This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/fyIb0V5JX6E2tpy_vgKc70A0lK8.roa File: fyIb0V5JX6E2tpy_vgKc70A0lK8.roa (raw, json) Hash identifier: wDxZOpTMpfURcZbXhtIPr6kc1LLTPvdz01nZUdR/Qy4= Subject key identifier: 7F:22:1B:D1:5E:49:5F:A1:36:B6:9C:BF:BE:02:9C:EF:40:34:94:AF Certificate issuer: /CN=f9e00abe184a625b76f8d1fbceef817aaf71415b Certificate serial: 019B7F13D4F0BE26DA36F60AD4224B5769E5 Authority key identifier: F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/fyIb0V5JX6E2tpy_vgKc70A0lK8.roa Signing time: Fri 02 Jan 2026 14:19:24 +0000 ROA not before: Fri 02 Jan 2026 14:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50053 IP address blocks: 89.169.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:d4:f0:be:26:da:36:f6:0a:d4:22:4b:57:69:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9e00abe184a625b76f8d1fbceef817aaf71415b Validity Not Before: Jan 2 14:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f221bd15e495fa136b69cbfbe029cef403494af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9b:98:c0:33:f0:58:91:18:5a:02:cc:85:12: 8f:12:ec:5a:c4:8f:c4:c1:ac:c7:18:3e:86:e2:2a: fa:dc:1e:82:66:6b:d6:f6:60:43:d5:03:0c:74:b6: 35:a5:95:28:4d:7e:97:29:d1:0f:58:0e:88:29:c0: 0b:df:fb:7d:d1:09:08:90:e6:06:22:ec:5b:89:3b: d2:67:d7:81:3f:d3:f4:59:47:45:38:c8:b0:93:4c: 2e:28:cb:86:d5:8f:75:29:75:c8:e8:90:5a:be:a2: a5:a6:d0:4a:66:18:e2:0a:1b:d4:9c:6e:21:34:7b: 68:88:95:87:95:23:73:43:21:2f:c2:28:e2:2a:43: af:ea:c5:b1:ec:fb:23:6d:0a:de:5a:6a:73:57:de: da:09:89:2e:08:db:8a:99:ce:55:34:4b:54:de:be: dd:b9:7d:3d:eb:34:4d:06:c1:0b:50:4d:47:38:a7: d7:1b:fc:87:1d:0a:12:33:9d:f5:5a:6a:0f:a5:44: 62:6e:ff:63:74:26:d1:08:4c:31:8d:72:10:2d:ec: 73:05:f9:b2:30:a4:73:43:5f:d6:e4:e2:76:b8:96: 9f:2f:28:c1:5c:80:75:04:3d:59:26:2f:bd:bc:5a: f4:ad:17:0f:e9:6a:f0:cd:14:e8:6c:76:f1:df:90: 0a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:22:1B:D1:5E:49:5F:A1:36:B6:9C:BF:BE:02:9C:EF:40:34:94:AF X509v3 Authority Key Identifier: keyid:F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/fyIb0V5JX6E2tpy_vgKc70A0lK8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.169.4.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:e5:53:a6:4c:52:bd:e5:6a:2c:c5:6b:74:78:82:5a:d3:fd: cc:cf:af:88:89:be:d6:5b:df:48:9f:65:f5:a8:8d:b3:b3:e2: 71:90:fa:7d:56:fc:35:dc:32:d8:51:ca:4f:c3:77:5e:75:ff: f0:44:4c:e2:79:60:01:7c:f4:71:57:7f:30:77:73:12:8a:f8: f6:95:b2:54:61:5b:0f:c8:aa:a3:c3:05:aa:a1:d5:1c:b0:c6: de:05:68:11:ff:c5:26:c5:2f:10:2d:1d:15:7b:be:69:4d:6b: 30:21:dc:04:ac:44:b2:97:10:67:9f:6b:1a:d9:8b:ca:80:d8: 08:80:3b:ae:bb:55:6d:b7:22:b2:f0:43:da:49:cb:10:49:6f: 5f:ad:b6:31:ee:cb:5f:3f:e4:99:ca:5c:58:be:32:f3:9e:d5: dd:10:f4:9d:e3:c4:88:c9:01:19:e5:93:57:47:06:32:60:ec: 82:13:c9:00:b3:a3:0c:fd:26:42:40:f8:68:c6:d7:d9:db:6b: 29:1c:3b:e8:0c:06:d4:2f:ae:c8:61:9b:d7:41:a0:14:c5:3b: 9f:53:c2:ad:4c:92:a7:3d:03:28:24:77:38:a6:38:a9:4c:37: 8c:3d:3b:dc:36:6a:a0:31:8d:78:ac:0b:39:33:a3:d4:87:41: b9:d5:7a:6a -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/E9TwvibaNvYK1CJLV2nlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ZTAwYWJlMTg0YTYyNWI3NmY4ZDFmYmNlZWY4MTdhYWY3 MTQxNWIwHhcNMjYwMTAyMTQxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjIyMWJkMTVlNDk1ZmExMzZiNjljYmZiZTAyOWNlZjQwMzQ5NGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5uYwDPwWJEYWgLMhRKPEuxaxI/E wazHGD6G4ir63B6CZmvW9mBD1QMMdLY1pZUoTX6XKdEPWA6IKcAL3/t90QkIkOYG IuxbiTvSZ9eBP9P0WUdFOMiwk0wuKMuG1Y91KXXI6JBavqKlptBKZhjiChvUnG4h NHtoiJWHlSNzQyEvwijiKkOv6sWx7PsjbQreWmpzV97aCYkuCNuKmc5VNEtU3r7d uX096zRNBsELUE1HOKfXG/yHHQoSM531WmoPpURibv9jdCbRCEwxjXIQLexzBfmy MKRzQ1/W5OJ2uJafLyjBXIB1BD1ZJi+9vFr0rRcP6WrwzRTobHbx35AKJwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFH8iG9FeSV+hNracv74CnO9ANJSvMB8GA1UdIwQY MBaAFPngCr4YSmJbdvjR+87vgXqvcUFbMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1lQUt2aGhLWWx0Mi1OSDd6dS1CZXE5eFFWcy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvOGEzMjJmLWRjMjgtNDIyZi1iNTcw LTU4YjY0ZDU1N2MwYy8xL2Z5SWIwVjVKWDZFMnRweV92Z0tjNzBBMGxLOC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOWYvOGEzMjJmLWRjMjgtNDIyZi1iNTcwLTU4YjY0ZDU1N2Mw Yy8xLzEtZUFLdmhoS1lsdDItTkg3enUtQmVxOXhRVnMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZqQQw DQYJKoZIhvcNAQELBQADggEBAJ/lU6ZMUr3laizFa3R4glrT/czPr4iJvtZb30if ZfWojbOz4nGQ+n1W/DXcMthRyk/Dd151//BETOJ5YAF89HFXfzB3cxKK+PaVslRh Ww/IqqPDBaqh1Rywxt4FaBH/xSbFLxAtHRV7vmlNazAh3ASsRLKXEGefaxrZi8qA 2AiAO667VW23IrLwQ9pJyxBJb1+ttjHuy18/5JnKXFi+MvOe1d0Q9J3jxIjJARnl k1dHBjJg7IITyQCzowz9JkJA+GjG19nbaykcO+gMBtQvrshhm9dBoBTFO59Twq1M kqc9AygkdzimOKlMN4w9O9w2aqAxjXisCzkzo9SHQbnVemo= -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:44 2026 by rpki-client