This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/m-2dYhQrAu-81Ydza21n-eRWlcw.roa File: m-2dYhQrAu-81Ydza21n-eRWlcw.roa (raw, json) Hash identifier: yLjz+lgfJ+jDnIJSu5od2TETiCmbT6+DCzdwHtsWayA= Subject key identifier: 9B:ED:9D:62:14:2B:02:EF:BC:D5:87:73:6B:6D:67:F9:E4:56:95:CC Certificate issuer: /CN=17c203e3f365923a843d3220317a1c68cf74de0f Certificate serial: 019B77C66377143D8BC048C6A040D1497DC0 Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/m-2dYhQrAu-81Ydza21n-eRWlcw.roa Signing time: Thu 01 Jan 2026 04:17:28 +0000 ROA not before: Thu 01 Jan 2026 04:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 89.111.15.128/26 maxlen: 26 2a00:17c0:c4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:63:77:14:3d:8b:c0:48:c6:a0:40:d1:49:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f Validity Not Before: Jan 1 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bed9d62142b02efbcd587736b6d67f9e45695cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c1:80:f1:76:93:46:ef:94:f4:5a:3b:4d:87: fb:fb:3c:46:e8:6e:75:ab:10:78:7e:bf:c7:03:4b: cb:ea:5b:9f:fe:aa:f1:ef:11:7e:c8:43:fd:22:be: 32:c6:ff:a4:bc:98:cc:89:62:82:04:4b:29:88:07: ed:54:c9:8c:a1:0d:d8:b2:9c:7e:7c:82:da:fc:ee: 8b:25:34:5b:7d:05:16:88:c8:09:bd:72:22:5c:92: 40:74:19:53:b0:8f:43:af:b8:9f:0c:58:07:f4:76: c4:0c:03:a0:f2:53:49:ac:1c:8c:52:3e:e3:23:fb: c4:96:54:f0:be:e3:df:64:49:1e:d8:d2:b3:2a:e8: 5a:49:f9:22:fb:e8:3f:6f:9b:af:57:b7:1f:39:d5: f8:97:9d:b0:91:18:b5:67:79:54:17:b9:ad:14:36: 62:87:e5:9b:f1:97:f5:2b:e4:30:ee:e7:cb:14:8b: 34:ba:63:30:13:18:ed:93:15:5b:ee:f8:86:30:c4: 2a:21:32:3e:6f:d1:dd:d1:bf:53:96:60:ec:2c:98: a3:22:4e:89:1a:3c:a6:98:e8:99:5b:84:83:a2:7d: 25:b7:5b:27:a1:d4:b5:24:86:a4:56:71:19:b9:ca: e3:fa:77:d1:62:08:a7:40:9e:99:d5:b5:ab:0f:e6: 0f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:ED:9D:62:14:2B:02:EF:BC:D5:87:73:6B:6D:67:F9:E4:56:95:CC X509v3 Authority Key Identifier: keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/m-2dYhQrAu-81Ydza21n-eRWlcw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.111.15.128/26 IPv6: 2a00:17c0:c4::/48 Signature Algorithm: sha256WithRSAEncryption 39:cf:27:7b:d5:4e:59:db:d7:6e:91:7c:99:9b:8a:c0:b1:88: 68:bb:61:81:9b:3e:67:e1:0a:8b:c4:89:a7:12:b9:ab:cc:6a: c1:d2:b2:a4:b0:ac:03:e2:a9:22:21:d5:71:59:2f:cf:1f:b0: 55:ac:1b:88:77:04:39:d6:1a:68:d6:ee:f9:6b:14:ea:b5:ff: 52:18:d9:91:11:2f:81:ad:ca:de:b2:1b:d7:e5:c1:21:5f:f9: 8c:b7:b5:61:a3:a0:df:cf:36:68:5c:68:79:a9:78:43:a3:fe: 9f:a7:0e:b8:bf:0f:44:82:a3:cb:b5:b8:32:d3:19:47:44:4d: 67:06:a6:53:9d:f1:2c:c0:78:d6:a4:3c:c9:d3:1f:16:79:39: 3f:35:5e:67:2d:86:38:00:5e:e4:2e:a2:32:7c:29:fb:94:4a: 25:15:57:fd:cb:9a:91:98:79:8a:8e:05:8a:8e:b7:7a:c4:b4: 6a:e5:0d:3e:0a:fc:e1:6e:eb:90:24:0a:90:e6:25:20:80:63: e2:c4:09:1a:ad:80:78:cd:0d:4e:62:54:54:ee:04:24:92:55: e6:9d:7b:42:9c:c6:32:a1:8c:a3:2e:cd:07:26:07:27:f7:69: 68:0a:14:1f:6b:80:34:5c:58:fc:43:ce:d8:63:7c:0d:13:3f: 75:77:4e:bc -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3xmN3FD2LwEjGoEDRSX3AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YzIwM2UzZjM2NTkyM2E4NDNkMzIyMDMxN2ExYzY4Y2Y3 NGRlMGYwHhcNMjYwMTAxMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmVkOWQ2MjE0MmIwMmVmYmNkNTg3NzM2YjZkNjdmOWU0NTY5NWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsGA8XaTRu+U9Fo7TYf7+zxG6G51 qxB4fr/HA0vL6luf/qrx7xF+yEP9Ir4yxv+kvJjMiWKCBEspiAftVMmMoQ3Yspx+ fILa/O6LJTRbfQUWiMgJvXIiXJJAdBlTsI9Dr7ifDFgH9HbEDAOg8lNJrByMUj7j I/vEllTwvuPfZEke2NKzKuhaSfki++g/b5uvV7cfOdX4l52wkRi1Z3lUF7mtFDZi h+Wb8Zf1K+Qw7ufLFIs0umMwExjtkxVb7viGMMQqITI+b9Hd0b9TlmDsLJijIk6J GjymmOiZW4SDon0lt1snodS1JIakVnEZucrj+nfRYginQJ6Z1bWrD+YPRwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJvtnWIUKwLvvNWHc2ttZ/nkVpXMMB8GA1UdIwQY MBaAFBfCA+PzZZI6hD0yIDF6HGjPdN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjhJRDRfTmxranFFUFRJZ01Yb2NhTTkwM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy84OWFlOGUtNDY3NC00NTVkLTlmMjMt YWM2N2EzNmU0YWFiLzEvbS0yZFloUXJBdS04MVlkemEyMW4tZVJXbGN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy84OWFlOGUtNDY3NC00NTVkLTlmMjMtYWM2N2EzNmU0YWFi LzEvRjhJRDRfTmxranFFUFRJZ01Yb2NhTTkwM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDANBAIAATAHAwUGWW8PgDAP BAIAAjAJAwcAKgAXwADEMA0GCSqGSIb3DQEBCwUAA4IBAQA5zyd71U5Z29dukXyZ m4rAsYhou2GBmz5n4QqLxImnErmrzGrB0rKksKwD4qkiIdVxWS/PH7BVrBuIdwQ5 1hpo1u75axTqtf9SGNmRES+BrcreshvX5cEhX/mMt7Vho6DfzzZoXGh5qXhDo/6f pw64vw9EgqPLtbgy0xlHRE1nBqZTnfEswHjWpDzJ0x8WeTk/NV5nLYY4AF7kLqIy fCn7lEolFVf9y5qRmHmKjgWKjrd6xLRq5Q0+CvzhbuuQJAqQ5iUggGPixAkarYB4 zQ1OYlRU7gQkklXmnXtCnMYyoYyjLs0HJgcn92loChQfa4A0XFj8Q87YY3wNEz91 d068 -----END CERTIFICATE-----Generated at Sun Jan 25 11:41:41 2026 by rpki-client