This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/nQFNeu7X8jhF_hYkgB_nf5Ez9BQ.roa File: nQFNeu7X8jhF_hYkgB_nf5Ez9BQ.roa (raw, json) Hash identifier: ZBjEA3fei6XvfeV6ptmhgKGBXb3jwzgluqEK4Nnm50o= Subject key identifier: 9D:01:4D:7A:EE:D7:F2:38:45:FE:16:24:80:1F:E7:7F:91:33:F4:14 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B09324CD0455978F23B356DD1FCFED0A4 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/nQFNeu7X8jhF_hYkgB_nf5Ez9BQ.roa Signing time: Wed 10 Dec 2025 16:57:29 +0000 ROA not before: Wed 10 Dec 2025 16:57:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 274208 IP address blocks: 89.190.152.0/22 maxlen: 22 89.190.152.0/24 maxlen: 24 89.190.153.0/24 maxlen: 24 89.190.154.0/24 maxlen: 24 89.190.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:32:4c:d0:45:59:78:f2:3b:35:6d:d1:fc:fe:d0:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Dec 10 16:57:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9d014d7aeed7f23845fe1624801fe77f9133f414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:31:75:0c:ef:76:37:f0:a1:68:59:f4:6e:35: a1:79:e6:21:4f:cd:12:7a:c9:d5:2a:cd:1b:52:22: b8:19:f8:e8:d2:d4:a3:d9:cb:1e:a5:6e:c4:3b:44: dc:de:11:92:83:17:87:8f:b9:1f:2f:9f:2e:98:10: d7:32:be:c4:0c:9f:3e:34:0b:fb:7e:00:c0:75:32: 28:d9:96:c1:2d:14:ec:b6:9a:b7:79:9d:25:e5:0a: f1:88:f9:36:79:62:de:e2:74:e1:0d:e5:9d:8a:3b: 59:c8:3a:b9:cd:5a:84:55:e8:0f:45:1d:4c:71:48: 1d:43:c7:12:aa:76:0e:a9:19:a4:97:ae:e7:ca:53: 36:76:56:5b:ff:93:0b:1d:07:e6:2d:cb:7a:4e:e3: 4c:61:ee:84:37:c5:9a:0b:35:79:29:95:c5:61:a2: 0f:b2:b2:13:98:15:2a:ac:a1:17:57:ff:8e:27:42: 71:c1:28:72:43:80:3f:42:17:f0:05:c3:a2:a3:75: 35:80:51:ae:60:b3:19:c0:af:09:0e:24:a7:60:ee: 86:33:ee:42:ca:65:87:18:da:46:7b:28:3a:ea:46: 78:9f:ee:84:62:ba:2b:93:39:b6:96:14:5c:e8:e0: 35:c8:96:59:b7:a5:43:4c:30:0c:69:42:1c:d9:f6: e1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:01:4D:7A:EE:D7:F2:38:45:FE:16:24:80:1F:E7:7F:91:33:F4:14 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/nQFNeu7X8jhF_hYkgB_nf5Ez9BQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.190.152.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:6b:85:74:62:16:19:bb:4a:28:72:35:70:6e:f5:9b:1e:ee: 62:f5:e1:fe:57:08:9a:24:f9:ec:73:13:59:76:21:b9:39:df: 5f:ee:28:c9:ce:2a:5e:d3:6f:b0:5a:0d:38:e1:8b:8d:ec:a1: 12:12:a9:6e:53:41:1f:31:fa:10:dd:86:33:c9:74:26:d8:23: d3:79:67:a2:7a:4a:3a:df:68:55:00:9a:66:84:fa:71:f6:97: 9c:b0:cb:a8:46:b9:75:43:7d:cd:13:5b:1e:41:df:39:d5:d5: 88:9c:8e:d1:68:20:a1:f1:eb:61:d0:ac:43:48:b5:80:de:76: 95:b6:ae:a6:a3:d1:87:5f:40:c6:26:a4:0d:cd:45:7d:f8:38: ce:92:3c:95:d0:9f:aa:7b:8e:53:8e:97:59:04:d3:f8:dc:7e: b5:f2:20:f9:93:d5:4c:d4:19:e7:0d:4e:bc:3a:9c:26:4e:45: 2d:d4:21:81:33:68:21:26:ec:6b:20:00:d7:86:ef:4e:b4:77: 0c:d7:ff:d0:9a:87:be:4a:8a:60:43:72:a6:61:20:04:3a:9b: ba:09:ee:05:91:38:86:6b:67:8f:94:35:e9:18:e2:26:e3:8b: a0:30:f8:a5:96:2c:cf:c0:ad:03:c4:94:27:d5:34:0c:1e:1b: 4e:4f:c2:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsJMkzQRVl48js1bdH8/tCkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjUxMjEwMTY1NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDAxNGQ3YWVlZDdmMjM4NDVmZTE2MjQ4MDFmZTc3ZjkxMzNmNDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzF1DO92N/ChaFn0bjWheeYhT80S esnVKs0bUiK4Gfjo0tSj2csepW7EO0Tc3hGSgxeHj7kfL58umBDXMr7EDJ8+NAv7 fgDAdTIo2ZbBLRTstpq3eZ0l5QrxiPk2eWLe4nThDeWdijtZyDq5zVqEVegPRR1M cUgdQ8cSqnYOqRmkl67nylM2dlZb/5MLHQfmLct6TuNMYe6EN8WaCzV5KZXFYaIP srITmBUqrKEXV/+OJ0JxwShyQ4A/QhfwBcOio3U1gFGuYLMZwK8JDiSnYO6GM+5C ymWHGNpGeyg66kZ4n+6EYrorkzm2lhRc6OA1yJZZt6VDTDAMaUIc2fbh1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ0BTXru1/I4Rf4WJIAf53+RM/QUMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvblFGTmV1N1g4amhGX2hZa2dCX25mNUV6OUJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWb6YMA0G CSqGSIb3DQEBCwUAA4IBAQCNa4V0YhYZu0oocjVwbvWbHu5i9eH+VwiaJPnscxNZ diG5Od9f7ijJzipe02+wWg044YuN7KESEqluU0EfMfoQ3YYzyXQm2CPTeWeieko6 32hVAJpmhPpx9pecsMuoRrl1Q33NE1seQd851dWInI7RaCCh8eth0KxDSLWA3naV tq6mo9GHX0DGJqQNzUV9+DjOkjyV0J+qe45TjpdZBNP43H618iD5k9VM1BnnDU68 OpwmTkUt1CGBM2ghJuxrIADXhu9OtHcM1//Qmoe+SopgQ3KmYSAEOpu6Ce4FkTiG a2ePlDXpGOIm44ugMPillizPwK0DxJQn1TQMHhtOT8JB -----END CERTIFICATE-----Generated at Sat Dec 20 14:06:24 2025 by rpki-client