This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Cop4QBFgPz7q3SAgsCzxjQw2-I4.roa File: Cop4QBFgPz7q3SAgsCzxjQw2-I4.roa (raw, json) Hash identifier: 3+KMIe4ykTPEMsf6KYjZSYj0RLNxjRnmFAFq/w1rKME= Subject key identifier: 0A:8A:78:40:11:60:3F:3E:EA:DD:20:20:B0:2C:F1:8D:0C:36:F8:8E Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Certificate serial: 019B77C75FA1B25B278F25C57672CEC199FA Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Cop4QBFgPz7q3SAgsCzxjQw2-I4.roa Signing time: Thu 01 Jan 2026 04:18:33 +0000 ROA not before: Thu 01 Jan 2026 04:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214036 IP address blocks: 89.187.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5f:a1:b2:5b:27:8f:25:c5:76:72:ce:c1:99:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Validity Not Before: Jan 1 04:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a8a784011603f3eeadd2020b02cf18d0c36f88e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:26:4a:1f:f5:fd:cc:39:5d:d2:1d:1c:39:6d: 1f:c4:61:4e:fe:b1:b9:f0:b1:98:92:71:19:2c:48: 0f:5e:91:df:04:d1:6d:a4:29:34:6f:67:91:f9:f2: 1b:29:10:05:0b:ff:26:f9:d9:b2:48:03:0a:8e:ee: 09:74:ff:fd:50:bc:a0:b3:14:48:dc:01:4c:f0:73: f4:b0:e0:35:4d:7a:f1:0c:9b:68:5e:10:ca:cf:ec: 76:66:ea:f0:a4:7f:ac:30:76:6b:0a:c4:17:85:88: f1:da:e4:71:b6:38:f0:b6:2b:53:f9:d9:82:26:9d: ca:17:62:37:d1:46:60:bc:20:1e:dd:2c:6f:1b:7e: f7:f3:c4:43:72:6a:55:36:29:e7:a6:20:bb:fc:19: e8:cd:90:52:7a:7f:33:83:f7:30:d0:85:88:2e:d4: bb:c6:2f:89:b8:ab:5e:e1:7a:22:d7:61:a8:7b:d5: 4b:c0:34:87:ca:8b:5d:c9:5c:9c:0c:3c:91:9c:d5: 22:90:7b:9d:a3:15:ff:95:a6:d5:19:f4:56:b4:e4: 11:a3:36:61:a1:d4:af:42:5c:16:d6:0e:5a:86:a2: c3:d5:00:b8:7b:e4:ca:19:da:fa:43:54:be:f1:58: 16:9d:22:62:80:dd:e9:c1:39:7b:b7:13:82:a3:36: d6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8A:78:40:11:60:3F:3E:EA:DD:20:20:B0:2C:F1:8D:0C:36:F8:8E X509v3 Authority Key Identifier: keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Cop4QBFgPz7q3SAgsCzxjQw2-I4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.187.25.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:0f:f8:fe:f9:c3:5d:e5:14:6f:eb:90:b9:ea:c3:3c:ff:81: 7c:11:5b:ff:59:b2:fe:50:0f:b1:49:ca:09:50:74:df:58:e6: 7f:9e:71:81:a1:39:1e:1a:28:16:f1:4f:56:63:c3:40:02:3d: b1:07:0b:b1:25:f0:d4:3b:3c:01:ec:f0:0b:1e:b6:87:55:e9: ab:85:a0:d1:bf:cb:47:32:45:0f:27:db:13:ac:bd:dc:b3:96: 89:10:d0:bf:1b:a7:2e:62:6d:65:6c:a8:37:31:7c:65:e7:66: 5a:92:66:9d:ba:f5:54:8a:fa:3d:7c:98:d8:29:fc:a5:28:c9: d3:ce:a5:64:6d:0c:5e:69:82:17:9a:99:6d:f5:08:1f:42:36: fc:7d:7d:b1:82:bb:58:5f:a7:cb:78:86:a3:2a:66:36:68:4e: f7:f5:39:79:67:5d:fe:1e:a6:86:b5:14:7e:a9:88:66:f8:60: b6:8b:8d:c3:64:09:01:1f:9a:3e:33:24:1e:41:13:4c:e0:2b: 1b:47:cb:33:b5:59:ce:13:8e:32:ca:c6:c8:b2:be:1b:8b:0a: db:1c:23:97:97:08:e5:8c:39:0d:58:62:30:6e:da:c5:38:28: b6:a1:5d:58:84:52:4a:2c:60:7e:25:6f:68:e5:1e:94:3f:66: b6:86:01:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x1+hslsnjyXFdnLOwZn6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw YmYwNTUwHhcNMjYwMTAxMDQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYThhNzg0MDExNjAzZjNlZWFkZDIwMjBiMDJjZjE4ZDBjMzZmODhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviZKH/X9zDld0h0cOW0fxGFO/rG5 8LGYknEZLEgPXpHfBNFtpCk0b2eR+fIbKRAFC/8m+dmySAMKju4JdP/9ULygsxRI 3AFM8HP0sOA1TXrxDJtoXhDKz+x2ZurwpH+sMHZrCsQXhYjx2uRxtjjwtitT+dmC Jp3KF2I30UZgvCAe3SxvG37388RDcmpVNinnpiC7/BnozZBSen8zg/cw0IWILtS7 xi+JuKte4Xoi12Goe9VLwDSHyotdyVycDDyRnNUikHudoxX/labVGfRWtOQRozZh odSvQlwW1g5ahqLD1QC4e+TKGdr6Q1S+8VgWnSJigN3pwTl7txOCozbWZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAqKeEARYD8+6t0gILAs8Y0MNviOMB8GA1UdIwQY MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt NDVjZmM4NTdkZGRkLzEvQ29wNFFCRmdQejdxM1NBZ3NDenhqUXcyLUk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbsZMA0G CSqGSIb3DQEBCwUAA4IBAQCPD/j++cNd5RRv65C56sM8/4F8EVv/WbL+UA+xScoJ UHTfWOZ/nnGBoTkeGigW8U9WY8NAAj2xBwuxJfDUOzwB7PALHraHVemrhaDRv8tH MkUPJ9sTrL3cs5aJENC/G6cuYm1lbKg3MXxl52ZakmaduvVUivo9fJjYKfylKMnT zqVkbQxeaYIXmplt9QgfQjb8fX2xgrtYX6fLeIajKmY2aE739Tl5Z13+HqaGtRR+ qYhm+GC2i43DZAkBH5o+MyQeQRNM4CsbR8sztVnOE44yysbIsr4biwrbHCOXlwjl jDkNWGIwbtrFOCi2oV1YhFJKLGB+JW9o5R6UP2a2hgFS -----END CERTIFICATE-----Generated at Sun Jan 25 10:08:47 2026 by rpki-client