This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/g0ZAxJSuPSJG1gQOC_5v3ou5jc4.roa File: g0ZAxJSuPSJG1gQOC_5v3ou5jc4.roa (raw, json) Hash identifier: 0LxCPswYncb2CNHosJNX9XRvk+qmpVFru7FGUDOFYJc= Subject key identifier: 83:46:40:C4:94:AE:3D:22:46:D6:04:0E:0B:FE:6F:DE:8B:B9:8D:CE Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25 Certificate serial: 019BEB3139B6B86375CBC4F8CA5F49834C06 Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/g0ZAxJSuPSJG1gQOC_5v3ou5jc4.roa Signing time: Fri 23 Jan 2026 14:10:30 +0000 ROA not before: Fri 23 Jan 2026 14:10:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 89.126.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:eb:31:39:b6:b8:63:75:cb:c4:f8:ca:5f:49:83:4c:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25 Validity Not Before: Jan 23 14:10:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=834640c494ae3d2246d6040e0bfe6fde8bb98dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9e:0b:70:16:87:34:8c:28:70:db:c5:5b:24: 7d:c5:90:f7:dd:6b:cb:d5:c2:88:dc:6c:09:cf:51: bb:30:c5:69:6e:9b:a1:50:10:f3:86:b2:1a:fe:9e: b1:6b:a8:e7:99:88:15:3a:df:c7:30:c2:77:bc:e5: 30:7e:bd:4f:0a:4d:ed:93:e7:a8:79:5c:0f:5f:7b: 3f:90:81:56:b9:f4:65:69:e5:f9:9d:86:12:94:63: a3:5e:78:46:84:a2:6c:79:8d:10:41:0a:40:4a:d3: 55:27:c2:35:07:8f:05:c5:13:d6:e7:24:d5:dd:b4: 80:ee:34:cf:83:a3:c1:c1:24:8c:bb:ef:90:15:c5: 0d:7f:fb:47:4e:46:ae:09:56:6c:90:4f:e0:44:db: 0a:a3:43:da:0b:72:55:22:8f:02:5e:36:38:14:df: 7b:72:17:cb:fd:9c:ed:29:b0:ec:53:39:70:9e:f3: 56:bc:84:45:ed:95:5a:53:8f:1f:38:9f:c1:c0:b1: 6d:94:23:61:75:c2:5d:06:55:e3:75:06:b0:ee:31: ce:23:8b:33:a8:e0:27:5a:95:b3:e6:c7:e1:04:3a: a3:ba:a2:97:1e:12:ba:d6:4a:52:d7:23:9a:0b:ed: 60:3a:7f:bc:80:85:e4:f4:58:79:15:da:b9:b7:ba: 73:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:46:40:C4:94:AE:3D:22:46:D6:04:0E:0B:FE:6F:DE:8B:B9:8D:CE X509v3 Authority Key Identifier: keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/g0ZAxJSuPSJG1gQOC_5v3ou5jc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.126.224.0/24 Signature Algorithm: sha256WithRSAEncryption 32:41:5a:19:ca:66:b8:57:35:16:46:70:40:d2:82:18:e7:ef: a4:0a:f2:92:0f:c6:fc:ed:5d:1f:c1:56:a3:8b:cb:4c:36:8a: b3:6d:ee:9c:bf:2c:1d:38:df:34:ec:0b:79:61:03:0f:bd:d8: 75:f9:76:0c:36:78:63:45:ba:d9:8c:42:ef:44:c5:32:1c:50: be:35:b3:ba:f4:70:2a:13:50:8e:da:52:03:04:b2:0e:ca:ae: 7f:a2:a0:26:02:45:41:e8:25:06:77:76:28:6a:18:d7:a2:45: e1:f5:47:94:c9:da:d1:c4:32:eb:f0:a2:97:bf:25:42:ba:cc: fc:9e:eb:dc:c5:98:f6:95:62:2b:b1:6a:2b:8a:30:70:49:dd: 21:59:cc:2b:e7:5d:fe:78:d7:34:3f:4f:2b:a1:99:bc:b2:18: db:98:47:b1:8f:3d:04:dd:e4:d6:81:17:70:3a:6e:05:89:b9: 03:8a:07:85:c5:53:6d:47:a9:14:33:4e:9a:7c:33:38:60:34: 34:ec:78:4a:3e:a7:2c:79:5d:2a:65:cd:09:70:65:dc:90:e2: 34:72:d7:34:1a:ae:de:fd:4c:53:70:92:78:26:3d:63:ce:82: a7:66:97:1d:9c:cc:a8:d9:ae:cb:82:16:09:00:a1:60:23:9b: 2d:18:ec:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvrMTm2uGN1y8T4yl9Jg0wGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZTUzYzBiZmMzYzhmYjU2YjgxMTkxMzE3MTQ0NDQzZTBl MjlkMjUwHhcNMjYwMTIzMTQxMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzQ2NDBjNDk0YWUzZDIyNDZkNjA0MGUwYmZlNmZkZThiYjk4ZGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3p4LcBaHNIwocNvFWyR9xZD33WvL 1cKI3GwJz1G7MMVpbpuhUBDzhrIa/p6xa6jnmYgVOt/HMMJ3vOUwfr1PCk3tk+eo eVwPX3s/kIFWufRlaeX5nYYSlGOjXnhGhKJseY0QQQpAStNVJ8I1B48FxRPW5yTV 3bSA7jTPg6PBwSSMu++QFcUNf/tHTkauCVZskE/gRNsKo0PaC3JVIo8CXjY4FN97 chfL/ZztKbDsUzlwnvNWvIRF7ZVaU48fOJ/BwLFtlCNhdcJdBlXjdQaw7jHOI4sz qOAnWpWz5sfhBDqjuqKXHhK61kpS1yOaC+1gOn+8gIXk9Fh5Fdq5t7pz5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFINGQMSUrj0iRtYEDgv+b96LuY3OMB8GA1UdIwQY MBaAFF/lPAv8PI+1a4EZExcUREPg4p0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDct NWNmNTZlZTQzNWIzLzEvZzBaQXhKU3VQU0pHMWdRT0NfNXYzb3U1amM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDctNWNmNTZlZTQzNWIz LzEvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWX7gMA0G CSqGSIb3DQEBCwUAA4IBAQAyQVoZyma4VzUWRnBA0oIY5++kCvKSD8b87V0fwVaj i8tMNoqzbe6cvywdON807At5YQMPvdh1+XYMNnhjRbrZjELvRMUyHFC+NbO69HAq E1CO2lIDBLIOyq5/oqAmAkVB6CUGd3YoahjXokXh9UeUydrRxDLr8KKXvyVCusz8 nuvcxZj2lWIrsWorijBwSd0hWcwr513+eNc0P08roZm8shjbmEexjz0E3eTWgRdw Om4FibkDigeFxVNtR6kUM06afDM4YDQ07HhKPqcseV0qZc0JcGXckOI0ctc0Gq7e /UxTcJJ4Jj1jzoKnZpcdnMyo2a7LghYJAKFgI5stGOzS -----END CERTIFICATE-----Generated at Sun Jan 25 07:08:27 2026 by rpki-client