This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/REPOw149mODWNiaUKef3JQas7O0.roa File: REPOw149mODWNiaUKef3JQas7O0.roa (raw, json) Hash identifier: iyQwZYLXGMmlpdToH0d9XmPw4cuKdZskqJ2oxIivdzA= Subject key identifier: 44:43:CE:C3:5E:3D:98:E0:D6:36:26:94:29:E7:F7:25:06:AC:EC:ED Certificate issuer: /CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a Certificate serial: 019AA6D47FC2272E50547CE9391CFB2CC5D0 Authority key identifier: BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/REPOw149mODWNiaUKef3JQas7O0.roa Signing time: Fri 21 Nov 2025 14:32:15 +0000 ROA not before: Fri 21 Nov 2025 14:32:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198545 IP address blocks: 89.207.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:d4:7f:c2:27:2e:50:54:7c:e9:39:1c:fb:2c:c5:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a Validity Not Before: Nov 21 14:32:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4443cec35e3d98e0d636269429e7f72506aceced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c1:d6:1f:31:ad:0b:67:73:1f:48:01:41:36: 10:b6:2b:c4:f7:1c:90:4d:b1:92:bf:84:0d:6e:9d: 7d:3c:7a:c1:38:39:72:4c:b2:2c:fe:e2:fd:a3:ec: 67:1a:d4:7d:39:d9:fe:14:82:a7:b8:c8:60:4d:30: 42:24:a3:fa:ea:30:71:cd:f3:c4:f8:87:d1:0b:ad: 45:0c:e2:a6:77:0a:a1:15:46:bb:b9:ed:74:27:93: bf:bd:21:3e:22:cb:7b:77:2c:b6:6c:96:4f:ff:66: 62:ed:10:e3:52:85:ad:36:a6:5e:be:91:a8:c1:5a: dc:10:5c:fc:96:98:7e:2f:a5:05:b6:c0:b9:10:8b: 4e:42:40:08:eb:3a:87:49:35:26:a7:9b:65:db:14: da:33:28:0a:6b:64:02:40:3f:c4:06:5d:c1:d1:dd: bd:cc:26:36:dc:d6:4f:10:a8:f3:a0:d4:d4:ec:4b: b4:94:1c:e7:ad:ce:3f:3f:6a:b8:cd:90:cc:5d:5b: 71:d6:7b:18:69:56:56:a4:98:96:04:b4:7f:70:a8: 5a:21:14:36:2a:84:a1:b2:36:b9:51:f2:54:75:72: 2b:4b:2d:70:08:8b:a0:c6:9d:86:e7:fe:9c:cb:e8: 43:34:94:bd:a5:f6:47:8a:50:53:ae:53:8e:3c:1c: bb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:43:CE:C3:5E:3D:98:E0:D6:36:26:94:29:E7:F7:25:06:AC:EC:ED X509v3 Authority Key Identifier: keyid:BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/REPOw149mODWNiaUKef3JQas7O0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.207.157.0/24 Signature Algorithm: sha256WithRSAEncryption 06:99:02:00:fd:93:8c:f3:76:62:be:a9:e3:cb:8f:24:6a:6b: 15:b6:17:26:a7:bb:5a:03:d5:0e:f1:62:17:1f:86:d4:58:da: 03:80:85:fb:9f:d5:7d:00:f2:bc:28:65:31:e3:e7:1c:32:ab: db:41:86:c0:8b:6f:b3:92:c3:4c:60:3d:e5:65:92:17:b1:80: b7:43:6d:86:c0:8c:c1:22:51:51:c2:d8:68:1b:2c:67:e6:ba: b5:d0:92:f9:26:86:80:51:dd:f8:ba:9e:54:cc:70:39:df:b6: be:60:19:be:4d:26:77:b5:f7:1c:f0:8b:85:9a:d1:f5:5c:55: 40:d7:e6:07:47:a5:a8:76:e6:af:0f:5c:71:3b:4d:e9:71:a6: 7b:dc:14:cc:c7:4d:97:6a:b9:9d:77:e1:0e:6a:1a:86:ee:fe: 41:80:28:1e:91:81:49:70:87:61:c6:2c:ba:a4:f3:76:46:94: 91:67:76:13:c4:ee:81:fe:28:af:05:81:57:29:af:d5:a7:c3: 8e:31:d3:42:16:a9:d0:a8:20:ea:47:75:d5:39:c9:48:c0:c7: 57:ce:24:3b:8b:b8:52:30:51:7d:b9:ed:07:87:87:81:d7:4e: 48:9c:79:aa:5b:17:96:15:b3:cf:7e:d3:88:75:81:23:a4:bb: 6f:10:0d:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqm1H/CJy5QVHzpORz7LMXQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNzk4NDdhM2ZlOGU1Yzc4ODQ0MDI3Y2NhZjBiZDZlOWRh NDYyNGEwHhcNMjUxMTIxMTQzMjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDQzY2VjMzVlM2Q5OGUwZDYzNjI2OTQyOWU3ZjcyNTA2YWNlY2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8HWHzGtC2dzH0gBQTYQtivE9xyQ TbGSv4QNbp19PHrBODlyTLIs/uL9o+xnGtR9Odn+FIKnuMhgTTBCJKP66jBxzfPE +IfRC61FDOKmdwqhFUa7ue10J5O/vSE+Ist7dyy2bJZP/2Zi7RDjUoWtNqZevpGo wVrcEFz8lph+L6UFtsC5EItOQkAI6zqHSTUmp5tl2xTaMygKa2QCQD/EBl3B0d29 zCY23NZPEKjzoNTU7Eu0lBznrc4/P2q4zZDMXVtx1nsYaVZWpJiWBLR/cKhaIRQ2 KoShsja5UfJUdXIrSy1wCIugxp2G5/6cy+hDNJS9pfZHilBTrlOOPBy7dwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFERDzsNePZjg1jYmlCnn9yUGrOztMB8GA1UdIwQY MBaAFLt5hHo/6OXHiEQCfMrwvW6dpGJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTNtRWVqX281Y2VJUkFKOHl2QzlicDJrWWtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80NWNjOWYtNjQzMi00MWM3LWI2MmQt MTBlNDBjNTg2NDk4LzEvUkVQT3cxNDltT0RXTmlhVUtlZjNKUWFzN08wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My80NWNjOWYtNjQzMi00MWM3LWI2MmQtMTBlNDBjNTg2NDk4 LzEvdTNtRWVqX281Y2VJUkFKOHl2QzlicDJrWWtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWc+dMA0G CSqGSIb3DQEBCwUAA4IBAQAGmQIA/ZOM83Zivqnjy48kamsVthcmp7taA9UO8WIX H4bUWNoDgIX7n9V9APK8KGUx4+ccMqvbQYbAi2+zksNMYD3lZZIXsYC3Q22GwIzB IlFRwthoGyxn5rq10JL5JoaAUd34up5UzHA537a+YBm+TSZ3tfcc8IuFmtH1XFVA 1+YHR6WoduavD1xxO03pcaZ73BTMx02Xarmdd+EOahqG7v5BgCgekYFJcIdhxiy6 pPN2RpSRZ3YTxO6B/iivBYFXKa/Vp8OOMdNCFqnQqCDqR3XVOclIwMdXziQ7i7hS MFF9ue0Hh4eB105InHmqWxeWFbPPftOIdYEjpLtvEA1V -----END CERTIFICATE-----Generated at Sat Dec 6 14:16:27 2025 by rpki-client