This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/XYWKExSCfdxxiVOVFOzWMRq-gfA.roa File: XYWKExSCfdxxiVOVFOzWMRq-gfA.roa (raw, json) Hash identifier: qv5fEqtxokjrXMfDGJB3qKOS2uBsrdEUuN/hcRwM0m8= Subject key identifier: 5D:85:8A:13:14:82:7D:DC:71:89:53:95:14:EC:D6:31:1A:BE:81:F0 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77594EEAB49E2FEF04603E3B4B0EC5BD Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/XYWKExSCfdxxiVOVFOzWMRq-gfA.roa Signing time: Thu 01 Jan 2026 02:18:20 +0000 ROA not before: Thu 01 Jan 2026 02:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42756 IP address blocks: 89.44.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:4e:ea:b4:9e:2f:ef:04:60:3e:3b:4b:0e:c5:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d858a1314827ddc7189539514ecd6311abe81f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f0:f4:1d:95:be:d2:cb:27:d7:7a:14:5f:ea: 25:cd:ff:96:e8:07:87:03:9d:46:f2:b4:3c:a6:17: c4:65:86:88:9d:fd:cb:9c:5b:57:c7:6e:68:de:68: 9f:32:92:66:14:57:0c:bf:35:1a:21:d6:f0:9d:7a: de:19:9d:8c:27:36:0d:a7:39:39:eb:b2:fa:77:6e: 7b:8b:1b:6f:93:45:f5:14:ce:e1:27:84:61:4e:5e: 4a:58:57:c0:a0:da:9f:8a:92:bb:de:41:0b:4e:e1: 14:c5:dd:c8:bd:22:3d:f1:5d:5c:33:09:fc:be:c3: 35:6e:fb:c5:68:e3:8f:3c:76:ab:ba:b2:5d:58:7d: c1:7c:84:29:25:67:3c:8b:0c:67:19:99:0d:1a:24: 4c:aa:b3:ee:c8:75:9e:e6:55:ea:db:22:0f:4f:2e: a1:56:22:2f:54:e1:cd:3f:03:07:a1:1a:93:6d:dc: a5:20:62:cb:2a:92:cf:55:00:19:bd:34:f0:e8:72: e8:36:5e:c3:33:f7:68:cb:e0:7a:5f:78:b3:dc:08: 60:3f:df:13:0c:a8:16:96:5c:3e:7b:07:c0:ee:ba: 2f:56:8e:81:36:27:4e:9d:3d:76:12:4f:8d:7e:be: 2d:c2:0e:ef:f1:6c:4d:ed:e0:75:92:70:78:c2:8a: 4a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:85:8A:13:14:82:7D:DC:71:89:53:95:14:EC:D6:31:1A:BE:81:F0 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/XYWKExSCfdxxiVOVFOzWMRq-gfA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.44.144.0/24 Signature Algorithm: sha256WithRSAEncryption 16:99:61:ca:b2:97:47:12:d9:d7:98:cb:0f:a2:45:9f:8e:eb: 73:6f:97:09:5d:7b:ba:94:c8:77:e8:a0:b8:e8:54:f8:70:9d: 47:5c:d6:4f:ce:e8:94:42:41:63:9f:b4:22:89:b6:28:aa:8e: 25:03:c5:0e:e6:3a:f2:df:be:57:7f:19:21:88:f7:3d:df:59: 67:72:77:66:10:62:77:2f:f0:96:ed:bb:fb:bb:2e:67:1b:7c: a3:4f:19:d7:00:ea:9f:1f:13:3b:2d:b7:66:f1:3b:a4:ea:e8: 41:b2:d5:a2:ab:3d:0d:6d:a7:1a:64:b9:18:02:95:62:72:8d: 7b:80:b1:e9:5d:ef:00:f0:ff:79:91:14:2e:c6:a2:c9:ed:86: f6:69:37:75:8a:52:77:2b:c2:4d:e4:0a:f2:54:d9:4c:f8:d8: a9:89:a5:52:77:b6:56:a1:e8:07:4d:4f:83:44:d0:bd:f7:19: d2:46:77:ed:ed:a5:d4:d8:ce:b8:f4:68:02:2e:79:5a:97:83: 13:df:c0:29:6b:91:ee:38:92:53:76:5d:2b:b0:6b:53:d8:bd: 7d:9a:b9:08:5d:12:1e:c2:92:12:4b:5e:8d:ec:d3:2f:17:05: 36:7a:3f:ac:19:39:b5:1a:88:09:7b:50:3f:f8:cc:5f:34:3a: 97:fe:fe:80 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WU7qtJ4v7wRgPjtLDsW9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDg1OGExMzE0ODI3ZGRjNzE4OTUzOTUxNGVjZDYzMTFhYmU4MWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufD0HZW+0ssn13oUX+olzf+W6AeH A51G8rQ8phfEZYaInf3LnFtXx25o3mifMpJmFFcMvzUaIdbwnXreGZ2MJzYNpzk5 67L6d257ixtvk0X1FM7hJ4RhTl5KWFfAoNqfipK73kELTuEUxd3IvSI98V1cMwn8 vsM1bvvFaOOPPHarurJdWH3BfIQpJWc8iwxnGZkNGiRMqrPuyHWe5lXq2yIPTy6h ViIvVOHNPwMHoRqTbdylIGLLKpLPVQAZvTTw6HLoNl7DM/doy+B6X3iz3AhgP98T DKgWllw+ewfA7rovVo6BNidOnT12Ek+Nfr4twg7v8WxN7eB1knB4wopKFQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFF2FihMUgn3ccYlTlRTs1jEavoHwMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL1hZV0tFeFNDZmR4eGlWT1ZGT3pXTVJxLWdmQS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZLJAw DQYJKoZIhvcNAQELBQADggEBABaZYcqyl0cS2deYyw+iRZ+O63Nvlwlde7qUyHfo oLjoVPhwnUdc1k/O6JRCQWOftCKJtiiqjiUDxQ7mOvLfvld/GSGI9z3fWWdyd2YQ Yncv8Jbtu/u7LmcbfKNPGdcA6p8fEzstt2bxO6Tq6EGy1aKrPQ1tpxpkuRgClWJy jXuAseld7wDw/3mRFC7GosnthvZpN3WKUncrwk3kCvJU2Uz42KmJpVJ3tlah6AdN T4NE0L33GdJGd+3tpdTYzrj0aAIueVqXgxPfwClrke44klN2XSuwa1PYvX2auQhd Eh7CkhJLXo3s0y8XBTZ6P6wZObUaiAl7UD/4zF80Opf+/oA= -----END CERTIFICATE-----Generated at Sun Jan 25 13:01:48 2026 by rpki-client