This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/I89WhoqRK__T_RAgDYQ5mZqOAc0.roa File: I89WhoqRK__T_RAgDYQ5mZqOAc0.roa (raw, json) Hash identifier: zZB0Y7IiYLk07P7cQYtDSkYb8pf70IqbTuLs66knpts= Subject key identifier: 23:CF:56:86:8A:91:2B:FF:D3:FD:10:20:0D:84:39:99:9A:8E:01:CD Certificate issuer: /CN=172537601a31697404922d957e74450f5a9cbe73 Certificate serial: 019BD4CA304795787BF87E655120C9CBCB55 Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/I89WhoqRK__T_RAgDYQ5mZqOAc0.roa Signing time: Mon 19 Jan 2026 05:46:19 +0000 ROA not before: Mon 19 Jan 2026 05:46:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 109.238.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d4:ca:30:47:95:78:7b:f8:7e:65:51:20:c9:cb:cb:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=172537601a31697404922d957e74450f5a9cbe73 Validity Not Before: Jan 19 05:46:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23cf56868a912bffd3fd10200d8439999a8e01cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a9:51:ff:fe:e2:5b:3f:76:83:a2:04:d8:d7: e0:64:b5:b7:6f:ce:71:61:88:d0:14:55:19:b0:79: bf:a3:8f:f7:2e:ac:19:c8:7a:ba:12:a6:6f:22:d3: 07:94:6c:e6:36:2a:1f:aa:1a:30:eb:94:f2:f9:a7: 85:c2:20:e6:60:cd:ff:67:a5:70:52:e9:b3:f4:cf: 98:4e:91:b1:12:3a:b3:b3:8a:81:09:a2:90:99:3d: 14:c7:a8:54:7d:69:52:cb:18:cd:88:d9:c7:4f:90: 84:e5:6a:61:78:95:86:84:b7:4d:6e:cc:49:87:b4: c9:2f:6d:a7:46:77:ec:15:89:53:83:fa:10:d6:76: d2:76:c5:12:73:cc:ce:e2:9c:78:a0:de:35:84:c2: 2a:2b:64:97:3b:ee:38:7a:53:c7:e0:c6:62:c4:54: 7d:37:52:d4:29:f5:18:a8:dc:8f:68:89:9f:e7:5f: 1a:93:48:f2:c9:ac:55:c6:9d:a4:65:2e:0d:a2:47: 72:8b:4e:72:fe:e7:db:6a:d4:15:21:56:89:fc:44: 2a:95:c4:9e:91:35:4c:65:42:56:05:a2:2d:d6:e6: 23:61:2b:7f:78:7f:09:f6:1d:b6:40:5e:14:fe:3a: d8:52:9d:cf:10:31:09:4e:d8:fe:8b:2b:e9:a4:ce: 6d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CF:56:86:8A:91:2B:FF:D3:FD:10:20:0D:84:39:99:9A:8E:01:CD X509v3 Authority Key Identifier: keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/I89WhoqRK__T_RAgDYQ5mZqOAc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.238.160.0/21 Signature Algorithm: sha256WithRSAEncryption 2e:34:39:82:60:2e:aa:97:7f:10:60:4a:c1:52:f6:2a:98:2e: 92:59:f5:44:86:d8:07:10:e3:91:26:28:a9:ea:a7:18:c1:51: 0a:a7:06:42:1b:dc:72:1c:34:47:0e:5b:1c:6f:a7:28:ff:7b: 64:2b:81:80:26:a9:1b:c4:8f:23:e4:6d:73:f9:f8:03:b1:e5: 6c:b2:c9:51:e0:91:69:41:e7:83:7c:22:bf:f7:cf:52:b8:44: 82:ae:33:a2:24:4e:e1:c9:04:50:38:d3:21:56:7c:3d:e3:ae: 08:be:4c:e3:dd:55:36:42:91:e4:be:e7:1e:00:50:ca:f6:98: 9a:b0:31:70:78:25:f8:b3:5b:c2:f6:0a:e2:c1:15:a9:82:3f: a6:cd:82:4e:b6:c5:f2:58:d0:03:3c:39:b0:56:50:c3:1d:15: 34:1f:7b:cc:a1:3d:ff:d9:c9:12:6a:1c:56:ea:05:8d:06:4b: 0a:94:5f:e8:a2:84:74:da:68:45:51:dc:93:cb:f2:db:bd:f5: d8:86:91:b2:73:3b:1b:c1:2e:83:ac:ff:26:e2:8e:19:71:4a: 56:f7:71:29:ca:97:d7:c6:02:a9:18:7b:4b:1e:c6:48:9d:60: 2d:1c:03:e6:a8:17:03:82:e1:b5:1d:e5:45:67:41:c2:b1:01: b8:6c:3b:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvUyjBHlXh7+H5lUSDJy8tVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MjUzNzYwMWEzMTY5NzQwNDkyMmQ5NTdlNzQ0NTBmNWE5 Y2JlNzMwHhcNMjYwMTE5MDU0NjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2NmNTY4NjhhOTEyYmZmZDNmZDEwMjAwZDg0Mzk5OTlhOGUwMWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKlR//7iWz92g6IE2NfgZLW3b85x YYjQFFUZsHm/o4/3LqwZyHq6EqZvItMHlGzmNiofqhow65Ty+aeFwiDmYM3/Z6Vw Uumz9M+YTpGxEjqzs4qBCaKQmT0Ux6hUfWlSyxjNiNnHT5CE5WpheJWGhLdNbsxJ h7TJL22nRnfsFYlTg/oQ1nbSdsUSc8zO4px4oN41hMIqK2SXO+44elPH4MZixFR9 N1LUKfUYqNyPaImf518ak0jyyaxVxp2kZS4Nokdyi05y/ufbatQVIVaJ/EQqlcSe kTVMZUJWBaIt1uYjYSt/eH8J9h22QF4U/jrYUp3PEDEJTtj+iyvppM5tZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCPPVoaKkSv/0/0QIA2EOZmajgHNMB8GA1UdIwQY MBaAFBclN2AaMWl0BJItlX50RQ9anL5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnlVM1lCb3hhWFFFa2kyVmZuUkZEMXFjdm5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yMTljYWUtMjY0ZC00NmE3LTllNjQt ZTYwNGI2MWJlMGVhLzEvSTg5V2hvcVJLX19UX1JBZ0RZUTVtWnFPQWMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8yMTljYWUtMjY0ZC00NmE3LTllNjQtZTYwNGI2MWJlMGVh LzEvRnlVM1lCb3hhWFFFa2kyVmZuUkZEMXFjdm5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbe6gMA0G CSqGSIb3DQEBCwUAA4IBAQAuNDmCYC6ql38QYErBUvYqmC6SWfVEhtgHEOORJiip 6qcYwVEKpwZCG9xyHDRHDlscb6co/3tkK4GAJqkbxI8j5G1z+fgDseVssslR4JFp QeeDfCK/989SuESCrjOiJE7hyQRQONMhVnw9464Ivkzj3VU2QpHkvuceAFDK9pia sDFweCX4s1vC9griwRWpgj+mzYJOtsXyWNADPDmwVlDDHRU0H3vMoT3/2ckSahxW 6gWNBksKlF/oooR02mhFUdyTy/LbvfXYhpGyczsbwS6DrP8m4o4ZcUpW93EpypfX xgKpGHtLHsZInWAtHAPmqBcDguG1HeVFZ0HCsQG4bDt5 -----END CERTIFICATE-----Generated at Sun Jan 25 10:27:33 2026 by rpki-client