This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/Fa0yONavCjEAe1Eohi0yspGlhxQ.roa File: Fa0yONavCjEAe1Eohi0yspGlhxQ.roa (raw, json) Hash identifier: 3eZFK3rqXv1duhuoTsoGkRZWH46FcIWfv4LFjn6GgpQ= Subject key identifier: 15:AD:32:38:D6:AF:0A:31:00:7B:51:28:86:2D:32:B2:91:A5:87:14 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 019B797DE2DF1A9D826645F4AA10A85D4F23 Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/Fa0yONavCjEAe1Eohi0yspGlhxQ.roa Signing time: Thu 01 Jan 2026 12:17:31 +0000 ROA not before: Thu 01 Jan 2026 12:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60737 IP address blocks: 89.30.86.0/24 maxlen: 24 89.30.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e2:df:1a:9d:82:66:45:f4:aa:10:a8:5d:4f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Jan 1 12:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15ad3238d6af0a31007b5128862d32b291a58714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7e:ee:8b:df:99:d1:87:f2:cc:12:42:41:07: 51:72:da:19:27:a7:7c:50:c7:01:65:1d:c2:d8:4d: 5d:21:2d:ef:f7:76:cf:8b:4e:79:36:44:bc:21:95: 60:cf:84:94:76:78:55:2c:aa:65:03:39:d4:36:d6: 3f:1d:f4:74:85:f7:e5:76:a5:6c:50:b5:95:91:49: 11:88:bb:57:ca:ad:68:f8:a1:44:3c:db:67:04:4e: e5:ca:9f:dd:e0:33:62:27:eb:16:30:ef:02:e9:48: 7a:07:00:b9:c4:b7:2e:a2:98:60:bd:04:c8:1a:be: 9d:82:b2:69:c2:98:96:ef:ad:a0:7f:78:e7:90:98: c3:7c:c2:a3:a6:25:05:e6:60:2a:ab:9a:4c:cc:08: 22:8b:4d:36:dd:ad:88:0d:a1:f2:bc:d2:8b:09:bb: e3:41:1c:4a:38:b9:2d:b1:7a:e7:8d:de:33:8d:4c: 29:d4:ad:c8:92:97:a5:00:0b:92:88:b4:21:24:65: 51:d3:69:94:49:7c:06:d5:8e:e5:ad:2a:96:3e:e7: 4d:94:82:a2:2c:43:52:61:d6:17:61:54:71:62:4c: 40:35:8a:58:2c:a7:45:a2:26:12:24:6e:5c:e1:ed: 17:d6:79:99:94:91:5e:3e:b4:d8:e8:a5:35:59:fa: 38:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:AD:32:38:D6:AF:0A:31:00:7B:51:28:86:2D:32:B2:91:A5:87:14 X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/Fa0yONavCjEAe1Eohi0yspGlhxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.30.86.0/24 89.30.95.0/24 Signature Algorithm: sha256WithRSAEncryption 61:13:63:49:fa:a3:11:ee:19:70:fe:c4:ed:58:96:0c:12:77: 2a:f9:ae:dd:2f:87:83:e0:91:bd:6c:8a:e2:26:b5:90:cb:b7: b9:07:75:9d:d9:01:3e:bc:6f:81:e2:0a:3a:19:85:5e:47:61: f4:8e:fd:43:9d:ef:27:e0:af:06:83:3b:7a:67:3a:aa:ba:4a: 15:00:96:19:b8:c2:0c:69:79:34:b5:55:f2:e0:10:e4:eb:f9: 55:fa:f0:45:71:7a:8c:e6:88:d5:0f:f5:71:f4:0e:c5:31:01: 3d:3a:d8:55:4b:87:3c:e4:ec:a6:dd:47:47:4a:12:4b:44:86: 94:1b:4f:0d:db:88:6f:d3:cc:65:15:d3:0e:a2:a3:b0:b2:ef: 2e:d3:f4:58:93:6a:f2:c9:35:22:d2:55:25:11:31:e1:ff:82: ed:93:27:41:b9:31:21:f6:94:27:07:8c:53:8e:21:3b:b5:58: 63:f5:90:64:59:8e:5b:24:e4:b4:d9:c3:35:66:46:ce:20:9a: 2f:60:e1:91:02:e1:84:1e:65:44:fe:46:e5:bb:43:a1:b6:0c: e1:ed:90:f7:8c:6d:60:28:10:8d:88:59:36:08:58:2d:40:f0: 38:38:da:59:38:17:0c:75:0c:f3:5f:83:88:74:0b:1b:52:67: 49:b8:8f:13 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5feLfGp2CZkX0qhCoXU8jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjYwMTAxMTIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWFkMzIzOGQ2YWYwYTMxMDA3YjUxMjg4NjJkMzJiMjkxYTU4NzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn7ui9+Z0YfyzBJCQQdRctoZJ6d8 UMcBZR3C2E1dIS3v93bPi055NkS8IZVgz4SUdnhVLKplAznUNtY/HfR0hffldqVs ULWVkUkRiLtXyq1o+KFEPNtnBE7lyp/d4DNiJ+sWMO8C6Uh6BwC5xLcuophgvQTI Gr6dgrJpwpiW762gf3jnkJjDfMKjpiUF5mAqq5pMzAgii0023a2IDaHyvNKLCbvj QRxKOLktsXrnjd4zjUwp1K3IkpelAAuSiLQhJGVR02mUSXwG1Y7lrSqWPudNlIKi LENSYdYXYVRxYkxANYpYLKdFoiYSJG5c4e0X1nmZlJFePrTY6KU1Wfo4OwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBWtMjjWrwoxAHtRKIYtMrKRpYcUMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvRmEweU9OYXZDakVBZTFFb2hpMHlzcEdsaHhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWR5WAwQA WR5fMA0GCSqGSIb3DQEBCwUAA4IBAQBhE2NJ+qMR7hlw/sTtWJYMEncq+a7dL4eD 4JG9bIriJrWQy7e5B3Wd2QE+vG+B4go6GYVeR2H0jv1Dne8n4K8Ggzt6ZzqqukoV AJYZuMIMaXk0tVXy4BDk6/lV+vBFcXqM5ojVD/Vx9A7FMQE9OthVS4c85Oym3UdH ShJLRIaUG08N24hv08xlFdMOoqOwsu8u0/RYk2ryyTUi0lUlETHh/4LtkydBuTEh 9pQnB4xTjiE7tVhj9ZBkWY5bJOS02cM1ZkbOIJovYOGRAuGEHmVE/kblu0Ohtgzh 7ZD3jG1gKBCNiFk2CFgtQPA4ONpZOBcMdQzzX4OIdAsbUmdJuI8T -----END CERTIFICATE-----Generated at Sun Jan 25 21:28:13 2026 by rpki-client