This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/4PEBSYBvzkCsDVUQ66hb1Kfy5X4.roa File: 4PEBSYBvzkCsDVUQ66hb1Kfy5X4.roa (raw, json) Hash identifier: FKTV+GMV2F3rBs+0rAhquEp7r2XIbw+tGPzN2CvtSt0= Subject key identifier: E0:F1:01:49:80:6F:CE:40:AC:0D:55:10:EB:A8:5B:D4:A7:F2:E5:7E Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612 Certificate serial: 019B7BA319D0948A74C5CDE68B945559C94B Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/4PEBSYBvzkCsDVUQ66hb1Kfy5X4.roa Signing time: Thu 01 Jan 2026 22:17:25 +0000 ROA not before: Thu 01 Jan 2026 22:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 931 IP address blocks: 89.35.48.0/24 maxlen: 24 89.37.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:19:d0:94:8a:74:c5:cd:e6:8b:94:55:59:c9:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612 Validity Not Before: Jan 1 22:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0f10149806fce40ac0d5510eba85bd4a7f2e57e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b8:92:a8:9a:03:e0:b0:bb:44:bf:fe:90:15: 1c:52:ae:a7:81:bc:23:33:1d:e8:93:dd:1b:55:8f: 8b:c4:f4:99:31:a7:36:58:94:26:2d:4d:6c:aa:45: 79:a1:1b:15:cf:72:0f:16:0b:6b:a0:f3:67:f4:55: 24:40:97:b1:26:90:f5:d3:2d:93:0f:41:39:47:35: 47:01:03:03:e1:86:76:ad:50:bf:24:5e:b1:00:8c: 97:68:8f:21:d4:63:fd:47:fe:36:ba:71:56:a3:22: 93:4f:7c:e8:78:16:38:28:c3:4d:65:d7:2a:98:4e: ce:a8:74:0b:e5:e4:da:07:9b:42:ea:ba:d3:ec:56: ea:43:6a:c9:23:64:ed:43:79:7a:7c:24:2a:ac:12: 70:c7:06:61:eb:cb:90:83:b7:21:c1:8e:f7:2f:da: 23:21:24:fe:af:1a:01:1f:97:29:d4:3d:7d:c9:c8: 91:8e:cc:05:27:74:fb:7a:7b:63:f8:07:e3:4c:2b: 9e:2a:e6:4a:6c:2b:ca:9d:b4:0a:84:e0:cf:b1:35: 10:6f:a2:ee:5d:54:41:4c:ef:9a:f2:19:9d:b7:a4: ca:f7:a5:50:d5:8f:3b:fc:57:d2:b7:cf:63:65:89: 1d:64:b2:b5:4c:ae:b9:37:3f:5e:22:ed:c2:78:0b: 81:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F1:01:49:80:6F:CE:40:AC:0D:55:10:EB:A8:5B:D4:A7:F2:E5:7E X509v3 Authority Key Identifier: keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/4PEBSYBvzkCsDVUQ66hb1Kfy5X4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.35.48.0/24 89.37.99.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:1c:04:da:90:4e:cb:fa:83:43:41:45:e3:d4:b9:ee:ef:1f: 4b:13:4a:d0:84:a5:ca:7d:0a:14:b7:cd:55:3c:0f:02:d6:6a: f7:71:a2:92:d4:de:f3:e1:f0:92:95:06:80:8e:73:65:28:24: 4a:88:85:48:3b:70:86:57:1d:2f:db:9e:ed:b8:76:e4:2d:65: d7:28:04:d8:e8:f5:74:6a:aa:e9:18:06:16:4e:ea:da:ab:c5: e2:f0:96:c1:5f:b3:a4:a6:c4:ed:2c:d8:23:fc:7d:ac:d5:39: 56:11:79:b0:91:a8:fc:4d:d0:48:31:2e:00:e4:d1:99:05:72: 3f:b5:8f:a3:10:c5:75:ef:ba:05:49:80:f2:5f:7e:b9:a5:81: c6:a3:7e:9a:95:cf:9c:11:c4:9c:6b:6c:67:d5:98:f6:3d:99: 0f:ca:32:f1:93:e5:00:03:7a:24:9f:03:38:4b:5a:d0:1d:59: 6b:8b:91:d0:38:d5:d5:48:d3:49:07:d8:b0:b3:64:bd:28:20: d0:b4:d0:44:61:03:c1:d1:71:6b:79:80:1c:e1:6a:4a:f1:87: 2a:23:1c:21:71:74:0d:75:a0:f5:53:a4:a4:b7:cd:74:8d:6a: 3d:54:d6:a3:9f:1d:3d:8f:83:d8:83:5f:79:90:fb:ed:37:79: 2f:2d:39:ad -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7oxnQlIp0xc3mi5RVWclLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YmUwOTMwOTcwOTdjNDQ1N2ZmNWFhM2U1ODkzYzhjMTU0 MzI2MTIwHhcNMjYwMTAxMjIxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGYxMDE0OTgwNmZjZTQwYWMwZDU1MTBlYmE4NWJkNGE3ZjJlNTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7iSqJoD4LC7RL/+kBUcUq6ngbwj Mx3ok90bVY+LxPSZMac2WJQmLU1sqkV5oRsVz3IPFgtroPNn9FUkQJexJpD10y2T D0E5RzVHAQMD4YZ2rVC/JF6xAIyXaI8h1GP9R/42unFWoyKTT3zoeBY4KMNNZdcq mE7OqHQL5eTaB5tC6rrT7FbqQ2rJI2TtQ3l6fCQqrBJwxwZh68uQg7chwY73L9oj IST+rxoBH5cp1D19yciRjswFJ3T7entj+AfjTCueKuZKbCvKnbQKhODPsTUQb6Lu XVRBTO+a8hmdt6TK96VQ1Y87/FfSt89jZYkdZLK1TK65Nz9eIu3CeAuBtQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFODxAUmAb85ArA1VEOuoW9Sn8uV+MB8GA1UdIwQY MBaAFIe+CTCXCXxEV/9ao+WJPIwVQyYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMt MmNkZTY1ZjMxMTJhLzEvNFBFQlNZQnZ6a0NzRFZVUTY2aGIxS2Z5NVg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMtMmNkZTY1ZjMxMTJh LzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSMwAwQA WSVjMA0GCSqGSIb3DQEBCwUAA4IBAQAaHATakE7L+oNDQUXj1Lnu7x9LE0rQhKXK fQoUt81VPA8C1mr3caKS1N7z4fCSlQaAjnNlKCRKiIVIO3CGVx0v257tuHbkLWXX KATY6PV0aqrpGAYWTuraq8Xi8JbBX7OkpsTtLNgj/H2s1TlWEXmwkaj8TdBIMS4A 5NGZBXI/tY+jEMV177oFSYDyX365pYHGo36alc+cEcSca2xn1Zj2PZkPyjLxk+UA A3oknwM4S1rQHVlri5HQONXVSNNJB9iws2S9KCDQtNBEYQPB0XFreYAc4WpK8Ycq IxwhcXQNdaD1U6Skt810jWo9VNajnx09j4PYg195kPvtN3kvLTmt -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:50 2026 by rpki-client