This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/PV9nn29yp2PBBJ08DH1Hzy77tzk.roa File: PV9nn29yp2PBBJ08DH1Hzy77tzk.roa (raw, json) Hash identifier: W2PgmiS8Op18Md9+/XFq6wqhLS1g6P/+ZLsWwjKbTR0= Subject key identifier: 3D:5F:67:9F:6F:72:A7:63:C1:04:9D:3C:0C:7D:47:CF:2E:FB:B7:39 Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8 Certificate serial: 019B7F84FE6AEB64895D799F7BA08276131D Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/PV9nn29yp2PBBJ08DH1Hzy77tzk.roa Signing time: Fri 02 Jan 2026 16:23:00 +0000 ROA not before: Fri 02 Jan 2026 16:23:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209271 IP address blocks: 89.111.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:fe:6a:eb:64:89:5d:79:9f:7b:a0:82:76:13:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8 Validity Not Before: Jan 2 16:23:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d5f679f6f72a763c1049d3c0c7d47cf2efbb739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3e:9d:f0:e1:64:42:6c:97:61:0c:9d:d0:df: 93:26:c9:07:d5:cb:5d:e2:14:a0:3c:76:ca:71:2d: a7:78:ee:e6:1b:00:14:33:75:11:81:11:40:bc:5c: dd:93:cc:32:8f:75:dd:5c:f6:d4:a2:7c:76:f3:e4: 11:0a:22:3c:d2:8b:d1:11:1c:ec:6c:e7:94:e6:5e: 12:fd:02:39:dd:06:e3:32:32:c1:d0:27:70:80:db: 51:d8:32:93:89:17:2d:86:ba:c3:78:e7:5c:d5:61: 66:ab:02:17:b6:41:ef:5b:d7:9a:fc:5d:20:e3:45: a0:e5:9d:16:c1:f2:ab:be:6b:aa:aa:7d:15:5b:18: 13:72:c9:5d:29:c6:4a:08:76:b0:af:6e:2e:4e:f5: 1e:c6:0b:7c:a9:29:ad:7f:8c:19:98:71:67:3b:35: dd:7a:66:ed:a6:ae:03:0b:3d:72:bb:b6:12:d0:ac: ac:b5:49:c5:dc:f2:8c:bf:70:ad:ad:cf:12:da:d6: 64:5e:0e:df:ef:e7:06:b8:1d:b6:55:74:cc:2b:b5: 8c:85:6e:6d:57:47:6c:d0:ad:90:aa:ad:0b:2d:72: f3:ac:7b:b8:a8:5b:1f:8b:44:ad:f2:ef:c4:16:5b: 7a:d8:48:e8:25:48:ae:34:4f:5c:cd:89:da:0f:b8: 98:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:5F:67:9F:6F:72:A7:63:C1:04:9D:3C:0C:7D:47:CF:2E:FB:B7:39 X509v3 Authority Key Identifier: keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/PV9nn29yp2PBBJ08DH1Hzy77tzk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.111.239.0/24 Signature Algorithm: sha256WithRSAEncryption 68:72:05:bc:bd:88:4c:61:1a:06:9f:5a:45:82:7e:e0:20:fb: f1:d7:bb:1a:55:3a:55:dd:c6:51:44:ce:f5:57:2e:28:ed:ff: 5f:e3:e4:3d:79:30:71:b8:fc:02:97:25:0e:52:06:b3:68:d7: bf:df:b7:e3:42:b6:c3:eb:41:b0:c2:5b:82:a0:33:ec:1d:ec: a5:93:ff:5d:33:50:4b:43:e0:d1:a4:ca:3b:0f:a3:56:8b:6d: 3a:39:9f:76:d3:7a:47:c4:b7:75:fc:a5:b1:ca:1a:e1:a5:14: 63:ac:26:93:4b:00:02:b9:95:f1:38:55:30:28:9f:b7:e4:26: 39:d3:22:7a:5e:38:89:9b:f2:9c:51:15:22:e8:20:32:d2:b3: c4:34:f2:c4:61:0f:42:f7:a5:c6:70:b2:9e:5b:7c:38:dd:40: 6b:17:b7:93:59:41:f8:57:6f:3f:7a:ef:a1:fa:92:56:99:0d: 43:c6:39:8a:1d:e4:dc:b4:d4:b0:e3:a9:22:d6:38:21:df:49: 7f:34:2b:9d:c9:d4:64:e9:20:e5:8f:4b:8e:2c:03:28:ee:6d: e8:1a:41:21:a4:16:dd:19:b4:ab:46:c0:21:24:0b:bb:d0:36: 0f:28:41:a3:21:dc:d9:f9:db:4c:52:46:5f:14:0f:57:70:8e: 9e:b2:39:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hP5q62SJXXmfe6CCdhMdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YTk5NjRlMGNkMzVmYjM2NzU3ZTU2NTNmZmE3NjI2YWM1 ZGVlZTgwHhcNMjYwMTAyMTYyMzAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDVmNjc5ZjZmNzJhNzYzYzEwNDlkM2MwYzdkNDdjZjJlZmJiNzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD6d8OFkQmyXYQyd0N+TJskH1ctd 4hSgPHbKcS2neO7mGwAUM3URgRFAvFzdk8wyj3XdXPbUonx28+QRCiI80ovRERzs bOeU5l4S/QI53QbjMjLB0CdwgNtR2DKTiRcthrrDeOdc1WFmqwIXtkHvW9ea/F0g 40Wg5Z0WwfKrvmuqqn0VWxgTcsldKcZKCHawr24uTvUexgt8qSmtf4wZmHFnOzXd embtpq4DCz1yu7YS0KystUnF3PKMv3Ctrc8S2tZkXg7f7+cGuB22VXTMK7WMhW5t V0ds0K2Qqq0LLXLzrHu4qFsfi0St8u/EFlt62EjoJUiuNE9czYnaD7iYuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD1fZ59vcqdjwQSdPAx9R88u+7c5MB8GA1UdIwQY MBaAFCmplk4M01+zZ1flZT/6diasXe7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTIt ZDliNTMzZjdmYmMzLzEvUFY5bm4yOXlwMlBCQkowOERIMUh6eTc3dHprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTItZDliNTMzZjdmYmMz LzEvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWW/vMA0G CSqGSIb3DQEBCwUAA4IBAQBocgW8vYhMYRoGn1pFgn7gIPvx17saVTpV3cZRRM71 Vy4o7f9f4+Q9eTBxuPwClyUOUgazaNe/37fjQrbD60GwwluCoDPsHeylk/9dM1BL Q+DRpMo7D6NWi206OZ9203pHxLd1/KWxyhrhpRRjrCaTSwACuZXxOFUwKJ+35CY5 0yJ6XjiJm/KcURUi6CAy0rPENPLEYQ9C96XGcLKeW3w43UBrF7eTWUH4V28/eu+h +pJWmQ1DxjmKHeTctNSw46ki1jgh30l/NCudydRk6SDlj0uOLAMo7m3oGkEhpBbd GbSrRsAhJAu70DYPKEGjIdzZ+dtMUkZfFA9XcI6esjmv -----END CERTIFICATE-----Generated at Mon Jan 26 00:16:28 2026 by rpki-client