This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/65_k7Xeyt8_pvbUCg4O9QThzCiE.roa File: 65_k7Xeyt8_pvbUCg4O9QThzCiE.roa (raw, json) Hash identifier: mwjSjURLwB+FYPEaZl6IdLxQKsg95Hbxo0BZXaRMRyY= Subject key identifier: EB:9F:E4:ED:77:B2:B7:CF:E9:BD:B5:02:83:83:BD:41:38:73:0A:21 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AD194FC776946BB95F65ED8EA2AB6 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/65_k7Xeyt8_pvbUCg4O9QThzCiE.roa Signing time: Thu 01 Jan 2026 16:18:50 +0000 ROA not before: Thu 01 Jan 2026 16:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213690 IP address blocks: 89.213.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d1:94:fc:77:69:46:bb:95:f6:5e:d8:ea:2a:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb9fe4ed77b2b7cfe9bdb5028383bd4138730a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7b:2a:21:5d:a9:e0:8a:09:f7:38:8f:4d:5b: a2:29:4c:91:e5:d8:ad:3e:4a:69:5e:45:dd:f6:14: bb:2c:19:ed:12:bb:e8:64:2b:97:5b:68:11:60:d2: eb:ff:01:8e:7f:54:84:12:67:4c:a8:9b:a2:ee:1e: c7:0e:48:6a:89:a3:82:8a:81:1f:de:d2:5a:f8:fa: e0:f2:24:ec:da:a7:91:24:3f:05:9b:02:b7:05:b5: 80:3f:a6:a8:f2:07:94:17:5f:64:10:41:a9:f2:65: f4:4e:e6:18:b3:45:dd:f5:46:b0:fa:14:26:0f:bb: 8f:f9:e5:a2:94:52:c5:2b:5f:35:11:28:f4:19:08: c7:d7:b8:82:a6:61:40:40:61:a3:9d:1b:bc:3a:d9: 6e:ec:86:0b:e5:54:82:bd:d5:4f:ae:eb:7d:7e:c5: 8a:7f:46:fc:c6:6c:3a:e2:07:6e:63:6d:b7:72:a3: d8:4c:34:60:7b:ed:75:aa:df:94:93:f9:76:d7:f8: 70:e2:70:a0:28:cb:2f:8e:43:71:04:b2:5e:fd:20: 1d:ad:12:d9:02:47:5e:ac:cc:81:c7:41:f4:e9:be: 3d:f0:a1:32:d2:a5:48:24:ee:a8:47:cc:bc:3f:d2: 19:6b:fc:96:32:f9:88:57:50:d8:b2:71:90:c7:15: 7c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:9F:E4:ED:77:B2:B7:CF:E9:BD:B5:02:83:83:BD:41:38:73:0A:21 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/65_k7Xeyt8_pvbUCg4O9QThzCiE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.213.134.0/24 Signature Algorithm: sha256WithRSAEncryption 08:34:cd:8b:cd:18:3c:c7:a2:25:8a:99:56:bb:5d:7c:68:62: 79:00:fd:0e:e1:06:3a:93:ed:b9:7d:53:63:40:35:12:84:27: b9:8d:0b:1c:9c:d9:2b:cb:02:a4:aa:4e:0d:b1:8f:8a:bb:d7: f6:2c:fa:00:a4:a7:5c:43:48:5b:36:6b:79:ae:61:fb:c3:bc: 2d:7e:bc:2d:fe:03:48:49:3d:47:f1:ae:f3:8a:c8:8b:8c:c1: f8:87:b0:5d:a8:5c:a2:57:c7:79:ce:28:16:3f:7a:ed:0e:ae: 55:7e:63:28:0b:8c:33:c9:3a:4a:97:0c:1d:b7:ed:bc:83:ad: bf:f3:8e:eb:6f:e1:db:61:10:b2:3f:ce:3a:d2:2f:1f:07:10: a9:fb:32:a8:0d:93:df:45:9e:46:71:d9:86:77:0f:b5:ba:3c: a5:91:05:9e:cf:1b:45:6b:29:05:83:58:ef:5e:9f:16:43:0b: 89:1b:d2:ed:70:53:0e:95:5d:0a:38:5c:49:ae:d5:6a:16:a6: 3b:69:24:14:57:d0:76:8b:94:14:bd:20:13:88:10:02:4c:fb: ea:36:e7:91:2e:d2:3f:ae:cf:e8:d8:fc:0a:bf:d0:61:c9:ef: 90:66:be:38:18:64:f5:51:46:cb:ee:8a:00:75:2d:38:50:0b: 23:24:33:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WtGU/HdpRruV9l7Y6iq2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjlmZTRlZDc3YjJiN2NmZTliZGI1MDI4MzgzYmQ0MTM4NzMwYTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13sqIV2p4IoJ9ziPTVuiKUyR5dit PkppXkXd9hS7LBntErvoZCuXW2gRYNLr/wGOf1SEEmdMqJui7h7HDkhqiaOCioEf 3tJa+Prg8iTs2qeRJD8FmwK3BbWAP6ao8geUF19kEEGp8mX0TuYYs0Xd9Uaw+hQm D7uP+eWilFLFK181ESj0GQjH17iCpmFAQGGjnRu8Otlu7IYL5VSCvdVPrut9fsWK f0b8xmw64gduY223cqPYTDRge+11qt+Uk/l21/hw4nCgKMsvjkNxBLJe/SAdrRLZ AkderMyBx0H06b498KEy0qVIJO6oR8y8P9IZa/yWMvmIV1DYsnGQxxV8/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOuf5O13srfP6b21AoODvUE4cwohMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvNjVfazdYZXl0OF9wdmJVQ2c0TzlRVGh6Q2lFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdWGMA0G CSqGSIb3DQEBCwUAA4IBAQAINM2LzRg8x6IliplWu118aGJ5AP0O4QY6k+25fVNj QDUShCe5jQscnNkrywKkqk4NsY+Ku9f2LPoApKdcQ0hbNmt5rmH7w7wtfrwt/gNI ST1H8a7zisiLjMH4h7BdqFyiV8d5zigWP3rtDq5VfmMoC4wzyTpKlwwdt+28g62/ 847rb+HbYRCyP8460i8fBxCp+zKoDZPfRZ5GcdmGdw+1ujylkQWezxtFaykFg1jv Xp8WQwuJG9LtcFMOlV0KOFxJrtVqFqY7aSQUV9B2i5QUvSATiBACTPvqNueRLtI/ rs/o2PwKv9Bhye+QZr44GGT1UUbL7ooAdS04UAsjJDNQ -----END CERTIFICATE-----Generated at Sun Jan 25 14:39:00 2026 by rpki-client