dd:50:95:ce:a4:ee:18:9a:7a:6c:17:c2:41:46:25: d6:04:e6:a1:0b:50:d0:91:4a:57:4a:12:98:37:80: 15:69:d3:ee:6f:24:ae:0f:87:9d:10:2e:ec:67:70: b1:4e:ea:1e:ca:ca:7d:5f:46:86:c4:47:9f:34:5d: df:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:56:52:7C:52:10:EB:4D:F1:80:08:98:05:BB:BE:9E:A6:CD:56:FC X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/nFZSfFIQ603xgAiYBbu-nqbNVvw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.222.88.0/23 89.222.91.0/24 89.222.93.0/24 Signature Algorithm: sha256WithRSAEncryption ab:f2:65:24:24:84:49:77:c7:e4:1d:ea:f9:05:e0:8e:13:84: cb:67:70:4c:24:6f:79:24:e2:8d:0f:4d:59:c4:28:90:7a:46: 41:78:5b:d3:9d:51:e5:a7:e7:6d:f8:ce:c3:94:65:6f:77:a7: 1a:96:fc:6e:06:da:b8:8e:30:4d:38:ad:27:e7:7c:11:58:0c: fe:7d:f6:cf:b1:96:2d:30:cc:a2:66:45:e4:a1:3d:db:15:80: 0e:d6:13:1c:d9:96:0b:c5:de:b1:b0:d2:9d:1a:18:1f:d3:33: 1f:1e:7e:3f:50:89:3a:4a:84:f0:be:ed:7b:9b:98:b5:cd:9d: 23:d2:68:21:47:30:07:a3:a0:6e:b1:8e:bd:1a:80:31:9d:2f: b6:61:4e:dd:0c:98:ff:e9:8a:78:aa:24:4f:8d:bc:66:66:8d: 06:0f:7e:74:9d:f9:ab:9f:f7:99:7e:b3:6f:9a:ee:c6:0d:81: 5e:6a:35:79:b9:40:e8:e5:a6:86:4a:3b:2b:fe:ad:0b:fe:15: 20:b2:aa:8a:50:50:41:e7:83:9c:a2:71:d2:cd:1e:b9:3e:f0: 20:31:0c:2f:a5:65:84:42:a8:b9:93:4e:41:44:74:28:da:da: 92:c0:ee:27:9e:b0:17:5b:07:a8:6e:48:cf:72:e0:7c:eb:ce: cb:cf:d3:90 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqmONuXx7ZNl6hZU3pFiWX0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjUxMTIxMTE0MjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzU2NTI3YzUyMTBlYjRkZjE4MDA4OTgwNWJiYmU5ZWE2Y2Q1NmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBWSOqSU7XelRDSO/S3Ixgi+nKNJ UlXWBB8e1Trgg0sJ3Z4lFCKUlI7kOMxgFH8ivxUhuzL1zUO/Popokt6t60uyvJvs LCZz7AbKxpTSDHSqRVJ1p4qKtbHCWM+ys4GI2PgoUbWtN2qIQo5t2f0aYbWjo1aM 67YeG+7x2hCcy4SBP2kR5ZlmfH7Gq0etprVouDY+M1KTT8QWJEWSwv0qQWglf+uW w/QwB8yf4ZtbYzVVvdMv0e2ca61f53purnBkCXLdUJXOpO4YmnpsF8JBRiXWBOah C1DQkUpXShKYN4AVadPubySuD4edEC7sZ3CxTuoeysp9X0aGxEefNF3f+wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJxWUnxSEOtN8YAImAW7vp6mzVb8MB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvbkZaU2ZGSVE2MDN4Z0FpWUJidS1ucWJOVnZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBWd5YAwQA Wd5bAwQAWd5dMA0GCSqGSIb3DQEBCwUAA4IBAQCr8mUkJIRJd8fkHer5BeCOE4TL Z3BMJG95JOKND01ZxCiQekZBeFvTnVHlp+dt+M7DlGVvd6calvxuBtq4jjBNOK0n 53wRWAz+ffbPsZYtMMyiZkXkoT3bFYAO1hMc2ZYLxd6xsNKdGhgf0zMfHn4/UIk6 SoTwvu17m5i1zZ0j0mghRzAHo6BusY69GoAxnS+2YU7dDJj/6Yp4qiRPjbxmZo0G D350nfmrn/eZfrNvmu7GDYFeajV5uUDo5aaGSjsr/q0L/hUgsqqKUFBB54OconHS zR65PvAgMQwvpWWEQqi5k05BRHQo2tqSwO4nnrAXWweobkjPcuB8687Lz9OQ -----END CERTIFICATE-----Generated at Fri Dec 5 12:24:10 2025 by rpki-client