This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/DOxf14855Ag2AnO7jsSUueM5c-o.roa File: DOxf14855Ag2AnO7jsSUueM5c-o.roa (raw, json) Hash identifier: zgUJGFH5ZEpoQ9vBA8CvM2rtyQHfUvV/kzB3FtSEmYc= Subject key identifier: 0C:EC:5F:D7:8F:39:E4:08:36:02:73:BB:8E:C4:94:B9:E3:39:73:EA Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Certificate serial: 019B7BA51D03916B83C03A76890E9BE9FD35 Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/DOxf14855Ag2AnO7jsSUueM5c-o.roa Signing time: Thu 01 Jan 2026 22:19:36 +0000 ROA not before: Thu 01 Jan 2026 22:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208371 IP address blocks: 89.223.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:1d:03:91:6b:83:c0:3a:76:89:0e:9b:e9:fd:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Validity Not Before: Jan 1 22:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0cec5fd78f39e408360273bb8ec494b9e33973ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:dc:93:21:ae:02:71:9a:10:3b:2a:dc:d5:2a: 02:5f:e7:d7:63:08:ab:b1:4b:06:23:60:bf:6c:c9: eb:49:12:44:e5:95:9c:2b:05:5d:12:ae:0c:f8:71: 8b:5c:7c:c9:72:25:a6:b4:15:67:81:ec:13:23:05: 56:56:d3:6c:6b:00:b0:c6:d2:50:d1:29:29:42:98: a2:e8:ff:b9:69:ba:53:19:f1:d3:48:6b:ab:77:2e: 2c:2b:f1:36:be:6b:43:fd:26:fd:ef:10:10:74:ef: 1c:73:ad:c7:fc:2e:a7:c2:89:11:e0:33:d6:64:6a: 44:5e:cd:79:67:df:f3:19:1d:d7:bc:d3:67:51:14: d0:6c:19:5d:b7:e8:59:c8:e4:f0:c1:c0:d4:9a:3e: a0:06:16:74:1d:5f:96:e4:ea:fb:68:5a:ca:6e:d7: 78:48:41:a5:9e:9c:f4:64:03:9f:9e:57:aa:67:10: 92:e5:0d:58:4b:df:3b:7b:0d:d1:ef:a2:bc:19:d6: 0f:4d:b8:a2:7b:cf:02:73:f4:d7:79:d4:36:20:d0: 38:1b:59:66:e3:6d:8c:b1:0f:98:25:ba:79:63:f8: 7d:27:3f:29:1c:c9:b6:41:f6:a3:6e:6b:98:0e:66: 02:bc:be:80:2d:2d:18:47:c2:25:a9:e1:2d:c4:06: 7c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EC:5F:D7:8F:39:E4:08:36:02:73:BB:8E:C4:94:B9:E3:39:73:EA X509v3 Authority Key Identifier: keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/DOxf14855Ag2AnO7jsSUueM5c-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.223.98.0/24 Signature Algorithm: sha256WithRSAEncryption 45:01:66:a0:af:2d:aa:da:fa:ad:c6:12:f9:0a:c7:c9:61:fa: 5a:ce:59:f1:f7:7a:c9:c3:bd:ba:e6:08:49:5a:7b:3f:e6:65: 37:dd:3b:c5:c8:f1:9b:06:1c:58:a7:b9:7a:6f:da:a0:12:fc: 15:17:1f:fe:1c:4f:64:82:51:29:b0:01:53:db:ae:c8:23:82: e9:f1:1e:17:1e:b5:b7:35:da:54:44:b5:06:32:ad:63:9d:d8: 6d:f1:b8:e6:aa:2d:0b:6d:5a:54:59:0b:6d:9f:d8:93:d6:cf: 0d:10:e8:ac:ee:06:19:7a:8f:de:4a:d7:94:c9:fb:ab:0b:91: ff:be:87:45:1f:de:d2:e3:5c:19:d8:49:9f:f2:6c:85:5d:eb: 4b:24:bc:e6:19:86:3d:06:7e:7a:a1:f3:4e:5a:e5:34:51:ee: f7:bd:a1:dd:e9:10:68:9d:e8:54:b4:ef:8f:5d:7a:44:b4:74: 03:de:a4:bc:2e:bc:93:d8:fe:e0:e6:b6:5b:f9:b3:f1:55:73: 3f:94:97:aa:b7:c1:42:87:66:02:99:a3:00:dd:d4:da:ac:ca: 88:53:30:78:68:50:9b:9b:2e:70:2a:d7:a1:db:5d:90:19:f8: fd:26:83:a4:23:f8:0d:8f:5d:79:c4:e7:1f:18:e6:b4:bf:f3: 08:43:bb:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pR0DkWuDwDp2iQ6b6f01MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz NmM0ZmYwHhcNMjYwMTAxMjIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2VjNWZkNzhmMzllNDA4MzYwMjczYmI4ZWM0OTRiOWUzMzk3M2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9yTIa4CcZoQOyrc1SoCX+fXYwir sUsGI2C/bMnrSRJE5ZWcKwVdEq4M+HGLXHzJciWmtBVngewTIwVWVtNsawCwxtJQ 0SkpQpii6P+5abpTGfHTSGurdy4sK/E2vmtD/Sb97xAQdO8cc63H/C6nwokR4DPW ZGpEXs15Z9/zGR3XvNNnURTQbBldt+hZyOTwwcDUmj6gBhZ0HV+W5Or7aFrKbtd4 SEGlnpz0ZAOfnleqZxCS5Q1YS987ew3R76K8GdYPTbiie88Cc/TXedQ2INA4G1lm 422MsQ+YJbp5Y/h9Jz8pHMm2QfajbmuYDmYCvL6ALS0YR8IlqeEtxAZ8+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAzsX9ePOeQINgJzu47ElLnjOXPqMB8GA1UdIwQY MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvRE94ZjE0ODU1QWcyQW5PN2pzU1V1ZU01Yy1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWd9iMA0G CSqGSIb3DQEBCwUAA4IBAQBFAWagry2q2vqtxhL5CsfJYfpazlnx93rJw7265ghJ Wns/5mU33TvFyPGbBhxYp7l6b9qgEvwVFx/+HE9kglEpsAFT267II4Lp8R4XHrW3 NdpURLUGMq1jndht8bjmqi0LbVpUWQttn9iT1s8NEOis7gYZeo/eSteUyfurC5H/ vodFH97S41wZ2Emf8myFXetLJLzmGYY9Bn56ofNOWuU0Ue73vaHd6RBonehUtO+P XXpEtHQD3qS8LryT2P7g5rZb+bPxVXM/lJeqt8FCh2YCmaMA3dTarMqIUzB4aFCb my5wKteh212QGfj9JoOkI/gNj115xOcfGOa0v/MIQ7v0 -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:39 2026 by rpki-client