This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/0afuwwpSylnqyi1KRwMRDOM6r7k.roa File: 0afuwwpSylnqyi1KRwMRDOM6r7k.roa (raw, json) Hash identifier: z3MlidMuuLgNR1mdxxRmyn3fh5T6uAJcGz1Z1osDBjI= Subject key identifier: D1:A7:EE:C3:0A:52:CA:59:EA:CA:2D:4A:47:03:11:0C:E3:3A:AF:B9 Certificate issuer: /CN=762656c5e66b82c04654be1a25629b1fd6a59456 Certificate serial: 019B77596922F314562A713935976E005F3C Authority key identifier: 76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/0afuwwpSylnqyi1KRwMRDOM6r7k.roa Signing time: Thu 01 Jan 2026 02:18:26 +0000 ROA not before: Thu 01 Jan 2026 02:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39520 IP address blocks: 89.255.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:69:22:f3:14:56:2a:71:39:35:97:6e:00:5f:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=762656c5e66b82c04654be1a25629b1fd6a59456 Validity Not Before: Jan 1 02:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1a7eec30a52ca59eaca2d4a4703110ce33aafb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fa:bb:fe:eb:3c:71:77:bb:d8:49:d9:af:52: 15:35:76:4d:e1:53:d6:74:e2:a2:b0:cf:e5:ab:36: c1:7f:a7:7d:75:79:aa:93:3c:a8:f8:15:57:7d:a5: 83:6e:8c:97:41:de:f7:04:89:4f:6a:3d:02:f7:7b: d6:e7:82:9b:8b:08:56:5a:6b:ca:07:88:56:fc:52: 68:e4:ec:45:ab:36:83:18:1e:7f:65:6c:a1:88:31: 11:53:95:63:39:ba:6b:bb:52:57:35:05:5b:27:7a: 95:a2:c2:6a:cd:6a:83:63:be:bd:30:c4:53:9e:59: ea:b3:f1:90:92:d9:20:e7:eb:df:2d:60:f1:c8:5e: b6:e6:7d:36:ba:19:19:6e:dc:10:9b:2b:a0:d7:3c: 2d:27:25:b3:a1:48:67:0b:21:da:3f:0a:71:a9:c7: 8e:db:60:47:27:00:74:5b:e1:d6:9c:00:22:ec:f0: 2f:6c:f2:94:05:a5:ae:43:a3:d4:d7:81:46:7b:47: 8a:82:a1:b0:fc:7e:9a:98:3e:49:c6:97:23:6c:74: 55:3e:ae:68:c7:7b:69:a1:dc:6c:32:9c:bb:27:f1: b9:37:c7:c5:27:53:a1:bf:29:58:db:fe:1c:0a:e6: df:e5:4f:b0:5a:c9:26:d9:9e:5f:80:cb:bb:2a:03: 59:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A7:EE:C3:0A:52:CA:59:EA:CA:2D:4A:47:03:11:0C:E3:3A:AF:B9 X509v3 Authority Key Identifier: keyid:76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/0afuwwpSylnqyi1KRwMRDOM6r7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.255.208.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:fa:b8:5d:da:9a:d8:71:c6:db:02:bb:a3:66:c0:d7:71:9d: ac:22:c8:07:7f:17:cb:71:39:dd:44:b5:38:5e:09:b2:5a:b2: 31:c1:c9:ba:40:87:1b:de:71:19:16:61:72:44:dc:72:00:94: a4:92:65:72:7f:33:47:7a:d4:25:5b:54:95:49:ee:0f:5c:16: c2:20:be:c2:11:3c:dd:1b:35:1d:0f:77:2e:1f:40:35:d6:06: c3:84:0c:75:bc:94:e4:22:bc:c1:f9:d4:07:ea:40:10:98:70: 37:df:67:03:d1:d4:a3:e0:d6:bb:46:06:7e:bf:1e:8f:a0:5f: b5:cd:d7:f2:84:1c:ee:04:22:78:2a:f1:93:58:e3:08:29:dc: d6:18:e3:09:ec:5a:ea:b2:92:d6:79:56:75:68:a8:61:ee:17: d1:82:b9:96:37:ca:11:26:f9:a3:e5:63:dc:c4:a7:7f:8a:95: c5:30:97:6d:94:5b:f3:ec:2d:c5:d7:01:e3:94:6e:34:b1:06: be:6e:38:0a:f2:ee:fc:03:2a:be:a4:fa:bf:95:56:df:ff:99: 44:bf:39:b6:f7:ed:29:f4:15:68:f8:a5:4f:1b:72:32:1f:39: a4:82:06:2a:f4:3b:9f:21:3a:3d:d0:52:9a:89:ce:4b:29:2b: 14:fb:0b:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WWki8xRWKnE5NZduAF88MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MjY1NmM1ZTY2YjgyYzA0NjU0YmUxYTI1NjI5YjFmZDZh NTk0NTYwHhcNMjYwMTAxMDIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWE3ZWVjMzBhNTJjYTU5ZWFjYTJkNGE0NzAzMTEwY2UzM2FhZmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fq7/us8cXe72EnZr1IVNXZN4VPW dOKisM/lqzbBf6d9dXmqkzyo+BVXfaWDboyXQd73BIlPaj0C93vW54KbiwhWWmvK B4hW/FJo5OxFqzaDGB5/ZWyhiDERU5VjObpru1JXNQVbJ3qVosJqzWqDY769MMRT nlnqs/GQktkg5+vfLWDxyF625n02uhkZbtwQmyug1zwtJyWzoUhnCyHaPwpxqceO 22BHJwB0W+HWnAAi7PAvbPKUBaWuQ6PU14FGe0eKgqGw/H6amD5JxpcjbHRVPq5o x3tpodxsMpy7J/G5N8fFJ1OhvylY2/4cCubf5U+wWskm2Z5fgMu7KgNZewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNGn7sMKUspZ6sotSkcDEQzjOq+5MB8GA1UdIwQY MBaAFHYmVsXma4LARlS+GiVimx/WpZRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGlaV3hlWnJnc0JHVkw0YUpXS2JIOWFsbEZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8xOThjNmItZDcxNS00N2I2LTg2YzAt NGQyMmM2YjViMWZlLzEvMGFmdXd3cFN5bG5xeWkxS1J3TVJET002cjdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8xOThjNmItZDcxNS00N2I2LTg2YzAtNGQyMmM2YjViMWZl LzEvZGlaV3hlWnJnc0JHVkw0YUpXS2JIOWFsbEZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWf/QMA0G CSqGSIb3DQEBCwUAA4IBAQB6+rhd2prYccbbArujZsDXcZ2sIsgHfxfLcTndRLU4 XgmyWrIxwcm6QIcb3nEZFmFyRNxyAJSkkmVyfzNHetQlW1SVSe4PXBbCIL7CETzd GzUdD3cuH0A11gbDhAx1vJTkIrzB+dQH6kAQmHA332cD0dSj4Na7RgZ+vx6PoF+1 zdfyhBzuBCJ4KvGTWOMIKdzWGOMJ7FrqspLWeVZ1aKhh7hfRgrmWN8oRJvmj5WPc xKd/ipXFMJdtlFvz7C3F1wHjlG40sQa+bjgK8u78Ayq+pPq/lVbf/5lEvzm29+0p 9BVo+KVPG3IyHzmkggYq9DufITo90FKaic5LKSsU+ws8 -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:45 2026 by rpki-client