This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/yUsuWE75fvpVNDKi25yxDnSFgas.roa File: yUsuWE75fvpVNDKi25yxDnSFgas.roa (raw, json) Hash identifier: 0+NS8jozq3pY1+D5dQVaQbM4vVwYoFFHieJ2bcA/1lE= Subject key identifier: C9:4B:2E:58:4E:F9:7E:FA:55:34:32:A2:DB:9C:B1:0E:74:85:81:AB Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Certificate serial: 019B7910D27852F96D23A6AD2147C57081A4 Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/yUsuWE75fvpVNDKi25yxDnSFgas.roa Signing time: Thu 01 Jan 2026 10:18:24 +0000 ROA not before: Thu 01 Jan 2026 10:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 84.247.113.0/24 maxlen: 24 89.149.18.0/24 maxlen: 24 89.149.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d2:78:52:f9:6d:23:a6:ad:21:47:c5:70:81:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Validity Not Before: Jan 1 10:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c94b2e584ef97efa553432a2db9cb10e748581ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d6:7a:6d:2a:d8:c2:a6:28:f8:89:7f:f6:73: 6e:49:79:fb:e4:fe:f5:49:6a:f6:c5:b0:40:43:c9: b4:34:83:2f:f5:31:7b:37:88:ca:f1:46:62:b6:9e: da:b8:33:b1:5d:ad:84:0c:62:e2:99:e6:8c:4b:ea: f7:83:63:4c:d4:31:8b:83:df:b2:a1:e8:c9:76:b4: 8f:0e:e6:e6:92:de:58:8a:f1:d9:99:24:83:3b:ca: 82:b8:30:ae:3e:ed:e3:33:95:a8:c4:c3:6a:b2:88: d3:a5:69:a3:1b:e5:3d:50:3e:24:04:b4:8f:b2:02: cd:31:fd:e3:ab:cd:68:da:9e:5d:8b:5d:aa:28:78: 6c:bd:c0:40:4a:de:14:35:e8:c8:c3:d9:e7:5b:00: 06:43:96:3a:2a:9f:90:0e:99:a0:93:07:d5:00:8c: 08:05:1b:de:10:93:63:60:a1:5d:c2:fa:78:31:a9: 0c:49:89:b5:cd:61:4d:a2:25:97:3a:68:cd:ff:3a: ac:f0:14:85:92:d7:b8:08:1d:88:b7:b0:e5:8d:5a: 4b:de:ef:00:f7:0c:ce:1d:8b:45:78:35:e9:7a:e3: f1:8b:2e:0e:06:5b:1f:15:e4:83:19:2f:ac:61:2f: f7:08:25:68:c4:4a:98:db:62:00:31:7f:31:8b:f3: 21:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4B:2E:58:4E:F9:7E:FA:55:34:32:A2:DB:9C:B1:0E:74:85:81:AB X509v3 Authority Key Identifier: keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/yUsuWE75fvpVNDKi25yxDnSFgas.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.247.113.0/24 89.149.18.0/24 89.149.63.0/24 Signature Algorithm: sha256WithRSAEncryption 37:97:9d:62:00:f5:f7:dc:7e:b4:6e:6c:3f:90:11:c9:96:e2: 2a:06:95:f5:9e:ea:1e:1b:1f:64:08:b2:3d:7d:b7:53:67:a6: d2:a4:84:0c:6d:1f:c6:3c:91:f3:84:51:42:3e:7e:53:33:d9: 92:36:f0:f4:56:05:cc:38:f6:96:01:2f:18:87:a1:1d:1d:f0: 4e:6c:88:89:e1:9e:e4:b7:dd:e3:f0:41:a8:42:8c:af:fe:1e: 49:66:e9:27:da:1b:7d:47:97:10:48:67:e7:76:75:10:ac:b6: 6d:63:d2:22:c5:a1:30:e1:2f:c5:14:9e:a3:65:85:be:fa:23: ee:0e:6d:98:c0:77:e0:b1:4e:70:8e:63:9c:6b:c1:f5:9a:ea: 52:dd:4a:78:87:24:02:ca:41:79:d7:f2:4e:c1:5f:2a:56:0c: d9:99:79:78:eb:2a:b1:41:e3:d6:22:00:43:34:4c:29:4e:7a: d8:90:c9:fd:53:8e:75:b9:46:3d:fe:a5:48:e4:51:fc:cc:a8: 9a:0c:e6:9e:58:c5:b2:eb:ea:e6:8e:c0:94:65:3e:a0:10:db: 88:8a:d1:1b:82:20:92:5b:4a:d8:f6:ff:4b:aa:15:2d:3a:bc: eb:ea:14:e7:d2:27:6e:0c:e7:ef:04:72:2a:0f:5e:8f:05:18: ec:84:62:9a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5ENJ4UvltI6atIUfFcIGkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm YzQ1ODIwHhcNMjYwMTAxMTAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTRiMmU1ODRlZjk3ZWZhNTUzNDMyYTJkYjljYjEwZTc0ODU4MWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNZ6bSrYwqYo+Il/9nNuSXn75P71 SWr2xbBAQ8m0NIMv9TF7N4jK8UZitp7auDOxXa2EDGLimeaMS+r3g2NM1DGLg9+y oejJdrSPDubmkt5YivHZmSSDO8qCuDCuPu3jM5WoxMNqsojTpWmjG+U9UD4kBLSP sgLNMf3jq81o2p5di12qKHhsvcBASt4UNejIw9nnWwAGQ5Y6Kp+QDpmgkwfVAIwI BRveEJNjYKFdwvp4MakMSYm1zWFNoiWXOmjN/zqs8BSFkte4CB2It7DljVpL3u8A 9wzOHYtFeDXpeuPxiy4OBlsfFeSDGS+sYS/3CCVoxEqY22IAMX8xi/Mh7QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMlLLlhO+X76VTQyotucsQ50hYGrMB8GA1UdIwQY MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt MjhhODQxZGEwYmZkLzEveVVzdVdFNzVmdnBWTkRLaTI1eXhEblNGZ2FzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVPdxAwQA WZUSAwQAWZU/MA0GCSqGSIb3DQEBCwUAA4IBAQA3l51iAPX33H60bmw/kBHJluIq BpX1nuoeGx9kCLI9fbdTZ6bSpIQMbR/GPJHzhFFCPn5TM9mSNvD0VgXMOPaWAS8Y h6EdHfBObIiJ4Z7kt93j8EGoQoyv/h5JZukn2ht9R5cQSGfndnUQrLZtY9IixaEw 4S/FFJ6jZYW++iPuDm2YwHfgsU5wjmOca8H1mupS3Up4hyQCykF51/JOwV8qVgzZ mXl46yqxQePWIgBDNEwpTnrYkMn9U451uUY9/qVI5FH8zKiaDOaeWMWy6+rmjsCU ZT6gENuIitEbgiCSW0rY9v9LqhUtOrzr6hTn0iduDOfvBHIqD16PBRjshGKa -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:47 2026 by rpki-client