This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/Hs0H6CP8Sdc8K234nEi8yZ7lpcY.roa File: Hs0H6CP8Sdc8K234nEi8yZ7lpcY.roa (raw, json) Hash identifier: 38bwfsJmZUq97h+cdER4fwtCEcCYr5ZXIT6zw+0Jdhc= Subject key identifier: 1E:CD:07:E8:23:FC:49:D7:3C:2B:6D:F8:9C:48:BC:C9:9E:E5:A5:C6 Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019B7910F2FFD81CCD13482DD42A2D9E65A4 Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/Hs0H6CP8Sdc8K234nEi8yZ7lpcY.roa Signing time: Thu 01 Jan 2026 10:18:32 +0000 ROA not before: Thu 01 Jan 2026 10:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213669 IP address blocks: 89.22.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f2:ff:d8:1c:cd:13:48:2d:d4:2a:2d:9e:65:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Jan 1 10:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ecd07e823fc49d73c2b6df89c48bcc99ee5a5c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a1:0c:99:15:55:b8:4d:a6:d6:40:ce:c1:da: b1:ce:3b:5e:3a:06:88:6e:37:41:40:9f:94:37:97: c7:28:3c:35:02:fd:23:20:98:53:ea:ba:fd:5a:82: 79:05:78:38:32:16:83:89:28:7c:68:3b:a9:85:4a: ab:14:b1:d6:a5:bf:cd:b5:db:c4:4e:b3:86:e3:f6: 1b:0a:0d:9d:7a:f8:ab:53:b0:f0:d1:f3:ad:b8:a6: 39:6b:b3:96:ba:e6:cc:96:4d:49:cf:d8:e5:1c:1b: f7:87:56:5e:61:4c:be:3b:2a:e8:19:9d:76:69:c4: b5:13:55:f9:6e:c1:9b:58:41:fb:af:0d:8e:11:c8: 6b:40:e0:7d:da:02:99:d3:ef:7f:0d:96:8a:d5:a7: 0c:7f:e4:47:24:5d:01:32:d9:b5:ed:71:36:f8:c0: 98:d1:2f:02:1f:c5:d7:cc:99:d7:1a:00:a0:7b:9c: 90:e2:ff:ab:5a:a8:db:e1:fb:b4:98:c3:b8:56:26: c7:98:48:24:18:67:ed:59:ea:1d:c0:49:71:c1:9a: 8f:b0:68:8c:17:80:42:99:ea:98:55:29:30:85:47: 28:d2:9d:bf:23:58:13:97:35:a6:a4:01:01:59:22: cd:1b:73:54:d1:ed:0d:5b:34:37:c5:5b:9e:a4:98: bd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CD:07:E8:23:FC:49:D7:3C:2B:6D:F8:9C:48:BC:C9:9E:E5:A5:C6 X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/Hs0H6CP8Sdc8K234nEi8yZ7lpcY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.22.195.0/24 Signature Algorithm: sha256WithRSAEncryption b9:7b:26:7b:51:72:78:ce:9f:de:1c:27:b4:f1:9f:8e:66:84: 97:53:00:3c:c7:29:8d:2a:48:dd:9e:33:61:c4:9d:e7:6e:9c: b9:f1:cb:2c:be:e4:c9:cb:bc:1d:bb:51:59:4a:f1:ee:90:da: 7e:b0:9a:b3:32:a0:a9:5c:e7:c5:26:9c:93:59:6b:7e:2b:e3: 3a:b6:85:1d:4d:12:d1:60:77:f5:90:42:e4:0f:3a:41:92:9b: f3:8c:96:d9:93:a0:7e:38:d1:81:91:19:23:7a:39:2d:3a:cd: 7e:8a:ae:07:c9:57:15:7f:a8:ce:e2:87:cf:81:4c:92:04:eb: 74:f5:6e:6d:ab:46:7c:6a:49:29:1c:17:2f:ce:48:02:4b:ae: bd:61:98:3e:ce:44:6d:d2:ce:b2:15:3e:c3:36:29:65:eb:9d: 76:b0:62:54:3b:28:63:3f:d4:14:6e:4b:25:97:06:3a:5a:b9: ef:5b:c6:80:ae:59:b4:5a:e7:27:43:44:c2:ef:f3:db:67:ed: 04:87:b9:f9:96:c8:63:26:78:ac:b3:98:99:12:bc:5a:03:ed: 34:77:c4:d1:91:e3:5a:d1:8f:5a:55:87:1b:8b:f8:7b:a2:9d: 42:03:4a:c3:70:72:af:52:f1:fd:6a:ef:09:e8:fc:02:38:2d: 04:03:20:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EPL/2BzNE0gt1CotnmWkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwMTAxMTAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWNkMDdlODIzZmM0OWQ3M2MyYjZkZjg5YzQ4YmNjOTllZTVhNWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqEMmRVVuE2m1kDOwdqxzjteOgaI bjdBQJ+UN5fHKDw1Av0jIJhT6rr9WoJ5BXg4MhaDiSh8aDuphUqrFLHWpb/NtdvE TrOG4/YbCg2devirU7Dw0fOtuKY5a7OWuubMlk1Jz9jlHBv3h1ZeYUy+OyroGZ12 acS1E1X5bsGbWEH7rw2OEchrQOB92gKZ0+9/DZaK1acMf+RHJF0BMtm17XE2+MCY 0S8CH8XXzJnXGgCge5yQ4v+rWqjb4fu0mMO4VibHmEgkGGftWeodwElxwZqPsGiM F4BCmeqYVSkwhUco0p2/I1gTlzWmpAEBWSLNG3NU0e0NWzQ3xVuepJi9SwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB7NB+gj/EnXPCtt+JxIvMme5aXGMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEvSHMwSDZDUDhTZGM4SzIzNG5FaTh5WjdscGNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRbDMA0G CSqGSIb3DQEBCwUAA4IBAQC5eyZ7UXJ4zp/eHCe08Z+OZoSXUwA8xymNKkjdnjNh xJ3nbpy58cssvuTJy7wdu1FZSvHukNp+sJqzMqCpXOfFJpyTWWt+K+M6toUdTRLR YHf1kELkDzpBkpvzjJbZk6B+ONGBkRkjejktOs1+iq4HyVcVf6jO4ofPgUySBOt0 9W5tq0Z8akkpHBcvzkgCS669YZg+zkRt0s6yFT7DNill6512sGJUOyhjP9QUbksl lwY6WrnvW8aArlm0WucnQ0TC7/PbZ+0Eh7n5lshjJniss5iZErxaA+00d8TRkeNa 0Y9aVYcbi/h7op1CA0rDcHKvUvH9au8J6PwCOC0EAyAQ -----END CERTIFICATE-----Generated at Sun Jan 25 15:01:37 2026 by rpki-client