This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5IcIbPr8iGEQYlN_TDiHedj5dbE.roa File: 5IcIbPr8iGEQYlN_TDiHedj5dbE.roa (raw, json) Hash identifier: njJPmMIMKRKGMh1kqL8OCP5pd6+TGvYQ7sgvasAjw8s= Subject key identifier: E4:87:08:6C:FA:FC:88:61:10:62:53:7F:4C:38:87:79:D8:F9:75:B1 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B45E58BAB2C1C846D3A88664D4BD5CC12 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5IcIbPr8iGEQYlN_TDiHedj5dbE.roa Signing time: Mon 22 Dec 2025 11:50:29 +0000 ROA not before: Mon 22 Dec 2025 11:50:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51396 IP address blocks: 89.45.35.0/24 maxlen: 24 176.223.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 14:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:e5:8b:ab:2c:1c:84:6d:3a:88:66:4d:4b:d5:cc:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Dec 22 11:50:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e487086cfafc88611062537f4c388779d8f975b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:57:a8:65:0e:94:d0:3a:92:2f:62:a7:b3:a9: cc:77:41:fd:21:bc:a1:ff:f8:a0:86:77:2d:bd:c1: 03:68:66:c5:f9:16:7b:50:2d:6f:e4:b4:b0:c3:b4: 7b:7f:6b:b5:e7:8e:21:78:e6:ab:fe:56:a9:65:df: 83:c8:1b:6c:a7:c0:ca:c7:ff:ba:14:ea:df:91:0b: 01:b8:df:b5:8b:72:77:78:99:23:9c:25:28:e4:d0: 95:32:69:c4:f1:7e:6c:e2:e7:a6:e6:62:2c:a2:b4: 46:a4:5e:25:bb:ae:5c:9d:a7:08:8d:45:fc:6d:35: e1:01:3d:8b:ec:54:01:21:7b:07:73:2d:01:62:5b: 48:15:83:b8:d5:a6:88:c7:8e:93:bb:7f:8c:e8:63: ef:f4:75:b4:13:f0:f5:2f:9b:ac:05:5a:ae:99:d8: 14:29:92:53:41:e4:c4:2b:52:f5:a7:2e:f4:a9:51: fd:b3:a6:3a:8d:1e:1e:c2:03:8f:a3:a6:93:7f:fd: 5f:bc:26:20:fd:7a:ac:c8:3b:80:d0:78:3c:57:78: c3:b9:ad:ad:60:fe:db:4a:17:62:2d:c0:d5:7b:ac: 0e:b7:25:ca:8a:ab:c2:a7:d8:45:70:4e:b9:e1:36: a4:95:8d:d1:d2:4e:05:b4:31:3a:00:02:2b:28:1e: d3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:87:08:6C:FA:FC:88:61:10:62:53:7F:4C:38:87:79:D8:F9:75:B1 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5IcIbPr8iGEQYlN_TDiHedj5dbE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.45.35.0/24 176.223.188.0/24 Signature Algorithm: sha256WithRSAEncryption 92:56:e1:00:98:df:9b:34:18:02:91:21:76:20:a9:36:d4:e7: ee:0e:67:c1:59:a5:15:24:79:4f:86:7c:82:f8:60:2a:63:6c: 40:dc:ac:63:8b:29:e5:85:22:c9:16:0f:cd:d5:78:43:63:4f: d8:39:c0:81:0b:d8:b7:2c:20:54:c4:69:fe:98:b9:2f:93:af: bb:1d:94:4f:3f:09:07:80:51:57:60:2b:bd:da:42:01:c1:bb: b5:3c:d1:47:bc:fd:79:a4:1f:c1:14:db:30:bf:e3:f5:34:02: 8c:ab:43:53:63:5f:bb:73:b8:c2:fc:30:ce:28:29:dc:4f:fe: 29:ff:9f:21:95:48:e7:b7:aa:bb:30:b0:37:b5:44:da:98:73: 67:04:85:d8:94:f0:0a:df:04:f2:80:3d:5c:5c:bb:37:84:51: 06:8d:08:08:09:75:b3:3a:81:03:19:af:80:03:66:9c:fb:31: bd:1f:91:76:a2:fb:e4:a1:77:01:f1:d8:c7:b5:bd:1c:58:5d: 58:5e:f4:24:14:f5:9f:53:9c:1a:93:b5:86:5c:d4:8b:fe:7d: 96:5e:ae:0e:18:b9:27:fc:82:d8:a5:f9:78:cd:95:4e:0d:67: f7:48:61:85:47:08:e5:17:4b:43:b8:e2:f3:9e:98:1a:fe:8a: 03:eb:c4:d1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZtF5YurLByEbTqIZk1L1cwSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjUxMjIyMTE1MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDg3MDg2Y2ZhZmM4ODYxMTA2MjUzN2Y0YzM4ODc3OWQ4Zjk3NWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFeoZQ6U0DqSL2Kns6nMd0H9Ibyh //ighnctvcEDaGbF+RZ7UC1v5LSww7R7f2u1544heOar/lapZd+DyBtsp8DKx/+6 FOrfkQsBuN+1i3J3eJkjnCUo5NCVMmnE8X5s4uem5mIsorRGpF4lu65cnacIjUX8 bTXhAT2L7FQBIXsHcy0BYltIFYO41aaIx46Tu3+M6GPv9HW0E/D1L5usBVqumdgU KZJTQeTEK1L1py70qVH9s6Y6jR4ewgOPo6aTf/1fvCYg/XqsyDuA0Hg8V3jDua2t YP7bShdiLcDVe6wOtyXKiqvCp9hFcE654TaklY3R0k4FtDE6AAIrKB7T6QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOSHCGz6/IhhEGJTf0w4h3nY+XWxMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvNUljSWJQcjhpR0VRWWxOX1REaUhlZGo1ZGJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWS0jAwQA sN+8MA0GCSqGSIb3DQEBCwUAA4IBAQCSVuEAmN+bNBgCkSF2IKk21OfuDmfBWaUV JHlPhnyC+GAqY2xA3KxjiynlhSLJFg/N1XhDY0/YOcCBC9i3LCBUxGn+mLkvk6+7 HZRPPwkHgFFXYCu92kIBwbu1PNFHvP15pB/BFNswv+P1NAKMq0NTY1+7c7jC/DDO KCncT/4p/58hlUjnt6q7MLA3tUTamHNnBIXYlPAK3wTygD1cXLs3hFEGjQgICXWz OoEDGa+AA2ac+zG9H5F2ovvkoXcB8djHtb0cWF1YXvQkFPWfU5wak7WGXNSL/n2W Xq4OGLkn/ILYpfl4zZVODWf3SGGFRwjlF0tDuOLznpga/ooD68TR -----END CERTIFICATE-----Generated at Tue Dec 23 16:50:45 2025 by rpki-client