This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/PSVFcWDsclvNsUoU022_OpYiWTo.roa File: PSVFcWDsclvNsUoU022_OpYiWTo.roa (raw, json) Hash identifier: aQdUeRuBKi+rDHfkrmS1dmqV6ZktJA8BSCadqiZ5eyA= Subject key identifier: 3D:25:45:71:60:EC:72:5B:CD:B1:4A:14:D3:6D:BF:3A:96:22:59:3A Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68 Certificate serial: 019B7CEDED44BC505B4E7DBD5735E68B6420 Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/PSVFcWDsclvNsUoU022_OpYiWTo.roa Signing time: Fri 02 Jan 2026 04:18:46 +0000 ROA not before: Fri 02 Jan 2026 04:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207790 IP address blocks: 89.56.0.0/16 maxlen: 24 89.57.0.0/18 maxlen: 24 89.57.64.0/18 maxlen: 24 89.57.128.0/18 maxlen: 24 89.57.192.0/18 maxlen: 24 185.12.88.0/22 maxlen: 22 194.97.96.0/19 maxlen: 24 2a03:7840::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ed:44:bc:50:5b:4e:7d:bd:57:35:e6:8b:64:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68 Validity Not Before: Jan 2 04:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d25457160ec725bcdb14a14d36dbf3a9622593a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b1:4a:93:78:6d:cb:77:4b:16:5c:ca:1a:65: a9:e4:00:ac:b5:6b:90:89:ec:cd:ca:57:b6:88:b5: 8d:ea:11:ce:d6:72:47:d1:44:ae:ff:a6:9b:e8:61: bd:83:71:1d:8c:c3:d9:d9:91:82:52:99:37:31:43: 8d:0f:60:33:07:6c:11:89:34:db:f1:d7:0a:7a:0e: 5b:a0:9a:a2:0f:b9:81:c7:18:01:67:b5:cb:39:5f: 60:14:0a:25:07:4b:00:16:47:bd:d8:7e:08:c3:8d: cf:76:31:d5:80:c7:24:24:be:f8:2a:ba:fa:ce:ad: 0f:00:4a:4a:e7:57:7b:5e:c9:6f:85:03:50:0d:89: 43:73:81:b1:67:b3:17:fb:09:69:cf:bc:86:50:ad: d5:6f:db:55:f0:19:f9:b2:db:fa:96:7e:85:9d:89: 74:72:8d:2f:8f:92:79:3c:ab:03:a9:96:23:35:45: 8d:a7:ea:56:a1:e3:22:68:83:91:aa:a4:76:d7:42: 50:4f:a5:c5:4f:75:e2:54:ab:1e:c1:47:bc:bb:d6: ff:37:f2:ed:3f:37:12:a0:f3:45:75:9a:86:6a:85: 43:18:c0:ac:8e:cc:9e:d4:a9:d6:62:05:c9:42:5c: ac:d3:6f:00:63:23:f5:7d:fc:2d:4e:64:68:f8:40: 4f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:25:45:71:60:EC:72:5B:CD:B1:4A:14:D3:6D:BF:3A:96:22:59:3A X509v3 Authority Key Identifier: keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/PSVFcWDsclvNsUoU022_OpYiWTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.56.0.0/15 185.12.88.0/22 194.97.96.0/19 IPv6: 2a03:7840::/29 Signature Algorithm: sha256WithRSAEncryption 3a:50:9c:d7:03:17:53:55:09:44:c9:04:7b:bf:d7:18:d4:6d: 2a:1c:a8:fd:cd:b4:67:9f:75:fa:c4:c4:2f:de:46:04:b7:0e: b9:7c:86:a5:71:a2:52:d9:c7:2c:b7:0c:9d:92:cb:72:ec:10: cc:fa:78:f0:06:0a:e5:e1:98:9d:89:95:74:40:3e:14:59:29: 39:82:cb:73:06:5c:ba:7f:81:58:49:b4:a9:8c:7f:36:36:7d: b6:37:b4:e8:3c:11:9f:f9:4b:cf:b0:3d:71:56:7e:df:b9:c2: 48:0b:db:4e:b7:78:97:15:6a:8b:7a:30:a0:9e:f6:91:ba:9f: 42:e8:b0:a1:97:86:63:4d:b3:2d:03:74:37:8c:7d:12:ba:64: be:48:5f:ca:33:c0:1c:18:89:b4:75:ff:69:a0:ae:be:cc:40: 89:0b:f4:a9:1b:64:0a:ad:bf:d8:e1:41:9d:d6:e4:f2:39:ed: 16:51:90:2e:dd:5d:35:53:3f:17:bf:2a:c6:89:ed:b9:80:e1: 96:ef:f6:fb:fc:42:c2:06:33:3a:67:5b:13:71:d4:23:15:23: 31:2d:ad:6f:ea:50:8b:71:47:25:a7:c6:a9:90:ef:fa:4a:b9: 30:34:e3:ac:6a:fb:78:cf:90:35:75:a5:58:28:1c:1a:2c:49: a2:a3:3e:41 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt87e1EvFBbTn29VzXmi2QgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOWUzNmJiNmZlZjkzMjhmNTE4ZTRiMTA1ZmMyMTJjMTUy YThjNjgwHhcNMjYwMTAyMDQxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDI1NDU3MTYwZWM3MjViY2RiMTRhMTRkMzZkYmYzYTk2MjI1OTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrFKk3hty3dLFlzKGmWp5ACstWuQ iezNyle2iLWN6hHO1nJH0USu/6ab6GG9g3EdjMPZ2ZGCUpk3MUOND2AzB2wRiTTb 8dcKeg5boJqiD7mBxxgBZ7XLOV9gFAolB0sAFke92H4Iw43PdjHVgMckJL74Krr6 zq0PAEpK51d7XslvhQNQDYlDc4GxZ7MX+wlpz7yGUK3Vb9tV8Bn5stv6ln6FnYl0 co0vj5J5PKsDqZYjNUWNp+pWoeMiaIORqqR210JQT6XFT3XiVKsewUe8u9b/N/Lt PzcSoPNFdZqGaoVDGMCsjsye1KnWYgXJQlys028AYyP1ffwtTmRo+EBPMQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFD0lRXFg7HJbzbFKFNNtvzqWIlk6MB8GA1UdIwQY MBaAFIueNrtv75Mo9RjksQX8ISwVKoxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTU0MnUyX3ZreWoxR09TeEJmd2hMQlVxakdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80YTBlOGQtMGJiZS00MjEzLTk4YjEt MWExMTZhNTM0NDgzLzEvUFNWRmNXRHNjbHZOc1VvVTAyMl9PcFlpV1RvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS80YTBlOGQtMGJiZS00MjEzLTk4YjEtMWExMTZhNTM0NDgz LzEvaTU0MnUyX3ZreWoxR09TeEJmd2hMQlVxakdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwMBWTgDBAK5 DFgDBAXCYWAwDQQCAAIwBwMFAyoDeEAwDQYJKoZIhvcNAQELBQADggEBADpQnNcD F1NVCUTJBHu/1xjUbSocqP3NtGefdfrExC/eRgS3Drl8hqVxolLZxyy3DJ2Sy3Ls EMz6ePAGCuXhmJ2JlXRAPhRZKTmCy3MGXLp/gVhJtKmMfzY2fbY3tOg8EZ/5S8+w PXFWft+5wkgL2063eJcVaot6MKCe9pG6n0LosKGXhmNNsy0DdDeMfRK6ZL5IX8oz wBwYibR1/2mgrr7MQIkL9KkbZAqtv9jhQZ3W5PI57RZRkC7dXTVTPxe/KsaJ7bmA 4Zbv9vv8QsIGMzpnWxNx1CMVIzEtrW/qUItxRyWnxqmQ7/pKuTA046xq+3jPkDV1 pVgoHBosSaKjPkE= -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:28 2026 by rpki-client