This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ATBLpd6Kl1YLqm9sT1OsVaQpT2A.roa File: ATBLpd6Kl1YLqm9sT1OsVaQpT2A.roa (raw, json) Hash identifier: xhtXbgFkxYeoynyKzKWIKiKZIVcPDVY2tAP0k1nSEOc= Subject key identifier: 01:30:4B:A5:DE:8A:97:56:0B:AA:6F:6C:4F:53:AC:55:A4:29:4F:60 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019AB5447FF11E57CB22149216A590A6C714 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ATBLpd6Kl1YLqm9sT1OsVaQpT2A.roa Signing time: Mon 24 Nov 2025 09:49:16 +0000 ROA not before: Mon 24 Nov 2025 09:49:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 264409 IP address blocks: 89.213.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:44:7f:f1:1e:57:cb:22:14:92:16:a5:90:a6:c7:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 24 09:49:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=01304ba5de8a97560baa6f6c4f53ac55a4294f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:22:13:40:ef:c5:7f:75:42:a6:87:e3:8a:0b: 11:fe:75:7f:a3:b6:d0:0b:61:d9:1f:ac:48:de:d0: 82:8c:5c:bc:d1:ef:e9:25:9d:94:ae:ce:4b:d4:3b: e3:b2:6f:2e:e9:93:8d:b3:86:00:0a:ba:63:73:6e: 86:e3:33:3f:ef:75:4d:dc:0c:6d:7a:54:8e:4e:59: 0e:54:1d:a8:57:93:a2:f5:23:97:e4:91:05:29:0e: ad:a6:b8:9c:38:8d:2d:6c:04:6e:aa:54:9c:2d:43: 2a:fb:4f:15:fb:40:5e:4a:8e:5a:c1:8e:a2:23:29: e3:9f:bd:0f:f6:43:aa:58:43:a0:46:d9:34:85:35: 58:03:80:34:d6:3b:74:b0:9f:da:9a:60:3e:09:71: 89:92:d8:32:d9:35:fa:41:de:ab:aa:3b:70:7e:43: d5:a7:ac:9b:46:86:14:f1:80:0a:0d:cd:31:11:48: db:9e:c1:3b:8e:4f:fe:38:77:2e:84:13:6b:f8:51: 5b:49:2c:71:d7:16:12:1f:c1:c3:b7:56:e3:ea:24: e1:5c:0e:4a:a9:29:35:4b:92:2d:7f:fb:39:af:9d: f4:d0:da:c1:38:1f:46:3a:d4:92:fc:8e:1b:b6:19: 6e:4c:14:6e:c2:12:e3:81:97:46:d3:47:48:8c:2d: 6e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:30:4B:A5:DE:8A:97:56:0B:AA:6F:6C:4F:53:AC:55:A4:29:4F:60 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ATBLpd6Kl1YLqm9sT1OsVaQpT2A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.213.218.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:4e:fa:53:ec:71:6e:d1:61:1d:fa:22:70:af:cf:fd:6a:20: d8:c7:f2:06:00:2d:2e:3d:7f:81:08:b7:57:71:db:fd:77:ce: b3:57:07:95:9a:f5:c8:af:19:59:5b:c2:3d:df:da:66:bc:b0: 71:30:6d:7f:f3:a6:57:88:4e:1f:c6:0a:84:a3:da:ab:33:a0: 2b:4e:fe:b2:71:81:a0:f9:0b:c7:45:23:25:46:40:ed:ff:44: 31:cb:a8:85:4a:83:5e:0f:59:4c:87:a2:cd:6b:ef:26:4f:de: 61:26:df:d2:13:a3:f6:a7:b6:b0:f9:d0:d9:f8:cc:a7:c5:bf: d5:3c:9b:af:70:57:c1:04:40:1c:6f:8f:23:e9:b6:b3:4a:f8: a5:b6:fb:a0:dd:d7:2c:88:4a:5c:2d:29:3d:82:cb:74:91:d9: 34:fd:7d:6a:5f:18:f8:df:d9:ea:05:7b:ff:41:ec:a5:94:6d: e5:00:8e:dd:94:38:47:1e:5c:3a:6c:14:29:ad:e4:8d:a9:78: 7c:8d:dc:15:cf:6e:2c:c2:8f:83:20:ce:21:50:c7:e7:a0:30: 40:34:5c:21:a9:e3:ed:c6:46:73:d3:d1:50:84:29:9e:f5:7c: 65:ab:2d:04:61:34:61:b3:d4:4c:f2:c9:dc:35:be:11:56:e5: 05:4c:8d:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq1RH/xHlfLIhSSFqWQpscUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTI0MDk0OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTMwNGJhNWRlOGE5NzU2MGJhYTZmNmM0ZjUzYWM1NWE0Mjk0ZjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CITQO/Ff3VCpofjigsR/nV/o7bQ C2HZH6xI3tCCjFy80e/pJZ2Urs5L1Dvjsm8u6ZONs4YACrpjc26G4zM/73VN3Axt elSOTlkOVB2oV5Oi9SOX5JEFKQ6tpricOI0tbARuqlScLUMq+08V+0BeSo5awY6i Iynjn70P9kOqWEOgRtk0hTVYA4A01jt0sJ/ammA+CXGJktgy2TX6Qd6rqjtwfkPV p6ybRoYU8YAKDc0xEUjbnsE7jk/+OHcuhBNr+FFbSSxx1xYSH8HDt1bj6iThXA5K qSk1S5Itf/s5r5300NrBOB9GOtSS/I4bthluTBRuwhLjgZdG00dIjC1uWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAEwS6XeipdWC6pvbE9TrFWkKU9gMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvQVRCTHBkNktsMVlMcW05c1QxT3NWYVFwVDJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdXaMA0G CSqGSIb3DQEBCwUAA4IBAQAsTvpT7HFu0WEd+iJwr8/9aiDYx/IGAC0uPX+BCLdX cdv9d86zVweVmvXIrxlZW8I939pmvLBxMG1/86ZXiE4fxgqEo9qrM6ArTv6ycYGg +QvHRSMlRkDt/0Qxy6iFSoNeD1lMh6LNa+8mT95hJt/SE6P2p7aw+dDZ+Mynxb/V PJuvcFfBBEAcb48j6bazSviltvug3dcsiEpcLSk9gst0kdk0/X1qXxj439nqBXv/ QeyllG3lAI7dlDhHHlw6bBQpreSNqXh8jdwVz24swo+DIM4hUMfnoDBANFwhqePt xkZz09FQhCme9Xxlqy0EYTRhs9RM8sncNb4RVuUFTI0T -----END CERTIFICATE-----Generated at Sat Dec 6 17:18:29 2025 by rpki-client