This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/OJ1w1WvW4k3Ga1EBJCqY-_2nqzU.roa File: OJ1w1WvW4k3Ga1EBJCqY-_2nqzU.roa (raw, json) Hash identifier: b5bk7yZz1Is4O8Xir/sTrR/mIRsoYCAaY6BCfdgn5ZQ= Subject key identifier: 38:9D:70:D5:6B:D6:E2:4D:C6:6B:51:01:24:2A:98:FB:FD:A7:AB:35 Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Certificate serial: 019B77C7598080E4C9A05572E4ACB434B5C3 Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/OJ1w1WvW4k3Ga1EBJCqY-_2nqzU.roa Signing time: Thu 01 Jan 2026 04:18:31 +0000 ROA not before: Thu 01 Jan 2026 04:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8881 IP address blocks: 89.187.24.0/24 maxlen: 24 89.187.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:59:80:80:e4:c9:a0:55:72:e4:ac:b4:34:b5:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Validity Not Before: Jan 1 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=389d70d56bd6e24dc66b5101242a98fbfda7ab35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c9:f1:1b:7e:70:20:51:8c:92:1e:32:b1:14: 2f:5e:78:bd:ce:ba:2a:1f:e2:84:49:4d:ae:6d:74: 05:32:8e:5e:3c:49:41:52:69:c4:6c:98:42:76:48: a2:d4:1a:ee:90:e7:a9:26:f9:28:b2:56:0b:57:41: d2:b5:cc:88:a0:c2:cf:26:e8:f4:9a:ae:11:81:3f: c6:de:51:0f:38:22:e0:a8:48:64:94:8a:fe:04:28: ed:0b:43:8a:77:58:ee:51:cd:6f:bb:17:69:bd:b7: 02:58:82:81:2d:83:6f:66:c0:30:6b:1c:65:03:45: e2:c3:fd:93:7e:e7:0c:4d:d3:1b:5d:c8:67:95:be: e4:44:a5:52:dd:86:5c:9b:63:c8:17:44:d0:fb:8d: df:f3:1c:5a:16:a3:c6:5b:1d:53:66:53:e9:8f:6f: 2a:04:22:08:67:be:9b:20:a8:f2:78:fc:32:ba:f3: c4:37:51:8a:15:df:21:b7:bc:20:11:9a:fc:4f:8f: 59:06:c8:42:f8:35:ab:5e:79:92:09:ee:d3:bd:d1: b0:7e:a9:b3:cd:b4:53:be:06:ae:b3:5d:e2:56:bb: 0f:93:fc:04:9c:ef:b4:7d:c5:03:56:5d:20:f8:ae: 33:e2:6f:cf:ed:3f:87:79:af:37:ba:37:9d:96:fa: 43:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:9D:70:D5:6B:D6:E2:4D:C6:6B:51:01:24:2A:98:FB:FD:A7:AB:35 X509v3 Authority Key Identifier: keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/OJ1w1WvW4k3Ga1EBJCqY-_2nqzU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.187.24.0/24 89.187.26.0/24 Signature Algorithm: sha256WithRSAEncryption cd:ae:54:65:42:a9:e0:46:15:f5:95:47:d4:6c:bd:d5:72:75: 3b:a0:3f:0a:63:92:5a:39:0f:48:14:6d:fe:39:2e:22:7d:f5: 31:3b:64:fd:33:1a:25:5f:6a:98:98:40:d1:13:0e:bc:fe:fe: 3a:6a:22:ac:e0:63:6a:fa:b7:f1:fe:03:d9:0e:e2:1f:76:de: 9e:3a:a5:a7:3e:f1:2b:53:dc:bf:8f:96:b8:02:1c:26:89:91: c1:e4:27:e3:9e:a6:4d:d6:5f:5f:f0:d9:69:3f:ec:f5:c3:86: 5a:6e:95:d7:0c:c3:ee:77:cb:1c:16:bd:8e:d3:77:c9:c5:45: a8:9e:c9:e8:55:09:ee:14:b1:fb:de:72:ab:2b:7e:d7:4f:2a: 00:bb:3a:89:8e:4b:bc:b2:13:ca:20:3c:a7:bb:fe:46:c6:a3: ab:58:ca:d2:b7:d4:b7:6b:83:2b:dc:df:7c:68:bf:93:5a:b0: c4:e7:2c:0b:45:e0:ac:83:d4:96:24:7f:74:e6:09:05:32:3e: 43:e9:af:8a:40:b1:a0:a7:f1:de:29:19:88:88:69:09:b6:91: da:b7:ef:13:0c:bf:42:83:38:14:ee:69:b3:6d:55:8c:8f:60: 82:93:46:aa:5a:17:56:6e:eb:ad:f5:a7:a8:56:2e:de:8a:99: e0:d4:f9:08 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x1mAgOTJoFVy5Ky0NLXDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw YmYwNTUwHhcNMjYwMTAxMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODlkNzBkNTZiZDZlMjRkYzY2YjUxMDEyNDJhOThmYmZkYTdhYjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMnxG35wIFGMkh4ysRQvXni9zroq H+KESU2ubXQFMo5ePElBUmnEbJhCdkii1BrukOepJvkoslYLV0HStcyIoMLPJuj0 mq4RgT/G3lEPOCLgqEhklIr+BCjtC0OKd1juUc1vuxdpvbcCWIKBLYNvZsAwaxxl A0Xiw/2TfucMTdMbXchnlb7kRKVS3YZcm2PIF0TQ+43f8xxaFqPGWx1TZlPpj28q BCIIZ76bIKjyePwyuvPEN1GKFd8ht7wgEZr8T49ZBshC+DWrXnmSCe7TvdGwfqmz zbRTvgaus13iVrsPk/wEnO+0fcUDVl0g+K4z4m/P7T+Hea83ujedlvpDLQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDidcNVr1uJNxmtRASQqmPv9p6s1MB8GA1UdIwQY MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt NDVjZmM4NTdkZGRkLzEvT0oxdzFXdlc0azNHYTFFQkpDcVktXzJucXpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWbsYAwQA WbsaMA0GCSqGSIb3DQEBCwUAA4IBAQDNrlRlQqngRhX1lUfUbL3VcnU7oD8KY5Ja OQ9IFG3+OS4iffUxO2T9MxolX2qYmEDREw68/v46aiKs4GNq+rfx/gPZDuIfdt6e OqWnPvErU9y/j5a4AhwmiZHB5CfjnqZN1l9f8NlpP+z1w4ZabpXXDMPud8scFr2O 03fJxUWonsnoVQnuFLH73nKrK37XTyoAuzqJjku8shPKIDynu/5GxqOrWMrSt9S3 a4Mr3N98aL+TWrDE5ywLReCsg9SWJH905gkFMj5D6a+KQLGgp/HeKRmIiGkJtpHa t+8TDL9CgzgU7mmzbVWMj2CCk0aqWhdWbuut9aeoVi7eipng1PkI -----END CERTIFICATE-----Generated at Sun Jan 25 10:08:42 2026 by rpki-client