This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/b4L7YwVTcGv2gwn4bI9DDamyDok.roa File: b4L7YwVTcGv2gwn4bI9DDamyDok.roa (raw, json) Hash identifier: 7P58hqOpI6WIMnTNB5evnPSUxMTJoQoDAiMCKfCOpbo= Subject key identifier: 6F:82:FB:63:05:53:70:6B:F6:83:09:F8:6C:8F:43:0D:A9:B2:0E:89 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B775966132B5FCE45453245BA7C2CE6BE Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/b4L7YwVTcGv2gwn4bI9DDamyDok.roa Signing time: Thu 01 Jan 2026 02:18:26 +0000 ROA not before: Thu 01 Jan 2026 02:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61279 IP address blocks: 89.40.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:66:13:2b:5f:ce:45:45:32:45:ba:7c:2c:e6:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f82fb630553706bf68309f86c8f430da9b20e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1b:3c:a2:28:79:04:bd:ab:5e:89:ec:73:c1: 8e:3f:60:2a:66:ca:bd:2e:7c:0c:9a:98:44:9d:75: 28:e8:31:f4:85:38:81:03:de:df:2b:33:3b:29:13: 3d:e3:29:a4:ab:88:cc:5c:b4:a8:f0:c5:47:e7:6c: b6:46:0a:3b:c7:f1:4d:b4:2a:f0:5c:62:78:1c:37: ce:82:76:f7:c8:f7:50:9c:a4:fd:d8:3f:ea:4f:b8: 80:07:c6:1e:37:6d:73:b0:24:b0:99:26:fb:44:c1: 44:57:3f:16:45:1f:b7:d2:49:fa:f6:04:8f:97:e5: 4d:94:0e:a0:4b:9c:0c:73:b4:45:25:4a:14:d0:46: fc:66:ec:79:ee:13:17:ce:d9:8a:87:33:b0:f5:94: 2b:46:d3:6f:f0:86:ea:db:aa:f3:d8:33:a8:17:fa: 99:ba:36:15:b9:e3:64:db:6e:63:c7:8b:7e:cc:f9: ba:65:b4:7d:de:12:c5:83:9e:7a:5d:4d:28:81:3f: a1:75:06:04:d7:7c:30:b4:ff:cd:ab:b4:9a:14:0b: 66:ef:f2:10:51:0e:59:e2:54:9b:07:a5:9f:10:a1: ed:48:f7:b7:94:09:58:07:14:60:14:24:1b:18:a6: 74:f2:4c:cf:29:a4:57:81:a8:98:3a:c7:84:90:89: ae:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:82:FB:63:05:53:70:6B:F6:83:09:F8:6C:8F:43:0D:A9:B2:0E:89 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/b4L7YwVTcGv2gwn4bI9DDamyDok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.40.20.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:96:00:02:c2:e4:e7:ab:2c:f0:86:a1:51:c8:76:2e:76:86: 7b:9a:89:1b:8a:05:d7:b5:52:94:5b:d7:89:e8:f4:ad:d0:bd: c1:25:d7:12:a8:d5:b1:b7:34:cd:7c:96:00:b3:6d:51:6e:9c: f8:84:59:a4:44:87:20:ba:03:cc:c9:51:ee:31:35:c9:16:b2: 2a:de:80:a2:85:3f:29:ef:d9:f2:12:df:21:52:06:da:71:df: cb:29:7f:36:4c:65:18:94:ce:4f:14:93:d8:62:cf:e1:31:eb: 7b:98:4e:77:ba:a3:c8:ca:b0:b9:2a:f3:d2:db:37:1d:55:f5: 05:31:36:df:a4:9c:13:97:1d:d9:ea:42:42:11:3c:c4:b9:b6: cc:3a:92:16:46:28:d3:47:59:1f:d1:d5:96:0f:54:41:d0:df: 82:46:cf:6e:2f:fe:d7:36:5e:c2:fb:5a:58:fe:78:f4:36:38: 3c:a0:e3:e3:f2:a5:6b:c2:a8:aa:cb:02:60:29:66:5f:00:58: e6:a1:d9:94:7d:4b:27:65:f1:24:db:07:75:40:f4:eb:14:05: 7b:41:36:b5:f6:11:7d:12:9f:b9:40:aa:61:8f:ff:fc:61:61: 5e:14:c2:cf:54:88:96:ec:3e:c6:49:0f:88:68:8f:f5:1a:47: 79:b8:05:0f -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WWYTK1/ORUUyRbp8LOa+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjgyZmI2MzA1NTM3MDZiZjY4MzA5Zjg2YzhmNDMwZGE5YjIwZTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBs8oih5BL2rXonsc8GOP2AqZsq9 LnwMmphEnXUo6DH0hTiBA97fKzM7KRM94ymkq4jMXLSo8MVH52y2Rgo7x/FNtCrw XGJ4HDfOgnb3yPdQnKT92D/qT7iAB8YeN21zsCSwmSb7RMFEVz8WRR+30kn69gSP l+VNlA6gS5wMc7RFJUoU0Eb8Zux57hMXztmKhzOw9ZQrRtNv8Ibq26rz2DOoF/qZ ujYVueNk225jx4t+zPm6ZbR93hLFg556XU0ogT+hdQYE13wwtP/Nq7SaFAtm7/IQ UQ5Z4lSbB6WfEKHtSPe3lAlYBxRgFCQbGKZ08kzPKaRXgaiYOseEkImuPQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFG+C+2MFU3Br9oMJ+GyPQw2psg6JMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL2I0TDdZd1ZUY0d2Mmd3bjRiSTlERGFteURvay5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZKBQw DQYJKoZIhvcNAQELBQADggEBAJyWAALC5OerLPCGoVHIdi52hnuaiRuKBde1UpRb 14no9K3QvcEl1xKo1bG3NM18lgCzbVFunPiEWaREhyC6A8zJUe4xNckWsiregKKF Pynv2fIS3yFSBtpx38spfzZMZRiUzk8Uk9hiz+Ex63uYTne6o8jKsLkq89LbNx1V 9QUxNt+knBOXHdnqQkIRPMS5tsw6khZGKNNHWR/R1ZYPVEHQ34JGz24v/tc2XsL7 Wlj+ePQ2ODyg4+PypWvCqKrLAmApZl8AWOah2ZR9Sydl8STbB3VA9OsUBXtBNrX2 EX0Sn7lAqmGP//xhYV4Uws9UiJbsPsZJD4hoj/UaR3m4BQ8= -----END CERTIFICATE-----Generated at Sun Jan 25 17:39:57 2026 by rpki-client