This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/0Td6CpG-ym_-K5b4WeUNjXePjUc.roa File: 0Td6CpG-ym_-K5b4WeUNjXePjUc.roa (raw, json) Hash identifier: 8r4ggp6PxqO1ZrZZe1PjZkrnXadGZdj4c8IAkyVPoI8= Subject key identifier: D1:37:7A:0A:91:BE:CA:6F:FE:2B:96:F8:59:E5:0D:8D:77:8F:8D:47 Certificate issuer: /CN=b9b350a0ae32e73e660c416c3f1406edd3615f82 Certificate serial: 019B7BA520E3185AC872806A3F3E6401A231 Authority key identifier: B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/0Td6CpG-ym_-K5b4WeUNjXePjUc.roa Signing time: Thu 01 Jan 2026 22:19:37 +0000 ROA not before: Thu 01 Jan 2026 22:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34226 IP address blocks: 89.107.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:20:e3:18:5a:c8:72:80:6a:3f:3e:64:01:a2:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b350a0ae32e73e660c416c3f1406edd3615f82 Validity Not Before: Jan 1 22:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1377a0a91beca6ffe2b96f859e50d8d778f8d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0d:13:3a:1c:1f:6a:dc:31:39:08:6e:49:63: 46:4c:ca:ef:b1:87:6d:db:ab:b6:10:c5:65:f7:bf: 5b:fa:5c:c9:21:00:a7:86:02:8a:7e:bc:78:b0:e2: 69:80:8a:99:58:4a:df:b0:dc:91:b3:3b:e5:5a:e7: ce:54:f7:a6:e9:ae:c8:9a:84:39:58:05:00:b4:bb: 35:fa:e2:c9:38:5e:7c:c0:8d:2d:74:3c:b2:04:e1: 21:95:a6:6f:78:18:72:f7:a6:e5:d3:2b:ac:03:ec: 81:43:b7:bb:88:3b:02:b5:06:c0:b7:2c:b5:c8:0b: 50:5b:25:d9:1d:07:0d:c1:ab:8a:ee:be:46:10:be: 69:43:c6:55:fc:a3:17:06:4c:ad:1c:f0:64:81:61: 2c:d0:47:d7:3d:f0:73:c9:06:6e:97:d1:c4:76:59: 75:37:d9:74:a4:ac:68:07:37:4f:4d:40:64:9f:19: 0e:8c:48:81:bd:b5:ab:59:2a:d4:79:e0:bd:cf:7a: ae:d8:04:3d:58:23:ad:0e:93:eb:ba:30:f8:61:41: e4:c6:7c:c0:51:af:47:95:85:4d:8b:f2:9b:07:ac: 06:84:0c:d0:bd:43:e0:3e:07:1b:a5:e8:62:f2:83: 95:56:4f:02:f9:ec:bd:6a:c5:04:95:f2:e2:b8:6c: 42:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:37:7A:0A:91:BE:CA:6F:FE:2B:96:F8:59:E5:0D:8D:77:8F:8D:47 X509v3 Authority Key Identifier: keyid:B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/0Td6CpG-ym_-K5b4WeUNjXePjUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.107.248.0/21 Signature Algorithm: sha256WithRSAEncryption ac:68:83:c3:5a:eb:93:4c:65:ce:6f:9f:f5:c7:25:fb:a8:18: 5b:1d:1f:7b:49:7d:4c:24:f9:ee:b8:76:3c:10:48:da:34:fb: 4a:f1:2a:c9:0d:87:dc:be:d0:30:5f:71:9d:cb:62:2c:54:11: d5:b7:29:cc:80:df:29:6a:ba:f0:bd:19:60:c6:7b:57:6a:d5: b4:06:14:0c:e2:32:f0:51:60:b3:ec:9a:78:ce:e0:7c:34:f8: da:46:75:c1:fa:c9:74:4c:8c:cf:d3:27:b6:a9:0d:83:6f:d4: c9:b3:80:ff:85:12:36:15:42:61:18:4a:74:3f:dd:65:98:c9: c0:99:e9:73:be:ba:22:24:86:97:3e:1c:31:e5:3c:bc:f6:7a: 74:ee:b3:86:37:bd:8b:65:38:04:05:7d:e5:45:3b:ea:5b:cc: 49:20:93:ea:17:ab:d2:3b:9b:fb:03:7b:ba:4c:e3:de:4f:02: bd:3e:93:ba:9a:75:56:02:83:d6:37:bb:77:9b:d0:31:ba:bf: 9d:74:f1:4d:7c:80:66:91:f5:41:6e:67:62:ad:58:b7:5a:c8: 9e:3e:b9:e1:6c:99:94:af:8f:b9:90:b2:95:81:ae:e7:f8:86: b6:36:c6:2b:1f:74:c4:0a:86:48:dd:4e:15:90:84:6f:06:00: 38:12:8e:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pSDjGFrIcoBqPz5kAaIxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YjM1MGEwYWUzMmU3M2U2NjBjNDE2YzNmMTQwNmVkZDM2 MTVmODIwHhcNMjYwMTAxMjIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTM3N2EwYTkxYmVjYTZmZmUyYjk2Zjg1OWU1MGQ4ZDc3OGY4ZDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg0TOhwfatwxOQhuSWNGTMrvsYdt 26u2EMVl979b+lzJIQCnhgKKfrx4sOJpgIqZWErfsNyRszvlWufOVPem6a7ImoQ5 WAUAtLs1+uLJOF58wI0tdDyyBOEhlaZveBhy96bl0yusA+yBQ7e7iDsCtQbAtyy1 yAtQWyXZHQcNwauK7r5GEL5pQ8ZV/KMXBkytHPBkgWEs0EfXPfBzyQZul9HEdll1 N9l0pKxoBzdPTUBknxkOjEiBvbWrWSrUeeC9z3qu2AQ9WCOtDpPrujD4YUHkxnzA Ua9HlYVNi/KbB6wGhAzQvUPgPgcbpehi8oOVVk8C+ey9asUElfLiuGxC4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNE3egqRvspv/iuW+FnlDY13j41HMB8GA1UdIwQY MBaAFLmzUKCuMuc+ZgxBbD8UBu3TYV+CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWJOUW9LNHk1ejVtREVGc1B4UUc3ZE5oWDRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82MjdlNjAtMDBhNi00ZDI2LWI5M2Et ZWY3M2I3YjRjYTNjLzEvMFRkNkNwRy15bV8tSzViNFdlVU5qWGVQalVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS82MjdlNjAtMDBhNi00ZDI2LWI5M2EtZWY3M2I3YjRjYTNj LzEvdWJOUW9LNHk1ejVtREVGc1B4UUc3ZE5oWDRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDWWv4MA0G CSqGSIb3DQEBCwUAA4IBAQCsaIPDWuuTTGXOb5/1xyX7qBhbHR97SX1MJPnuuHY8 EEjaNPtK8SrJDYfcvtAwX3Gdy2IsVBHVtynMgN8parrwvRlgxntXatW0BhQM4jLw UWCz7Jp4zuB8NPjaRnXB+sl0TIzP0ye2qQ2Db9TJs4D/hRI2FUJhGEp0P91lmMnA melzvroiJIaXPhwx5Ty89np07rOGN72LZTgEBX3lRTvqW8xJIJPqF6vSO5v7A3u6 TOPeTwK9PpO6mnVWAoPWN7t3m9Axur+ddPFNfIBmkfVBbmdirVi3WsiePrnhbJmU r4+5kLKVga7n+Ia2NsYrH3TECoZI3U4VkIRvBgA4Eo5w -----END CERTIFICATE-----Generated at Mon Jan 26 00:59:22 2026 by rpki-client