This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/gNf2ckToizf6XVvgLFeoeRuDPfI.roa File: gNf2ckToizf6XVvgLFeoeRuDPfI.roa (raw, json) Hash identifier: D3sagyRWQjDQ/TQC9ZmZFlVmVb+dHfqJMXegNJ1UJHE= Subject key identifier: 80:D7:F6:72:44:E8:8B:37:FA:5D:5B:E0:2C:57:A8:79:1B:83:3D:F2 Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Certificate serial: 019ADBEB1655899925F19AB9ED7E9908FD9F Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/gNf2ckToizf6XVvgLFeoeRuDPfI.roa Signing time: Mon 01 Dec 2025 21:56:48 +0000 ROA not before: Mon 01 Dec 2025 21:56:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206512 IP address blocks: 185.165.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:db:eb:16:55:89:99:25:f1:9a:b9:ed:7e:99:08:fd:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Validity Not Before: Dec 1 21:56:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=80d7f67244e88b37fa5d5be02c57a8791b833df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b9:2e:99:a0:ce:b3:e9:ca:13:8f:3a:a5:39: be:b5:e4:9f:18:83:51:d6:60:b9:aa:aa:b7:b4:ac: fa:e3:d9:d4:a8:cf:05:56:20:88:5a:3a:aa:dc:11: 92:2d:3e:61:b3:e9:f4:bd:dc:38:dd:d8:59:6b:78: 13:6f:ca:6d:86:d4:ad:17:5c:d6:f5:8d:ee:1d:ba: 74:80:7f:83:24:27:ba:a7:f5:f1:93:f0:1e:36:1a: 1f:5a:2e:c0:49:50:6c:65:e1:b6:c6:57:af:0d:cf: 95:0b:ba:ad:23:32:7b:dc:63:4f:25:f5:a3:12:ca: 40:8c:ef:fd:ce:c4:72:f3:f8:5c:e3:5c:47:ee:23: ce:bc:69:73:c0:d0:90:01:cd:7a:4e:ab:a3:3a:7a: 24:0c:e7:c2:54:7c:68:4b:fe:c6:24:08:c2:31:16: 98:a5:f3:a2:6a:78:33:f8:dc:85:ef:97:01:28:a6: 89:09:4d:ba:ca:af:08:9e:40:9e:04:9f:53:c9:61: 32:63:a5:54:00:ea:9c:16:75:bb:62:86:25:f0:2e: 46:fe:5c:d1:50:d5:fb:e0:30:94:87:1b:eb:67:8b: 35:45:34:56:d6:13:90:33:68:55:e2:21:02:1d:71: 3d:1b:2c:48:90:b8:80:60:d0:77:8e:35:e5:c5:3f: 60:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D7:F6:72:44:E8:8B:37:FA:5D:5B:E0:2C:57:A8:79:1B:83:3D:F2 X509v3 Authority Key Identifier: keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/gNf2ckToizf6XVvgLFeoeRuDPfI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.165.79.0/24 Signature Algorithm: sha256WithRSAEncryption 55:b0:6b:f8:5b:e0:d5:34:45:80:b4:9a:ee:c1:19:ec:b7:45: bd:76:a5:e1:6a:96:a8:4b:29:3d:fb:d9:e6:f2:7a:a3:c2:3b: 6d:8e:2a:88:11:61:9b:0b:35:22:67:19:fc:3b:8e:14:a3:f5: 69:87:33:9e:a4:ac:d5:3e:28:89:62:2b:65:d9:ca:95:ff:19: 44:7b:fd:2e:9c:2b:55:04:a7:d7:2c:9d:39:78:23:39:1d:5c: dc:6e:8a:94:42:ba:6a:30:9b:5f:24:9d:f6:26:4a:ed:00:c9: 24:dd:cd:81:dc:c1:f0:01:c2:1c:96:48:f3:38:7b:59:66:78: 1a:0f:20:26:1e:bf:7d:cc:aa:ed:18:82:41:2d:ed:3b:7e:6e: 05:3c:aa:1e:3f:f5:b7:9d:c9:84:2e:8c:03:65:39:c8:24:db: 62:a1:e8:83:75:8e:55:16:2b:e7:07:c6:46:0c:bf:37:88:7f: b8:61:8c:89:32:26:da:8a:6d:2a:c5:72:2f:84:f0:c8:8d:ae: 24:87:bc:d9:ad:41:b3:fa:8a:80:ab:c2:95:64:26:d1:32:a8: ae:26:90:ae:c1:1a:58:34:a8:ca:53:c7:e1:9d:9c:06:89:17: 83:6e:3a:23:4f:8f:20:d3:02:03:6a:a3:63:78:71:de:df:0d: 23:d7:e7:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrb6xZViZkl8Zq57X6ZCP2fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmRkOWRhZDc1ODc3ZjdkMjhkMTRlMDhkYzU1YjEzMzBi ZDEzYjcwHhcNMjUxMjAxMjE1NjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGQ3ZjY3MjQ0ZTg4YjM3ZmE1ZDViZTAyYzU3YTg3OTFiODMzZGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bkumaDOs+nKE486pTm+teSfGINR 1mC5qqq3tKz649nUqM8FViCIWjqq3BGSLT5hs+n0vdw43dhZa3gTb8pthtStF1zW 9Y3uHbp0gH+DJCe6p/Xxk/AeNhofWi7ASVBsZeG2xlevDc+VC7qtIzJ73GNPJfWj EspAjO/9zsRy8/hc41xH7iPOvGlzwNCQAc16TqujOnokDOfCVHxoS/7GJAjCMRaY pfOiangz+NyF75cBKKaJCU26yq8InkCeBJ9TyWEyY6VUAOqcFnW7YoYl8C5G/lzR UNX74DCUhxvrZ4s1RTRW1hOQM2hV4iECHXE9GyxIkLiAYNB3jjXlxT9gEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIDX9nJE6Is3+l1b4CxXqHkbgz3yMB8GA1UdIwQY MBaAFKdt2drXWHf30o0U4I3FWxMwvRO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQt MmFjNmZmNzViZWIwLzEvZ05mMmNrVG9pemY2WFZ2Z0xGZW9lUnVEUGZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQtMmFjNmZmNzViZWIw LzEvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaVPMA0G CSqGSIb3DQEBCwUAA4IBAQBVsGv4W+DVNEWAtJruwRnst0W9dqXhapaoSyk9+9nm 8nqjwjttjiqIEWGbCzUiZxn8O44Uo/VphzOepKzVPiiJYitl2cqV/xlEe/0unCtV BKfXLJ05eCM5HVzcboqUQrpqMJtfJJ32JkrtAMkk3c2B3MHwAcIclkjzOHtZZnga DyAmHr99zKrtGIJBLe07fm4FPKoeP/W3ncmELowDZTnIJNtioeiDdY5VFivnB8ZG DL83iH+4YYyJMibaim0qxXIvhPDIja4kh7zZrUGz+oqAq8KVZCbRMqiuJpCuwRpY NKjKU8fhnZwGiReDbjojT48g0wIDaqNjeHHe3w0j1+f9 -----END CERTIFICATE-----Generated at Sat Dec 6 06:36:57 2025 by rpki-client