This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/te3CBj86i8DagMQP9Qmfnp7lXW0.roa File: te3CBj86i8DagMQP9Qmfnp7lXW0.roa (raw, json) Hash identifier: uhPdqv1cs4tlXCsU0a1H+GHetRElpiTCGK1AeQMbE/I= Subject key identifier: B5:ED:C2:06:3F:3A:8B:C0:DA:80:C4:0F:F5:09:9F:9E:9E:E5:5D:6D Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77595D589E8601F6D3BF7FD56CA820B5 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/te3CBj86i8DagMQP9Qmfnp7lXW0.roa Signing time: Thu 01 Jan 2026 02:18:23 +0000 ROA not before: Thu 01 Jan 2026 02:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59892 IP address blocks: 89.39.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5d:58:9e:86:01:f6:d3:bf:7f:d5:6c:a8:20:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5edc2063f3a8bc0da80c40ff5099f9e9ee55d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:16:2b:03:d8:ab:de:3b:8f:b6:63:70:a1:eb: a5:3f:71:e1:40:44:96:f6:5d:74:ae:cd:f7:a5:28: 26:50:69:9c:60:b0:72:93:84:da:b2:6a:f6:aa:c0: 5f:5f:f4:ec:cb:53:2a:89:e0:a9:4f:61:08:51:57: 8b:1e:37:ab:6d:c7:43:84:bb:56:65:a3:a1:1b:20: 0f:1c:1d:a0:69:ba:4b:af:53:b2:3d:be:9a:0c:c8: 5a:c8:cb:15:9d:34:1b:ce:50:e7:14:0c:3b:eb:54: ba:e9:a8:e1:a5:b5:47:11:0b:23:a8:62:92:ca:9a: 67:6e:eb:dd:8f:07:89:3d:c7:53:c6:22:14:a9:97: 1c:27:64:4c:db:74:a8:0a:d9:b2:ce:ef:61:22:99: 40:71:81:d0:3d:e1:91:11:67:be:8d:d7:fb:9c:1d: f5:41:03:1e:72:41:dc:38:7b:60:e4:3f:5a:34:d6: 0f:e8:fa:55:34:80:5d:90:a0:a1:c8:dd:fe:70:7e: 4b:57:61:fb:6e:f1:b8:8e:af:43:8f:f2:4f:93:f1: 9d:31:93:d0:49:97:03:00:44:92:f0:78:f5:37:1f: 5e:ae:66:10:45:38:c1:0a:1e:9d:2b:b9:06:e3:48: c5:30:f6:42:6c:4a:56:0c:00:c3:db:6d:f3:48:1c: 37:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:ED:C2:06:3F:3A:8B:C0:DA:80:C4:0F:F5:09:9F:9E:9E:E5:5D:6D X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/te3CBj86i8DagMQP9Qmfnp7lXW0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.39.190.0/24 Signature Algorithm: sha256WithRSAEncryption c1:27:d8:5e:1d:fc:54:e0:31:1c:2d:a2:f4:31:53:4f:29:81: 8c:62:f5:1a:c8:2d:9b:2d:63:ed:3d:8f:a5:0c:3d:bf:e1:5a: 12:a3:da:79:50:d2:14:a6:4e:96:0e:b7:be:56:f6:6c:1e:d0: 74:48:f4:b4:dc:3c:5b:e7:94:6b:70:c2:13:bc:62:b6:29:af: 0e:5e:ac:9a:16:ed:fc:82:f0:db:a6:72:29:73:78:3d:5e:1b: 8a:e5:a3:96:de:99:29:09:c1:bc:1d:f9:fe:d9:ea:e0:a3:a3: 2c:c0:56:84:38:96:51:d7:dc:6f:a9:28:18:5e:ad:b7:d1:2e: 8e:58:1d:22:fc:03:05:bc:da:3e:b7:df:7f:ff:32:bf:14:f8: bc:97:f0:2f:81:8b:85:ef:66:16:ab:e3:90:f3:0b:52:92:2b: 48:7d:dc:cb:31:6f:2f:ba:09:f5:02:09:0e:8f:45:be:97:b8: 23:59:98:09:6e:ed:3e:23:e2:da:7c:67:1d:65:92:52:a2:96: c6:b9:e0:4e:d9:30:44:00:32:bd:84:20:ed:00:f0:67:bb:e2: 08:ea:b3:1c:b6:74:7e:c3:ee:b1:df:f6:17:7d:3d:26:37:13: c8:49:e9:72:05:52:71:c7:29:08:a8:ce:ea:16:f5:ea:71:ac: 1d:3c:04:92 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WV1YnoYB9tO/f9VsqCC1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWVkYzIwNjNmM2E4YmMwZGE4MGM0MGZmNTA5OWY5ZTllZTU1ZDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBYrA9ir3juPtmNwoeulP3HhQESW 9l10rs33pSgmUGmcYLByk4Tasmr2qsBfX/Tsy1MqieCpT2EIUVeLHjerbcdDhLtW ZaOhGyAPHB2gabpLr1OyPb6aDMhayMsVnTQbzlDnFAw761S66ajhpbVHEQsjqGKS yppnbuvdjweJPcdTxiIUqZccJ2RM23SoCtmyzu9hIplAcYHQPeGREWe+jdf7nB31 QQMeckHcOHtg5D9aNNYP6PpVNIBdkKChyN3+cH5LV2H7bvG4jq9Dj/JPk/GdMZPQ SZcDAESS8Hj1Nx9ermYQRTjBCh6dK7kG40jFMPZCbEpWDADD223zSBw3TwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFLXtwgY/OovA2oDED/UJn56e5V1tMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL3RlM0NCajg2aThEYWdNUVA5UW1mbnA3bFhXMC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZJ74w DQYJKoZIhvcNAQELBQADggEBAMEn2F4d/FTgMRwtovQxU08pgYxi9RrILZstY+09 j6UMPb/hWhKj2nlQ0hSmTpYOt75W9mwe0HRI9LTcPFvnlGtwwhO8YrYprw5erJoW 7fyC8NumcilzeD1eG4rlo5bemSkJwbwd+f7Z6uCjoyzAVoQ4llHX3G+pKBherbfR Lo5YHSL8AwW82j6333//Mr8U+LyX8C+Bi4XvZhar45DzC1KSK0h93Msxby+6CfUC CQ6PRb6XuCNZmAlu7T4j4tp8Zx1lklKilsa54E7ZMEQAMr2EIO0A8Ge74gjqsxy2 dH7D7rHf9hd9PSY3E8hJ6XIFUnHHKQiozuoW9epxrB08BJI= -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:17 2026 by rpki-client