This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/cO3L_O9iH3CpAb6wfKqnzexaiZw.roa File: cO3L_O9iH3CpAb6wfKqnzexaiZw.roa (raw, json) Hash identifier: pj94KMfhjICUsVaoxZhEfK8uuBzuqSDVbcY5a+83gKk= Subject key identifier: 70:ED:CB:FC:EF:62:1F:70:A9:01:BE:B0:7C:AA:A7:CD:EC:5A:89:9C Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 019B797DE25C3457D57DEDF9B9383D5CE647 Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/cO3L_O9iH3CpAb6wfKqnzexaiZw.roa Signing time: Thu 01 Jan 2026 12:17:31 +0000 ROA not before: Thu 01 Jan 2026 12:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60331 IP address blocks: 89.30.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e2:5c:34:57:d5:7d:ed:f9:b9:38:3d:5c:e6:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Jan 1 12:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70edcbfcef621f70a901beb07caaa7cdec5a899c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:91:b6:83:e4:ff:37:c9:48:56:ac:1f:40:01: de:bd:78:bf:5c:db:12:f6:c7:ec:b2:27:7f:1d:09: 23:93:ad:f3:dc:fb:92:71:b2:31:fa:f9:d9:23:53: ff:f0:4f:7b:55:29:d8:55:3a:58:59:ea:f0:26:e8: 6d:20:0a:28:db:f3:bb:b9:98:47:31:ef:69:99:5c: dd:77:97:a6:48:a7:ac:9b:50:67:24:0c:3a:45:3a: 79:97:97:49:27:20:26:e0:7f:8c:28:22:3a:ed:62: f1:6b:59:29:64:a6:cb:e8:22:2a:5d:54:c0:f7:a8: 0e:92:95:b2:b1:0f:b4:fb:28:18:a8:26:a0:de:07: 29:0b:5c:6a:cd:3f:80:1c:e5:71:24:9a:74:57:3f: da:bd:20:4d:4b:1b:c4:e0:0f:f9:bd:9a:ec:93:6d: 71:c9:eb:f2:b1:db:13:b0:2c:8e:53:9f:9a:e7:64: f5:d2:c7:00:af:d0:02:45:64:4f:8e:27:d5:e8:1a: 8b:91:f5:6f:08:85:3c:d7:36:df:46:ea:f2:db:da: 88:e3:73:d0:7a:83:cc:33:e0:c0:41:3c:01:b8:c0: f4:12:4a:9d:fd:07:e6:38:fb:be:92:7e:26:81:0c: 26:69:fd:7a:d6:95:79:01:94:ce:9a:df:95:79:01: c9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:ED:CB:FC:EF:62:1F:70:A9:01:BE:B0:7C:AA:A7:CD:EC:5A:89:9C X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/cO3L_O9iH3CpAb6wfKqnzexaiZw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.30.106.0/24 Signature Algorithm: sha256WithRSAEncryption 03:7f:b2:db:e0:1f:c3:d6:46:b3:21:23:40:b9:85:43:42:7c: 1e:90:2b:c4:99:eb:e0:15:c7:20:93:42:1f:1f:50:32:a3:32: 10:9b:1a:8b:02:9e:9c:cc:cc:01:d6:86:24:5f:9c:3b:4c:73: 7c:04:91:ed:2a:6d:4c:63:f1:13:da:7b:a4:08:ad:a1:8e:f7: 4a:59:b1:f3:34:20:8d:82:3f:49:32:a3:31:1a:1e:d6:c8:77: 2f:7e:0b:6b:1e:78:48:13:9c:fc:ca:57:ab:f6:1a:cc:d0:29: 75:a8:09:0c:a0:4e:01:ff:71:05:82:db:55:60:bb:96:29:0e: ba:2d:fa:59:09:9b:ed:3f:b1:4e:e2:5f:f5:06:65:f0:02:d7: 83:77:18:4e:43:1a:5f:e9:1a:dd:cf:1a:0a:08:54:dd:f2:ee: 25:2a:27:df:87:ab:39:ef:5b:bd:95:32:53:37:7b:72:4e:c9: d8:86:76:c2:42:1c:75:0f:3c:21:b2:63:6d:42:31:81:33:cb: 43:6a:e0:74:b6:a0:75:b7:24:80:4b:e6:b3:b1:3c:d2:6b:5d: c5:27:c0:d8:da:b3:8f:b1:62:d2:9d:aa:84:fe:a8:bc:c8:da: 19:d6:77:c9:c7:90:1f:91:b8:80:4c:9c:f4:58:a9:bb:d5:db: 91:65:cc:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5feJcNFfVfe35uTg9XOZHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjYwMTAxMTIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGVkY2JmY2VmNjIxZjcwYTkwMWJlYjA3Y2FhYTdjZGVjNWE4OTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pG2g+T/N8lIVqwfQAHevXi/XNsS 9sfssid/HQkjk63z3PuScbIx+vnZI1P/8E97VSnYVTpYWerwJuhtIAoo2/O7uZhH Me9pmVzdd5emSKesm1BnJAw6RTp5l5dJJyAm4H+MKCI67WLxa1kpZKbL6CIqXVTA 96gOkpWysQ+0+ygYqCag3gcpC1xqzT+AHOVxJJp0Vz/avSBNSxvE4A/5vZrsk21x yevysdsTsCyOU5+a52T10scAr9ACRWRPjifV6BqLkfVvCIU81zbfRury29qI43PQ eoPMM+DAQTwBuMD0Ekqd/QfmOPu+kn4mgQwmaf161pV5AZTOmt+VeQHJvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHDty/zvYh9wqQG+sHyqp83sWomcMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvY08zTF9POWlIM0NwQWI2d2ZLcW56ZXhhaVp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWR5qMA0G CSqGSIb3DQEBCwUAA4IBAQADf7Lb4B/D1kazISNAuYVDQnwekCvEmevgFccgk0If H1AyozIQmxqLAp6czMwB1oYkX5w7THN8BJHtKm1MY/ET2nukCK2hjvdKWbHzNCCN gj9JMqMxGh7WyHcvfgtrHnhIE5z8yler9hrM0Cl1qAkMoE4B/3EFgttVYLuWKQ66 LfpZCZvtP7FO4l/1BmXwAteDdxhOQxpf6RrdzxoKCFTd8u4lKiffh6s571u9lTJT N3tyTsnYhnbCQhx1DzwhsmNtQjGBM8tDauB0tqB1tySAS+azsTzSa13FJ8DY2rOP sWLSnaqE/qi8yNoZ1nfJx5AfkbiATJz0WKm71duRZczk -----END CERTIFICATE-----Generated at Mon Jan 26 00:26:01 2026 by rpki-client