This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/iU5ejVJ6QfRKNVuhTVBGxsukqUw.roa File: iU5ejVJ6QfRKNVuhTVBGxsukqUw.roa (raw, json) Hash identifier: mXUy26J3J14czVIo2p0qCZCLF116yGstOAyzjRstGT4= Subject key identifier: 89:4E:5E:8D:52:7A:41:F4:4A:35:5B:A1:4D:50:46:C6:CB:A4:A9:4C Certificate issuer: /CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29 Certificate serial: 019B79ED07A6EB6BC9041B9479E4B6DD41B7 Authority key identifier: C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/iU5ejVJ6QfRKNVuhTVBGxsukqUw.roa Signing time: Thu 01 Jan 2026 14:18:55 +0000 ROA not before: Thu 01 Jan 2026 14:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36384 IP address blocks: 89.207.224.0/24 maxlen: 24 89.207.229.0/24 maxlen: 24 2a00:79e1::/32 maxlen: 32 2a00:79e1:800::/42 maxlen: 42 2a00:79e1:abc::/46 maxlen: 46 2a00:79e1:f00::/40 maxlen: 40 2a00:79e1:f000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:07:a6:eb:6b:c9:04:1b:94:79:e4:b6:dd:41:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29 Validity Not Before: Jan 1 14:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=894e5e8d527a41f44a355ba14d5046c6cba4a94c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7f:8c:30:2a:30:eb:64:33:d4:11:19:c3:38: f7:ff:19:dd:e8:87:e3:e0:84:3d:b5:5d:e9:64:72: 27:2f:ea:73:8a:e3:6a:38:5b:51:2a:88:f0:6f:cb: 64:a1:37:74:69:e6:95:3a:3d:dd:43:ae:e2:23:e9: 4d:76:a0:b0:08:00:4e:60:cd:b4:74:e3:c6:16:44: 15:74:28:4a:85:a4:30:94:f4:c2:ff:03:f6:55:05: 05:9c:04:00:f5:7d:20:67:7c:8a:f8:a4:55:2e:e3: 00:26:09:b1:56:df:fc:4a:a9:52:3c:a6:d4:8b:55: 23:e7:b8:f7:d2:7a:1a:94:da:ea:92:fd:13:a5:c1: 89:f2:78:a9:ed:2a:99:49:ab:72:fe:57:38:7d:b1: 53:74:4a:97:f1:57:be:d7:0a:c2:71:d3:ba:10:0e: db:cf:78:06:a5:8f:d0:7a:a6:80:bd:b9:04:af:b9: 4f:d0:81:2f:4c:b0:b8:a2:ea:e0:e2:53:65:f7:30: 93:2a:13:5a:ba:fb:22:c2:14:13:8b:b8:c7:18:ef: 90:a1:cc:6c:c4:84:f3:fb:8a:5b:e0:4c:57:79:7c: 38:d9:50:91:26:d6:72:fe:90:39:3f:87:2f:35:89: c7:3d:0d:72:71:f3:82:62:89:26:08:2b:0d:a8:83: ec:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4E:5E:8D:52:7A:41:F4:4A:35:5B:A1:4D:50:46:C6:CB:A4:A9:4C X509v3 Authority Key Identifier: keyid:C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/iU5ejVJ6QfRKNVuhTVBGxsukqUw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.207.224.0/24 89.207.229.0/24 IPv6: 2a00:79e1::/32 Signature Algorithm: sha256WithRSAEncryption b1:83:9f:57:db:a1:31:58:ce:ab:85:00:db:14:ff:e4:32:fb: 88:e3:99:0d:64:4e:0b:2b:9e:c6:40:29:0b:96:18:0a:97:94: 96:20:60:44:a4:50:41:a3:07:a3:30:48:78:9c:a4:2b:61:ab: f1:39:9b:fc:70:50:d8:4d:33:3a:11:29:c4:b4:68:aa:2a:ef: d6:82:e1:8b:e8:f6:34:40:20:57:7d:f6:65:6a:11:9e:4a:a8: f4:22:51:6c:2c:db:d8:c7:9e:5d:7a:6f:b8:bc:d0:a1:fb:10: 2a:48:f7:79:81:0e:b0:a2:45:ad:c8:f4:ae:35:84:02:ff:62: 48:38:20:84:26:7c:0e:cc:5a:2d:d4:05:22:78:c0:9e:1b:49: b6:69:01:e2:96:bf:d9:9c:78:40:79:74:dd:32:6b:84:77:a3: 95:57:1e:7e:d6:9d:17:39:fd:c5:f4:35:6f:7a:bc:fe:a2:b0: 66:29:3d:d3:cd:94:d2:3c:6b:e9:24:8f:0b:68:64:1a:ed:c1: 5c:2d:8b:4e:f5:89:00:cc:46:40:bb:02:b3:e8:d1:d6:6f:b9: 04:12:ab:54:82:f5:f8:d1:71:68:41:b0:93:51:bf:38:26:32: b9:56:e3:ff:1e:15:ce:63:fa:44:b5:ee:40:be:35:44:f7:14: 75:46:db:79 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57Qem62vJBBuUeeS23UG3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNzQ3ZmJlMjZjOWNkZDc2MjhhZGZlZGI1N2I3OGJlOGRl NzVlMjkwHhcNMjYwMTAxMTQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTRlNWU4ZDUyN2E0MWY0NGEzNTViYTE0ZDUwNDZjNmNiYTRhOTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyX+MMCow62Qz1BEZwzj3/xnd6Ifj 4IQ9tV3pZHInL+pziuNqOFtRKojwb8tkoTd0aeaVOj3dQ67iI+lNdqCwCABOYM20 dOPGFkQVdChKhaQwlPTC/wP2VQUFnAQA9X0gZ3yK+KRVLuMAJgmxVt/8SqlSPKbU i1Uj57j30noalNrqkv0TpcGJ8nip7SqZSaty/lc4fbFTdEqX8Ve+1wrCcdO6EA7b z3gGpY/QeqaAvbkEr7lP0IEvTLC4ourg4lNl9zCTKhNauvsiwhQTi7jHGO+Qocxs xITz+4pb4ExXeXw42VCRJtZy/pA5P4cvNYnHPQ1ycfOCYokmCCsNqIPsKwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIlOXo1SekH0SjVboU1QRsbLpKlMMB8GA1UdIwQY MBaAFMB0f74myc3XYorf7bV7eL6N514pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0hSX3ZpYkp6ZGRpaXRfdHRYdDR2bzNuWGlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8yNDA2YWItM2JjYi00MWJjLWE5NDIt MzY4NjA4Mzg1ODgzLzEvaVU1ZWpWSjZRZlJLTlZ1aFRWQkd4c3VrcVV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8yNDA2YWItM2JjYi00MWJjLWE5NDItMzY4NjA4Mzg1ODgz LzEvd0hSX3ZpYkp6ZGRpaXRfdHRYdDR2bzNuWGlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAWc/gAwQA Wc/lMA0EAgACMAcDBQAqAHnhMA0GCSqGSIb3DQEBCwUAA4IBAQCxg59X26ExWM6r hQDbFP/kMvuI45kNZE4LK57GQCkLlhgKl5SWIGBEpFBBowejMEh4nKQrYavxOZv8 cFDYTTM6ESnEtGiqKu/WguGL6PY0QCBXffZlahGeSqj0IlFsLNvYx55dem+4vNCh +xAqSPd5gQ6wokWtyPSuNYQC/2JIOCCEJnwOzFot1AUieMCeG0m2aQHilr/ZnHhA eXTdMmuEd6OVVx5+1p0XOf3F9DVverz+orBmKT3TzZTSPGvpJI8LaGQa7cFcLYtO 9YkAzEZAuwKz6NHWb7kEEqtUgvX40XFoQbCTUb84JjK5VuP/HhXOY/pEte5AvjVE 9xR1Rtt5 -----END CERTIFICATE-----Generated at Sun Jan 25 20:49:18 2026 by rpki-client