This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/f4NJeyU8mkRiFYvmGYpOpcDwewU.roa File: f4NJeyU8mkRiFYvmGYpOpcDwewU.roa (raw, json) Hash identifier: Ov55FNUpg10FNgHk1tVb/BcXZfkE1RirhMmKU+WbpP0= Subject key identifier: 7F:83:49:7B:25:3C:9A:44:62:15:8B:E6:19:8A:4E:A5:C0:F0:7B:05 Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe Certificate serial: 019B7D5B2BC42C0F74336474C6A73C1642B9 Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/f4NJeyU8mkRiFYvmGYpOpcDwewU.roa Signing time: Fri 02 Jan 2026 06:18:05 +0000 ROA not before: Fri 02 Jan 2026 06:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211056 IP address blocks: 89.44.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:2b:c4:2c:0f:74:33:64:74:c6:a7:3c:16:42:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe Validity Not Before: Jan 2 06:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f83497b253c9a4462158be6198a4ea5c0f07b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f4:fd:ac:9c:22:62:56:02:a4:25:20:2a:9d: cf:44:ba:c2:7c:40:70:ae:ce:2f:0d:7d:dd:28:f4: 05:ee:85:e4:93:ae:52:a5:87:cf:3a:65:3f:17:42: 8e:e5:88:72:48:34:79:76:ee:8f:7c:84:b0:a0:96: 2a:fb:7c:b9:18:fc:36:3c:e9:9c:e9:11:6b:23:34: 66:52:b6:75:16:5e:c2:5c:c4:52:f5:be:e9:fb:d0: a3:79:cf:9c:9b:c8:0c:23:d4:54:b2:1a:f2:b4:7a: 86:a7:e4:4c:05:3a:c9:04:0f:55:cf:bf:ef:a6:63: 04:63:ef:be:ea:d2:d1:cc:62:cb:93:9f:c3:c3:21: 62:a3:40:9d:1c:9a:39:fd:b6:92:e1:55:de:70:bb: 9d:19:0a:67:3e:f4:03:f8:ba:26:d8:d3:a4:1a:12: c3:6c:5a:95:34:e4:8e:5d:d9:13:10:2d:4c:70:52: 43:a0:55:91:c4:e0:8b:14:57:ae:11:5a:76:ad:54: 16:e8:9a:91:a8:74:d2:9a:e2:88:b4:f1:ca:f8:1a: 17:75:01:96:7e:4b:fa:0e:e0:23:3d:ad:32:4c:22: aa:d3:ad:59:b5:b4:22:55:c0:92:a6:e1:84:e2:f8: 56:87:a0:8a:87:18:99:cc:01:8c:1e:b3:a2:bf:4b: e2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:83:49:7B:25:3C:9A:44:62:15:8B:E6:19:8A:4E:A5:C0:F0:7B:05 X509v3 Authority Key Identifier: keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/f4NJeyU8mkRiFYvmGYpOpcDwewU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.44.243.0/24 Signature Algorithm: sha256WithRSAEncryption 22:03:7a:4a:91:bd:16:62:9d:4f:e8:7b:8a:e4:a8:34:6b:05: 6d:ad:b7:93:1e:09:2b:78:e8:38:37:c0:53:98:2b:40:a3:a6: 02:b9:1c:fb:90:94:58:c5:e8:a0:d8:44:99:ee:ed:1b:37:e4: f7:74:95:16:ef:c7:1f:9c:3c:b1:ab:a1:8e:7b:18:4b:f4:f7: 80:b9:3f:9a:f3:ab:02:04:24:c4:70:ce:24:44:d9:1c:89:92: fc:e3:84:6a:04:33:55:f2:7b:db:b2:2a:68:6c:ba:84:09:ac: a4:99:ee:10:b6:9e:79:88:75:ed:5d:3a:aa:e0:ed:96:e6:95: 93:15:81:1d:e4:cf:2d:50:2e:46:86:e1:10:0f:8c:57:ef:01: dc:64:13:00:e0:dd:84:4b:0a:20:e0:54:48:ba:f8:3c:04:dd: 47:4a:4d:74:1d:6a:70:c1:ed:05:45:2e:a2:7c:21:db:71:df: 1f:c9:b9:76:05:1c:1e:b7:43:4e:44:54:a4:13:e9:60:67:a8: e5:45:7c:e5:fb:d9:8c:8b:e7:f1:05:21:1e:9e:33:1a:3b:be: e3:ae:d1:f1:9b:e3:b8:3b:57:40:bd:48:35:49:cf:7a:c2:9f: 1b:0e:c0:ca:bb:0c:47:64:61:f5:2c:63:c6:81:e7:2a:f5:fd: 5c:62:37:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WyvELA90M2R0xqc8FkK5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz MjdlYmUwHhcNMjYwMTAyMDYxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjgzNDk3YjI1M2M5YTQ0NjIxNThiZTYxOThhNGVhNWMwZjA3YjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPT9rJwiYlYCpCUgKp3PRLrCfEBw rs4vDX3dKPQF7oXkk65SpYfPOmU/F0KO5YhySDR5du6PfISwoJYq+3y5GPw2POmc 6RFrIzRmUrZ1Fl7CXMRS9b7p+9Cjec+cm8gMI9RUshrytHqGp+RMBTrJBA9Vz7/v pmMEY+++6tLRzGLLk5/DwyFio0CdHJo5/baS4VXecLudGQpnPvQD+Lom2NOkGhLD bFqVNOSOXdkTEC1McFJDoFWRxOCLFFeuEVp2rVQW6JqRqHTSmuKItPHK+BoXdQGW fkv6DuAjPa0yTCKq061ZtbQiVcCSpuGE4vhWh6CKhxiZzAGMHrOiv0visQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH+DSXslPJpEYhWL5hmKTqXA8HsFMB8GA1UdIwQY MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt M2RmYTUxMGQ2YjE2LzEvZjROSmV5VThta1JpRll2bUdZcE9wY0R3ZXdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2 LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSzzMA0G CSqGSIb3DQEBCwUAA4IBAQAiA3pKkb0WYp1P6HuK5Kg0awVtrbeTHgkreOg4N8BT mCtAo6YCuRz7kJRYxeig2ESZ7u0bN+T3dJUW78cfnDyxq6GOexhL9PeAuT+a86sC BCTEcM4kRNkciZL844RqBDNV8nvbsipobLqECaykme4Qtp55iHXtXTqq4O2W5pWT FYEd5M8tUC5GhuEQD4xX7wHcZBMA4N2ESwog4FRIuvg8BN1HSk10HWpwwe0FRS6i fCHbcd8fybl2BRwet0NORFSkE+lgZ6jlRXzl+9mMi+fxBSEenjMaO77jrtHxm+O4 O1dAvUg1Sc96wp8bDsDKuwxHZGH1LGPGgecq9f1cYjcr -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:30 2026 by rpki-client