This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/VI02z2FHl_uy1YfJADZkMaattiI.roa File: VI02z2FHl_uy1YfJADZkMaattiI.roa (raw, json) Hash identifier: iGaV6V98vbELrIXxsPeIiB2rSTsDaubi3a7rszzR+rI= Subject key identifier: 54:8D:36:CF:61:47:97:FB:B2:D5:87:C9:00:36:64:31:A6:AD:B6:22 Certificate issuer: /CN=b9b350a0ae32e73e660c416c3f1406edd3615f82 Certificate serial: 019B7BA51FFED038F71F0C40124DC7C7A391 Authority key identifier: B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/VI02z2FHl_uy1YfJADZkMaattiI.roa Signing time: Thu 01 Jan 2026 22:19:37 +0000 ROA not before: Thu 01 Jan 2026 22:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29657 IP address blocks: 89.107.250.0/24 maxlen: 24 89.107.251.0/24 maxlen: 24 89.107.252.0/24 maxlen: 24 89.107.254.0/24 maxlen: 24 109.232.206.0/24 maxlen: 24 109.232.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:1f:fe:d0:38:f7:1f:0c:40:12:4d:c7:c7:a3:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b350a0ae32e73e660c416c3f1406edd3615f82 Validity Not Before: Jan 1 22:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=548d36cf614797fbb2d587c900366431a6adb622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9e:39:bf:33:88:36:d4:48:96:0d:1c:6b:62: ca:ad:53:90:c1:50:67:ba:87:7e:d8:0b:0f:20:49: da:f1:4a:1a:ba:d3:87:80:72:2f:97:7a:44:81:b3: 86:ef:e0:77:6b:f1:32:7e:14:50:f6:34:a0:60:23: 29:92:d1:09:d6:2a:7d:6a:fa:a5:67:00:0c:e2:7c: 56:b5:f0:6b:ba:e5:76:d0:55:fe:0c:42:92:26:90: eb:e1:e7:11:dd:fd:7e:6a:48:1e:f6:83:e9:0f:fb: c1:c0:95:96:de:38:b3:90:f6:53:62:6b:33:48:6a: 96:5b:d0:7d:d9:c8:a7:55:12:77:f5:f3:ea:2b:70: f4:e4:56:25:c5:73:f3:b5:dc:d7:03:ac:95:3b:d2: 22:b2:e5:09:00:78:23:ce:3f:37:83:07:2f:1d:1a: a6:e8:f1:95:2c:46:9a:c2:76:d3:1e:e3:0f:a1:ed: c4:f3:57:a9:a4:f8:67:83:ec:c6:64:8d:58:58:db: 45:04:0e:0a:a7:27:c9:7c:e3:cc:18:07:62:60:94: 5e:ca:8a:44:de:fc:86:68:f0:9d:5b:af:48:b3:d7: 19:e8:3b:d4:4e:a3:a4:f9:91:57:d0:7e:9f:be:01: 8c:21:bd:a8:da:e0:a3:1d:3a:ed:50:2e:7b:26:f5: 86:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:8D:36:CF:61:47:97:FB:B2:D5:87:C9:00:36:64:31:A6:AD:B6:22 X509v3 Authority Key Identifier: keyid:B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/VI02z2FHl_uy1YfJADZkMaattiI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.107.250.0-89.107.252.255 89.107.254.0/24 109.232.206.0/23 Signature Algorithm: sha256WithRSAEncryption cc:86:cb:f2:16:fd:79:cd:15:e1:30:29:69:b2:be:84:97:3c: 90:ff:94:af:9b:3e:f9:c4:cc:81:0e:1e:12:a4:07:8e:65:a0: 1e:18:1e:7a:d8:07:f7:25:82:84:f5:e1:49:78:ff:f0:6e:2a: c4:c0:41:24:aa:2f:49:64:65:ef:e6:02:3a:d5:5a:99:d2:83: de:83:ba:b9:92:69:ca:33:37:34:4d:c0:5c:ff:04:47:88:d3: 39:9a:8b:f9:15:bd:c6:78:c1:4f:39:b2:d2:13:0a:c3:cc:7e: 23:a8:b8:7a:6c:e9:db:92:ef:9b:f0:4f:0b:4a:28:32:2d:65: 04:8f:25:d0:45:08:bb:e2:07:c8:98:b0:72:bc:cb:f2:d5:35: c7:73:e4:ec:f8:52:f0:9b:d5:8d:21:df:45:28:42:3a:c2:f9: 30:76:2c:3b:e6:4e:9e:9a:f7:41:84:f4:8f:83:b4:0e:41:9f: 8c:98:9a:b2:34:4f:d3:5e:1c:ab:c3:21:fd:06:dd:69:00:0a: 7d:bb:67:58:8c:13:a9:77:a2:12:2e:34:16:69:bd:3f:c0:51: fb:51:3a:14:10:26:13:1f:cc:f4:4f:da:ee:b0:97:ba:89:96: 7f:f1:2d:3e:90:cc:6c:2b:40:02:ce:cf:d1:a6:a4:9c:75:6a: 72:b9:b3:5a -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt7pR/+0Dj3HwxAEk3Hx6ORMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YjM1MGEwYWUzMmU3M2U2NjBjNDE2YzNmMTQwNmVkZDM2 MTVmODIwHhcNMjYwMTAxMjIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDhkMzZjZjYxNDc5N2ZiYjJkNTg3YzkwMDM2NjQzMWE2YWRiNjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp45vzOINtRIlg0ca2LKrVOQwVBn uod+2AsPIEna8UoautOHgHIvl3pEgbOG7+B3a/EyfhRQ9jSgYCMpktEJ1ip9avql ZwAM4nxWtfBruuV20FX+DEKSJpDr4ecR3f1+akge9oPpD/vBwJWW3jizkPZTYmsz SGqWW9B92cinVRJ39fPqK3D05FYlxXPztdzXA6yVO9IisuUJAHgjzj83gwcvHRqm 6PGVLEaawnbTHuMPoe3E81eppPhng+zGZI1YWNtFBA4KpyfJfOPMGAdiYJReyopE 3vyGaPCdW69Is9cZ6DvUTqOk+ZFX0H6fvgGMIb2o2uCjHTrtUC57JvWGKwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFFSNNs9hR5f7stWHyQA2ZDGmrbYiMB8GA1UdIwQY MBaAFLmzUKCuMuc+ZgxBbD8UBu3TYV+CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWJOUW9LNHk1ejVtREVGc1B4UUc3ZE5oWDRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82MjdlNjAtMDBhNi00ZDI2LWI5M2Et ZWY3M2I3YjRjYTNjLzEvVkkwMnoyRkhsX3V5MVlmSkFEWmtNYWF0dGlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS82MjdlNjAtMDBhNi00ZDI2LWI5M2EtZWY3M2I3YjRjYTNj LzEvdWJOUW9LNHk1ejVtREVGc1B4UUc3ZE5oWDRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAFZa/oD BABZa/wDBABZa/4DBAFt6M4wDQYJKoZIhvcNAQELBQADggEBAMyGy/IW/XnNFeEw KWmyvoSXPJD/lK+bPvnEzIEOHhKkB45loB4YHnrYB/clgoT14Ul4//BuKsTAQSSq L0lkZe/mAjrVWpnSg96DurmSacozNzRNwFz/BEeI0zmai/kVvcZ4wU85stITCsPM fiOouHps6duS75vwTwtKKDItZQSPJdBFCLviB8iYsHK8y/LVNcdz5Oz4UvCb1Y0h 30UoQjrC+TB2LDvmTp6a90GE9I+DtA5Bn4yYmrI0T9NeHKvDIf0G3WkACn27Z1iM E6l3ohIuNBZpvT/AUftROhQQJhMfzPRP2u6wl7qJln/xLT6QzGwrQALOz9GmpJx1 anK5s1o= -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:49 2026 by rpki-client