This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/j-RMRHJ23qu7rbAmxPP-MPbufuc.roa File: j-RMRHJ23qu7rbAmxPP-MPbufuc.roa (raw, json) Hash identifier: dJtuGeJTvCUEBM+hGg9srwzgusTpj+o/Wmaam12pfeg= Subject key identifier: 8F:E4:4C:44:72:76:DE:AB:BB:AD:B0:26:C4:F3:FE:30:F6:EE:7E:E7 Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17 Certificate serial: 019AC65B5FD1ECA9EDE89265D5184A3B3A76 Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/j-RMRHJ23qu7rbAmxPP-MPbufuc.roa Signing time: Thu 27 Nov 2025 17:27:48 +0000 ROA not before: Thu 27 Nov 2025 17:27:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206005 IP address blocks: 152.89.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c6:5b:5f:d1:ec:a9:ed:e8:92:65:d5:18:4a:3b:3a:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17 Validity Not Before: Nov 27 17:27:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8fe44c447276deabbbadb026c4f3fe30f6ee7ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b4:2d:2a:d3:05:f2:ac:d6:5f:d8:dd:4b:ee: d8:3e:6b:15:7e:80:b9:34:28:c3:de:b0:2c:77:fa: 5f:fc:36:4d:26:b3:53:00:1e:41:27:7b:3a:eb:b2: 22:6b:0a:57:58:27:ba:ba:8e:1c:18:2a:5b:a0:a1: af:92:c8:49:97:a9:eb:d3:46:fc:87:89:c5:cb:81: 23:a1:17:b3:9f:2a:ea:3e:0a:9a:19:d8:ef:7e:3f: 5b:53:fc:c3:e5:0b:f0:59:2d:0e:8a:2e:71:7c:10: 7e:75:a4:60:40:94:9e:6c:a7:8b:cc:2b:ac:7a:c9: 89:23:e7:c7:16:1b:70:62:be:af:22:4b:63:ee:02: 67:02:e7:13:d8:52:21:e8:3d:09:7d:04:9d:aa:25: d5:b6:28:3d:ac:19:c3:5c:8c:b0:91:1f:32:f7:d3: 46:e6:e7:50:47:f9:58:08:22:37:5b:69:a2:85:4d: c4:1a:e1:31:64:9f:c0:78:89:97:27:c8:32:bc:5e: e2:0d:25:64:5b:88:21:78:6f:04:ba:a0:39:af:47: 68:5e:63:75:f5:71:ba:b7:08:7c:4e:16:87:19:81: d3:5d:bd:fd:bf:58:18:91:cc:eb:bf:a7:43:75:4e: 46:b0:26:55:d9:bd:77:de:cc:56:9c:b3:e5:ff:40: b7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E4:4C:44:72:76:DE:AB:BB:AD:B0:26:C4:F3:FE:30:F6:EE:7E:E7 X509v3 Authority Key Identifier: keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/j-RMRHJ23qu7rbAmxPP-MPbufuc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.29.0/24 Signature Algorithm: sha256WithRSAEncryption 05:fe:ab:59:c6:60:2a:93:e4:dd:c6:6a:30:18:6e:36:cb:0f: 50:01:da:7d:77:0e:de:68:20:3c:ae:f8:83:a2:6b:42:39:8e: f4:5e:c0:df:86:53:d0:12:08:37:f5:03:64:00:4d:1c:77:11: a8:86:74:ed:13:cb:ce:74:f9:c4:0a:7c:2a:21:e5:f5:66:29: bb:88:e1:74:57:ab:df:df:df:e6:85:d2:fb:f8:6d:78:f2:85: 77:21:91:8d:f7:45:69:bf:cc:8b:80:af:69:a4:06:0a:84:33: 80:b1:4e:b0:60:f1:d1:9c:3c:27:ea:dd:bc:b5:52:86:72:9a: f9:4d:2a:ce:a6:21:82:f4:11:6d:a2:45:09:c7:87:82:3d:b5: 9b:b7:b8:b2:e5:8b:4b:5a:58:d5:4c:a1:14:9a:b3:98:19:81: 3f:10:54:52:32:27:e4:72:61:2c:d1:a8:b9:bb:a4:7c:26:7c: e2:a3:d4:92:7a:46:bd:81:16:d3:80:34:25:af:99:31:7a:ef: 36:f0:3f:ec:77:f6:b7:9d:69:f8:78:b6:5e:89:26:20:0e:82: 55:e2:36:98:d0:80:d5:4e:2d:e9:39:63:95:31:42:70:fe:48: cc:6c:6f:09:b0:7b:d3:5d:67:39:2c:33:c3:45:ed:45:84:c7: d1:b6:a6:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrGW1/R7Knt6JJl1RhKOzp2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODZjNzM5OTRkMDJkOTFmYzk3ZDkxNmU5ODA5YTZkOTgx ZTZiMTcwHhcNMjUxMTI3MTcyNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmU0NGM0NDcyNzZkZWFiYmJhZGIwMjZjNGYzZmUzMGY2ZWU3ZWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bQtKtMF8qzWX9jdS+7YPmsVfoC5 NCjD3rAsd/pf/DZNJrNTAB5BJ3s667IiawpXWCe6uo4cGCpboKGvkshJl6nr00b8 h4nFy4EjoReznyrqPgqaGdjvfj9bU/zD5QvwWS0Oii5xfBB+daRgQJSebKeLzCus esmJI+fHFhtwYr6vIktj7gJnAucT2FIh6D0JfQSdqiXVtig9rBnDXIywkR8y99NG 5udQR/lYCCI3W2mihU3EGuExZJ/AeImXJ8gyvF7iDSVkW4gheG8EuqA5r0doXmN1 9XG6twh8ThaHGYHTXb39v1gYkczrv6dDdU5GsCZV2b133sxWnLPl/0C32QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI/kTERydt6ru62wJsTz/jD27n7nMB8GA1UdIwQY MBaAFEmGxzmU0C2R/JfZFumAmm2YHmsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzIt OWU4OTVkMGVmOGQyLzEvai1STVJISjIzcXU3cmJBbXhQUC1NUGJ1ZnVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzItOWU4OTVkMGVmOGQy LzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmFkdMA0G CSqGSIb3DQEBCwUAA4IBAQAF/qtZxmAqk+TdxmowGG42yw9QAdp9dw7eaCA8rviD omtCOY70XsDfhlPQEgg39QNkAE0cdxGohnTtE8vOdPnECnwqIeX1Zim7iOF0V6vf 39/mhdL7+G148oV3IZGN90Vpv8yLgK9ppAYKhDOAsU6wYPHRnDwn6t28tVKGcpr5 TSrOpiGC9BFtokUJx4eCPbWbt7iy5YtLWljVTKEUmrOYGYE/EFRSMifkcmEs0ai5 u6R8Jnzio9SSeka9gRbTgDQlr5kxeu828D/sd/a3nWn4eLZeiSYgDoJV4jaY0IDV Ti3pOWOVMUJw/kjMbG8JsHvTXWc5LDPDRe1FhMfRtqa1 -----END CERTIFICATE-----Generated at Sat Dec 6 21:46:58 2025 by rpki-client