This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/f4Bkvdp4Y_rHjEatFaNEHKRAKdY.roa File: f4Bkvdp4Y_rHjEatFaNEHKRAKdY.roa (raw, json) Hash identifier: NFJifgqrZ1RY+8CjactL/09A4hMhKIMcBWcyEFNh/+Y= Subject key identifier: 7F:80:64:BD:DA:78:63:FA:C7:8C:46:AD:15:A3:44:1C:A4:40:29:D6 Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019A64D95BDE20750E2CA7BF2DCFA9533967 Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/f4Bkvdp4Y_rHjEatFaNEHKRAKdY.roa Signing time: Sat 08 Nov 2025 19:02:37 +0000 ROA not before: Sat 08 Nov 2025 19:02:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 398465 IP address blocks: 89.47.100.0/24 maxlen: 24 89.47.114.0/24 maxlen: 24 93.114.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 21:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:64:d9:5b:de:20:75:0e:2c:a7:bf:2d:cf:a9:53:39:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Nov 8 19:02:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7f8064bdda7863fac78c46ad15a3441ca44029d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6c:44:8c:91:9d:30:09:75:5f:50:e8:7f:72: e0:1a:6d:7e:97:64:e2:8e:ac:17:df:22:83:06:9d: db:1c:b2:ef:77:2c:62:bb:f2:03:4c:e3:14:3f:8b: 54:e0:70:92:7b:09:9e:80:5f:a4:8a:a3:7f:2d:aa: 1b:f1:6b:97:73:a6:d0:e3:53:ea:37:5e:82:a6:7b: ed:b9:ad:00:24:87:ea:76:7d:22:0c:01:b2:39:23: 2d:f7:60:d6:13:5f:cd:de:5c:c5:12:52:c5:fa:07: 05:50:27:30:31:f8:1a:3e:78:1b:7a:e5:94:f9:3a: 31:ee:3e:fb:11:33:f1:f4:bf:58:13:8a:50:95:ef: b7:de:bb:36:81:8b:1f:e2:3f:36:95:58:79:f7:1b: 81:79:3f:11:be:dc:c3:25:bc:1f:1d:8c:e5:4f:d4: bf:84:ca:68:f9:69:9b:ae:12:09:89:33:d3:fc:05: 33:f9:4b:51:7f:a2:96:79:33:14:3d:40:f8:c5:bd: 3f:a0:22:cc:61:c6:b4:72:c3:3e:7f:7a:24:2d:2c: 9b:db:04:08:23:e7:f6:af:da:81:a0:10:4d:19:45: 38:3a:4c:c6:ec:84:b9:12:41:70:2c:d4:7f:e4:a5: ea:38:b0:41:34:17:27:ec:6f:c9:a5:12:28:f8:7c: 88:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:80:64:BD:DA:78:63:FA:C7:8C:46:AD:15:A3:44:1C:A4:40:29:D6 X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/f4Bkvdp4Y_rHjEatFaNEHKRAKdY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.47.100.0/24 89.47.114.0/24 93.114.73.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:6a:82:3c:4c:fa:54:37:d8:06:37:00:f4:82:d8:92:f8:da: c2:b7:08:ce:14:7f:4f:fa:90:45:b0:bb:b9:a7:68:f6:f3:fa: ff:dc:74:ba:48:26:25:32:7d:d7:08:9b:5e:4a:25:79:4b:48: af:1c:ad:c5:8f:29:b2:d3:74:4e:46:23:46:08:c2:d8:ef:78: e8:2b:3b:1c:be:60:a6:97:b8:5e:18:ab:9a:ae:73:57:21:f1: 8c:2b:84:69:f9:03:6b:20:ed:f9:7e:8c:e0:7d:5c:5a:1e:ee: a4:1c:17:d9:f3:59:5e:48:a5:25:c4:18:8b:5a:55:6f:d2:a6: 1a:39:7c:ad:ce:5b:a0:e9:7f:5d:ee:f0:4e:b3:c3:df:94:7b: 3a:97:49:cd:c0:8f:4f:e1:45:8c:22:41:f2:2d:4b:7e:92:8a: a0:0a:89:20:43:6e:f7:68:eb:e2:d3:4b:c8:82:c4:a5:ac:a0: 0e:c6:7e:08:1f:a3:c4:97:12:2d:04:b6:2a:3d:f2:d5:bd:d3: 94:73:7f:4c:3b:22:0a:2e:01:4c:d7:70:04:d5:1e:6a:23:f0: ee:18:7c:43:bc:45:e0:db:e4:6c:69:05:64:da:7e:bd:ed:d3: c3:3e:b8:23:7e:d0:9a:ff:30:cb:86:87:ea:3a:15:bc:e9:d5: ef:6b:b5:46 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZpk2VveIHUOLKe/Lc+pUzlnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjUxMTA4MTkwMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjgwNjRiZGRhNzg2M2ZhYzc4YzQ2YWQxNWEzNDQxY2E0NDAyOWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GxEjJGdMAl1X1Dof3LgGm1+l2Ti jqwX3yKDBp3bHLLvdyxiu/IDTOMUP4tU4HCSewmegF+kiqN/Laob8WuXc6bQ41Pq N16Cpnvtua0AJIfqdn0iDAGyOSMt92DWE1/N3lzFElLF+gcFUCcwMfgaPngbeuWU +Tox7j77ETPx9L9YE4pQle+33rs2gYsf4j82lVh59xuBeT8RvtzDJbwfHYzlT9S/ hMpo+WmbrhIJiTPT/AUz+UtRf6KWeTMUPUD4xb0/oCLMYca0csM+f3okLSyb2wQI I+f2r9qBoBBNGUU4OkzG7IS5EkFwLNR/5KXqOLBBNBcn7G/JpRIo+HyIpQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFH+AZL3aeGP6x4xGrRWjRBykQCnWMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvZjRCa3ZkcDRZX3JIakVhdEZhTkVIS1JBS2RZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWS9kAwQA WS9yAwQAXXJJMA0GCSqGSIb3DQEBCwUAA4IBAQA/aoI8TPpUN9gGNwD0gtiS+NrC twjOFH9P+pBFsLu5p2j28/r/3HS6SCYlMn3XCJteSiV5S0ivHK3Fjymy03RORiNG CMLY73joKzscvmCml7heGKuarnNXIfGMK4Rp+QNrIO35fozgfVxaHu6kHBfZ81le SKUlxBiLWlVv0qYaOXytzlug6X9d7vBOs8PflHs6l0nNwI9P4UWMIkHyLUt+koqg CokgQ273aOvi00vIgsSlrKAOxn4IH6PElxItBLYqPfLVvdOUc39MOyIKLgFM13AE 1R5qI/DuGHxDvEXg2+RsaQVk2n697dPDPrgjftCa/zDLhofqOhW86dXva7VG -----END CERTIFICATE-----Generated at Sun Nov 23 05:21:07 2025 by rpki-client