This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/89aLf4Xx_e2XnMyRZVIyRG0BizY.roa File: 89aLf4Xx_e2XnMyRZVIyRG0BizY.roa (raw, json) Hash identifier: 2L9+HLihim1QwX2POr2PXkk92jLE2cxLeMFCnETsOnc= Subject key identifier: F3:D6:8B:7F:85:F1:FD:ED:97:9C:CC:91:65:52:32:44:6D:01:8B:36 Certificate issuer: /CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6 Certificate serial: 019ABB42E77ECACF290F92B1647C1ED30382 Authority key identifier: 3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/89aLf4Xx_e2XnMyRZVIyRG0BizY.roa Signing time: Tue 25 Nov 2025 13:45:15 +0000 ROA not before: Tue 25 Nov 2025 13:45:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60707 IP address blocks: 80.253.244.0/24 maxlen: 24 80.253.247.0/24 maxlen: 24 91.151.83.0/24 maxlen: 24 91.151.84.0/24 maxlen: 24 213.142.135.0/24 maxlen: 24 213.142.143.0/24 maxlen: 24 2a01:ed80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:42:e7:7e:ca:cf:29:0f:92:b1:64:7c:1e:d3:03:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6 Validity Not Before: Nov 25 13:45:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f3d68b7f85f1fded979ccc91655232446d018b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:43:2d:ce:f0:db:13:61:55:74:3f:17:a7:9a: d3:51:9a:e9:66:66:d4:12:f7:69:ce:9d:78:61:c4: 7f:03:33:81:d0:10:1d:bf:23:70:86:f8:f2:b2:80: 1c:10:89:6c:e7:bd:ea:1f:ad:92:dd:4f:15:30:d5: b6:a6:c6:ae:87:b9:14:56:c5:c5:54:af:46:fc:39: 5d:b9:fd:3f:97:f6:0e:19:43:1a:19:ea:58:3b:89: bd:62:1b:52:14:0d:f3:a8:ce:1d:63:da:b6:d3:a4: ac:ad:ec:e4:76:9d:2d:eb:af:e9:3c:c0:26:70:2b: be:13:9f:1f:0b:1d:f3:fd:9f:a2:ee:9f:cc:16:bd: 00:2e:f2:84:da:54:6e:80:4f:9d:86:a3:7e:d6:6d: ed:b9:bd:97:83:9d:55:56:96:8e:55:89:0b:be:55: 71:09:9b:04:39:71:1b:98:79:bc:1c:4a:f1:c5:e3: 3b:cb:1a:75:d2:4e:72:2d:e8:39:55:dc:82:04:cb: 92:bc:e3:02:a4:fd:86:8b:d9:db:d7:48:21:88:fa: b2:88:e9:35:b3:af:6e:cf:93:24:19:55:80:9b:3b: 4f:7c:90:86:1a:f2:68:4f:a8:93:6e:f9:52:eb:4a: a0:65:56:12:49:39:8f:e9:53:4b:b6:92:36:34:a6: 40:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D6:8B:7F:85:F1:FD:ED:97:9C:CC:91:65:52:32:44:6D:01:8B:36 X509v3 Authority Key Identifier: keyid:3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/89aLf4Xx_e2XnMyRZVIyRG0BizY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.253.244.0/24 80.253.247.0/24 91.151.83.0-91.151.84.255 213.142.135.0/24 213.142.143.0/24 IPv6: 2a01:ed80::/29 Signature Algorithm: sha256WithRSAEncryption 75:85:27:30:87:98:5f:24:e8:11:4b:38:1d:f2:bb:3f:e4:b9: bc:5d:29:01:b9:9b:67:55:35:05:4d:0c:30:96:78:b3:f4:b3: c9:2c:c5:b6:fc:3c:ec:49:55:4b:2a:a8:f2:83:99:75:c4:7c: 2d:44:1d:9f:ab:68:07:04:fa:94:8d:d1:de:73:80:2d:e7:69: 9c:c8:64:79:92:11:a9:57:4d:6e:59:85:47:d4:0a:a5:9c:9c: f0:29:f9:94:a5:ae:a9:c7:18:83:d9:b8:b4:94:4c:f7:ba:29: c8:69:8d:c6:35:7f:19:2f:31:8c:af:4e:90:2e:05:fd:ed:de: 98:ca:98:9b:22:57:b9:a6:6f:a5:0b:49:81:54:69:44:bb:01: cb:0d:15:ab:b4:f2:21:38:63:83:07:b0:ed:db:9b:4e:50:95: a8:93:63:0e:44:43:c9:6b:f2:ce:37:e3:b6:04:6d:0f:a7:60: 33:b5:fd:5a:2f:c6:e5:6e:bf:52:26:9f:42:1b:b6:e5:12:10: 4c:c9:3c:e8:d1:9c:ec:2b:5e:8e:18:07:80:37:0e:a9:73:c3: 1e:1e:8d:de:17:26:c8:50:c7:75:cb:eb:e8:68:42:f7:9a:b0: a3:f8:4d:fa:04:c8:e6:95:f4:26:60:78:96:f4:c6:41:d9:16: f0:29:71:40 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZq7Qud+ys8pD5KxZHwe0wOCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjVhYjY5ODVmNzljYTlkZTA2ZTk4ZThiOWRhMjQ1ZDg1 NTlhYjYwHhcNMjUxMTI1MTM0NTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2Q2OGI3Zjg1ZjFmZGVkOTc5Y2NjOTE2NTUyMzI0NDZkMDE4YjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0MtzvDbE2FVdD8Xp5rTUZrpZmbU Evdpzp14YcR/AzOB0BAdvyNwhvjysoAcEIls573qH62S3U8VMNW2psauh7kUVsXF VK9G/Dlduf0/l/YOGUMaGepYO4m9YhtSFA3zqM4dY9q206Ssrezkdp0t66/pPMAm cCu+E58fCx3z/Z+i7p/MFr0ALvKE2lRugE+dhqN+1m3tub2Xg51VVpaOVYkLvlVx CZsEOXEbmHm8HErxxeM7yxp10k5yLeg5VdyCBMuSvOMCpP2Gi9nb10ghiPqyiOk1 s69uz5MkGVWAmztPfJCGGvJoT6iTbvlS60qgZVYSSTmP6VNLtpI2NKZAgwIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFPPWi3+F8f3tl5zMkWVSMkRtAYs2MB8GA1UdIwQY MBaAFD4lq2mF95yp3gbpjoudokXYVZq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlXcmFZWDNuS25lQnVtT2k1MmlSZGhWbXJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8yMmQxNzUtYzcxZC00NjM3LWEwOTAt YjE5YWQ1NDU1YmZkLzEvODlhTGY0WHhfZTJYbk15UlpWSXlSRzBCaXpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8yMmQxNzUtYzcxZC00NjM3LWEwOTAtYjE5YWQ1NDU1YmZk LzEvUGlXcmFZWDNuS25lQnVtT2k1MmlSZGhWbXJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQAUP30AwQA UP33MAwDBABbl1MDBABbl1QDBADVjocDBADVjo8wDQQCAAIwBwMFAyoB7YAwDQYJ KoZIhvcNAQELBQADggEBAHWFJzCHmF8k6BFLOB3yuz/kubxdKQG5m2dVNQVNDDCW eLP0s8ksxbb8POxJVUsqqPKDmXXEfC1EHZ+raAcE+pSN0d5zgC3naZzIZHmSEalX TW5ZhUfUCqWcnPAp+ZSlrqnHGIPZuLSUTPe6KchpjcY1fxkvMYyvTpAuBf3t3pjK mJsiV7mmb6ULSYFUaUS7AcsNFau08iE4Y4MHsO3bm05QlaiTYw5EQ8lr8s4347YE bQ+nYDO1/VovxuVuv1Imn0IbtuUSEEzJPOjRnOwrXo4YB4A3Dqlzwx4ejd4XJshQ x3XL6+hoQveasKP4TfoEyOaV9CZgeJb0xkHZFvApcUA= -----END CERTIFICATE-----Generated at Sat Dec 6 15:41:50 2025 by rpki-client