This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/83Hhzbpcq9u3rAlSenX5Fv2FWuE.roa File: 83Hhzbpcq9u3rAlSenX5Fv2FWuE.roa (raw, json) Hash identifier: n636xUSAEOi83vEHAYmjzOzbkfAcLshDobM/hga+xOE= Subject key identifier: F3:71:E1:CD:BA:5C:AB:DB:B7:AC:09:52:7A:75:F9:16:FD:85:5A:E1 Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12 Certificate serial: 019A54C49ED3AF3E8ECC3C57200E37836FCA Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/83Hhzbpcq9u3rAlSenX5Fv2FWuE.roa Signing time: Wed 05 Nov 2025 16:06:03 +0000 ROA not before: Wed 05 Nov 2025 16:06:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212221 IP address blocks: 89.45.200.0/21 maxlen: 21 89.45.200.0/23 maxlen: 23 89.45.202.0/23 maxlen: 23 89.45.203.0/24 maxlen: 24 89.45.204.0/23 maxlen: 23 89.45.206.0/23 maxlen: 23 91.132.4.0/23 maxlen: 23 91.132.6.0/24 maxlen: 24 91.132.7.0/24 maxlen: 24 212.102.106.0/24 maxlen: 24 2a09:b780::/48 maxlen: 48 2a09:b780:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:54:c4:9e:d3:af:3e:8e:cc:3c:57:20:0e:37:83:6f:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12 Validity Not Before: Nov 5 16:06:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f371e1cdba5cabdbb7ac09527a75f916fd855ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c7:33:df:71:10:bc:3d:c6:33:2f:81:fd:b3: 0e:35:b4:97:91:ce:0c:64:91:a1:1f:ba:b6:ca:3d: 8e:cd:ce:33:ff:a4:9c:70:db:01:8b:e8:f6:2a:ce: 9b:17:c4:c1:b3:18:4e:ab:2a:a2:9e:c4:37:87:04: c9:11:fb:0e:3b:7a:50:a2:e5:00:ad:96:12:63:7e: 72:03:bf:fe:30:89:33:f9:bd:18:76:30:f7:d0:a0: 8f:00:88:76:ed:d8:29:bc:36:6b:ef:4b:28:fc:e8: 35:1a:61:07:e4:9b:a0:fd:b9:01:18:cc:97:9d:db: f1:ae:14:57:12:39:ea:df:43:dd:19:2c:7c:72:1e: e3:97:f2:37:b3:ca:10:ad:c2:22:ac:cb:92:bf:e3: 77:bd:75:07:9f:9f:f6:95:0b:85:0e:d9:b2:b3:8d: 72:ad:91:3b:15:5a:a8:08:bf:99:70:06:04:51:ac: bb:ac:0c:01:c3:68:40:4c:95:a2:aa:db:2e:52:95: 6d:93:5d:5b:11:a2:e3:d0:18:6f:93:50:eb:60:9b: 09:cc:90:2e:5a:46:ed:45:f5:00:7e:68:08:07:ba: cb:a8:43:e5:19:3e:32:73:15:b0:77:98:a1:4a:aa: d1:5c:e4:d5:22:f2:a8:72:04:b2:51:49:de:e2:be: 84:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:71:E1:CD:BA:5C:AB:DB:B7:AC:09:52:7A:75:F9:16:FD:85:5A:E1 X509v3 Authority Key Identifier: keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/83Hhzbpcq9u3rAlSenX5Fv2FWuE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.45.200.0/21 91.132.4.0/22 212.102.106.0/24 IPv6: 2a09:b780::/47 Signature Algorithm: sha256WithRSAEncryption 98:66:0d:58:82:e7:ea:6e:4e:b7:0d:3e:e9:98:29:d1:40:cc: 81:bd:a7:24:bd:46:d7:fa:62:0b:50:40:3c:c9:2c:41:b4:33: c1:88:5f:b0:b7:a1:94:2e:b0:88:c9:af:40:6d:d8:2f:20:fc: 8a:97:fd:27:15:bc:d6:57:11:dc:15:f4:89:6b:42:48:c2:23: c0:8b:65:f6:e2:36:9a:d6:40:cc:f8:06:f3:8a:fa:e6:e4:72: 88:dc:a8:2f:53:6c:22:db:0a:cf:70:12:fd:a0:32:da:36:81: 96:1e:e4:15:b0:24:f2:03:5f:cc:b8:c7:95:b1:f9:8a:35:a9: 18:e3:be:36:42:08:c4:53:e1:28:6f:c5:33:19:fb:84:67:9d: 2a:71:d8:8d:d3:9f:fc:30:6d:e3:5c:f0:58:ac:46:39:9c:96: ac:9e:dd:49:1c:7c:87:9b:89:c3:4e:61:2a:34:ff:b7:21:a6: 6e:28:92:f7:ae:05:87:32:84:e7:99:e3:22:c6:b0:84:90:f6: b2:8b:a7:46:f5:bf:c1:a5:73:2e:4e:2f:27:5c:ee:e9:15:98: 1f:53:41:1d:5d:a4:62:0a:3b:56:63:da:f7:0c:c5:52:6b:c9: 1b:c7:48:d2:91:59:1d:27:39:f6:ea:5b:fb:c3:a2:57:a7:77: 56:35:57:01 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZpUxJ7Trz6OzDxXIA43g2/KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MWEwZWNjMmI5YmVhYmE5ZWI3NmQ1NTE5ZmU3ODdiNDAz M2ZjMTIwHhcNMjUxMTA1MTYwNjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzcxZTFjZGJhNWNhYmRiYjdhYzA5NTI3YTc1ZjkxNmZkODU1YWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgccz33EQvD3GMy+B/bMONbSXkc4M ZJGhH7q2yj2Ozc4z/6SccNsBi+j2Ks6bF8TBsxhOqyqinsQ3hwTJEfsOO3pQouUA rZYSY35yA7/+MIkz+b0YdjD30KCPAIh27dgpvDZr70so/Og1GmEH5Jug/bkBGMyX ndvxrhRXEjnq30PdGSx8ch7jl/I3s8oQrcIirMuSv+N3vXUHn5/2lQuFDtmys41y rZE7FVqoCL+ZcAYEUay7rAwBw2hATJWiqtsuUpVtk11bEaLj0Bhvk1DrYJsJzJAu WkbtRfUAfmgIB7rLqEPlGT4ycxWwd5ihSqrRXOTVIvKocgSyUUne4r6ElwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFPNx4c26XKvbt6wJUnp1+Rb9hVrhMB8GA1UdIwQY MBaAFDkaDswrm+q6nrdtVRn+eHtAM/wSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JvT3pDdWI2cnFldDIxVkdmNTRlMEF6X0JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jMjdjZDEtNTcwYi00N2QxLWIyNTYt MTgxNDIyM2Q5MmNlLzEvODNIaHpicGNxOXUzckFsU2VuWDVGdjJGV3VFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9jMjdjZDEtNTcwYi00N2QxLWIyNTYtMTgxNDIyM2Q5MmNl LzEvT1JvT3pDdWI2cnFldDIxVkdmNTRlMEF6X0JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQDWS3IAwQC W4QEAwQA1GZqMA8EAgACMAkDBwEqCbeAAAAwDQYJKoZIhvcNAQELBQADggEBAJhm DViC5+puTrcNPumYKdFAzIG9pyS9Rtf6YgtQQDzJLEG0M8GIX7C3oZQusIjJr0Bt 2C8g/IqX/ScVvNZXEdwV9IlrQkjCI8CLZfbiNprWQMz4BvOK+ubkcojcqC9TbCLb Cs9wEv2gMto2gZYe5BWwJPIDX8y4x5Wx+Yo1qRjjvjZCCMRT4ShvxTMZ+4RnnSpx 2I3Tn/wwbeNc8FisRjmclqye3UkcfIebicNOYSo0/7chpm4okveuBYcyhOeZ4yLG sISQ9rKLp0b1v8Glcy5OLydc7ukVmB9TQR1dpGIKO1Zj2vcMxVJryRvHSNKRWR0n OfbqW/vDolend1Y1VwE= -----END CERTIFICATE-----Generated at Sat Dec 6 19:51:02 2025 by rpki-client