This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/iff2qlM1lGSbTpZOlypT0drGDQ4.roa File: iff2qlM1lGSbTpZOlypT0drGDQ4.roa (raw, json) Hash identifier: UboO/3hVRgx6SpX0waWtNFB6b37t2Sc9jn8PB8IaxZE= Subject key identifier: 89:F7:F6:AA:53:35:94:64:9B:4E:96:4E:97:2A:53:D1:DA:C6:0D:0E Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c Certificate serial: 019A9AFC9C0E53C27ACDCF7536747A583AEE Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/iff2qlM1lGSbTpZOlypT0drGDQ4.roa Signing time: Wed 19 Nov 2025 07:20:37 +0000 ROA not before: Wed 19 Nov 2025 07:20:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 34847 IP address blocks: 86.107.76.0/24 maxlen: 24 89.33.119.0/24 maxlen: 24 89.33.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9a:fc:9c:0e:53:c2:7a:cd:cf:75:36:74:7a:58:3a:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c Validity Not Before: Nov 19 07:20:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=89f7f6aa533594649b4e964e972a53d1dac60d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:39:40:b0:32:78:91:4b:a4:3c:6d:01:fa:e4: e4:10:c3:b9:e0:9a:17:54:8f:df:c8:4c:eb:bc:53: 1b:7c:23:24:7a:38:5f:91:39:cf:9b:6c:0d:25:5d: 45:50:44:aa:c1:27:a1:80:4a:6b:31:40:61:58:b9: ed:9e:56:e1:70:84:de:d2:e0:e9:bf:90:5f:76:7f: 92:38:4c:e9:ef:64:ea:0a:63:34:c6:ba:db:86:cd: 74:a1:15:9f:79:fb:be:d4:0c:79:30:00:81:b3:9e: a9:93:db:d2:af:29:79:b6:16:ef:c8:27:a6:97:e2: 73:e3:0d:e0:db:c2:8a:c8:68:58:65:3b:f2:cb:bc: 29:ed:3d:d7:fc:8a:90:6a:f3:84:cc:1b:bd:18:ea: b9:86:84:29:37:43:f2:b8:a5:8f:9c:bc:a0:c1:3b: a7:fc:36:1a:3c:bc:72:cb:08:b5:34:52:51:8f:20: 1b:05:5c:51:05:37:20:62:60:de:71:ab:88:bc:da: 84:bc:03:5c:b2:15:06:ca:a1:74:a4:cc:4a:7d:b6: 5a:ae:2a:79:fd:33:78:9a:8c:9f:00:2c:74:03:e6: 33:ae:4b:5a:fb:85:0a:55:c8:88:90:76:39:8b:32: 69:fa:59:b2:e5:dc:65:30:12:e9:52:b7:7a:8e:66: d2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F7:F6:AA:53:35:94:64:9B:4E:96:4E:97:2A:53:D1:DA:C6:0D:0E X509v3 Authority Key Identifier: keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/iff2qlM1lGSbTpZOlypT0drGDQ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.107.76.0/24 89.33.119.0/24 89.33.244.0/24 Signature Algorithm: sha256WithRSAEncryption 46:49:79:4e:a8:16:99:ea:94:fd:cf:ca:27:f0:c4:05:fe:cd: b7:81:5f:2f:58:8a:54:8c:06:d1:9f:77:0b:fa:e5:0d:09:5d: bc:b0:25:16:21:38:ba:c9:e0:ac:79:9c:b7:9d:ce:fb:5a:dd: 12:34:2d:53:27:47:30:f8:97:76:9b:c8:a4:95:f3:c1:f1:c5: f6:45:01:fa:28:e1:65:8a:9c:42:f0:52:ed:ef:d2:5b:23:0e: 62:fe:f7:d7:e7:ea:71:5a:30:37:5a:83:77:06:66:49:e9:49: a8:56:6d:f1:ac:ea:5e:b8:0d:8d:2d:51:6b:51:66:3b:98:8d: 68:82:58:38:2e:89:be:17:ec:24:55:d1:5b:f0:02:76:ae:81: 9b:d2:7d:4b:c0:1d:2a:37:19:e5:d2:ca:34:81:d0:88:4e:f6: 3c:f1:ba:dc:ab:bf:52:95:29:bf:26:f1:10:66:ea:a7:bf:ee: 57:90:1a:7e:f6:18:15:5e:df:cd:49:03:da:cd:98:76:47:56: dd:2c:27:04:bb:0d:c8:3e:16:75:94:51:04:26:3c:bd:70:85: 1d:02:92:f4:99:3a:88:b1:1b:af:4f:cc:00:de:d4:fd:b7:7f: d4:64:c1:a8:d4:cf:36:d0:2b:d3:ce:2e:dc:30:5c:ef:9c:6b: f5:03:82:97 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqa/JwOU8J6zc91NnR6WDruMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm NmMxNGMwHhcNMjUxMTE5MDcyMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWY3ZjZhYTUzMzU5NDY0OWI0ZTk2NGU5NzJhNTNkMWRhYzYwZDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDlAsDJ4kUukPG0B+uTkEMO54JoX VI/fyEzrvFMbfCMkejhfkTnPm2wNJV1FUESqwSehgEprMUBhWLntnlbhcITe0uDp v5Bfdn+SOEzp72TqCmM0xrrbhs10oRWfefu+1Ax5MACBs56pk9vSryl5thbvyCem l+Jz4w3g28KKyGhYZTvyy7wp7T3X/IqQavOEzBu9GOq5hoQpN0PyuKWPnLygwTun /DYaPLxyywi1NFJRjyAbBVxRBTcgYmDecauIvNqEvANcshUGyqF0pMxKfbZarip5 /TN4moyfACx0A+Yzrkta+4UKVciIkHY5izJp+lmy5dxlMBLpUrd6jmbSvQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIn39qpTNZRkm06WTpcqU9Haxg0OMB8GA1UdIwQY MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt OTc3ODY3NGVkYzk3LzEvaWZmMnFsTTFsR1NiVHBaT2x5cFQwZHJHRFE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3 LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVmtMAwQA WSF3AwQAWSH0MA0GCSqGSIb3DQEBCwUAA4IBAQBGSXlOqBaZ6pT9z8on8MQF/s23 gV8vWIpUjAbRn3cL+uUNCV28sCUWITi6yeCseZy3nc77Wt0SNC1TJ0cw+Jd2m8ik lfPB8cX2RQH6KOFlipxC8FLt79JbIw5i/vfX5+pxWjA3WoN3BmZJ6UmoVm3xrOpe uA2NLVFrUWY7mI1oglg4Lom+F+wkVdFb8AJ2roGb0n1LwB0qNxnl0so0gdCITvY8 8brcq79SlSm/JvEQZuqnv+5XkBp+9hgVXt/NSQPazZh2R1bdLCcEuw3IPhZ1lFEE Jjy9cIUdApL0mTqIsRuvT8wA3tT9t3/UZMGo1M820CvTzi7cMFzvnGv1A4KX -----END CERTIFICATE-----Generated at Sun Dec 7 00:10:48 2025 by rpki-client