This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/1-gc9D1wMAKrnlAJOxU2iS0InzTc.roa File: 1-gc9D1wMAKrnlAJOxU2iS0InzTc.roa (raw, json) Hash identifier: RqODY1Vf6kd5geEwqwz689tzV+KQld4BuX/kDiE/H2g= Subject key identifier: FA:07:3D:0F:5C:0C:00:AA:E7:94:02:4E:C5:4D:A2:4B:42:27:CD:37 Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 019ADF78349CD30D437299C7FEE1B7779FEF Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/1-gc9D1wMAKrnlAJOxU2iS0InzTc.roa Signing time: Tue 02 Dec 2025 14:29:48 +0000 ROA not before: Tue 02 Dec 2025 14:29:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 89.222.92.0/22 maxlen: 24 178.210.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:78:34:9c:d3:0d:43:72:99:c7:fe:e1:b7:77:9f:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Dec 2 14:29:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fa073d0f5c0c00aae794024ec54da24b4227cd37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:88:f5:23:9c:7e:dc:8d:9b:52:e4:0b:b2:22: 14:08:e6:ed:f1:e4:d7:44:4c:dc:62:ed:9a:0d:5d: 5e:c1:9e:72:6a:8e:50:21:33:17:0d:25:e3:9e:70: f2:05:c6:87:ff:c9:52:44:00:a5:0e:c6:ce:14:ac: 9a:54:4b:2e:cc:1b:ad:f3:f9:0e:91:cd:54:92:aa: 30:ac:cd:ca:0a:5d:15:3e:2e:ff:df:5a:64:9a:67: 2a:28:5a:7d:6b:cb:92:d0:f4:3d:84:77:4a:63:ab: 16:ce:11:d5:b3:e2:e8:e3:44:b4:2a:42:e3:f0:d3: 92:83:a9:cc:3a:59:f2:fe:2a:07:fb:18:3e:2f:d3: 28:e9:35:e7:14:59:a4:11:81:97:70:99:74:bd:38: f1:37:56:3f:6c:f4:19:b6:28:8f:b3:90:47:57:51: d9:80:1d:ee:28:3c:70:f7:7e:e8:41:d0:0c:68:f2: 3f:ad:c3:d5:ce:ad:87:c6:f4:f3:46:3d:a2:e0:31: 3a:bd:7a:f2:39:f6:5b:7d:0c:db:2c:1b:59:15:66: 7d:2a:8d:82:12:83:14:cc:1c:53:52:51:b1:22:71: f6:18:33:58:85:e4:e6:50:7b:b6:23:ef:40:9e:0e: ab:2f:9c:c5:2c:61:e6:0c:ae:8b:ac:ae:96:72:2b: 3d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:07:3D:0F:5C:0C:00:AA:E7:94:02:4E:C5:4D:A2:4B:42:27:CD:37 X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/1-gc9D1wMAKrnlAJOxU2iS0InzTc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.222.92.0/22 178.210.250.0/24 Signature Algorithm: sha256WithRSAEncryption 14:10:6b:a3:21:e4:ee:d7:ce:fe:ce:9c:1d:82:70:49:2c:16: 3c:cb:7f:aa:32:e8:55:42:cd:94:d6:30:21:cd:43:a8:9f:32: cd:65:31:0f:7d:4b:d6:5f:34:ae:25:a0:e9:5f:44:5a:c5:2b: 11:8c:30:a6:93:3a:95:66:8a:7c:2d:8c:65:9a:ab:90:f3:26: 0d:40:e3:96:c3:4d:3f:a9:ea:94:5c:29:51:99:b3:5c:fd:cd: dc:e8:32:db:28:93:ab:56:65:e3:89:e3:a4:2f:51:b5:ac:69: 52:c8:84:15:d7:85:de:cc:cc:8b:fa:12:8a:0b:0e:25:05:a7: 96:c3:da:18:62:24:f7:1a:16:88:36:2d:da:e5:47:cd:8f:e7: f6:48:47:0f:02:7e:09:1b:ba:38:ad:cc:e5:f7:3b:4f:03:a2: d8:0a:d0:34:3c:c6:44:0f:71:c1:2c:2c:5e:07:bc:4c:1b:51: 83:16:41:fd:bd:22:cf:a8:a4:e2:bd:54:96:a6:57:9b:25:ad: f7:1e:eb:2a:76:09:5e:84:fe:96:d6:1a:64:88:d0:9a:ea:88: 98:c4:0b:d9:73:d2:77:2c:13:53:64:aa:6c:03:1c:a6:8a:0e: a4:bc:ac:ef:80:18:fb:c2:51:a4:95:f9:21:cc:17:da:b6:83: bb:67:42:37 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZrfeDSc0w1DcpnH/uG3d5/vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjUxMjAyMTQyOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTA3M2QwZjVjMGMwMGFhZTc5NDAyNGVjNTRkYTI0YjQyMjdjZDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ij1I5x+3I2bUuQLsiIUCObt8eTX REzcYu2aDV1ewZ5yao5QITMXDSXjnnDyBcaH/8lSRAClDsbOFKyaVEsuzBut8/kO kc1UkqowrM3KCl0VPi7/31pkmmcqKFp9a8uS0PQ9hHdKY6sWzhHVs+Lo40S0KkLj 8NOSg6nMOlny/ioH+xg+L9Mo6TXnFFmkEYGXcJl0vTjxN1Y/bPQZtiiPs5BHV1HZ gB3uKDxw937oQdAMaPI/rcPVzq2HxvTzRj2i4DE6vXryOfZbfQzbLBtZFWZ9Ko2C EoMUzBxTUlGxInH2GDNYheTmUHu2I+9Ang6rL5zFLGHmDK6LrK6Wcis98QIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPoHPQ9cDACq55QCTsVNoktCJ803MB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvMS1nYzlEMXdNQUtybmxBSk94VTJpUzBJbnpUYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTMvODhjNDU0LWNiYWEtNDNmZC1iM2MxLTEzYjkxMTBjZTIw Yy8xL0ZtcjhVY2tpX1lRdjdGc011OUp1dmIwYUZoNC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAlneXAME ALLS+jANBgkqhkiG9w0BAQsFAAOCAQEAFBBroyHk7tfO/s6cHYJwSSwWPMt/qjLo VULNlNYwIc1DqJ8yzWUxD31L1l80riWg6V9EWsUrEYwwppM6lWaKfC2MZZqrkPMm DUDjlsNNP6nqlFwpUZmzXP3N3Ogy2yiTq1Zl44njpC9RtaxpUsiEFdeF3szMi/oS igsOJQWnlsPaGGIk9xoWiDYt2uVHzY/n9khHDwJ+CRu6OK3M5fc7TwOi2ArQNDzG RA9xwSwsXge8TBtRgxZB/b0iz6ik4r1UlqZXmyWt9x7rKnYJXoT+ltYaZIjQmuqI mMQL2XPSdywTU2SqbAMcpooOpLys74AY+8JRpJX5IcwX2raDu2dCNw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:34:18 2025 by rpki-client