This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/3M77FQFV6iiOUx3kj5ltTV-Ss6g.roa File: 3M77FQFV6iiOUx3kj5ltTV-Ss6g.roa (raw, json) Hash identifier: ID80XwGiXRTSswVcjaFJF1FTfgWMTYqaJ3DgCgi0vSU= Subject key identifier: DC:CE:FB:15:01:55:EA:28:8E:53:1D:E4:8F:99:6D:4D:5F:92:B3:A8 Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 019AEF31446B008C018FA909556A972BAC95 Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/3M77FQFV6iiOUx3kj5ltTV-Ss6g.roa Signing time: Fri 05 Dec 2025 15:46:14 +0000 ROA not before: Fri 05 Dec 2025 15:46:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6079 IP address blocks: 89.222.88.0/24 maxlen: 24 89.222.89.0/24 maxlen: 24 89.222.90.0/24 maxlen: 24 89.222.91.0/24 maxlen: 24 89.222.92.0/24 maxlen: 24 89.222.93.0/24 maxlen: 24 89.222.94.0/24 maxlen: 24 89.222.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:31:44:6b:00:8c:01:8f:a9:09:55:6a:97:2b:ac:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Dec 5 15:46:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dccefb150155ea288e531de48f996d4d5f92b3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ef:b6:76:bd:92:9c:82:d2:7c:15:97:a5:e8: bc:d5:0c:6a:b0:e9:bd:36:88:12:6f:8e:92:b7:ae: ff:f8:10:44:eb:ee:67:8f:e9:de:ac:37:ae:08:e2: 23:30:b9:91:06:67:f8:f0:22:2d:75:00:78:b0:f1: 1b:4e:ac:bb:c6:e7:9d:3e:e5:ed:fc:52:0e:c0:6f: 44:0e:b9:a5:e4:c3:12:fb:30:84:e7:eb:f8:70:c6: 45:12:6b:16:48:f4:61:02:30:db:04:b6:b5:11:7f: e2:f9:96:1c:f9:05:54:16:da:0c:02:04:a6:9d:81: 3f:e6:a3:de:01:43:bc:5c:34:74:7e:16:df:ed:b3: 7b:96:ab:48:a8:61:44:70:2a:02:86:9b:4d:d5:4f: 75:76:35:3e:0d:6a:44:aa:f6:13:67:6a:3e:93:5f: 83:51:82:9a:ae:82:e7:f6:fc:51:aa:97:fd:0a:d7: 0c:03:41:42:48:96:88:06:d5:0e:c9:df:5f:ac:7e: 67:ca:35:7e:98:84:ce:86:25:8b:40:a7:bc:d5:b4: c9:1f:cf:ca:64:07:2e:bd:23:2e:46:8c:cd:95:d0: 06:7d:32:80:33:f3:c5:15:57:57:9e:04:4b:67:fc: 3f:4c:30:9c:43:65:24:f3:27:b6:fd:77:1e:1a:39: 69:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:CE:FB:15:01:55:EA:28:8E:53:1D:E4:8F:99:6D:4D:5F:92:B3:A8 X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/3M77FQFV6iiOUx3kj5ltTV-Ss6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.222.88.0/21 Signature Algorithm: sha256WithRSAEncryption ae:70:d1:a1:ae:ee:6b:23:72:33:aa:a8:d0:28:d5:ca:30:61: db:01:6a:b6:ea:e3:7a:dd:b3:35:cf:15:c3:eb:cb:a4:9b:54: 29:61:cb:2e:f3:0c:db:e8:3c:75:a6:4d:06:f6:fd:2b:a5:77: b9:ba:c2:da:44:0d:5a:96:4b:12:4c:8c:97:cc:d0:1f:25:51: f5:47:dd:5e:a2:83:e1:8c:77:fd:c0:d5:f0:54:47:90:68:78: e9:5e:df:66:4d:71:12:5a:01:0c:8c:97:8f:03:da:f5:24:68: 67:9c:9b:77:e3:58:37:71:6f:73:09:b1:7d:c9:3a:4c:e6:71: 0b:ba:2a:87:da:95:4e:a5:aa:1f:a7:f6:bb:82:9a:72:a0:13: bd:8c:e8:a5:af:dc:f2:74:49:09:96:c8:2e:92:d0:f6:c6:51: e8:68:b3:ff:a9:1a:67:3e:a7:0f:ef:64:93:e8:e6:62:88:90: ee:c7:9b:e5:ad:4f:19:0b:73:72:6a:69:b7:eb:35:d6:ec:b2: 20:03:d6:00:d2:01:b8:57:c5:35:cd:fb:ad:c0:0c:4a:9b:c1: 20:3b:bd:a3:65:4e:91:85:78:f6:57:0a:c7:22:1e:96:89:db: 4f:5d:4f:56:43:42:da:de:43:c8:25:d9:9a:85:28:05:3e:cc: e3:65:76:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrvMURrAIwBj6kJVWqXK6yVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjUxMjA1MTU0NjE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2NlZmIxNTAxNTVlYTI4OGU1MzFkZTQ4Zjk5NmQ0ZDVmOTJiM2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2e+2dr2SnILSfBWXpei81QxqsOm9 NogSb46St67/+BBE6+5nj+nerDeuCOIjMLmRBmf48CItdQB4sPEbTqy7xuedPuXt /FIOwG9EDrml5MMS+zCE5+v4cMZFEmsWSPRhAjDbBLa1EX/i+ZYc+QVUFtoMAgSm nYE/5qPeAUO8XDR0fhbf7bN7lqtIqGFEcCoChptN1U91djU+DWpEqvYTZ2o+k1+D UYKaroLn9vxRqpf9CtcMA0FCSJaIBtUOyd9frH5nyjV+mITOhiWLQKe81bTJH8/K ZAcuvSMuRozNldAGfTKAM/PFFVdXngRLZ/w/TDCcQ2Uk8ye2/XceGjlpLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNzO+xUBVeoojlMd5I+ZbU1fkrOoMB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvM003N0ZRRlY2aWlPVXgza2o1bHRUVi1TczZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDWd5YMA0G CSqGSIb3DQEBCwUAA4IBAQCucNGhru5rI3IzqqjQKNXKMGHbAWq26uN63bM1zxXD 68ukm1QpYcsu8wzb6Dx1pk0G9v0rpXe5usLaRA1alksSTIyXzNAfJVH1R91eooPh jHf9wNXwVEeQaHjpXt9mTXESWgEMjJePA9r1JGhnnJt341g3cW9zCbF9yTpM5nEL uiqH2pVOpaofp/a7gppyoBO9jOilr9zydEkJlsguktD2xlHoaLP/qRpnPqcP72ST 6OZiiJDux5vlrU8ZC3Nyamm36zXW7LIgA9YA0gG4V8U1zfutwAxKm8EgO72jZU6R hXj2VwrHIh6WidtPXU9WQ0La3kPIJdmahSgFPszjZXY7 -----END CERTIFICATE-----Generated at Sat Dec 6 11:35:02 2025 by rpki-client