This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/icZTPv9OR5OTnhr1rHGcxCJ58Ak.roa File: icZTPv9OR5OTnhr1rHGcxCJ58Ak.roa (raw, json) Hash identifier: arprUL7p8dPltybL9Ima2iSVJ5V28bMQjBY9hAOORcM= Subject key identifier: 89:C6:53:3E:FF:4E:47:93:93:9E:1A:F5:AC:71:9C:C4:22:79:F0:09 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 019B797DE4B90A11DDA064106AB096630C67 Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/icZTPv9OR5OTnhr1rHGcxCJ58Ak.roa Signing time: Thu 01 Jan 2026 12:17:32 +0000 ROA not before: Thu 01 Jan 2026 12:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202187 IP address blocks: 89.30.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e4:b9:0a:11:dd:a0:64:10:6a:b0:96:63:0c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Jan 1 12:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89c6533eff4e4793939e1af5ac719cc42279f009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:75:cb:36:ca:59:b0:4e:ea:1b:6d:b9:7e:b9: f7:2a:90:b3:88:bc:7a:f1:1c:6a:f3:13:4a:b7:42: 79:9c:d4:4a:28:ed:fb:e7:69:92:8a:fe:4f:8d:d4: d3:43:e9:16:77:e9:22:a3:6a:63:35:3d:75:44:69: fa:44:97:55:f3:bc:39:28:e4:be:37:e7:a5:98:ce: 34:77:5f:c0:ef:f9:94:25:f0:a9:35:e1:fb:38:ca: 91:fc:5b:6e:2d:76:96:c4:d2:fc:ff:36:aa:fd:4a: d5:be:3a:50:f8:9a:5e:31:07:89:06:43:3b:4a:b6: a0:47:b4:ed:24:b4:16:28:6f:29:3a:26:a1:a4:4a: 1e:ea:94:6c:4f:ca:14:1b:ee:74:88:d0:b5:70:cc: 52:42:e5:24:e0:fe:3b:11:43:b7:7a:47:69:7c:89: d9:33:e9:18:d6:ee:51:e1:59:b6:3e:fd:0b:af:0a: 6c:ed:e5:c5:22:c4:e4:1e:67:f7:4b:75:6d:be:4a: dc:f6:57:29:59:a6:39:85:f9:bd:a1:5a:4c:8b:a5: 91:cd:02:00:fa:bb:4c:76:c1:0b:69:d5:9e:43:81: b5:11:16:62:9a:28:f7:fc:41:f4:74:49:57:48:28: 0a:87:8d:dc:59:99:21:10:77:3f:f7:cd:5d:4f:0e: 44:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C6:53:3E:FF:4E:47:93:93:9E:1A:F5:AC:71:9C:C4:22:79:F0:09 X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/icZTPv9OR5OTnhr1rHGcxCJ58Ak.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.30.108.0/24 Signature Algorithm: sha256WithRSAEncryption c7:27:5a:f0:8c:28:8e:bd:d7:02:7b:79:2e:fb:9d:55:c6:7f: 6a:a7:27:05:2a:b6:31:87:7f:ad:9e:d0:6a:f3:ce:54:79:de: 3a:db:9e:c8:e8:25:1e:06:5e:f8:32:2a:76:e4:e0:f1:bc:48: 54:45:14:d3:9c:e7:30:1c:11:85:64:b7:2f:78:ba:6c:1c:df: 8b:e1:de:bc:31:18:2b:63:e0:98:f1:d9:f8:f5:45:02:6e:21: 9c:ab:ce:57:1f:bb:1d:dd:96:e8:35:64:7b:81:5c:a2:de:38: 86:ca:9b:ae:54:f8:9f:37:04:87:50:4f:80:7e:ff:b1:a6:6a: 9f:86:f1:b2:ca:a4:fb:4e:0f:80:5b:ba:17:c1:24:c8:4f:be: 26:12:7a:f4:47:18:b7:c4:95:26:17:c6:4b:15:70:ce:83:18: a3:85:5a:68:2b:f8:13:10:21:4c:f8:93:6c:43:5f:6b:bd:18: f4:fa:34:c9:dd:df:b9:66:c7:eb:de:3a:cb:9b:57:82:02:35: 81:26:ab:2f:44:9c:8c:61:cd:d4:e2:e5:96:d2:74:43:15:48: d2:ac:bf:95:3c:3a:39:ce:6f:70:63:eb:9f:59:bb:ff:b1:3c: 02:25:58:66:6b:75:03:10:96:a4:63:6a:19:d7:ee:fb:04:99: fe:6b:dd:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5feS5ChHdoGQQarCWYwxnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjYwMTAxMTIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWM2NTMzZWZmNGU0NzkzOTM5ZTFhZjVhYzcxOWNjNDIyNzlmMDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HXLNspZsE7qG225frn3KpCziLx6 8Rxq8xNKt0J5nNRKKO3752mSiv5PjdTTQ+kWd+kio2pjNT11RGn6RJdV87w5KOS+ N+elmM40d1/A7/mUJfCpNeH7OMqR/FtuLXaWxNL8/zaq/UrVvjpQ+JpeMQeJBkM7 SragR7TtJLQWKG8pOiahpEoe6pRsT8oUG+50iNC1cMxSQuUk4P47EUO3ekdpfInZ M+kY1u5R4Vm2Pv0Lrwps7eXFIsTkHmf3S3Vtvkrc9lcpWaY5hfm9oVpMi6WRzQIA +rtMdsELadWeQ4G1ERZimij3/EH0dElXSCgKh43cWZkhEHc/981dTw5EjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFInGUz7/TkeTk54a9axxnMQiefAJMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvaWNaVFB2OU9SNU9UbmhyMXJIR2N4Q0o1OEFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWR5sMA0G CSqGSIb3DQEBCwUAA4IBAQDHJ1rwjCiOvdcCe3ku+51Vxn9qpycFKrYxh3+tntBq 885Ued46257I6CUeBl74Mip25ODxvEhURRTTnOcwHBGFZLcveLpsHN+L4d68MRgr Y+CY8dn49UUCbiGcq85XH7sd3ZboNWR7gVyi3jiGypuuVPifNwSHUE+Afv+xpmqf hvGyyqT7Tg+AW7oXwSTIT74mEnr0Rxi3xJUmF8ZLFXDOgxijhVpoK/gTECFM+JNs Q19rvRj0+jTJ3d+5Zsfr3jrLm1eCAjWBJqsvRJyMYc3U4uWW0nRDFUjSrL+VPDo5 zm9wY+ufWbv/sTwCJVhma3UDEJakY2oZ1+77BJn+a904 -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:26 2026 by rpki-client