This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/8K6yEDV0GauQRpR6Sz-mkYqf9kA.roa File: 8K6yEDV0GauQRpR6Sz-mkYqf9kA.roa (raw, json) Hash identifier: YFRdhlSOv6gfDujKBW+Exh92T4B9OKrIe8impdCqMJI= Subject key identifier: F0:AE:B2:10:35:74:19:AB:90:46:94:7A:4B:3F:A6:91:8A:9F:F6:40 Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c Certificate serial: 019B7B3611C63E0E08E6ED108999DFBBDFE3 Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/8K6yEDV0GauQRpR6Sz-mkYqf9kA.roa Signing time: Thu 01 Jan 2026 20:18:19 +0000 ROA not before: Thu 01 Jan 2026 20:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206382 IP address blocks: 89.36.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:11:c6:3e:0e:08:e6:ed:10:89:99:df:bb:df:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c Validity Not Before: Jan 1 20:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0aeb210357419ab9046947a4b3fa6918a9ff640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fb:25:b3:5b:03:80:40:65:d2:09:7a:c7:a8: 30:20:ee:b6:47:53:92:81:d1:33:f3:7a:15:c5:a5: 49:00:ef:4f:3a:4f:21:ce:22:d8:a8:8f:fd:cc:ac: 39:38:62:4f:43:5f:e3:0b:ae:da:c7:7a:ae:a0:20: 69:ae:5e:87:b8:6c:8c:fe:87:45:87:5c:d2:ce:a4: 18:43:fb:ab:ae:9c:ea:69:11:ee:6b:7f:85:2e:a0: d7:2a:d8:3b:7a:1c:75:65:f1:06:92:6a:69:68:1c: e7:f7:67:b9:de:2c:49:7b:7b:67:a8:f4:c1:08:0a: 97:ca:4e:6c:ac:d0:9d:d6:cf:d7:73:76:ae:98:bf: a8:0c:8e:c1:2e:74:e1:51:f1:b7:3f:39:49:11:36: 77:37:eb:b1:c5:48:d9:4d:93:01:b7:4f:02:0c:7a: 9e:7a:1a:9e:fc:b6:b8:62:2f:c7:c7:18:28:74:ad: 2b:82:07:0a:e7:d7:5b:f9:33:a2:3f:3a:b1:4d:2e: de:51:97:0f:6a:f0:fd:39:26:1b:49:94:a2:a2:95: 89:ff:81:8e:b4:ec:cc:15:aa:85:7c:0c:d0:63:3a: 47:04:34:76:c4:0b:a5:e3:66:03:37:57:dd:94:54: 1d:3c:b6:bf:8c:af:5f:c7:44:18:2b:8d:fa:39:94: d7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:AE:B2:10:35:74:19:AB:90:46:94:7A:4B:3F:A6:91:8A:9F:F6:40 X509v3 Authority Key Identifier: keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/8K6yEDV0GauQRpR6Sz-mkYqf9kA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.36.192.0/24 Signature Algorithm: sha256WithRSAEncryption 10:ef:8b:89:e4:e4:48:08:d7:fd:82:bc:07:b2:05:f6:04:1f: f4:fd:41:e3:16:6f:6f:90:85:8e:9e:6c:02:97:7e:93:24:a0: 7e:08:83:3a:1c:ab:8d:a8:59:7e:2f:77:ce:45:13:3b:10:e8: 81:a8:d9:af:9e:3f:99:ce:23:6f:87:1c:36:ae:63:fb:94:fc: 8e:17:83:46:87:70:6c:79:95:5b:44:43:65:1d:12:5b:1e:7a: 3b:54:ef:a0:ce:d2:51:ff:db:39:8d:dc:8b:15:dd:40:a1:69: 9e:c6:61:a6:e7:76:c9:bf:e9:bf:9b:3c:39:e3:65:c5:35:f1: 06:2e:14:42:75:28:7a:b3:6f:80:de:d3:5b:50:63:44:e5:91: 44:ea:9c:f1:56:89:40:89:1a:88:ad:90:13:08:c6:e1:cc:61: 57:51:7f:65:16:f4:09:64:fa:48:07:fc:a5:f6:3b:a2:e5:69: ca:c5:41:60:2a:38:7b:7d:d8:79:5f:61:d5:21:29:2f:d2:9f: cf:d6:22:76:dd:39:e8:94:db:07:e0:ec:a8:22:4f:c9:95:ea: c9:83:04:cd:03:ff:58:c2:46:5b:1e:8b:10:dc:69:71:8a:df: c7:9f:c1:21:69:49:c0:b2:0c:97:8d:e3:42:ba:e6:21:d4:87: 1d:61:af:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NhHGPg4I5u0QiZnfu9/jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm NmMxNGMwHhcNMjYwMTAxMjAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGFlYjIxMDM1NzQxOWFiOTA0Njk0N2E0YjNmYTY5MThhOWZmNjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Psls1sDgEBl0gl6x6gwIO62R1OS gdEz83oVxaVJAO9POk8hziLYqI/9zKw5OGJPQ1/jC67ax3quoCBprl6HuGyM/odF h1zSzqQYQ/urrpzqaRHua3+FLqDXKtg7ehx1ZfEGkmppaBzn92e53ixJe3tnqPTB CAqXyk5srNCd1s/Xc3aumL+oDI7BLnThUfG3PzlJETZ3N+uxxUjZTZMBt08CDHqe ehqe/La4Yi/HxxgodK0rggcK59db+TOiPzqxTS7eUZcPavD9OSYbSZSiopWJ/4GO tOzMFaqFfAzQYzpHBDR2xAul42YDN1fdlFQdPLa/jK9fx0QYK436OZTX/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPCushA1dBmrkEaUeks/ppGKn/ZAMB8GA1UdIwQY MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt OTc3ODY3NGVkYzk3LzEvOEs2eUVEVjBHYXVRUnBSNlN6LW1rWXFmOWtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3 LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSTAMA0G CSqGSIb3DQEBCwUAA4IBAQAQ74uJ5ORICNf9grwHsgX2BB/0/UHjFm9vkIWOnmwC l36TJKB+CIM6HKuNqFl+L3fORRM7EOiBqNmvnj+ZziNvhxw2rmP7lPyOF4NGh3Bs eZVbRENlHRJbHno7VO+gztJR/9s5jdyLFd1AoWmexmGm53bJv+m/mzw542XFNfEG LhRCdSh6s2+A3tNbUGNE5ZFE6pzxVolAiRqIrZATCMbhzGFXUX9lFvQJZPpIB/yl 9jui5WnKxUFgKjh7fdh5X2HVISkv0p/P1iJ23TnolNsH4OyoIk/JlerJgwTNA/9Y wkZbHosQ3Glxit/Hn8EhaUnAsgyXjeNCuuYh1IcdYa+9 -----END CERTIFICATE-----Generated at Sun Jan 25 21:20:50 2026 by rpki-client