This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/yOLP8JGsQMCFzWngfeM-F2G3Csc.roa File: yOLP8JGsQMCFzWngfeM-F2G3Csc.roa (raw, json) Hash identifier: qUYYxQQnFX6MaYW1jl8K4rrQJvoPXd0mpK3gIXiWjkc= Subject key identifier: C8:E2:CF:F0:91:AC:40:C0:85:CD:69:E0:7D:E3:3E:17:61:B7:0A:C7 Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe Certificate serial: 019B7D5B24071B6C5CADCAA9A742B50B59EB Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/yOLP8JGsQMCFzWngfeM-F2G3Csc.roa Signing time: Fri 02 Jan 2026 06:18:03 +0000 ROA not before: Fri 02 Jan 2026 06:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1004 IP address blocks: 89.44.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:25:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:24:07:1b:6c:5c:ad:ca:a9:a7:42:b5:0b:59:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe Validity Not Before: Jan 2 06:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8e2cff091ac40c085cd69e07de33e1761b70ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:de:e1:26:0e:98:32:06:1b:06:8b:7b:e4:a7: a4:65:8f:6b:df:41:ca:60:aa:ae:19:51:5f:3d:84: 3d:4d:45:ee:76:38:25:33:9d:ce:ab:53:c2:e5:5b: 47:8c:59:2b:3e:b9:8b:74:7d:6e:08:28:23:f8:c3: 86:bb:da:a7:06:9e:ee:03:84:63:b5:41:f2:71:c7: 29:40:d1:60:98:9c:79:10:6e:76:60:1f:82:d7:c4: c8:11:1d:64:ef:42:f6:f9:d5:ac:39:97:36:ca:17: 54:0d:c8:c7:eb:e4:5c:83:61:8c:b1:f6:35:ef:cb: 8b:6e:83:a9:5d:cf:ff:61:b7:14:eb:cd:62:37:df: 9f:ab:35:21:ec:33:12:cc:4b:21:0a:85:8a:37:89: c5:d7:88:98:36:f7:11:3f:2e:3c:85:fb:19:c9:54: 5c:65:e6:6f:c4:a4:18:e2:7e:03:f7:61:9e:5d:5f: b7:75:c1:1a:8f:75:40:a6:3c:30:40:ba:4b:e8:68: bd:e0:a5:7c:73:a9:92:e2:c8:a5:82:bc:9a:58:c1: 49:89:13:83:c8:b5:31:42:dd:6f:a6:db:15:e9:6e: 38:cd:bb:60:84:84:0d:5c:27:5c:6b:e0:18:97:a4: a5:8a:2a:2d:7c:40:cc:8b:53:51:35:58:b0:40:bd: 6e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E2:CF:F0:91:AC:40:C0:85:CD:69:E0:7D:E3:3E:17:61:B7:0A:C7 X509v3 Authority Key Identifier: keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/yOLP8JGsQMCFzWngfeM-F2G3Csc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.44.241.0/24 Signature Algorithm: sha256WithRSAEncryption 12:ea:67:f7:29:75:7e:7e:a9:d0:fd:60:35:a2:1a:4d:57:43: 8d:d5:ce:37:ac:2f:d6:e8:d6:5b:ed:e3:0a:b7:4b:14:37:08: 7d:f4:2a:ee:df:64:16:6e:f3:c7:2f:fd:03:d4:e7:d9:44:3a: 67:a3:d7:45:04:82:12:01:a7:51:dd:1a:68:38:4a:5e:f4:8b: 1c:e7:3a:b3:36:6e:3a:e7:b4:d5:70:b1:2b:e5:e5:1f:e1:3a: d1:f3:de:d2:e5:61:4b:77:2b:f8:c9:ab:24:f8:f5:00:3a:52: e9:6e:36:84:ec:33:59:c6:ea:33:3b:61:11:f7:ad:6c:5c:c4: 03:cd:80:10:f0:1b:23:fe:31:af:85:14:f5:c0:9f:e4:57:58: 5a:b1:4a:f6:10:1a:b8:b7:6f:5e:63:cc:a9:ef:23:be:c8:a6: f8:b5:46:2b:9f:6a:07:5a:33:d6:ed:f6:34:39:0b:b4:b2:24: 55:60:3f:cb:bf:63:de:b1:ed:8b:28:23:81:ff:b8:5d:be:30: 7a:c9:d2:f4:a9:dd:42:45:f7:16:73:e7:b3:56:a2:63:82:11: c3:ee:82:69:fd:5a:ca:59:7e:1d:a2:10:5c:39:ba:2f:8b:f6: c8:38:cf:02:3a:ec:8a:17:08:ea:fd:54:ad:f9:db:fb:c7:1f: dd:4f:0a:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WyQHG2xcrcqpp0K1C1nrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz MjdlYmUwHhcNMjYwMTAyMDYxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGUyY2ZmMDkxYWM0MGMwODVjZDY5ZTA3ZGUzM2UxNzYxYjcwYWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot7hJg6YMgYbBot75KekZY9r30HK YKquGVFfPYQ9TUXudjglM53Oq1PC5VtHjFkrPrmLdH1uCCgj+MOGu9qnBp7uA4Rj tUHycccpQNFgmJx5EG52YB+C18TIER1k70L2+dWsOZc2yhdUDcjH6+Rcg2GMsfY1 78uLboOpXc//YbcU681iN9+fqzUh7DMSzEshCoWKN4nF14iYNvcRPy48hfsZyVRc ZeZvxKQY4n4D92GeXV+3dcEaj3VApjwwQLpL6Gi94KV8c6mS4silgryaWMFJiROD yLUxQt1vptsV6W44zbtghIQNXCdca+AYl6SliiotfEDMi1NRNViwQL1uKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMjiz/CRrEDAhc1p4H3jPhdhtwrHMB8GA1UdIwQY MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt M2RmYTUxMGQ2YjE2LzEveU9MUDhKR3NRTUNGelduZ2ZlTS1GMkczQ3NjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2 LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSzxMA0G CSqGSIb3DQEBCwUAA4IBAQAS6mf3KXV+fqnQ/WA1ohpNV0ON1c43rC/W6NZb7eMK t0sUNwh99Cru32QWbvPHL/0D1OfZRDpno9dFBIISAadR3RpoOEpe9Isc5zqzNm46 57TVcLEr5eUf4TrR897S5WFLdyv4yask+PUAOlLpbjaE7DNZxuozO2ER961sXMQD zYAQ8Bsj/jGvhRT1wJ/kV1hasUr2EBq4t29eY8yp7yO+yKb4tUYrn2oHWjPW7fY0 OQu0siRVYD/Lv2Pese2LKCOB/7hdvjB6ydL0qd1CRfcWc+ezVqJjghHD7oJp/VrK WX4dohBcObovi/bIOM8COuyKFwjq/VSt+dv7xx/dTwqR -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:17 2026 by rpki-client