This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/jAU8jrsVCPUntB_an3aJM-fUHBQ.roa File: jAU8jrsVCPUntB_an3aJM-fUHBQ.roa (raw, json) Hash identifier: JV+lAIv1VsWnP4azkZXvg3wd/+Gn10QgLi2aOZ1Uiw4= Subject key identifier: 8C:05:3C:8E:BB:15:08:F5:27:B4:1F:DA:9F:76:89:33:E7:D4:1C:14 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019A6D95FE253556EC5836E9C550B508C516 Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/jAU8jrsVCPUntB_an3aJM-fUHBQ.roa Signing time: Mon 10 Nov 2025 11:45:37 +0000 ROA not before: Mon 10 Nov 2025 11:45:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 61971 IP address blocks: 89.23.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6d:95:fe:25:35:56:ec:58:36:e9:c5:50:b5:08:c5:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Nov 10 11:45:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8c053c8ebb1508f527b41fda9f768933e7d41c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:26:29:26:5f:80:cd:d8:85:27:e5:b0:f3:f7: 10:89:4b:67:fe:aa:56:91:f9:2e:e2:8e:9f:40:a9: d0:9b:c8:aa:c0:f2:41:d3:07:b4:e9:aa:9a:ac:df: 11:b3:e2:1c:8d:fd:69:21:c9:d9:24:54:dc:63:96: 02:e8:9c:0d:b4:1a:65:15:59:b4:81:26:4b:86:fe: e7:49:7a:82:7c:a6:0e:fc:e0:d8:eb:f5:ff:21:68: 57:d3:9f:8e:5d:96:66:d0:eb:cc:7a:23:48:9d:c5: e4:fd:7c:00:4c:38:7f:1e:65:db:c3:67:1b:e1:d9: d5:ea:ec:75:26:3c:a9:3d:9c:73:a7:25:50:46:f8: b9:30:cc:9a:09:b1:8f:c6:2c:b3:ff:a1:bf:41:4d: 78:ac:32:65:26:eb:67:0d:c2:fc:be:00:c8:45:aa: 3c:a5:fe:b6:f4:e5:52:0d:fd:eb:a3:a6:36:ce:9b: 9d:58:e6:eb:33:44:f0:f2:b2:c8:bd:dc:12:11:f8: 01:31:e7:74:01:99:a1:24:d3:f5:33:78:7f:ae:d7: 78:ee:35:07:80:2f:74:06:d6:79:4b:c4:df:01:6d: 66:92:95:75:22:a8:d9:00:1b:e8:08:5b:8f:d9:19: 95:84:b6:79:57:12:05:1d:ee:fb:8e:98:7e:1f:95: c1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:05:3C:8E:BB:15:08:F5:27:B4:1F:DA:9F:76:89:33:E7:D4:1C:14 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/jAU8jrsVCPUntB_an3aJM-fUHBQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.23.120.0/24 Signature Algorithm: sha256WithRSAEncryption 99:21:48:c1:af:f8:19:87:ba:42:3f:b8:ad:8d:37:a0:b1:e9: 27:eb:b6:fd:9c:01:c0:72:70:4d:27:94:1b:bf:1f:dd:27:0a: 81:c7:fc:43:74:f1:5e:b5:14:63:ff:ff:31:1f:9b:85:99:ad: 0b:5e:e4:49:fc:79:58:42:f8:4f:49:19:6e:dc:0a:c1:e1:38: 4b:49:3b:24:ee:ce:24:b0:ca:c5:d2:a6:2d:50:81:8b:6e:03: 0a:2a:9a:fd:fb:14:fa:20:74:6d:25:16:6a:16:dd:2d:87:82: 9d:16:bd:13:9a:53:3a:d8:de:25:73:7a:a5:0a:57:a6:00:3e: 3c:36:11:d7:4a:4e:44:c5:21:eb:da:46:8d:a6:ce:e7:db:2b: 20:40:24:f9:1f:ff:92:80:43:e6:96:a6:93:62:6b:91:2a:c1: c3:d6:6b:d1:15:87:cd:d4:25:6a:69:26:e1:50:33:a6:ff:fa: ec:b0:eb:23:ca:a6:81:e0:78:3e:76:93:50:9f:c2:38:1a:05: e8:ff:ed:08:00:f8:cc:71:73:8b:fc:3a:f6:c5:a1:aa:20:9e: d7:64:da:13:4a:78:9b:e1:b2:ce:01:71:a1:f7:3a:11:20:ae: 90:d7:b3:6b:f9:8e:4f:ed:64:fd:09:62:a2:1d:01:4b:be:c7: a9:9e:47:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZptlf4lNVbsWDbpxVC1CMUWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjUxMTEwMTE0NTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzA1M2M4ZWJiMTUwOGY1MjdiNDFmZGE5Zjc2ODkzM2U3ZDQxYzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yYpJl+AzdiFJ+Ww8/cQiUtn/qpW kfku4o6fQKnQm8iqwPJB0we06aqarN8Rs+Icjf1pIcnZJFTcY5YC6JwNtBplFVm0 gSZLhv7nSXqCfKYO/ODY6/X/IWhX05+OXZZm0OvMeiNIncXk/XwATDh/HmXbw2cb 4dnV6ux1JjypPZxzpyVQRvi5MMyaCbGPxiyz/6G/QU14rDJlJutnDcL8vgDIRao8 pf629OVSDf3ro6Y2zpudWObrM0Tw8rLIvdwSEfgBMed0AZmhJNP1M3h/rtd47jUH gC90BtZ5S8TfAW1mkpV1IqjZABvoCFuP2RmVhLZ5VxIFHe77jph+H5XBFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIwFPI67FQj1J7Qf2p92iTPn1BwUMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvakFVOGpyc1ZDUFVudEJfYW4zYUpNLWZVSEJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRd4MA0G CSqGSIb3DQEBCwUAA4IBAQCZIUjBr/gZh7pCP7itjTegsekn67b9nAHAcnBNJ5Qb vx/dJwqBx/xDdPFetRRj//8xH5uFma0LXuRJ/HlYQvhPSRlu3ArB4ThLSTsk7s4k sMrF0qYtUIGLbgMKKpr9+xT6IHRtJRZqFt0th4KdFr0TmlM62N4lc3qlClemAD48 NhHXSk5ExSHr2kaNps7n2ysgQCT5H/+SgEPmlqaTYmuRKsHD1mvRFYfN1CVqaSbh UDOm//rssOsjyqaB4Hg+dpNQn8I4GgXo/+0IAPjMcXOL/Dr2xaGqIJ7XZNoTSnib 4bLOAXGh9zoRIK6Q17Nr+Y5P7WT9CWKiHQFLvsepnkf3 -----END CERTIFICATE-----Generated at Fri Dec 5 08:38:06 2025 by rpki-client