This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/h2mTI89G79vzZdTXcNgpiY_bSuE.roa File: h2mTI89G79vzZdTXcNgpiY_bSuE.roa (raw, json) Hash identifier: qa2BzNyouPFY7/V6+HRcQ7umJPtaaWKwpg9jeFVJFSE= Subject key identifier: 87:69:93:23:CF:46:EF:DB:F3:65:D4:D7:70:D8:29:89:8F:DB:4A:E1 Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Certificate serial: 019B7834F63D935F56BBD824487BF3B60A7F Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/h2mTI89G79vzZdTXcNgpiY_bSuE.roa Signing time: Thu 01 Jan 2026 06:18:15 +0000 ROA not before: Thu 01 Jan 2026 06:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21473 IP address blocks: 152.89.92.0/22 maxlen: 24 2a0c:6b00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f6:3d:93:5f:56:bb:d8:24:48:7b:f3:b6:0a:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Validity Not Before: Jan 1 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87699323cf46efdbf365d4d770d829898fdb4ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:58:1f:f1:bc:d3:f3:e9:51:84:83:8d:1f:e5: a4:5a:86:0c:28:3f:10:d5:e2:ea:03:ba:d0:1d:7a: 93:c3:04:b3:94:9d:19:0d:79:52:fb:75:9d:a7:56: 5a:27:b4:89:73:0f:51:5f:15:1a:9e:6b:7e:e7:42: 73:ef:e1:83:50:e0:59:18:a8:f1:dc:a2:36:79:2e: da:73:88:21:48:a5:4a:97:11:53:27:e9:7b:6d:46: db:72:41:fb:57:2e:ab:2b:75:c2:1e:f2:3c:18:58: 2a:c9:bd:a1:68:1b:cd:f8:50:ca:5a:08:58:51:29: 86:b2:bf:e9:54:32:88:f5:d8:09:0f:c5:10:6d:95: 19:01:f2:68:a0:82:31:8c:65:74:f0:b8:9c:18:81: 2b:37:46:36:e2:bb:9f:ab:76:54:5f:a4:39:16:85: 9b:27:99:62:84:34:04:a7:72:45:9e:ef:95:9f:1d: ee:d1:4e:83:59:fd:df:ae:ea:b6:68:1a:69:cb:d4: 59:ad:20:75:fc:51:ee:b0:b4:95:1d:9d:d9:f0:02: b1:8b:fc:f5:11:3f:6a:88:56:f0:37:66:87:73:6a: 16:d8:0a:a8:65:27:e3:0f:a9:e1:17:2f:c0:34:45: 2a:92:44:6c:d1:13:96:fd:23:b2:61:e3:7a:b5:c8: 7a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:69:93:23:CF:46:EF:DB:F3:65:D4:D7:70:D8:29:89:8F:DB:4A:E1 X509v3 Authority Key Identifier: keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/h2mTI89G79vzZdTXcNgpiY_bSuE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.92.0/22 IPv6: 2a0c:6b00::/32 Signature Algorithm: sha256WithRSAEncryption 72:07:64:a6:9a:e4:47:96:8e:33:7b:bd:fe:13:7f:14:ac:8c: dd:88:59:5d:16:65:bc:a1:77:b8:cd:c1:a1:c4:8a:cb:6c:c5: 9a:03:87:46:3e:d4:22:e8:9a:b0:c1:00:db:f5:b0:b9:03:99: f3:97:fe:6a:8a:c8:ba:c2:3f:a0:4d:b0:b2:75:b8:18:27:3f: b2:83:56:2f:19:f5:4f:90:11:e5:d4:47:56:4b:2d:a7:13:4f: b7:b5:d4:bd:d1:2f:ea:af:d8:62:97:4c:ec:6b:f3:d1:89:2c: 88:11:e4:e8:02:6e:3f:02:13:b3:3b:aa:41:e8:ea:8c:24:38: 6a:aa:1a:a8:3b:ad:b0:02:87:89:a1:c0:77:2d:8c:52:97:8c: f3:d3:ca:79:cd:b2:c2:0b:53:4c:4c:15:34:b4:92:49:19:15: 5c:33:08:e2:22:b6:73:89:ba:8e:9e:dd:1f:14:4d:88:98:db: 58:d5:93:55:fe:41:60:05:b8:af:2b:93:93:7a:2a:f2:80:2e: 08:b2:20:ea:77:7f:1b:58:5f:60:28:22:f7:b3:2f:e7:10:2f: 60:1b:ae:55:72:5d:37:74:d4:b1:07:42:a7:c8:49:37:41:52: ae:f8:26:fd:b3:23:b4:ee:c0:b8:3f:01:25:f5:3b:67:d1:75: 82:b1:f4:d9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NPY9k19Wu9gkSHvztgp/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNmI0MjAyMTg4NmQ4ZWVkYmFlOTBkOWU2YWIxZGU1MzNj NTBkMjAwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzY5OTMyM2NmNDZlZmRiZjM2NWQ0ZDc3MGQ4Mjk4OThmZGI0YWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlgf8bzT8+lRhIONH+WkWoYMKD8Q 1eLqA7rQHXqTwwSzlJ0ZDXlS+3Wdp1ZaJ7SJcw9RXxUanmt+50Jz7+GDUOBZGKjx 3KI2eS7ac4ghSKVKlxFTJ+l7bUbbckH7Vy6rK3XCHvI8GFgqyb2haBvN+FDKWghY USmGsr/pVDKI9dgJD8UQbZUZAfJooIIxjGV08LicGIErN0Y24rufq3ZUX6Q5FoWb J5lihDQEp3JFnu+Vnx3u0U6DWf3fruq2aBppy9RZrSB1/FHusLSVHZ3Z8AKxi/z1 ET9qiFbwN2aHc2oW2AqoZSfjD6nhFy/ANEUqkkRs0ROW/SOyYeN6tch6GwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIdpkyPPRu/b82XU13DYKYmP20rhMB8GA1UdIwQY MBaAFOxrQgIYhtju266Q2earHeUzxQ0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQt YTY4NzNiMzc0ZTI2LzEvaDJtVEk4OUc3OXZ6WmRUWGNOZ3BpWV9iU3VFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQtYTY4NzNiMzc0ZTI2 LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCmFlcMA0E AgACMAcDBQAqDGsAMA0GCSqGSIb3DQEBCwUAA4IBAQByB2SmmuRHlo4ze73+E38U rIzdiFldFmW8oXe4zcGhxIrLbMWaA4dGPtQi6JqwwQDb9bC5A5nzl/5qisi6wj+g TbCydbgYJz+yg1YvGfVPkBHl1EdWSy2nE0+3tdS90S/qr9hil0zsa/PRiSyIEeTo Am4/AhOzO6pB6OqMJDhqqhqoO62wAoeJocB3LYxSl4zz08p5zbLCC1NMTBU0tJJJ GRVcMwjiIrZzibqOnt0fFE2ImNtY1ZNV/kFgBbivK5OTeirygC4IsiDqd38bWF9g KCL3sy/nEC9gG65Vcl03dNSxB0KnyEk3QVKu+Cb9syO07sC4PwEl9Ttn0XWCsfTZ -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:28 2026 by rpki-client