This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/fK0jcRckLG4O6oA7d0DaZ2pNJzI.roa File: fK0jcRckLG4O6oA7d0DaZ2pNJzI.roa (raw, json) Hash identifier: xTJLMS3F+9kAseoMyzgk2d3UM1bko67xGLUtZbREalw= Subject key identifier: 7C:AD:23:71:17:24:2C:6E:0E:EA:80:3B:77:40:DA:67:6A:4D:27:32 Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2 Certificate serial: 019A50C9A3A3EDFC3F99C342C3C3151CB1BA Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/fK0jcRckLG4O6oA7d0DaZ2pNJzI.roa Signing time: Tue 04 Nov 2025 21:33:03 +0000 ROA not before: Tue 04 Nov 2025 21:33:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206077 IP address blocks: 89.29.250.0/23 maxlen: 23 89.29.253.0/24 maxlen: 24 185.250.198.0/24 maxlen: 24 213.181.72.0/23 maxlen: 23 213.181.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:c9:a3:a3:ed:fc:3f:99:c3:42:c3:c3:15:1c:b1:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2 Validity Not Before: Nov 4 21:33:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7cad237117242c6e0eea803b7740da676a4d2732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2d:36:0f:d1:f3:72:0f:44:f3:ff:70:5e:36: a3:41:d4:19:2e:86:77:d9:87:1e:60:b1:6c:b1:22: c5:65:22:1c:a1:81:e9:05:b9:4e:72:00:55:f7:08: 40:a4:a8:ed:b2:84:12:ee:42:de:f9:43:ed:59:e4: 13:46:32:a8:73:d4:f5:0b:01:ce:84:10:8e:92:a5: 3a:a1:c3:8c:4c:bb:08:f8:cf:b7:be:19:dd:b6:09: c6:d3:d6:73:6e:df:e2:94:d0:0e:32:ed:81:85:6d: e2:8e:02:8a:5b:4a:e0:b4:ca:ec:ee:67:50:3c:05: 23:26:a8:24:8c:97:e1:54:28:ce:c8:25:5d:fd:81: 53:08:2c:ee:55:df:d0:9e:db:21:10:06:f6:ff:6e: cf:bc:34:04:37:11:77:b1:92:4e:fb:db:ea:95:7f: fa:88:0a:b7:1e:4d:d8:cf:d4:86:cb:19:fa:48:02: 96:03:19:ca:e6:8a:d3:22:db:84:b3:db:c7:14:f1: ef:56:c8:3e:cd:86:9b:f4:7e:1f:4e:cc:71:fa:71: 76:26:c1:c2:b1:a3:d3:57:ab:ef:fe:a9:fe:7e:a7: 50:d0:9b:16:04:34:63:d4:7b:b1:0d:68:b6:23:a2: 68:0a:70:59:f9:f9:62:3e:5b:f0:90:6e:7e:aa:05: 1d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:AD:23:71:17:24:2C:6E:0E:EA:80:3B:77:40:DA:67:6A:4D:27:32 X509v3 Authority Key Identifier: keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/fK0jcRckLG4O6oA7d0DaZ2pNJzI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.29.250.0/23 89.29.253.0/24 185.250.198.0/24 213.181.72.0/23 213.181.77.0/24 Signature Algorithm: sha256WithRSAEncryption 40:a4:89:ef:a0:4e:a1:e1:5d:28:8d:d6:77:76:5b:4b:06:6f: b1:36:11:a2:71:4f:45:af:2e:04:93:86:47:bf:1d:bf:c7:d7: da:b0:22:50:b1:ba:a3:ae:e7:9b:2b:f8:80:74:40:e8:cb:2d: 5b:ff:90:0a:a3:55:8f:9d:12:ce:39:48:34:73:bf:41:36:37: 32:60:8f:86:2a:23:8b:34:32:cd:13:6b:5f:a0:c8:f2:49:52: 1f:08:fb:a5:c2:5e:bc:c6:ee:ad:62:81:6e:18:01:5e:8b:e4: 04:fb:06:27:d2:e9:60:9a:28:02:e8:7b:61:56:ab:44:ea:5e: a3:89:d3:2a:e0:e4:72:12:a3:d1:b5:22:ce:bb:9c:f1:62:59: 56:b1:b9:12:21:4f:34:bd:24:fe:65:8b:a8:0c:ba:ac:5b:85: a3:3d:f2:b7:3a:e5:bc:5e:fb:ca:de:22:ba:06:3c:19:db:57: 83:69:1a:86:90:76:16:d8:6c:4d:e2:10:d0:bb:a5:ee:d3:d7: d6:29:8a:2b:aa:81:b8:ee:4d:e3:d4:33:c5:bc:3a:57:e3:c8: 44:3c:d7:65:03:04:bf:31:71:a5:b5:b2:1a:2d:dc:cc:5f:36: c4:53:a1:6e:c6:59:d3:b6:af:af:4f:51:55:54:40:5c:1c:22: fc:86:57:f6 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZpQyaOj7fw/mcNCw8MVHLG6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MmM0MTVkMTc3NWFlOTk5M2U5MDBhNzUzNmI0NmFiMTQ0 YTlhYTIwHhcNMjUxMTA0MjEzMzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2FkMjM3MTE3MjQyYzZlMGVlYTgwM2I3NzQwZGE2NzZhNGQyNzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy02D9Hzcg9E8/9wXjajQdQZLoZ3 2YceYLFssSLFZSIcoYHpBblOcgBV9whApKjtsoQS7kLe+UPtWeQTRjKoc9T1CwHO hBCOkqU6ocOMTLsI+M+3vhndtgnG09Zzbt/ilNAOMu2BhW3ijgKKW0rgtMrs7mdQ PAUjJqgkjJfhVCjOyCVd/YFTCCzuVd/QntshEAb2/27PvDQENxF3sZJO+9vqlX/6 iAq3Hk3Yz9SGyxn6SAKWAxnK5orTItuEs9vHFPHvVsg+zYab9H4fTsxx+nF2JsHC saPTV6vv/qn+fqdQ0JsWBDRj1HuxDWi2I6JoCnBZ+fliPlvwkG5+qgUdRQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFHytI3EXJCxuDuqAO3dA2mdqTScyMB8GA1UdIwQY MBaAFOksQV0Xda6Zk+kAp1NrRqsUSpqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQt MWQ5MzRhMDQ4NDc0LzEvZkswamNSY2tMRzRPNm9BN2QwRGFaMnBOSnpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQtMWQ5MzRhMDQ4NDc0 LzEvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBWR36AwQA WR39AwQAufrGAwQB1bVIAwQA1bVNMA0GCSqGSIb3DQEBCwUAA4IBAQBApInvoE6h 4V0ojdZ3dltLBm+xNhGicU9Fry4Ek4ZHvx2/x9fasCJQsbqjruebK/iAdEDoyy1b /5AKo1WPnRLOOUg0c79BNjcyYI+GKiOLNDLNE2tfoMjySVIfCPulwl68xu6tYoFu GAFei+QE+wYn0ulgmigC6HthVqtE6l6jidMq4ORyEqPRtSLOu5zxYllWsbkSIU80 vST+ZYuoDLqsW4WjPfK3OuW8XvvK3iK6BjwZ21eDaRqGkHYW2GxN4hDQu6Xu09fW KYorqoG47k3j1DPFvDpX48hEPNdlAwS/MXGltbIaLdzMXzbEU6FuxlnTtq+vT1FV VEBcHCL8hlf2 -----END CERTIFICATE-----Generated at Sat Dec 6 12:43:59 2025 by rpki-client