This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/S713gcjdnkNzN7yc5DeAIIBw450.roa File: S713gcjdnkNzN7yc5DeAIIBw450.roa (raw, json) Hash identifier: o4Y3l1bMTiDxCyLlapaxwgYpQHnFJpp2OPyiWQGZU7Y= Subject key identifier: 4B:BD:77:81:C8:DD:9E:43:73:37:BC:9C:E4:37:80:20:80:70:E3:9D Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 019B797DE190CFF43EBA4AF00B14DCE69608 Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/S713gcjdnkNzN7yc5DeAIIBw450.roa Signing time: Thu 01 Jan 2026 12:17:31 +0000 ROA not before: Thu 01 Jan 2026 12:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29646 IP address blocks: 89.30.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e1:90:cf:f4:3e:ba:4a:f0:0b:14:dc:e6:96:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Jan 1 12:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bbd7781c8dd9e437337bc9ce43780208070e39d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:94:a0:30:4b:c7:0b:7e:99:4e:1c:ad:2a:f6: d4:f1:11:d9:a5:56:0a:a8:5b:83:08:94:32:b9:4f: e2:a9:76:f7:f4:25:20:31:b2:5d:66:14:09:6a:bd: 00:48:d5:96:f8:3f:a3:cf:7e:4a:de:7d:b3:17:9d: ec:cb:03:65:13:4a:b6:4d:c9:2f:b8:fe:19:d3:a8: d0:9c:62:2b:8f:a9:a0:74:c4:0e:cd:6f:b1:87:63: da:61:a5:93:3d:99:2c:62:5c:83:b7:44:c3:c0:af: 23:8a:c0:85:1d:0d:5e:a8:f4:bc:6b:88:f1:22:05: ce:9b:92:5a:83:df:38:63:39:cc:d0:05:b3:30:0b: 43:49:39:d0:8c:43:98:6b:1c:ce:b4:52:e6:cb:97: e7:10:4f:07:49:bc:66:b4:b4:7f:c9:95:47:02:d7: 2f:42:5c:fe:e9:63:47:f7:35:a2:87:60:41:65:73: e7:c7:60:04:26:f3:e1:b9:9e:7e:82:2f:53:32:9e: 6f:86:45:9f:c8:11:ac:c7:bb:27:97:04:f3:e0:6c: 71:74:f6:6f:9a:f9:c6:48:76:b6:ce:0c:05:cd:a4: 6c:8c:ea:43:7b:bb:a3:e4:a3:34:90:bd:4b:f0:4f: e8:45:7c:f9:92:49:d7:af:ff:81:0c:9a:2f:34:7e: 9e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BD:77:81:C8:DD:9E:43:73:37:BC:9C:E4:37:80:20:80:70:E3:9D X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/S713gcjdnkNzN7yc5DeAIIBw450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.30.113.0/24 Signature Algorithm: sha256WithRSAEncryption c0:f8:7d:14:c5:d9:7d:18:20:3b:ac:e8:81:9a:8f:0e:dd:a3: 10:33:35:7d:91:10:47:22:bf:50:ed:7e:ef:ff:b0:c0:ed:de: d8:d7:d7:6f:22:29:01:52:95:9c:3f:dd:d6:6f:dd:dd:e5:fb: bf:07:86:81:86:e4:36:f2:1b:ab:69:aa:33:08:7b:a2:14:26: 2f:f4:ac:26:75:bc:ee:b4:c0:c6:b6:aa:06:11:cd:56:4e:8f: 00:0f:41:20:e0:b9:fa:95:60:0c:ad:96:02:63:39:7d:1f:64: ce:7e:54:6c:06:ef:25:39:17:d3:66:6b:02:1e:2b:94:68:25: 4c:68:c5:dd:c9:39:19:5c:f4:b2:ea:c0:b6:60:81:64:bd:80: 93:f2:8f:cd:8c:7f:ba:05:40:a3:a8:87:40:6e:87:27:28:b4: 13:f5:e1:aa:6e:61:73:d5:ef:fb:cb:14:73:09:81:48:b7:ad: 30:83:39:be:28:20:af:ae:b1:8b:0e:45:0b:ac:aa:ea:61:b1: 6c:2b:cd:0f:54:f4:8a:e8:2f:ef:84:12:9f:e3:79:ed:c5:da: f6:09:9b:c4:88:44:30:67:d3:95:4e:85:9e:0f:43:3a:a8:9c: 52:96:aa:c0:07:ba:88:6f:6e:18:2a:28:61:f7:6f:31:7b:46: a9:6e:09:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5feGQz/Q+ukrwCxTc5pYIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjYwMTAxMTIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmJkNzc4MWM4ZGQ5ZTQzNzMzN2JjOWNlNDM3ODAyMDgwNzBlMzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpSgMEvHC36ZThytKvbU8RHZpVYK qFuDCJQyuU/iqXb39CUgMbJdZhQJar0ASNWW+D+jz35K3n2zF53sywNlE0q2Tckv uP4Z06jQnGIrj6mgdMQOzW+xh2PaYaWTPZksYlyDt0TDwK8jisCFHQ1eqPS8a4jx IgXOm5Jag984YznM0AWzMAtDSTnQjEOYaxzOtFLmy5fnEE8HSbxmtLR/yZVHAtcv Qlz+6WNH9zWih2BBZXPnx2AEJvPhuZ5+gi9TMp5vhkWfyBGsx7snlwTz4GxxdPZv mvnGSHa2zgwFzaRsjOpDe7uj5KM0kL1L8E/oRXz5kknXr/+BDJovNH6eNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEu9d4HI3Z5Dcze8nOQ3gCCAcOOdMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvUzcxM2djamRua056Tjd5YzVEZUFJSUJ3NDUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWR5xMA0G CSqGSIb3DQEBCwUAA4IBAQDA+H0Uxdl9GCA7rOiBmo8O3aMQMzV9kRBHIr9Q7X7v /7DA7d7Y19dvIikBUpWcP93Wb93d5fu/B4aBhuQ28huraaozCHuiFCYv9Kwmdbzu tMDGtqoGEc1WTo8AD0Eg4Ln6lWAMrZYCYzl9H2TOflRsBu8lORfTZmsCHiuUaCVM aMXdyTkZXPSy6sC2YIFkvYCT8o/NjH+6BUCjqIdAbocnKLQT9eGqbmFz1e/7yxRz CYFIt60wgzm+KCCvrrGLDkULrKrqYbFsK80PVPSK6C/vhBKf43ntxdr2CZvEiEQw Z9OVToWeD0M6qJxSlqrAB7qIb24YKihh928xe0apbgkC -----END CERTIFICATE-----Generated at Sun Jan 25 21:28:18 2026 by rpki-client