This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/9d7R4B921poYOUCch4EUtyiJ_Ag.roa File: 9d7R4B921poYOUCch4EUtyiJ_Ag.roa (raw, json) Hash identifier: QKpiWx2I5mpXI/7+RHEcqA/fsL2GLYe/E020xVaN1UM= Subject key identifier: F5:DE:D1:E0:1F:76:D6:9A:18:39:40:9C:87:81:14:B7:28:89:FC:08 Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c Certificate serial: 019B7B360D5D75E07030BCFA37DCECE71EAF Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/9d7R4B921poYOUCch4EUtyiJ_Ag.roa Signing time: Thu 01 Jan 2026 20:18:18 +0000 ROA not before: Thu 01 Jan 2026 20:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49302 IP address blocks: 89.35.77.0/24 maxlen: 24 92.114.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:0d:5d:75:e0:70:30:bc:fa:37:dc:ec:e7:1e:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c Validity Not Before: Jan 1 20:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5ded1e01f76d69a1839409c878114b72889fc08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:30:70:90:ae:29:10:c0:57:67:78:71:2e:07: 8a:71:ff:aa:9e:4c:da:68:21:97:66:10:7c:97:45: 55:d4:9f:8b:72:82:75:0a:b1:72:e5:0c:df:c8:d7: cf:f2:10:f9:8a:40:fd:d5:10:ff:e2:fe:5e:33:32: 75:63:64:b5:f5:e5:c5:ad:ab:85:c2:27:c0:29:ba: ef:f0:2e:bb:81:ae:1f:26:52:5b:d0:1e:d5:40:3e: 95:3e:02:53:29:9c:15:dc:ab:92:48:8a:82:93:74: 40:a2:f8:8d:13:ab:08:56:46:ac:c9:8e:cc:a8:9a: 14:7b:18:cd:26:12:86:c4:e6:5f:cb:aa:ad:d0:d1: 46:fb:42:8f:41:d0:4e:f5:2a:ea:84:2d:9c:ca:12: 67:1d:55:3f:6b:3d:a7:62:1f:19:d7:5a:8a:15:99: a4:60:32:70:91:14:9f:a0:bf:e7:3a:85:1c:e8:71: e9:d0:23:2a:3b:25:6e:bc:3e:d8:97:ac:7f:e2:1c: 68:68:95:24:28:d7:85:dd:c5:66:af:c6:e1:08:5d: 03:f1:a1:10:24:73:6d:fb:5c:3a:b7:5f:19:3c:c8: 99:fd:2c:e8:38:04:05:27:b4:dd:6c:a7:36:79:1a: d0:85:38:be:a8:88:29:ac:a7:75:c9:fb:94:f4:c6: 9f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:DE:D1:E0:1F:76:D6:9A:18:39:40:9C:87:81:14:B7:28:89:FC:08 X509v3 Authority Key Identifier: keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/9d7R4B921poYOUCch4EUtyiJ_Ag.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.35.77.0/24 92.114.108.0/24 Signature Algorithm: sha256WithRSAEncryption 64:e4:77:e1:3f:b9:87:0b:c9:d8:52:fc:a6:29:d1:6a:c9:2f: 7f:90:d7:12:b5:d0:67:77:12:f5:c2:db:6d:c7:51:4e:07:3d: 9f:35:53:ec:4e:94:e4:8c:29:a2:22:4e:47:3b:34:40:b4:3b: 25:2b:01:0e:2c:d1:aa:aa:10:0a:87:64:7c:e2:54:ad:4b:6f: 09:7e:89:34:c2:e5:0e:ab:9e:e7:61:7e:9b:15:af:fa:1c:c1: b1:1b:c3:75:eb:da:b7:66:07:49:2e:44:23:14:37:a7:d4:ff: 5a:61:08:1c:17:6c:64:ca:ef:b4:93:98:76:74:e3:99:19:e3: 03:1d:ab:9a:d0:d3:b6:d9:ac:a0:ac:5b:19:9f:99:96:21:f5: b5:52:c0:6b:f4:09:35:ec:76:ae:e4:47:b4:62:52:0d:dd:5a: aa:7f:f3:bc:d0:d9:24:71:01:47:ec:02:ef:ba:00:17:6d:61: 35:b5:03:2a:0b:2a:c8:5b:e3:b9:c9:fe:13:f8:5f:61:71:ae: f9:c6:7d:31:7e:b7:01:20:af:53:61:01:34:a5:c3:a2:b4:88: d4:2d:5f:e7:34:c6:aa:f0:b2:5c:3e:a4:ca:bd:14:7e:d4:40: 09:ae:f2:2b:c4:c4:7c:40:90:3f:5a:0c:07:1e:39:ed:9d:01: 21:b2:bc:e6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Ng1ddeBwMLz6N9zs5x6vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm NmMxNGMwHhcNMjYwMTAxMjAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWRlZDFlMDFmNzZkNjlhMTgzOTQwOWM4NzgxMTRiNzI4ODlmYzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjBwkK4pEMBXZ3hxLgeKcf+qnkza aCGXZhB8l0VV1J+LcoJ1CrFy5QzfyNfP8hD5ikD91RD/4v5eMzJ1Y2S19eXFrauF wifAKbrv8C67ga4fJlJb0B7VQD6VPgJTKZwV3KuSSIqCk3RAoviNE6sIVkasyY7M qJoUexjNJhKGxOZfy6qt0NFG+0KPQdBO9SrqhC2cyhJnHVU/az2nYh8Z11qKFZmk YDJwkRSfoL/nOoUc6HHp0CMqOyVuvD7Yl6x/4hxoaJUkKNeF3cVmr8bhCF0D8aEQ JHNt+1w6t18ZPMiZ/SzoOAQFJ7TdbKc2eRrQhTi+qIgprKd1yfuU9MafDwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPXe0eAfdtaaGDlAnIeBFLcoifwIMB8GA1UdIwQY MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt OTc3ODY3NGVkYzk3LzEvOWQ3UjRCOTIxcG9ZT1VDY2g0RVV0eWlKX0FnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3 LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSNNAwQA XHJsMA0GCSqGSIb3DQEBCwUAA4IBAQBk5HfhP7mHC8nYUvymKdFqyS9/kNcStdBn dxL1wtttx1FOBz2fNVPsTpTkjCmiIk5HOzRAtDslKwEOLNGqqhAKh2R84lStS28J fok0wuUOq57nYX6bFa/6HMGxG8N169q3ZgdJLkQjFDen1P9aYQgcF2xkyu+0k5h2 dOOZGeMDHaua0NO22aygrFsZn5mWIfW1UsBr9Ak17Hau5Ee0YlIN3Vqqf/O80Nkk cQFH7ALvugAXbWE1tQMqCyrIW+O5yf4T+F9hca75xn0xfrcBIK9TYQE0pcOitIjU LV/nNMaq8LJcPqTKvRR+1EAJrvIrxMR8QJA/WgwHHjntnQEhsrzm -----END CERTIFICATE-----Generated at Sun Jan 25 21:19:38 2026 by rpki-client