This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ki2sLtb1kOWwRxC06ynnzw2LhWE.roa File: ki2sLtb1kOWwRxC06ynnzw2LhWE.roa (raw, json) Hash identifier: fHmG3zfIJ6DVQiynfpYmHirBXvs2fFUtg5pSjvN/3u4= Subject key identifier: 92:2D:AC:2E:D6:F5:90:E5:B0:47:10:B4:EB:29:E7:CF:0D:8B:85:61 Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c Certificate serial: 019B7B36177EBB0F4AD50CABC6993D134866 Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ki2sLtb1kOWwRxC06ynnzw2LhWE.roa Signing time: Thu 01 Jan 2026 20:18:20 +0000 ROA not before: Thu 01 Jan 2026 20:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214402 IP address blocks: 89.36.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:17:7e:bb:0f:4a:d5:0c:ab:c6:99:3d:13:48:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c Validity Not Before: Jan 1 20:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=922dac2ed6f590e5b04710b4eb29e7cf0d8b8561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:65:b1:36:9c:46:5e:9a:1c:54:0e:77:2d:b4: 93:e3:ff:13:76:2c:9a:3f:23:ee:cb:4a:b6:01:20: 81:7a:b9:4b:6c:4c:25:94:6c:d4:79:06:01:30:93: 10:14:53:98:c1:ac:08:c0:7c:78:1f:51:bc:97:e4: 5d:69:e0:f4:dc:9e:4d:a8:27:1a:b1:8a:36:be:50: 82:b8:31:8e:e8:07:12:62:60:8e:a6:96:a8:75:2f: 6b:9d:58:17:16:bf:62:d2:05:e8:73:ea:a6:f1:83: 56:cf:f9:cd:d1:96:c1:5a:a3:26:31:20:67:57:76: 3e:35:eb:26:23:c2:bd:e4:75:fa:5e:fa:91:4e:e8: b4:4f:69:ef:b3:98:57:ae:f2:a1:60:c7:2c:1b:f3: 9a:fe:cc:37:42:80:20:58:7e:74:93:ff:69:e0:8a: 99:13:15:e3:d4:25:ad:30:5f:66:d1:a3:9f:4e:26: 04:15:d1:16:81:37:45:26:a5:ac:af:8e:13:0b:f2: 77:6d:75:c5:4b:f6:d5:20:c1:79:67:33:f8:d2:0a: f7:a7:86:ae:72:ad:e9:44:44:4d:2e:94:bb:ae:dd: 16:ee:25:81:d6:83:c3:f0:e2:1b:60:88:80:e1:e1: 34:c5:cc:4b:ba:ec:44:1e:8e:79:7c:e4:1e:48:6a: 90:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2D:AC:2E:D6:F5:90:E5:B0:47:10:B4:EB:29:E7:CF:0D:8B:85:61 X509v3 Authority Key Identifier: keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ki2sLtb1kOWwRxC06ynnzw2LhWE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.36.88.0/24 Signature Algorithm: sha256WithRSAEncryption a0:20:d3:4a:a9:2a:02:85:37:2b:66:8f:f0:f1:99:13:cc:6a: f3:7b:d7:f5:05:42:af:c6:7d:ec:a5:97:ba:80:5f:bd:c4:85: 18:e7:c9:4a:8d:f3:21:ee:21:dc:6d:c7:4d:08:7f:24:cc:2c: 5b:be:17:b0:ff:59:ea:2a:99:b3:c2:4a:fa:a1:a5:fa:23:57: b0:d9:bb:7d:09:bd:21:fd:7d:e5:1a:03:16:e4:4c:4e:3a:a2: d3:4d:4f:a0:b8:21:80:58:18:cd:0e:65:84:3a:46:4b:e3:68: 40:9b:cb:18:c0:53:81:d6:61:76:1b:68:20:b7:1d:6a:ae:f8: 43:6a:ae:67:a9:77:d1:6b:cf:50:00:b4:37:ab:28:dd:5c:fd: 94:57:a7:f9:57:f2:9c:7d:d4:8b:96:9c:b5:dd:99:75:f7:44: 0b:85:be:0f:96:6b:56:89:36:04:89:e5:d9:f0:d6:7e:c9:46: 0f:f1:de:43:b2:30:43:6c:fa:0f:12:46:0b:ca:73:69:d7:a0: 2d:be:d5:3d:d5:fc:53:3d:0c:ec:22:43:0f:1c:45:79:b0:9b: a6:9b:3c:f8:e0:b9:3b:ce:39:cd:a8:56:77:3c:86:47:e8:db: 64:3a:67:68:eb:61:b1:1d:00:64:aa:91:96:7f:1c:5f:21:16: 81:2b:ea:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nhd+uw9K1Qyrxpk9E0hmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm NmMxNGMwHhcNMjYwMTAxMjAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjJkYWMyZWQ2ZjU5MGU1YjA0NzEwYjRlYjI5ZTdjZjBkOGI4NTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2WxNpxGXpocVA53LbST4/8Tdiya PyPuy0q2ASCBerlLbEwllGzUeQYBMJMQFFOYwawIwHx4H1G8l+RdaeD03J5NqCca sYo2vlCCuDGO6AcSYmCOppaodS9rnVgXFr9i0gXoc+qm8YNWz/nN0ZbBWqMmMSBn V3Y+NesmI8K95HX6XvqRTui0T2nvs5hXrvKhYMcsG/Oa/sw3QoAgWH50k/9p4IqZ ExXj1CWtMF9m0aOfTiYEFdEWgTdFJqWsr44TC/J3bXXFS/bVIMF5ZzP40gr3p4au cq3pRERNLpS7rt0W7iWB1oPD8OIbYIiA4eE0xcxLuuxEHo55fOQeSGqQTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJItrC7W9ZDlsEcQtOsp588Ni4VhMB8GA1UdIwQY MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt OTc3ODY3NGVkYzk3LzEva2kyc0x0YjFrT1d3UnhDMDZ5bm56dzJMaFdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3 LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSRYMA0G CSqGSIb3DQEBCwUAA4IBAQCgINNKqSoChTcrZo/w8ZkTzGrze9f1BUKvxn3spZe6 gF+9xIUY58lKjfMh7iHcbcdNCH8kzCxbvhew/1nqKpmzwkr6oaX6I1ew2bt9Cb0h /X3lGgMW5ExOOqLTTU+guCGAWBjNDmWEOkZL42hAm8sYwFOB1mF2G2ggtx1qrvhD aq5nqXfRa89QALQ3qyjdXP2UV6f5V/KcfdSLlpy13Zl190QLhb4PlmtWiTYEieXZ 8NZ+yUYP8d5DsjBDbPoPEkYLynNp16AtvtU91fxTPQzsIkMPHEV5sJummzz44Lk7 zjnNqFZ3PIZH6NtkOmdo62GxHQBkqpGWfxxfIRaBK+qy -----END CERTIFICATE-----Generated at Sun Jan 25 21:19:37 2026 by rpki-client