This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/avzn6A_pWBrabxjlAavnKqw_f3A.roa File: avzn6A_pWBrabxjlAavnKqw_f3A.roa (raw, json) Hash identifier: RsPQBJwMuWYCIBFp0+5KeIMlRNFaAK6tETn8Q5OI1EM= Subject key identifier: 6A:FC:E7:E8:0F:E9:58:1A:DA:6F:18:E5:01:AB:E7:2A:AC:3F:7F:70 Certificate issuer: /CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133 Certificate serial: 019A923F0FC847F6C1F591A75C738B607C16 Authority key identifier: 4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/avzn6A_pWBrabxjlAavnKqw_f3A.roa Signing time: Mon 17 Nov 2025 14:36:37 +0000 ROA not before: Mon 17 Nov 2025 14:36:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215373 IP address blocks: 89.47.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:92:3f:0f:c8:47:f6:c1:f5:91:a7:5c:73:8b:60:7c:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133 Validity Not Before: Nov 17 14:36:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6afce7e80fe9581ada6f18e501abe72aac3f7f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:65:73:ce:f0:04:5a:f3:e3:b6:b4:70:fe:17: c7:32:5b:18:91:ea:a7:14:2d:23:79:67:a2:89:0f: 18:42:07:ad:a6:a4:d0:07:ea:47:94:35:34:a2:d1: 53:4d:38:0f:89:71:43:f8:1c:e4:47:1e:17:b0:2a: 2a:a6:26:73:2d:af:94:ad:5b:fc:85:4f:fe:ca:b2: 47:45:a0:d4:bd:10:d8:b0:49:1f:72:c9:b9:91:93: 90:50:3f:cf:52:54:78:ab:b6:93:c8:36:d9:79:06: 5d:cb:ec:3c:5d:90:48:66:9b:e3:7c:79:98:51:fd: 22:33:12:88:23:3a:5e:6f:35:0d:67:62:5f:b8:1e: c9:d9:30:ff:49:ca:95:e7:fb:91:96:38:61:e3:a8: b6:9b:a3:e3:5f:b9:c0:b4:5c:c6:39:78:a5:a8:45: b1:a2:61:77:3a:9c:10:93:c8:13:1d:5d:1e:6a:32: 68:b9:a5:56:c8:b3:a0:b0:9d:67:64:74:50:d7:ef: 26:7f:3b:b5:c4:4e:4f:53:8c:62:3f:5d:73:27:80: 51:dc:c3:c2:1f:eb:42:0a:41:7e:bd:6d:c2:6b:80: 6c:b5:dd:d4:8e:de:28:af:fd:ca:ab:7e:b6:ae:ca: 0b:3a:a2:a3:3d:7e:df:37:f6:21:e1:7f:4d:7e:2f: c8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:FC:E7:E8:0F:E9:58:1A:DA:6F:18:E5:01:AB:E7:2A:AC:3F:7F:70 X509v3 Authority Key Identifier: keyid:4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/avzn6A_pWBrabxjlAavnKqw_f3A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.47.175.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:6c:59:05:51:65:e8:d0:e7:1e:71:9c:a9:92:f3:a5:40:2c: a9:80:84:d2:84:b6:ef:a8:bf:f7:e6:6b:06:8f:47:0f:dc:b4: 72:ee:22:5a:51:fa:6f:aa:09:b2:7e:f1:ae:a6:b5:ba:b1:c9: 48:ec:11:d4:a4:33:e9:a4:30:ef:e6:05:fb:0c:11:9f:e0:89: 3f:cf:fc:e9:f6:a4:2b:46:72:3e:c1:14:86:bb:9e:3e:64:fc: e1:04:83:6b:f7:b6:eb:ad:6e:a6:3b:02:7e:e4:da:83:ff:cb: 47:d7:03:50:85:79:ae:8d:4a:90:b8:4b:bc:22:e7:0d:16:4e: 2d:b3:eb:94:a0:61:d3:93:ac:34:fc:08:1a:e0:4d:a1:f5:7c: 50:a1:0f:49:b9:59:a7:a9:1d:72:b5:32:eb:db:d7:aa:04:a2: 3e:b6:30:88:3b:95:92:1b:99:2f:38:e0:bf:c5:16:c4:3a:4d: 05:a3:ba:d4:69:ee:b2:b0:1b:26:c4:d4:b9:66:d2:65:6f:7c: 1e:3f:02:ed:7b:d1:4a:87:d4:6e:c7:0b:fe:a1:da:75:bd:49: d7:2b:b5:9d:5c:09:6b:e9:a8:1b:e3:6d:f0:0a:96:e8:13:cb: 41:9d:e0:53:39:e2:c8:b1:ba:c4:ea:47:d1:98:36:aa:7a:ca: 64:91:58:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqSPw/IR/bB9ZGnXHOLYHwWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhYWU0MmEyN2U3YmMyY2MzNTA3ZWZhN2UzY2JjMjlkMzJl ZWExMzMwHhcNMjUxMTE3MTQzNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWZjZTdlODBmZTk1ODFhZGE2ZjE4ZTUwMWFiZTcyYWFjM2Y3ZjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGVzzvAEWvPjtrRw/hfHMlsYkeqn FC0jeWeiiQ8YQgetpqTQB+pHlDU0otFTTTgPiXFD+BzkRx4XsCoqpiZzLa+UrVv8 hU/+yrJHRaDUvRDYsEkfcsm5kZOQUD/PUlR4q7aTyDbZeQZdy+w8XZBIZpvjfHmY Uf0iMxKIIzpebzUNZ2JfuB7J2TD/ScqV5/uRljhh46i2m6PjX7nAtFzGOXilqEWx omF3OpwQk8gTHV0eajJouaVWyLOgsJ1nZHRQ1+8mfzu1xE5PU4xiP11zJ4BR3MPC H+tCCkF+vW3Ca4Bstd3Ujt4or/3Kq362rsoLOqKjPX7fN/Yh4X9Nfi/IgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGr85+gP6Vga2m8Y5QGr5yqsP39wMB8GA1UdIwQY MBaAFEquQqJ+e8LMNQfvp+PLwp0y7qEzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3E1Q29uNTd3c3cxQi0tbjQ4dkNuVEx1b1RNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82MmYyNWYtOGIxYi00MTViLTlmYzgt Y2M5MzVjZDczNjMyLzEvYXZ6bjZBX3BXQnJhYnhqbEFhdm5LcXdfZjNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC82MmYyNWYtOGIxYi00MTViLTlmYzgtY2M5MzVjZDczNjMy LzEvU3E1Q29uNTd3c3cxQi0tbjQ4dkNuVEx1b1RNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWS+vMA0G CSqGSIb3DQEBCwUAA4IBAQBbbFkFUWXo0OcecZypkvOlQCypgITShLbvqL/35msG j0cP3LRy7iJaUfpvqgmyfvGuprW6sclI7BHUpDPppDDv5gX7DBGf4Ik/z/zp9qQr RnI+wRSGu54+ZPzhBINr97brrW6mOwJ+5NqD/8tH1wNQhXmujUqQuEu8IucNFk4t s+uUoGHTk6w0/Aga4E2h9XxQoQ9JuVmnqR1ytTLr29eqBKI+tjCIO5WSG5kvOOC/ xRbEOk0Fo7rUae6ysBsmxNS5ZtJlb3wePwLte9FKh9Ruxwv+odp1vUnXK7WdXAlr 6agb423wCpboE8tBneBTOeLIsbrE6kfRmDaqespkkVjO -----END CERTIFICATE-----Generated at Sat Dec 6 16:17:58 2025 by rpki-client