This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/_7KTUyvraj0jLcJwWnYx49GI_Ws.roa File: _7KTUyvraj0jLcJwWnYx49GI_Ws.roa (raw, json) Hash identifier: uTbeQlp1sTHWF8RgjB3gPB+04hQuOuoqkYdDsifDeDQ= Subject key identifier: FF:B2:93:53:2B:EB:6A:3D:23:2D:C2:70:5A:76:31:E3:D1:88:FD:6B Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Certificate serial: 019B79EBC3C7D900EBA63BF74E7C00290123 Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/_7KTUyvraj0jLcJwWnYx49GI_Ws.roa Signing time: Thu 01 Jan 2026 14:17:32 +0000 ROA not before: Thu 01 Jan 2026 14:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215014 IP address blocks: 89.42.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:c3:c7:d9:00:eb:a6:3b:f7:4e:7c:00:29:01:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Validity Not Before: Jan 1 14:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffb293532beb6a3d232dc2705a7631e3d188fd6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d7:b8:d9:20:6c:2b:b2:6e:59:d0:5c:76:c1: a1:8a:95:a8:86:6d:10:9f:90:14:75:a8:2f:e6:26: 58:e1:b4:1b:1c:77:06:e7:91:68:34:b7:41:a3:09: e0:8a:07:c5:9c:89:98:0b:08:9f:98:78:04:3d:24: 1b:3c:9e:58:a1:47:58:36:ba:b7:ec:92:b7:44:1b: f4:ca:0a:20:de:2d:8a:4e:b2:53:5f:d5:b4:8b:5a: dc:3c:af:fa:99:70:14:91:32:1c:89:53:d8:32:d0: e2:bf:2f:54:54:25:ba:a9:05:03:80:a5:8d:61:94: 74:64:0a:66:db:58:bf:fa:df:77:96:48:7c:b3:61: fc:b4:c8:d1:36:ea:97:65:b7:f5:e5:11:88:53:f4: 47:4a:18:ae:7c:da:e5:c1:f4:f6:8c:12:8a:37:96: c8:ca:6d:de:85:0b:fa:b9:bc:c2:df:9a:69:9d:38: 17:08:89:c6:a5:41:8a:22:a8:f6:75:88:34:fe:dd: 2e:71:5f:b2:aa:18:bd:e5:f6:9b:3a:76:e9:eb:bc: 54:fa:75:34:25:f8:20:8c:c2:ae:d5:bb:a5:24:e4: 7d:d9:86:5f:14:89:d0:93:99:9e:4f:d9:c7:5a:d4: 50:49:6b:7e:09:a8:86:29:64:88:bd:de:95:8e:16: 50:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B2:93:53:2B:EB:6A:3D:23:2D:C2:70:5A:76:31:E3:D1:88:FD:6B X509v3 Authority Key Identifier: keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/_7KTUyvraj0jLcJwWnYx49GI_Ws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.42.38.0/23 Signature Algorithm: sha256WithRSAEncryption 29:69:ca:57:dd:d1:fe:e9:55:dc:90:e8:2c:f8:08:e5:51:e3: 7c:54:fb:36:31:9c:26:08:a5:b6:4b:31:e2:ed:f0:8f:cc:85: eb:65:11:72:2f:c6:d8:cc:a1:62:93:77:0f:b8:8e:16:27:ba: 4b:96:33:b7:b4:a5:43:41:fc:12:50:7d:65:b0:f3:7b:ba:ca: c0:68:23:6c:a1:50:c3:9b:72:5f:4e:82:91:c6:53:14:42:15: 94:28:f0:5b:f4:fc:df:ac:5b:63:74:57:2c:d7:25:af:5a:39: 13:e7:2a:cf:b7:a2:27:bb:ef:96:40:75:1d:ba:97:7f:e6:e3: f5:31:b2:b0:4a:da:1e:1b:5e:fa:30:9f:ec:8f:32:a8:95:e7: 90:f4:c6:8f:5a:86:35:12:71:7b:d9:ed:6d:68:4d:da:db:4e: f2:3d:29:3e:84:62:68:c7:21:24:dd:62:ab:6b:65:cb:f9:e7: f8:ee:c3:e9:5b:3c:3f:75:21:9a:59:d3:0d:95:c8:25:02:61: d3:7c:24:c5:0f:af:50:a9:0a:7f:80:8a:6c:85:fc:4f:47:e3: 0e:60:2e:e4:c7:e3:8f:8d:4e:63:49:7e:3e:a1:9a:d8:9e:5b: 1f:a2:cb:4e:9b:9c:e1:59:3c:8f:59:ec:8b:d7:0f:1d:35:40: 3d:5c:88:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt568PH2QDrpjv3TnwAKQEjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4 NWZmOGMwHhcNMjYwMTAxMTQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmIyOTM1MzJiZWI2YTNkMjMyZGMyNzA1YTc2MzFlM2QxODhmZDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAode42SBsK7JuWdBcdsGhipWohm0Q n5AUdagv5iZY4bQbHHcG55FoNLdBowngigfFnImYCwifmHgEPSQbPJ5YoUdYNrq3 7JK3RBv0ygog3i2KTrJTX9W0i1rcPK/6mXAUkTIciVPYMtDivy9UVCW6qQUDgKWN YZR0ZApm21i/+t93lkh8s2H8tMjRNuqXZbf15RGIU/RHShiufNrlwfT2jBKKN5bI ym3ehQv6ubzC35ppnTgXCInGpUGKIqj2dYg0/t0ucV+yqhi95fabOnbp67xU+nU0 JfggjMKu1bulJOR92YZfFInQk5meT9nHWtRQSWt+CaiGKWSIvd6VjhZQWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP+yk1Mr62o9Iy3CcFp2MePRiP1rMB8GA1UdIwQY MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt MjVkYmY0MzgwNGM1LzEvXzdLVFV5dnJhajBqTGNKd1duWXg0OUdJX1dzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1 LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWSomMA0G CSqGSIb3DQEBCwUAA4IBAQApacpX3dH+6VXckOgs+AjlUeN8VPs2MZwmCKW2SzHi 7fCPzIXrZRFyL8bYzKFik3cPuI4WJ7pLljO3tKVDQfwSUH1lsPN7usrAaCNsoVDD m3JfToKRxlMUQhWUKPBb9PzfrFtjdFcs1yWvWjkT5yrPt6Inu++WQHUdupd/5uP1 MbKwStoeG176MJ/sjzKoleeQ9MaPWoY1EnF72e1taE3a207yPSk+hGJoxyEk3WKr a2XL+ef47sPpWzw/dSGaWdMNlcglAmHTfCTFD69QqQp/gIpshfxPR+MOYC7kx+OP jU5jSX4+oZrYnlsfostOm5zhWTyPWeyL1w8dNUA9XIiO -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:15 2026 by rpki-client