This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/gveP3mxM2ACP_iFVRLA-CrlgPjQ.roa File: gveP3mxM2ACP_iFVRLA-CrlgPjQ.roa (raw, json) Hash identifier: hTGtTAzk5HzGdU7s0ZfRSArDFvxmmLW9vt3X6lnb8E0= Subject key identifier: 82:F7:8F:DE:6C:4C:D8:00:8F:FE:21:55:44:B0:3E:0A:B9:60:3E:34 Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019ABB3C800B314748D68EF2026563FE367A Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/gveP3mxM2ACP_iFVRLA-CrlgPjQ.roa Signing time: Tue 25 Nov 2025 13:38:15 +0000 ROA not before: Tue 25 Nov 2025 13:38:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207483 IP address blocks: 89.33.12.0/24 maxlen: 24 89.46.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 07:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:3c:80:0b:31:47:48:d6:8e:f2:02:65:63:fe:36:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Nov 25 13:38:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=82f78fde6c4cd8008ffe215544b03e0ab9603e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:38:f7:a4:6c:2f:9f:76:f8:61:45:52:01:b0: de:be:76:52:44:20:3d:cb:7e:9b:f6:6e:7d:e1:24: da:c2:5f:5c:78:a1:2e:d4:9c:a6:08:ae:63:b7:98: 39:32:70:cb:7a:f6:dc:51:fe:70:d0:10:aa:92:39: c7:bd:43:5c:54:d6:eb:46:87:0e:ba:04:ca:73:8d: fc:49:60:79:80:a4:e9:36:7f:70:31:da:12:ca:f6: 6b:b3:41:82:20:62:0d:1e:ed:16:44:c8:a9:1e:5f: 3c:6d:14:c6:a9:9d:7f:82:a7:bb:36:78:0a:24:6d: d7:d5:de:c0:bc:37:b8:89:9e:2a:66:ab:ef:50:d1: a9:c7:31:86:d6:bf:e5:c6:ba:9b:fb:fa:af:a1:d9: 06:c1:e9:3d:c6:8a:a7:fa:47:10:b7:68:f6:e0:96: ba:d6:dd:76:9f:b2:1d:b2:4d:d3:53:29:79:3c:e3: 19:ae:0c:0e:f3:6e:41:47:ba:ed:b4:8d:72:7b:46: cf:00:09:19:84:a5:18:38:38:b7:75:19:e1:cd:1a: 22:5b:e8:51:83:19:97:5f:39:56:5f:91:f7:0f:71: b9:a4:0b:e6:a6:49:2c:da:44:47:48:b4:c4:f7:1a: 17:c2:10:9e:6e:81:95:c1:b3:70:57:6a:31:33:2d: 5d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F7:8F:DE:6C:4C:D8:00:8F:FE:21:55:44:B0:3E:0A:B9:60:3E:34 X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/gveP3mxM2ACP_iFVRLA-CrlgPjQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.33.12.0/24 89.46.1.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:84:e7:ba:bb:61:62:70:fd:43:79:d5:2f:8a:b6:0b:ab:5c: d4:55:71:b1:e1:d0:96:13:93:a3:8d:6b:78:61:63:d3:3b:7b: d2:86:94:3d:d7:3a:a6:c6:5d:ab:34:84:bd:05:a9:4f:07:f9: 99:a7:d7:40:a3:23:3f:2f:8d:69:9d:f0:3f:fa:c6:49:be:e6: 56:9b:14:25:4b:ec:b4:9f:b7:8b:d5:5d:d0:f0:a0:45:a5:f3: 66:3b:6f:de:bc:23:61:2f:42:c6:71:43:15:f7:67:19:90:9a: e6:7c:0f:89:cf:c4:7e:89:a1:8e:f5:6e:4a:26:59:cb:a7:d0: be:73:f6:21:17:0d:d4:1e:bd:c2:28:07:be:28:16:11:52:ef: 28:bb:00:ce:a5:bf:ea:f6:3d:a4:26:99:83:87:2b:62:5b:1b: 90:13:5f:5e:31:0b:4e:94:63:7e:94:a0:78:bf:fa:29:2e:20: f1:1e:83:ee:ee:77:4c:12:f4:21:50:5a:ee:87:59:c2:50:c3: ff:4f:55:0f:29:91:d6:50:72:9c:f5:fa:3c:03:8a:f8:a1:bc: be:31:c2:61:c1:02:5d:4d:f0:97:47:63:df:2f:62:7d:ab:2b: cd:3b:d2:65:bf:af:5f:a1:e0:cc:e9:15:68:56:a3:15:9f:c8: 73:2c:57:ab -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZq7PIALMUdI1o7yAmVj/jZ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjUxMTI1MTMzODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmY3OGZkZTZjNGNkODAwOGZmZTIxNTU0NGIwM2UwYWI5NjAzZTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jj3pGwvn3b4YUVSAbDevnZSRCA9 y36b9m594STawl9ceKEu1JymCK5jt5g5MnDLevbcUf5w0BCqkjnHvUNcVNbrRocO ugTKc438SWB5gKTpNn9wMdoSyvZrs0GCIGINHu0WRMipHl88bRTGqZ1/gqe7NngK JG3X1d7AvDe4iZ4qZqvvUNGpxzGG1r/lxrqb+/qvodkGwek9xoqn+kcQt2j24Ja6 1t12n7Idsk3TUyl5POMZrgwO825BR7rttI1ye0bPAAkZhKUYODi3dRnhzRoiW+hR gxmXXzlWX5H3D3G5pAvmpkks2kRHSLTE9xoXwhCeboGVwbNwV2oxMy1dDQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIL3j95sTNgAj/4hVUSwPgq5YD40MB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvZ3ZlUDNteE0yQUNQX2lGVlJMQS1DcmxnUGpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSEMAwQA WS4BMA0GCSqGSIb3DQEBCwUAA4IBAQAahOe6u2FicP1DedUvirYLq1zUVXGx4dCW E5OjjWt4YWPTO3vShpQ91zqmxl2rNIS9BalPB/mZp9dAoyM/L41pnfA/+sZJvuZW mxQlS+y0n7eL1V3Q8KBFpfNmO2/evCNhL0LGcUMV92cZkJrmfA+Jz8R+iaGO9W5K JlnLp9C+c/YhFw3UHr3CKAe+KBYRUu8ouwDOpb/q9j2kJpmDhytiWxuQE19eMQtO lGN+lKB4v/opLiDxHoPu7ndMEvQhUFruh1nCUMP/T1UPKZHWUHKc9fo8A4r4oby+ McJhwQJdTfCXR2PfL2J9qyvNO9Jlv69foeDM6RVoVqMVn8hzLFer -----END CERTIFICATE-----Generated at Fri Dec 5 17:19:30 2025 by rpki-client