This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/89TNYzq_U7xA7Y9BxvWtQuf55Qw.roa File: 89TNYzq_U7xA7Y9BxvWtQuf55Qw.roa (raw, json) Hash identifier: gJOB7b6DwbK+XopIODXerFY7Dl/1i2NMhMaK+LjT9Lk= Subject key identifier: F3:D4:CD:63:3A:BF:53:BC:40:ED:8F:41:C6:F5:AD:42:E7:F9:E5:0C Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce Certificate serial: 019B7F139630FF16D7FB708C67474EA28A19 Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/89TNYzq_U7xA7Y9BxvWtQuf55Qw.roa Signing time: Fri 02 Jan 2026 14:19:08 +0000 ROA not before: Fri 02 Jan 2026 14:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43852 IP address blocks: 62.215.174.0/24 maxlen: 24 62.215.221.0/24 maxlen: 24 185.95.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:96:30:ff:16:d7:fb:70:8c:67:47:4e:a2:8a:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce Validity Not Before: Jan 2 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3d4cd633abf53bc40ed8f41c6f5ad42e7f9e50c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b8:fc:42:8a:b0:54:1f:4a:d6:7e:74:0a:82: 3c:47:2b:64:18:44:33:5b:7c:a0:82:77:a0:84:6f: 4f:f5:c5:5d:6f:b5:dd:d3:6a:66:81:bd:00:a8:ff: ad:95:2d:f6:21:9a:86:a6:39:51:83:10:c9:35:ea: 50:45:e5:b7:72:aa:d9:58:7d:07:1c:1e:c1:cd:53: bf:d4:ef:77:14:7b:1d:21:1f:94:d9:03:0d:2b:ae: d5:cd:71:c9:55:c2:51:20:d2:fa:50:9a:0b:e9:7f: 03:e4:f0:15:55:26:12:5c:2e:c5:20:be:d5:8c:bb: 70:59:f1:56:9a:0a:27:0d:c8:7a:6c:51:ef:61:a0: aa:82:3a:56:0d:73:4d:00:91:8c:26:ee:b1:51:b7: 44:91:97:de:8e:84:51:e4:6a:e8:0f:32:0a:d0:72: c6:b0:dd:f8:63:b1:df:a6:fd:30:49:b7:d4:41:bf: 2d:c7:c2:5b:94:4a:3a:87:47:fe:7a:ed:14:b7:57: 6b:a6:b8:81:84:98:1b:df:f5:16:73:be:b7:10:68: fd:0c:76:14:ad:fb:c4:cd:3e:4a:17:8f:f6:13:4d: 9f:6c:19:ee:e9:96:e9:50:b9:b0:5b:ea:68:08:ba: d1:88:bc:6f:ac:d9:1f:af:8c:e4:97:c6:6b:5d:91: 9d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D4:CD:63:3A:BF:53:BC:40:ED:8F:41:C6:F5:AD:42:E7:F9:E5:0C X509v3 Authority Key Identifier: keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/89TNYzq_U7xA7Y9BxvWtQuf55Qw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.215.174.0/24 62.215.221.0/24 185.95.6.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:d2:62:2a:09:51:bb:cf:82:9e:e5:d6:11:6c:44:d8:71:b9: d6:17:3e:64:24:64:48:4f:99:07:24:0e:58:d2:41:4c:e3:a3: f6:3c:9e:ca:db:3e:9c:69:56:cf:e1:c0:73:30:9c:a8:98:fa: 1b:37:05:36:e2:83:c4:20:59:40:d1:ad:77:bf:9d:db:fa:9e: 5d:5d:c7:2f:5f:4c:1b:7f:d3:4e:8d:1d:f6:31:c7:93:17:7b: c8:ed:1c:73:b7:04:46:e4:04:9e:65:0b:ce:07:cc:9e:e4:11: 08:7f:d3:9c:31:16:eb:82:ca:6b:23:b8:5f:d1:76:3c:70:b5: d1:c8:4f:eb:aa:92:33:5a:0c:ca:26:ff:d2:26:f2:5a:c3:4a: 07:a0:5b:06:06:5d:f2:b3:df:c9:9e:22:36:1b:b2:c5:36:5a: 4a:11:61:c2:5f:72:82:bc:c1:54:ed:ad:f9:7a:8b:a7:48:bb: 27:ae:d3:29:13:5f:e1:f5:fc:2c:11:92:d8:22:d0:22:40:cd: d1:ff:37:4b:29:29:7a:be:1d:27:cf:1f:e8:ba:5a:d2:75:96: d7:87:bb:84:0e:37:7d:b2:9a:ba:fc:91:27:30:56:ae:37:a4: cc:9c:5c:cd:95:3f:9f:b2:14:aa:15:72:59:0e:92:6e:fe:45: 8c:50:9f:61 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/E5Yw/xbX+3CMZ0dOoooZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZmZhMDQyMTE0MzAxMzY4YjQwNjlhYmQ2OGExZWZiYWM0 N2ZkY2UwHhcNMjYwMTAyMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2Q0Y2Q2MzNhYmY1M2JjNDBlZDhmNDFjNmY1YWQ0MmU3ZjllNTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bj8QoqwVB9K1n50CoI8RytkGEQz W3yggneghG9P9cVdb7Xd02pmgb0AqP+tlS32IZqGpjlRgxDJNepQReW3cqrZWH0H HB7BzVO/1O93FHsdIR+U2QMNK67VzXHJVcJRINL6UJoL6X8D5PAVVSYSXC7FIL7V jLtwWfFWmgonDch6bFHvYaCqgjpWDXNNAJGMJu6xUbdEkZfejoRR5GroDzIK0HLG sN34Y7Hfpv0wSbfUQb8tx8JblEo6h0f+eu0Ut1drpriBhJgb3/UWc763EGj9DHYU rfvEzT5KF4/2E02fbBnu6ZbpULmwW+poCLrRiLxvrNkfr4zkl8ZrXZGdjwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPPUzWM6v1O8QO2PQcb1rULn+eUMMB8GA1UdIwQY MBaAFBX/oEIRQwE2i0Bpq9aKHvusR/3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMt YjczYTM2ZDkzOWIyLzEvODlUTll6cV9VN3hBN1k5Qnh2V3RRdWY1NVF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMtYjczYTM2ZDkzOWIy LzEvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPteuAwQA PtfdAwQAuV8GMA0GCSqGSIb3DQEBCwUAA4IBAQCe0mIqCVG7z4Ke5dYRbETYcbnW Fz5kJGRIT5kHJA5Y0kFM46P2PJ7K2z6caVbP4cBzMJyomPobNwU24oPEIFlA0a13 v53b+p5dXccvX0wbf9NOjR32MceTF3vI7RxztwRG5ASeZQvOB8ye5BEIf9OcMRbr gsprI7hf0XY8cLXRyE/rqpIzWgzKJv/SJvJaw0oHoFsGBl3ys9/JniI2G7LFNlpK EWHCX3KCvMFU7a35eounSLsnrtMpE1/h9fwsEZLYItAiQM3R/zdLKSl6vh0nzx/o ulrSdZbXh7uEDjd9spq6/JEnMFauN6TMnFzNlT+fshSqFXJZDpJu/kWMUJ9h -----END CERTIFICATE-----Generated at Mon Jan 26 07:57:47 2026 by rpki-client