This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/RUFfkKOa4SdFT5o_xDhPrGe1YGs.roa File: RUFfkKOa4SdFT5o_xDhPrGe1YGs.roa (raw, json) Hash identifier: 1kHAQhH6pDEI76U4bY6d2bKOh7rCSv7chcQoxneOAq4= Subject key identifier: 45:41:5F:90:A3:9A:E1:27:45:4F:9A:3F:C4:38:4F:AC:67:B5:60:6B Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C775C72C8D4CCC73C8ABD7CA8E4807 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/RUFfkKOa4SdFT5o_xDhPrGe1YGs.roa Signing time: Thu 01 Jan 2026 04:18:39 +0000 ROA not before: Thu 01 Jan 2026 04:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201018 IP address blocks: 89.107.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:75:c7:2c:8d:4c:cc:73:c8:ab:d7:ca:8e:48:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45415f90a39ae127454f9a3fc4384fac67b5606b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:da:22:67:38:c3:36:a3:c2:cc:c5:59:dd:12: 17:82:94:0b:a1:76:cf:22:0a:b9:61:0a:86:87:b5: 28:bf:d6:f2:d0:76:04:a2:85:4c:9f:02:81:14:6a: 37:08:11:b3:84:47:91:83:4a:69:69:c8:5a:7b:de: 1f:30:4f:fd:12:df:a6:61:c2:31:c3:a1:2b:df:62: 61:67:b8:9b:32:89:47:1d:7c:cc:77:83:0d:e6:4b: f4:ca:be:6c:32:a2:8c:9a:91:a1:19:8b:39:49:d2: cb:c8:8b:91:36:35:3a:d6:9b:26:08:12:ab:c1:00: 6f:5b:73:38:fd:2d:69:d1:29:1c:1a:0d:ec:ad:23: 98:eb:b5:dd:95:de:d0:c0:46:59:c2:82:97:ec:3c: 6f:5c:f1:11:b1:75:0b:44:cc:9c:fd:c9:6a:51:bf: 11:6b:b6:92:73:ea:b1:72:bc:b6:0a:2c:dc:a2:0f: c9:07:ce:cb:62:71:2a:08:3f:6a:2c:2b:e9:d8:a3: b9:02:00:79:1a:c9:a4:d1:43:84:d4:ab:5e:8b:df: 46:cc:bb:57:2c:0d:84:bf:4a:7c:a6:94:31:13:ab: 4a:f6:15:3e:d1:b6:d1:87:86:f6:de:63:70:73:99: 70:65:2c:b8:79:f4:08:c4:52:47:83:5a:23:3b:c3: d8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:41:5F:90:A3:9A:E1:27:45:4F:9A:3F:C4:38:4F:AC:67:B5:60:6B X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/RUFfkKOa4SdFT5o_xDhPrGe1YGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.107.140.0/24 Signature Algorithm: sha256WithRSAEncryption 08:d2:b3:7c:c8:2c:0e:d3:50:e3:41:b2:1a:c1:8c:c3:69:01: 7e:64:7f:d1:01:00:a2:f9:a8:86:65:ae:d4:4f:92:96:41:db: 59:17:68:20:56:6a:7f:a5:fd:11:7b:85:69:40:54:22:bc:b7: 4c:72:31:fc:f8:a0:22:89:c7:a8:6d:8d:d2:af:eb:fa:93:29: 1a:d7:8d:6c:52:91:29:e0:e5:76:e7:2d:0d:e4:eb:14:84:3f: 55:96:e3:d8:ec:25:cd:33:ec:bc:ed:62:8f:d3:20:54:c5:ad: 5c:61:9b:d6:da:21:ef:42:0b:78:b9:6f:76:85:19:38:18:8d: b3:33:7e:30:95:25:31:2d:61:54:00:57:e9:99:38:5f:61:70: e2:fe:16:5c:88:0c:dc:19:de:76:ab:11:82:1d:b5:84:83:e3: b6:c9:bb:96:7b:1f:61:6c:d5:74:86:e4:61:f0:07:5a:62:0b: 9f:1c:73:f4:f0:8b:b6:8f:f5:95:49:a5:63:24:f6:bd:fe:12: d5:cd:83:b9:18:d1:6e:21:98:b9:d5:12:3c:c5:86:8e:61:94: dc:69:39:04:5a:a1:2c:69:27:e9:a6:e1:1d:d1:89:24:06:4e: f7:a4:1e:13:8f:6b:90:a9:a4:1f:15:66:82:55:fc:25:74:27: c9:51:3e:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3XHLI1MzHPIq9fKjkgHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTQxNWY5MGEzOWFlMTI3NDU0ZjlhM2ZjNDM4NGZhYzY3YjU2MDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNoiZzjDNqPCzMVZ3RIXgpQLoXbP Igq5YQqGh7Uov9by0HYEooVMnwKBFGo3CBGzhEeRg0ppachae94fME/9Et+mYcIx w6Er32JhZ7ibMolHHXzMd4MN5kv0yr5sMqKMmpGhGYs5SdLLyIuRNjU61psmCBKr wQBvW3M4/S1p0SkcGg3srSOY67Xdld7QwEZZwoKX7DxvXPERsXULRMyc/clqUb8R a7aSc+qxcry2Cizcog/JB87LYnEqCD9qLCvp2KO5AgB5Gsmk0UOE1Ktei99GzLtX LA2Ev0p8ppQxE6tK9hU+0bbRh4b23mNwc5lwZSy4efQIxFJHg1ojO8PYrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEVBX5CjmuEnRU+aP8Q4T6xntWBrMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvUlVGZmtLT2E0U2RGVDVvX3hEaFByR2UxWUdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWuMMA0G CSqGSIb3DQEBCwUAA4IBAQAI0rN8yCwO01DjQbIawYzDaQF+ZH/RAQCi+aiGZa7U T5KWQdtZF2ggVmp/pf0Re4VpQFQivLdMcjH8+KAiiceobY3Sr+v6kyka141sUpEp 4OV25y0N5OsUhD9VluPY7CXNM+y87WKP0yBUxa1cYZvW2iHvQgt4uW92hRk4GI2z M34wlSUxLWFUAFfpmThfYXDi/hZciAzcGd52qxGCHbWEg+O2ybuWex9hbNV0huRh 8AdaYgufHHP08Iu2j/WVSaVjJPa9/hLVzYO5GNFuIZi51RI8xYaOYZTcaTkEWqEs aSfppuEd0YkkBk73pB4Tj2uQqaQfFWaCVfwldCfJUT7/ -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:47 2026 by rpki-client