This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/tWMyn7tpor7zLv8S77uSSoVBOzY.roa File: tWMyn7tpor7zLv8S77uSSoVBOzY.roa (raw, json) Hash identifier: 9VLMYOGfLfqrY2pS0fnmG2KOSYmzAO47mTzvU9rKrJk= Subject key identifier: B5:63:32:9F:BB:69:A2:BE:F3:2E:FF:12:EF:BB:92:4A:85:41:3B:36 Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a Certificate serial: 019B7FF2762696C8F53F90A3EBB787E97AC1 Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/tWMyn7tpor7zLv8S77uSSoVBOzY.roa Signing time: Fri 02 Jan 2026 18:22:34 +0000 ROA not before: Fri 02 Jan 2026 18:22:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61301 IP address blocks: 89.252.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:76:26:96:c8:f5:3f:90:a3:eb:b7:87:e9:7a:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a Validity Not Before: Jan 2 18:22:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b563329fbb69a2bef32eff12efbb924a85413b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:93:cb:05:c3:15:6e:d7:28:82:3e:5a:61:96: 92:8d:5b:6f:08:33:a5:95:40:98:7e:fe:63:78:20: c3:6a:d8:3a:6c:57:9d:d7:b8:4d:73:2c:ac:4e:a2: 23:71:3e:82:64:30:d3:03:8a:a4:c8:4f:5e:fd:66: c5:f7:1f:09:3b:2e:1f:b2:08:31:30:75:c5:fe:ff: c3:e2:9f:2f:2c:06:5f:5a:fa:44:91:72:ac:6d:87: 9c:cc:9b:f5:d5:52:54:ad:09:8f:a6:a1:9f:66:c3: 7d:49:10:6e:2b:94:2d:8b:c7:0e:8b:db:3e:97:e8: 15:7d:e3:d3:21:be:2d:40:76:21:0a:54:e8:94:f7: 8a:5d:b9:18:b5:4d:88:24:a6:5f:23:c7:55:ae:12: 57:5c:d0:7b:73:99:16:35:a8:72:9c:cf:b9:ec:1b: fd:46:fd:56:db:14:30:11:e4:70:9e:32:7f:21:1d: d4:cc:62:8d:9a:16:44:55:fb:1e:ca:b9:14:e9:14: 61:29:7c:70:70:bd:4e:cf:cb:a6:a8:ca:ba:74:38: fc:1d:3c:ab:6f:6e:41:43:eb:fc:81:75:f2:80:85: 33:94:11:3b:81:55:1f:3d:ab:f8:51:1c:5f:db:f3: 97:9e:2d:ec:5f:ec:13:c1:20:dd:2a:08:65:1e:90: 98:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:63:32:9F:BB:69:A2:BE:F3:2E:FF:12:EF:BB:92:4A:85:41:3B:36 X509v3 Authority Key Identifier: keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/tWMyn7tpor7zLv8S77uSSoVBOzY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.252.201.0/24 Signature Algorithm: sha256WithRSAEncryption 65:40:36:8a:5f:44:44:25:27:14:12:ec:1a:c8:bc:bc:4f:e3: 48:f7:71:1e:a3:4a:9c:ef:58:d7:b9:3d:cc:85:bf:e1:ae:45: dc:d4:68:18:5b:f6:c9:30:d6:32:ae:1f:74:10:38:87:60:29: 5a:e4:53:88:b1:d8:c8:a6:6f:9f:5a:f0:d5:83:9d:ff:b7:f4: 7c:ff:8c:48:19:89:a9:08:02:2a:bc:ce:23:04:27:33:17:ad: 79:82:6f:9d:fd:94:f3:00:7b:b1:c2:6a:06:fb:16:9b:d6:7c: 14:ea:c8:d7:45:2d:11:74:86:ce:72:01:e4:21:15:ba:2d:ea: ed:b1:16:a3:b4:98:0a:f4:88:05:09:f0:3a:69:82:18:0f:b8: cf:61:e6:3f:f6:38:67:62:e3:57:30:9d:e9:bc:f9:9c:76:d0: 04:da:73:a8:94:4d:ec:56:d0:79:32:8c:0c:d0:73:e4:f8:57: 8f:c4:d4:0a:d4:c7:9e:d3:dd:2c:8c:04:53:da:27:86:78:d1: 54:ef:dc:98:5e:5d:79:4e:8e:5e:3c:30:16:17:0e:f7:29:f3: 19:5a:1e:84:da:9b:b2:0f:74:aa:9f:78:a6:7c:a4:93:f8:14: d0:bc:ff:95:6b:aa:ec:7e:57:49:21:32:1d:40:ce:de:3a:c7: 08:e8:e2:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8nYmlsj1P5Cj67eH6XrBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj M2YwMGEwHhcNMjYwMTAyMTgyMjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTYzMzI5ZmJiNjlhMmJlZjMyZWZmMTJlZmJiOTI0YTg1NDEzYjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJPLBcMVbtcogj5aYZaSjVtvCDOl lUCYfv5jeCDDatg6bFed17hNcyysTqIjcT6CZDDTA4qkyE9e/WbF9x8JOy4fsggx MHXF/v/D4p8vLAZfWvpEkXKsbYeczJv11VJUrQmPpqGfZsN9SRBuK5Qti8cOi9s+ l+gVfePTIb4tQHYhClTolPeKXbkYtU2IJKZfI8dVrhJXXNB7c5kWNahynM+57Bv9 Rv1W2xQwEeRwnjJ/IR3UzGKNmhZEVfseyrkU6RRhKXxwcL1Oz8umqMq6dDj8HTyr b25BQ+v8gXXygIUzlBE7gVUfPav4URxf2/OXni3sX+wTwSDdKghlHpCYEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLVjMp+7aaK+8y7/Eu+7kkqFQTs2MB8GA1UdIwQY MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt YjI3ZDZlMjc4ZTE4LzEvdFdNeW43dHBvcjd6THY4Uzc3dVNTb1ZCT3pZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4 LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfzJMA0G CSqGSIb3DQEBCwUAA4IBAQBlQDaKX0REJScUEuwayLy8T+NI93Eeo0qc71jXuT3M hb/hrkXc1GgYW/bJMNYyrh90EDiHYCla5FOIsdjIpm+fWvDVg53/t/R8/4xIGYmp CAIqvM4jBCczF615gm+d/ZTzAHuxwmoG+xab1nwU6sjXRS0RdIbOcgHkIRW6Lert sRajtJgK9IgFCfA6aYIYD7jPYeY/9jhnYuNXMJ3pvPmcdtAE2nOolE3sVtB5MowM 0HPk+FePxNQK1Mee090sjART2ieGeNFU79yYXl15To5ePDAWFw73KfMZWh6E2puy D3Sqn3imfKST+BTQvP+Va6rsfldJITIdQM7eOscI6OIF -----END CERTIFICATE-----Generated at Sun Jan 25 23:16:31 2026 by rpki-client