This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/cojKfvUL96n8v0NW6xv7i34QuKg.roa File: cojKfvUL96n8v0NW6xv7i34QuKg.roa (raw, json) Hash identifier: lYPKoP4F96eul1kxPLkPqkS5F4CgrEIREjfk+V+jg3o= Subject key identifier: 72:88:CA:7E:F5:0B:F7:A9:FC:BF:43:56:EB:1B:FB:8B:7E:10:B8:A8 Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Certificate serial: 019B7A5B8C73FE50223265D5F50F4B68167E Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/cojKfvUL96n8v0NW6xv7i34QuKg.roa Signing time: Thu 01 Jan 2026 16:19:38 +0000 ROA not before: Thu 01 Jan 2026 16:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5620 IP address blocks: 89.164.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:8c:73:fe:50:22:32:65:d5:f5:0f:4b:68:16:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Validity Not Before: Jan 1 16:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7288ca7ef50bf7a9fcbf4356eb1bfb8b7e10b8a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f0:1f:a1:e8:17:bf:8f:99:3d:09:8c:ef:ee: 22:65:03:bf:ed:1c:64:1e:72:f4:f3:b4:11:55:65: b0:31:b7:00:2c:a0:f8:59:41:ec:4a:ff:a8:ce:b1: b1:3a:3a:6b:ae:b0:67:40:1f:55:74:e9:17:4f:23: f6:f6:99:4e:05:e6:04:06:a2:45:cf:bc:98:05:b8: 84:a0:a7:87:d3:a1:d7:e6:f3:45:a2:f0:bc:6c:c4: 10:cc:21:8d:10:84:29:d3:5d:3a:6c:82:bd:dd:65: d2:31:ef:70:1e:5f:c5:a9:5a:a6:7a:43:27:ca:2c: ab:0a:1d:85:96:37:c0:bb:f0:eb:fe:e2:5b:76:db: 45:82:d5:b1:e0:65:24:4a:19:eb:38:49:b0:30:d8: 88:ef:1c:ba:59:89:a0:4f:19:22:c5:d0:c9:b6:27: 03:2a:bf:79:23:1e:cb:c2:1d:17:ee:bc:98:49:d1: 05:0b:24:56:05:f4:74:a5:61:60:e9:35:cf:64:db: 71:31:68:80:78:14:ff:d5:05:99:fa:01:ee:ee:71: 8f:7a:24:ff:18:d0:0e:c3:0a:03:72:ae:76:99:b3: d5:7d:ce:2c:17:c7:a9:2d:29:74:af:be:42:53:94: 2b:c7:dc:d4:f8:5b:02:82:38:bc:ff:b4:41:11:b1: 5b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:88:CA:7E:F5:0B:F7:A9:FC:BF:43:56:EB:1B:FB:8B:7E:10:B8:A8 X509v3 Authority Key Identifier: keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/cojKfvUL96n8v0NW6xv7i34QuKg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.164.92.0/24 Signature Algorithm: sha256WithRSAEncryption aa:8a:9b:96:0e:58:80:85:16:18:23:8b:18:1d:ae:bf:01:6d: 4d:05:1a:fa:35:ef:0c:27:e7:69:fc:6c:0e:55:89:24:b2:64: fa:02:32:90:e3:b5:35:29:a8:77:6b:56:d2:de:88:cc:e5:d2: af:ab:21:0e:4c:4e:46:21:35:2a:e0:41:bc:19:a6:90:97:30: dc:ce:87:77:66:e4:53:e8:19:36:cf:46:60:f4:e2:c6:ea:2e: 45:06:0a:5b:2a:33:7e:70:72:bc:4a:f5:12:ea:03:7f:5e:bb: 47:38:b3:94:3c:e9:52:cd:21:2b:72:7b:8f:b8:6b:a2:63:81: cd:d4:f4:19:ba:2c:52:36:5d:00:89:0e:ea:74:0c:99:46:16: 2e:2a:ab:fc:d7:c0:11:4d:74:f6:21:44:9c:64:7c:13:aa:19: 44:f5:8e:9f:b0:e4:cf:3d:84:49:95:57:fb:35:da:0a:c5:cc: 05:a4:cf:13:bb:f8:6e:ea:bd:bc:23:4c:98:51:c1:a6:ea:96: bf:eb:6c:eb:06:da:b2:6e:99:2a:00:82:a6:23:53:4d:fa:a6: ff:cd:16:b4:39:9d:31:f4:15:56:bf:43:b8:05:4e:79:65:0a: 9b:64:ad:4e:b8:b5:6a:10:b8:af:b1:b2:87:8d:49:54:c0:65: fa:c4:a0:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W4xz/lAiMmXV9Q9LaBZ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm MDIwMjAwHhcNMjYwMTAxMTYxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Mjg4Y2E3ZWY1MGJmN2E5ZmNiZjQzNTZlYjFiZmI4YjdlMTBiOGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/AfoegXv4+ZPQmM7+4iZQO/7Rxk HnL087QRVWWwMbcALKD4WUHsSv+ozrGxOjprrrBnQB9VdOkXTyP29plOBeYEBqJF z7yYBbiEoKeH06HX5vNFovC8bMQQzCGNEIQp0106bIK93WXSMe9wHl/FqVqmekMn yiyrCh2FljfAu/Dr/uJbdttFgtWx4GUkShnrOEmwMNiI7xy6WYmgTxkixdDJticD Kr95Ix7Lwh0X7ryYSdEFCyRWBfR0pWFg6TXPZNtxMWiAeBT/1QWZ+gHu7nGPeiT/ GNAOwwoDcq52mbPVfc4sF8epLSl0r75CU5Qrx9zU+FsCgji8/7RBEbFbZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHKIyn71C/ep/L9DVusb+4t+ELioMB8GA1UdIwQY MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt NGI2YzFjZjlmZTRmLzEvY29qS2Z2VUw5Nm44djBOVzZ4djdpMzRRdUtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWaRcMA0G CSqGSIb3DQEBCwUAA4IBAQCqipuWDliAhRYYI4sYHa6/AW1NBRr6Ne8MJ+dp/GwO VYkksmT6AjKQ47U1Kah3a1bS3ojM5dKvqyEOTE5GITUq4EG8GaaQlzDczod3ZuRT 6Bk2z0Zg9OLG6i5FBgpbKjN+cHK8SvUS6gN/XrtHOLOUPOlSzSErcnuPuGuiY4HN 1PQZuixSNl0AiQ7qdAyZRhYuKqv818ARTXT2IUScZHwTqhlE9Y6fsOTPPYRJlVf7 NdoKxcwFpM8Tu/hu6r28I0yYUcGm6pa/62zrBtqybpkqAIKmI1NN+qb/zRa0OZ0x 9BVWv0O4BU55ZQqbZK1OuLVqELivsbKHjUlUwGX6xKBS -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:40 2026 by rpki-client