This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/DyhSqV4302w_Jd8C_oWX0mObDDc.roa File: DyhSqV4302w_Jd8C_oWX0mObDDc.roa (raw, json) Hash identifier: XVB5wgNU/o6hHZ2aTWsuDvd3gUhS28oEwkGfS/KVZ7w= Subject key identifier: 0F:28:52:A9:5E:37:D3:6C:3F:25:DF:02:FE:85:97:D2:63:9B:0C:37 Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Certificate serial: 019B7C8064FFA95AD7041CC86819AF1E72BB Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/DyhSqV4302w_Jd8C_oWX0mObDDc.roa Signing time: Fri 02 Jan 2026 02:19:07 +0000 ROA not before: Fri 02 Jan 2026 02:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214265 IP address blocks: 89.18.30.0/23 maxlen: 23 89.18.30.0/24 maxlen: 24 89.18.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:64:ff:a9:5a:d7:04:1c:c8:68:19:af:1e:72:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Validity Not Before: Jan 2 02:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f2852a95e37d36c3f25df02fe8597d2639b0c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e3:1b:b8:23:60:51:4e:84:80:f0:ed:50:80: 6f:80:7b:cf:e3:51:e5:1a:2a:5e:6e:80:bb:78:a0: 94:80:69:fa:b8:dd:f0:c1:05:25:16:74:f1:bb:07: 96:0f:76:02:cc:db:60:26:95:1f:0c:b9:f2:aa:8c: e1:c0:1a:a4:db:76:4a:c8:8e:33:c1:64:74:07:e6: 2d:df:b7:d8:12:6c:95:55:4e:4f:16:b9:1b:99:6a: 13:cc:83:05:04:f6:ff:a3:ab:ca:62:5e:15:2b:ef: 73:a6:04:8a:26:9b:9e:3b:e2:14:a2:aa:2a:b8:44: e4:85:45:3b:e8:cf:8d:c0:a1:b6:77:45:51:9d:da: c7:60:de:ea:a1:1f:2d:84:95:a5:7d:3e:4d:c2:b2: 8b:dd:4c:e9:4d:d9:c9:d0:b8:e6:19:11:03:a6:15: 9a:2f:92:8b:cf:63:2d:e3:96:2b:14:93:59:36:32: 7b:e7:68:ee:f6:14:a0:75:16:ad:6e:38:04:fb:09: 8b:b7:94:57:2c:52:2d:c0:5d:85:c8:e3:20:e8:2b: 03:21:ed:e0:ee:ef:0a:f5:73:94:47:e9:ab:12:a4: 9e:8f:da:30:58:83:4e:71:6a:4e:c9:9e:ea:53:3e: 7c:67:68:aa:f6:1a:22:07:29:1a:bd:e8:43:b5:9a: 07:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:28:52:A9:5E:37:D3:6C:3F:25:DF:02:FE:85:97:D2:63:9B:0C:37 X509v3 Authority Key Identifier: keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/DyhSqV4302w_Jd8C_oWX0mObDDc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.18.30.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:82:0a:64:30:45:fa:06:e1:73:45:5b:19:35:c5:e5:c7:d5: 7f:95:3d:1a:05:6a:1f:38:3a:13:69:79:dc:7f:b1:cf:34:a8: 14:b0:00:9e:85:0f:12:2b:ae:04:a4:af:7d:5f:06:04:4a:cb: 4f:50:3d:1a:6f:ad:39:ef:f6:6e:81:5e:16:3f:55:ff:84:b7: 78:bd:9e:da:26:1a:b5:1d:9b:45:c9:3e:c2:29:91:b6:2f:be: a8:fb:21:73:b1:54:dc:a8:df:31:cd:f5:fd:b5:34:f8:f1:83: 7a:ef:7b:52:c7:6f:ae:0f:67:37:fc:a0:a9:14:97:d4:78:af: 3b:02:1a:8e:ab:31:3c:7d:4a:8a:13:b7:ae:ff:90:c7:fa:dc: 8f:64:3f:ba:fe:f5:66:e6:73:df:81:39:4f:40:56:35:b3:99: 7c:43:aa:b9:7b:8f:b3:7f:8a:ea:9f:9e:3c:df:03:c5:1d:a5: d1:7f:bd:bf:e6:a9:78:13:89:22:d8:f5:88:a7:16:d6:99:3b: 5a:3d:a9:9a:b6:01:6d:ec:f4:c2:5b:7e:ec:8c:c8:af:fa:cc: 21:84:ba:d6:e6:00:2e:35:1f:56:6d:31:ef:ef:82:76:40:76: c6:58:94:1d:cb:1e:56:47:43:62:2f:17:5c:2d:d7:c1:ab:9c: 94:87:4c:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gGT/qVrXBBzIaBmvHnK7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOGM2YzU4YjYwN2ZmMjNhZTcxNzVhNjE2ODJjNzU0ODBm MWUyMTQwHhcNMjYwMTAyMDIxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjI4NTJhOTVlMzdkMzZjM2YyNWRmMDJmZTg1OTdkMjYzOWIwYzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+MbuCNgUU6EgPDtUIBvgHvP41Hl GipeboC7eKCUgGn6uN3wwQUlFnTxuweWD3YCzNtgJpUfDLnyqozhwBqk23ZKyI4z wWR0B+Yt37fYEmyVVU5PFrkbmWoTzIMFBPb/o6vKYl4VK+9zpgSKJpueO+IUoqoq uETkhUU76M+NwKG2d0VRndrHYN7qoR8thJWlfT5NwrKL3UzpTdnJ0LjmGREDphWa L5KLz2Mt45YrFJNZNjJ752ju9hSgdRatbjgE+wmLt5RXLFItwF2FyOMg6CsDIe3g 7u8K9XOUR+mrEqSej9owWINOcWpOyZ7qUz58Z2iq9hoiBykavehDtZoHdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA8oUqleN9NsPyXfAv6Fl9Jjmww3MB8GA1UdIwQY MBaAFKuMbFi2B/8jrnF1phaCx1SA8eIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2Mt ODhhM2M0MWZhZWUyLzEvRHloU3FWNDMwMndfSmQ4Q19vV1gwbU9iRERjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2MtODhhM2M0MWZhZWUy LzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWRIeMA0G CSqGSIb3DQEBCwUAA4IBAQArggpkMEX6BuFzRVsZNcXlx9V/lT0aBWofODoTaXnc f7HPNKgUsACehQ8SK64EpK99XwYESstPUD0ab6057/ZugV4WP1X/hLd4vZ7aJhq1 HZtFyT7CKZG2L76o+yFzsVTcqN8xzfX9tTT48YN673tSx2+uD2c3/KCpFJfUeK87 AhqOqzE8fUqKE7eu/5DH+tyPZD+6/vVm5nPfgTlPQFY1s5l8Q6q5e4+zf4rqn548 3wPFHaXRf72/5ql4E4ki2PWIpxbWmTtaPamatgFt7PTCW37sjMiv+swhhLrW5gAu NR9WbTHv74J2QHbGWJQdyx5WR0NiLxdcLdfBq5yUh0xF -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:01 2026 by rpki-client