This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/09LRiXMSAgfUEhtIcCl6w1BoNXM.roa File: 09LRiXMSAgfUEhtIcCl6w1BoNXM.roa (raw, json) Hash identifier: nupEj0CjGjDpxvrUrf9nmoM3EkGh9f1DRmw/YyihCQk= Subject key identifier: D3:D2:D1:89:73:12:02:07:D4:12:1B:48:70:29:7A:C3:50:68:35:73 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019A9D4ECB775174BDBCA1CB352D0F9AB713 Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/09LRiXMSAgfUEhtIcCl6w1BoNXM.roa Signing time: Wed 19 Nov 2025 18:09:38 +0000 ROA not before: Wed 19 Nov 2025 18:09:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202943 IP address blocks: 89.33.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9d:4e:cb:77:51:74:bd:bc:a1:cb:35:2d:0f:9a:b7:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Nov 19 18:09:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d3d2d18973120207d4121b4870297ac350683573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9d:cb:a2:56:a7:10:cf:be:ca:9a:c2:c2:30: 3d:1a:fa:b3:f2:01:f8:59:6e:b4:f6:af:1f:34:d5: a8:2f:e9:09:aa:ac:c4:02:1f:3b:9f:44:2c:6f:12: 04:92:80:00:31:42:ed:0b:45:6e:48:88:a8:75:8f: 5d:67:58:38:55:9c:4e:f8:03:d5:92:7e:de:23:03: 9e:ed:5e:31:16:37:b3:b3:2e:90:c4:9c:b2:20:50: 6b:38:20:00:1e:98:51:eb:a2:56:ed:d6:58:18:70: 2c:f4:a1:9b:67:09:f3:af:dc:8d:07:b9:72:65:e1: 42:ad:08:b4:bd:f9:d8:4e:d3:74:c4:3e:53:c4:6f: bd:20:93:4c:a4:7d:5e:a6:da:15:80:93:2d:83:f6: 14:d5:97:46:40:41:96:fc:34:90:c5:fe:ef:e8:ce: 4c:a7:14:42:8b:2e:57:05:6c:ac:57:7a:69:df:a3: 72:4e:3f:ec:0a:e8:c9:16:91:fb:d0:61:88:3e:4e: 95:3e:20:18:60:51:f4:b8:2f:7d:e6:19:cb:2b:ec: 79:aa:1b:4d:83:21:e9:69:6d:d9:aa:71:a5:f9:6a: a3:a3:27:ea:2c:73:a8:3c:23:01:fc:5e:a9:ff:4f: 9e:04:36:6f:f0:0d:f3:4e:e8:75:9b:f2:5a:c4:ab: d7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D2:D1:89:73:12:02:07:D4:12:1B:48:70:29:7A:C3:50:68:35:73 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/09LRiXMSAgfUEhtIcCl6w1BoNXM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.33.135.0/24 Signature Algorithm: sha256WithRSAEncryption 34:ae:57:8a:63:df:77:3a:4a:f6:27:cb:f9:cc:9f:8a:e8:fb: 90:ac:51:e2:6f:77:c0:92:4b:87:d0:2d:7c:39:23:86:27:a0: d8:69:b8:12:d9:ed:61:fc:40:02:4b:b1:14:70:ed:ea:a6:be: 8d:71:b2:88:e4:4c:09:88:1e:7b:9f:b8:91:70:8d:72:bb:96: 78:12:9c:f0:db:d0:82:83:f0:a2:5c:7f:82:54:4c:31:24:66: 2e:37:e4:9c:2b:87:bb:b7:77:a0:e9:15:14:08:7b:9b:4f:fa: e1:e9:0c:cf:f2:3c:2e:b4:43:f9:8f:63:f9:2b:e9:27:99:a5: ec:5b:4f:2b:f1:c2:ff:5e:86:ac:79:9a:b7:a2:22:32:28:77: fb:16:28:84:1a:b6:5f:dc:59:e2:59:46:cc:e4:3c:cb:3e:2c: b6:ef:48:1a:a4:18:82:19:8d:5b:b5:72:59:75:cf:0f:f5:e3: 32:0f:77:d0:80:72:f8:1c:c7:4f:bc:e9:f6:d6:de:8a:16:e3: 10:6c:ad:b5:d4:ce:64:e2:fb:b8:4d:44:07:1a:ab:fc:98:28: ad:b0:dc:1b:a3:2a:fb:8f:bf:9a:ae:e4:e2:22:2b:b7:bf:5f: f3:aa:be:30:63:df:71:5a:50:2e:1a:73:a9:d4:9b:4e:79:70: bf:c1:de:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqdTst3UXS9vKHLNS0PmrcTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjUxMTE5MTgwOTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2QyZDE4OTczMTIwMjA3ZDQxMjFiNDg3MDI5N2FjMzUwNjgzNTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ3LolanEM++yprCwjA9Gvqz8gH4 WW609q8fNNWoL+kJqqzEAh87n0QsbxIEkoAAMULtC0VuSIiodY9dZ1g4VZxO+APV kn7eIwOe7V4xFjezsy6QxJyyIFBrOCAAHphR66JW7dZYGHAs9KGbZwnzr9yNB7ly ZeFCrQi0vfnYTtN0xD5TxG+9IJNMpH1eptoVgJMtg/YU1ZdGQEGW/DSQxf7v6M5M pxRCiy5XBWysV3pp36NyTj/sCujJFpH70GGIPk6VPiAYYFH0uC995hnLK+x5qhtN gyHpaW3ZqnGl+WqjoyfqLHOoPCMB/F6p/0+eBDZv8A3zTuh1m/JaxKvX6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNPS0YlzEgIH1BIbSHApesNQaDVzMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvMDlMUmlYTVNBZ2ZVRWh0SWNDbDZ3MUJvTlhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSGHMA0G CSqGSIb3DQEBCwUAA4IBAQA0rleKY993Okr2J8v5zJ+K6PuQrFHib3fAkkuH0C18 OSOGJ6DYabgS2e1h/EACS7EUcO3qpr6NcbKI5EwJiB57n7iRcI1yu5Z4Epzw29CC g/CiXH+CVEwxJGYuN+ScK4e7t3eg6RUUCHubT/rh6QzP8jwutEP5j2P5K+knmaXs W08r8cL/XoaseZq3oiIyKHf7FiiEGrZf3FniWUbM5DzLPiy270gapBiCGY1btXJZ dc8P9eMyD3fQgHL4HMdPvOn21t6KFuMQbK211M5k4vu4TUQHGqv8mCitsNwboyr7 j7+aruTiIiu3v1/zqr4wY99xWlAuGnOp1JtOeXC/wd72 -----END CERTIFICATE-----Generated at Sat Dec 6 18:07:26 2025 by rpki-client